last executing test programs: 1m24.509967053s ago: executing program 1 (id=856): r0 = socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000400), 0xe) listen(r2, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000029000000020000000000000000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0100"/12], 0x6b}, 0x0) socket$kcm(0xa, 0x2, 0x73) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bind$bt_l2cap(r2, &(0x7f0000000400), 0xe) (async) listen(r2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000029000000020000000000000000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0100"/12], 0x6b}, 0x0) (async) 1m24.23795614s ago: executing program 1 (id=861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004d00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1}, 0x5}], 0x1, 0x40000102, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val={@val, {0x88a8}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000140)="1a80983216e5d9158e0000004fc104cc02000000", 0x14) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="3b4c0fcbe386805652a4992ec20b988083dcf5448d10301200b618e353c9c7e55247260d2c83d30d18a5c501da2ef78b6ea496167f59d5a15dcdeb62f160e6f58bdfbe67fc3aa53301d39b806e6eea72dd4b4ab134ab8c452910d6d0af9cfc14337a03a621657b765c18c4efe02cd956ef73cf8bacac5467a2b462a4f65e0f6753c6e6925104e759e8a6ed253223298f8638cde3b7f797", 0x97}, {&(0x7f00000004c0)="77c80813011e86856010e442078f4d311dfc66e01c0c9dd5f10f29b7418018c30e463f17a813ef72874c5769489666db858f26bc629b20399b00b416c1f0e247deafc31eadc117ef69ce62b234efb12091a5c4806fd2f1b8fa9291834a573f06651c94188bc01908dc60a4b48e364d93ceadd4d9e3af1c19315e3b2e47ae9faf9e1a0f6970185f38ecde655d2b298beb8fe35bef6975aa7a85574e9477dc6b124de1ca4c6de9eecee3d5dc772596d22f0328a9e403ba3e9850f1e2dbe280dd21819940149974d146b974", 0xca}], 0x2, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x80}, @op={0x18}], 0x30, 0x5}, 0x4009010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c) 1m15.54171404s ago: executing program 1 (id=861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004d00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1}, 0x5}], 0x1, 0x40000102, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val={@val, {0x88a8}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000140)="1a80983216e5d9158e0000004fc104cc02000000", 0x14) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="3b4c0fcbe386805652a4992ec20b988083dcf5448d10301200b618e353c9c7e55247260d2c83d30d18a5c501da2ef78b6ea496167f59d5a15dcdeb62f160e6f58bdfbe67fc3aa53301d39b806e6eea72dd4b4ab134ab8c452910d6d0af9cfc14337a03a621657b765c18c4efe02cd956ef73cf8bacac5467a2b462a4f65e0f6753c6e6925104e759e8a6ed253223298f8638cde3b7f797", 0x97}, {&(0x7f00000004c0)="77c80813011e86856010e442078f4d311dfc66e01c0c9dd5f10f29b7418018c30e463f17a813ef72874c5769489666db858f26bc629b20399b00b416c1f0e247deafc31eadc117ef69ce62b234efb12091a5c4806fd2f1b8fa9291834a573f06651c94188bc01908dc60a4b48e364d93ceadd4d9e3af1c19315e3b2e47ae9faf9e1a0f6970185f38ecde655d2b298beb8fe35bef6975aa7a85574e9477dc6b124de1ca4c6de9eecee3d5dc772596d22f0328a9e403ba3e9850f1e2dbe280dd21819940149974d146b974", 0xca}], 0x2, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x80}, @op={0x18}], 0x30, 0x5}, 0x4009010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c) 1m6.69228795s ago: executing program 1 (id=861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004d00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1}, 0x5}], 0x1, 0x40000102, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val={@val, {0x88a8}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000140)="1a80983216e5d9158e0000004fc104cc02000000", 0x14) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="3b4c0fcbe386805652a4992ec20b988083dcf5448d10301200b618e353c9c7e55247260d2c83d30d18a5c501da2ef78b6ea496167f59d5a15dcdeb62f160e6f58bdfbe67fc3aa53301d39b806e6eea72dd4b4ab134ab8c452910d6d0af9cfc14337a03a621657b765c18c4efe02cd956ef73cf8bacac5467a2b462a4f65e0f6753c6e6925104e759e8a6ed253223298f8638cde3b7f797", 0x97}, {&(0x7f00000004c0)="77c80813011e86856010e442078f4d311dfc66e01c0c9dd5f10f29b7418018c30e463f17a813ef72874c5769489666db858f26bc629b20399b00b416c1f0e247deafc31eadc117ef69ce62b234efb12091a5c4806fd2f1b8fa9291834a573f06651c94188bc01908dc60a4b48e364d93ceadd4d9e3af1c19315e3b2e47ae9faf9e1a0f6970185f38ecde655d2b298beb8fe35bef6975aa7a85574e9477dc6b124de1ca4c6de9eecee3d5dc772596d22f0328a9e403ba3e9850f1e2dbe280dd21819940149974d146b974", 0xca}], 0x2, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x80}, @op={0x18}], 0x30, 0x5}, 0x4009010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c) 56.447661625s ago: executing program 1 (id=861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004d00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1}, 0x5}], 0x1, 0x40000102, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val={@val, {0x88a8}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000140)="1a80983216e5d9158e0000004fc104cc02000000", 0x14) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="3b4c0fcbe386805652a4992ec20b988083dcf5448d10301200b618e353c9c7e55247260d2c83d30d18a5c501da2ef78b6ea496167f59d5a15dcdeb62f160e6f58bdfbe67fc3aa53301d39b806e6eea72dd4b4ab134ab8c452910d6d0af9cfc14337a03a621657b765c18c4efe02cd956ef73cf8bacac5467a2b462a4f65e0f6753c6e6925104e759e8a6ed253223298f8638cde3b7f797", 0x97}, {&(0x7f00000004c0)="77c80813011e86856010e442078f4d311dfc66e01c0c9dd5f10f29b7418018c30e463f17a813ef72874c5769489666db858f26bc629b20399b00b416c1f0e247deafc31eadc117ef69ce62b234efb12091a5c4806fd2f1b8fa9291834a573f06651c94188bc01908dc60a4b48e364d93ceadd4d9e3af1c19315e3b2e47ae9faf9e1a0f6970185f38ecde655d2b298beb8fe35bef6975aa7a85574e9477dc6b124de1ca4c6de9eecee3d5dc772596d22f0328a9e403ba3e9850f1e2dbe280dd21819940149974d146b974", 0xca}], 0x2, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x80}, @op={0x18}], 0x30, 0x5}, 0x4009010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c) 45.924748779s ago: executing program 1 (id=861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004d00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1}, 0x5}], 0x1, 0x40000102, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val={@val, {0x88a8}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000140)="1a80983216e5d9158e0000004fc104cc02000000", 0x14) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="3b4c0fcbe386805652a4992ec20b988083dcf5448d10301200b618e353c9c7e55247260d2c83d30d18a5c501da2ef78b6ea496167f59d5a15dcdeb62f160e6f58bdfbe67fc3aa53301d39b806e6eea72dd4b4ab134ab8c452910d6d0af9cfc14337a03a621657b765c18c4efe02cd956ef73cf8bacac5467a2b462a4f65e0f6753c6e6925104e759e8a6ed253223298f8638cde3b7f797", 0x97}, {&(0x7f00000004c0)="77c80813011e86856010e442078f4d311dfc66e01c0c9dd5f10f29b7418018c30e463f17a813ef72874c5769489666db858f26bc629b20399b00b416c1f0e247deafc31eadc117ef69ce62b234efb12091a5c4806fd2f1b8fa9291834a573f06651c94188bc01908dc60a4b48e364d93ceadd4d9e3af1c19315e3b2e47ae9faf9e1a0f6970185f38ecde655d2b298beb8fe35bef6975aa7a85574e9477dc6b124de1ca4c6de9eecee3d5dc772596d22f0328a9e403ba3e9850f1e2dbe280dd21819940149974d146b974", 0xca}], 0x2, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x80}, @op={0x18}], 0x30, 0x5}, 0x4009010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c) 41.192316941s ago: executing program 3 (id=1328): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @remote}, &(0x7f00000004c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@private1, 0x4e21, 0x8, 0x4e21, 0x9, 0xa, 0x20, 0xa0, 0x89, r2, r3}, {0x91a, 0x5, 0x9b1e, 0x5, 0x3, 0x101, 0x3}, {0x9, 0x6, 0x8, 0xffffffffffff8000}, 0x200000, 0x6e6bbe, 0x2, 0x1, 0x5, 0x1}, {{@in=@loopback, 0x4d3}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0xf0, 0x26, 0xfffffffa, 0x3}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xfffffffffffffde0, 0x24, 0x800, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x0, 0x5, {0x1, 0xb1}}]}, 0x60}}, 0x4000) socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000300)=0xb0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0xe, 0x4810, &(0x7f0000000200)={0x11, 0x9, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406010300000000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x2c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@remote, 0x4e23, 0x4, 0x4e24, 0x7, 0x2, 0x80, 0xa0, 0x62}, {0x80000000, 0x7, 0x4, 0x8, 0x6, 0x9, 0x7c, 0x6}, {0x5, 0x2, 0x45, 0x1b42ac16}, 0xfffffffe, 0x6e6bb8, 0x1, 0x1, 0x3, 0x1}, {{@in=@private=0xa010102, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x34ff, 0x0, 0x2, 0x4, 0x0, 0x9, 0x7}}, 0xe8) r13 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r8, 0x5864c000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000001c0)={r7, 0x7, 0x83, 0x40, 0x5bbc4115, 0xf3}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000430001"], 0x1c}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getnetconf={0x1c, 0x52, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x1}]}, 0x1c}}, 0x0) 40.900933987s ago: executing program 3 (id=1333): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x98}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 40.862865902s ago: executing program 3 (id=1334): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="b8d3d8e489", 0x5}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) 40.691733888s ago: executing program 3 (id=1338): r0 = socket(0x28, 0x1, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000002c0)={@default, @bcast}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x8e, "b993e152547faa5b1e5c032d7cd48de26f7c6cfba9ed9f7f86df5e35b7eeeb965d707f2c5d63b1275703a28f72ddb86cd7ea4ddffd7a16cd38cfe49068b6b8b130dbc7e4fa53bb6c7a66f8a19f2fd7ef5eb2ee81b6bb1844632652d5031476f394a3f1542385b99812c747565a4e5cc3421e233a1a6e337fba81966979c3b1208a72a5ba1a50bc59dac964664a64"}, &(0x7f0000000140)=0x96) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r3}, 0x8) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) (async, rerun: 64) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x3c, &(0x7f0000000100), 0x4) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x40080c5) 40.522981177s ago: executing program 3 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$bt_sco(r1, &(0x7f0000000080), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x4c894) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$SMC_PNETID_FLUSH(r4, 0x0, 0xc0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000000c0)={0x2, {0x4, 0x1, 0x7, 0x7fff, 0x4}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@RTM_GETMDB={0x0, 0x56, 0x10, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x40}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 40.213392966s ago: executing program 4 (id=1346): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="f093dcb7cb858c6bde5bbb7141881934b175464356026d1f", 0x18}, {&(0x7f0000000140)="e6873cd02112271527e4b2624d6b1b9de8ac8c63244bef94fada5941e1e06509ba28a8490932cc3f47335070d46bedc4e7d416c98a643fdcc7c93dce7bdae01db385c7937e1bf43a9d43a52691bebc156baa865befd0e0aa859a2164fce22b0224a89f3f8ed6570e7364544e3e0d5442f38586697eb9575c5ec79a2c5b45681b33a12ebc743e71317a3f5bd857a49529d791b1f43681278f2aed0ba571275d2a94484382019beffc2e2ce9996a3ca0b11c9a9d4eea9afb", 0xb7}, {&(0x7f0000000200)="e6ac2feee0b6bcf08cad3e4dd0c5dd82a09cc1644f93cce823fc2b02717c9f05c4b8398a5b1a26849e6500e907246099611027ce1128adb5290af0c12979f1348850ab50550eaa0ac6fa5c8b", 0x4c}, {&(0x7f0000000280)="67d18b2085d59786d5b94decb001d09c074ff52026f44129c7582c141cf5f7c99e31a145c0d8924ca165bcbc7017569960606d8c05464ab8089e21d89c3a4012d6d02d707170b73afadbdd1b90c0aa50a25b6776f535c2d5f5d0484769525106caf44900713193069557ceed54cfac98dd79fca076486bec14c4a6360b4861df18e01982baa982ad71f3be8fd2b23bab11611d4f6e5ee81543", 0x99}, {&(0x7f0000000340)="ca8f4a4e26c261cdb5e4cbac4200", 0xe}, {&(0x7f0000000380)="b71cd6ed6b4093cd28039714f6c5e3b5ad2867f10a59cadf7d873133a2458312ba92ad3c11e1738a1f2eb71577d7c3e386f06edd689d451c13a620cfc9b7fc3e165553d661ff8c78540f5b52671b109eb69205c691a1176971b2460168e2111f7be80f5794d2ec6cd34d6acbdbaaec3de70127b5e07a0bff86334227a192319a16f9a150631a975da8290297037dad504cce221eedcb4be8c0b88c4022d2d24ee27e971443ef270128573e77cbfdef43a6e88e0305a9d291931d6e6259f49437fe4d2b5f0bd62a657aebbc", 0xcb}, {&(0x7f0000000480)="00b99317e0e84e4d688d3b2f3f03dd4f0b75e70f2b1ce65bf362d85d07740471d9830d4f7f5038f2dc0c83ca929c9e8f48ef7514e46f8bbe44f9b708744c818e5735d92b802a3ca94ee80f1b891e7d747f3a110cf0021d669e33fbb12960ef17", 0x60}], 0x7, &(0x7f0000000580)=[{0x80, 0xd9, 0x8, "aaf9a052b60cd80bdfec72c08ff7202da2d3aea72fe2e5596baff455373cff9f358ec806ad5eba8706eb6e1a056719acb7e08ca27b38be769303608be8a88555de2ba1f33fd7ca3d03aa6e981ca0f66bc3523b7f5efbe57ce569a06474fd99af2cf8c4b8adf11442efdef825cfc7d3bc"}, {0x70, 0x118, 0x9, "01519602f8c78c216b9ad0170f2d774055db53afd8f338de25b6eb45b6fae5fb4a56cd641a1357e35220029a2e5df2dbb7aee711ce59bf62e4e6f99a407cdfd9b98b2f758cbd9dcb1a6ee227e17109fa27dc209653fc2f4ec4b47fc79c"}, {0x30, 0x116, 0xfffffff9, "1f7ee9352fef46322665d7e4f1ca3a5fe01878e836c1d79fda508fa9"}, {0x28, 0x107, 0x1, "33ed7d04986430c184a0bf830764343ffc"}, {0xd0, 0x108, 0x7ff, "ea7493957c9167e0566ab7b4ad658cea334e28646f88b336180d397b809888e1928e124df402ec033db8e1a74647b292f66acf04944c86028d533d6c2b354c9edae3f4d4793c8cd0484a047b08a3b0f595f33bf7d059032456fa15e38659c0072683cf17507899ae3f2cfb5e8f9f18ea1ce6324b640ca1c3136864345ab1f805cec44e0f29ea7258f6bc598a23e14263a882bc60f7848a407a2e3dbc1857791df7e86cdcebafe3f1aa60486b7c2c1b27763fc25a57488f695bc6"}], 0x218}, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000800)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x8}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x29, 0x7f, 0xe, 0x0, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40, 0x2747fbd26be0f603, 0x10, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0xa, 0x9, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x40, 0x10}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000bc0)={'sit0\x00', 0x0, 0x1, 0x40, 0x1, 0x9, {{0x25, 0x4, 0x2, 0x2, 0x94, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast1, @loopback, {[@noop, @rr={0x7, 0x7, 0x6c, [@private=0xa010100]}, @rr={0x7, 0xb, 0xbd, [@rand_addr=0x64010101, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x47, [@rand_addr=0x64010101, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local]}, @timestamp_prespec={0x44, 0x34, 0xf, 0x3, 0xf, [{@broadcast, 0x7fff}, {@private=0xa010102, 0x80000000}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x6}, {@private=0xa010100, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @lsrr={0x83, 0x17, 0x4c, [@local, @rand_addr=0x64010102, @empty, @empty, @broadcast]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d00)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000d40)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f0000000d80)={0x5ac, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x414990952a201648}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "b81f1a1d0bd100eae0b6740346aa193894b22ed25df2333410b3a284e722730d39ab9518c7e5fc10e5222489880f8a64d47fbd5582be0da5c8289e80802405eab3c8abe18947e3d8a8387a5a0beccb6633f8602647ca812f8ac25f98e66e011ddfd877d182d14fe35f0292ce902610a7d7c2cf1ace102062eb272d82bd390cb82f5725f9580befc822a7316e89cfc74bfbefa5d00c71ecaddee6c3670f48d2f41649d4"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x79, 0x5, "836f4904a2a0e9a7325d5df7752455f7a18ef5360ee25f97495f6fea574b96f76922b6caf87d5f8b518ace632ad5d74489c9f0bc978ec63254b8a18c15e7f0b916a2313ab62b687f35f9c96b5ac28a8a624dcb40f62d32ab85ce9b8d2e16a9c3b4de41b235576f798315bf3a3bd38270eb19ee29aa"}, @ETHTOOL_A_BITSET_VALUE={0x23, 0x4, "e792c1a9da5fd1b5f4a1b609bce5cd340cd607cc7d6ccb0f21a8d8efe0cb9b"}, @ETHTOOL_A_BITSET_VALUE={0xc7, 0x4, "9bf06fc5ac7c5e9437e4f1c2a269761a3fc215da9ee4806be74a8765f2d17d9438bb0d0f4d0ef20483fa1c76f0473c9fa97c2e194041a20cd5fd4196dd744b6106ebf2247696c63380f09fc5b06d0654c37d5d24c4498db2e5ceaabb09da0733b58e5fea2b3693bec50d1beecea9b6fb390589f5eb670163cf111f02c0c5437f9223af9edfbff7c855abaf9defc3c62a911822d8cec5b27864dc44a07c16ed5b2dad5a9962bffc5df8c8441074c95ba207b7e649995d86f1357e5032f4d42c3e88d3eb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7bac}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x100, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "31d1d8bc4975f348ccf6c39312a0a5c45fa2cc4be6ee6b55bc213440bb7f611a6394158efdeccb8296d69995d0d014a3cb77fb5968d583dbd18381c45ea3b4e4adb38addbe9c00f5f9fe7a43d12b099ab1c74d20075116c1d0df"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x2000c8d0}, 0x4040000) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000001940)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f0000001440)={0x4b0, r2, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x214, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xb6, 0x2, "b49626296d0a147d117a7f18f45892bf5ccfc225f32b02cbc9d89cc7f4fbff9c7a4cc102f940bd9bcc9b6179ec46e7687459202abff0c8ecf249087675ff495dbfa8e4884d8193fcd726456e8dffd951bb2b1710a9b686e9d26c9b2da456053bbf3961728aadf35561670cac8f03bb1ab389ea02216c52b51f84c36e70c29e3d45a57b5c6d48810da8df5c0c58ce305d61371a6233d8a925964c23156dd010326ec85fb22833ada5bd18b0d8704518559e4a"}, @NL80211_FTM_RESP_ATTR_LCI={0x88, 0x2, "40ee291229bac8af3fc55da459a9503e851dee90cc1fcb41e81416bf380eba912eb8f7362245ca24eb77536e695a7a0b2dd9c73c9f2bb4f85adf4c0d636d1eba13db129564fc5bbe779493e62f8f9528b44b3a365081ff9dfb0e95d06a6a2972535800e0d8d5e97e521023857c5a335cfc9bb158116aee48687010541599e582fa6f67ad"}, @NL80211_FTM_RESP_ATTR_LCI={0x9a, 0x2, "8d61e53f51e24f875f967361cbccf4964279581d9636c84e229ed76282b4233facdb6f4d6b6a9785f779ec4157fa35bdb3a543b6b68e0629b52cb3e11a7dea928f252c075ebd148ad0999eaec6ec4f13fb86311e14944435fccadc569a126c214c691261fb0fdc22cb696cec3079cc3d41444d6eda9d8fa4ed7a47057aa3ef68a9243f5e78e7601de698d05a87da9c25a59e5ebe76f8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x26, 0x3, "f4a49bfa03f73a39d74d7d0796368871e053a48c4ecb9325948e02b6b7968f9d8033"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6, 0x3, "996a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0xae, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @from_mac, {0x2, 0x1}}, 0x5, @default, 0x1400, @void, @val, @val={0x3, 0x1, 0xad}, @val={0x4, 0x6, {0x80, 0x3, 0x4, 0x5}}, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0x70, "08c41bebba89a489c9b6a8563d8431f51f994bce7b784f70c07127efb32eafccf140c33c049c517d7e031f2e2dd96aca909113986c248b575a6f98cd7f188212e7e0cb1ed8577a8cc8e97f56dbb65d36d0e35e6d99a11c040699a44e1c043e76fe40cb51a7b38f27dba7f21e7d9013e5"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x26, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x3}, 0x1, 0xf2, @device_a, 0xfffffff8, 0x5, 0x1}}, @dsss={0x3, 0x1, 0x24}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_IE={0x198, 0x2a, [@tim={0x5, 0xb9, {0x3, 0xa3, 0x8, "30e4eb6c4ea5465356b68548ea0ebe740f8df8eb2a1aaddfefffb2283febdfe774f0a76ce1fa3ace14d0f48b5e5563344642574ad645cb824bf19015037c25d96f25656ca28e67d743d867b273a764b3001bd7adf4669efbe33adc277bec4c6acb95ea60a0438a04e25373f13cb2176c5dad66d3f383a8ceca65b9c9055f98800ac1bcff96d2ef4f27223cbd2906205ce7e07a9fb331fb741054d42256e262fcec7728207098ccf33b8f650b89f13713718c5d498be4"}}, @perr={0x84, 0xcf, {0x3, 0xd, [{{0x0, 0x1}, @broadcast, 0x3bdd, @value=@broadcast, 0x2a}, {{}, @device_a, 0x23b1, @void, 0x31}, {{}, @broadcast, 0x73, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x5}, {{}, @device_b, 0x18000000, @void, 0xe}, {{}, @broadcast, 0x1, @void, 0x6}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x8}, {{}, @broadcast, 0x21, @void, 0xe}, {{}, @broadcast, 0x2, @void, 0x32}, {{0x0, 0x1}, @device_b, 0xfffffffd, @value, 0x2f}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x5}, {{}, @broadcast, 0x7, @void, 0x2}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x2e}]}}, @mesh_chsw={0x76, 0x6, {0x7, 0x8, 0x1d, 0x401}}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) write(r0, &(0x7f0000001980)="3757871341aeacdf00146554766512a64aa895775c778c03848413d5835dba219938c7125d7960e568ba781c07dd3abf4d1b07faca6942b116d7cd5c0d48ecfa9f964411665b1d62922063218588a89d5c0331bfcb720f0704a0de40f1445e54e0defecc831b961ddd85a1e1708f3ba2ffb5c85dd52b0c9e44598476201c88480bd7627a184dbc8120997c620a19bef6952abcc413c1c9ca712a467330220bc1754b3777564f24d04961cb0d", 0xac) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r10, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a80)=0x14) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001ac0)={r10}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000001b00)=[@mss={0x2, 0x7}], 0x1) sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0x84, 0x4, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}]}, 0x84}}, 0x64008010) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r11) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r12, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008004) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x78, r2, 0x408, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2f, 0x5b, "d333e6837b0f843b29af46f90035de12f457129ec22b60a2c31c3ef0786e978d1cdb4d7ca518dccf9a273d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x14, 0x5b, "70e2edd8bce322b9407864cabc115be5"}, @NL80211_ATTR_FRAME_MATCH={0xd, 0x5b, "eae9275e7ad54bf377"}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r13 = accept(r10, &(0x7f0000001f40)=@qipcrtr, &(0x7f0000001fc0)=0x80) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002040), r10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r13, &(0x7f0000002140)={&(0x7f0000002000), 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x68, r14, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20080810}, 0x4004080) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x20, r2, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x75, 0xd}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x8000) 40.201722715s ago: executing program 2 (id=1347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010003", 0x67) 39.970322159s ago: executing program 4 (id=1349): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61159f00000000006113500000000000bf5000000000000004000000080000003d03010000000000250500000000000069163e0000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) read(r1, &(0x7f0000000c80)=""/4096, 0x1000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 39.789993602s ago: executing program 4 (id=1350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000200)="ba57", 0x2}], 0x1) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="6e6c1f0085d0faecd4c760e9f01662ff461a3da580b83378b09c58100d1b1db56b6637ebe0e5f52bfe8737196910a60b4ee9486a05ee523cafe9b81fc98483953e07b9fb5b606398998fb3fe3330f9e8c26039f5c4ba21fcefa4e45cdb1d8b2454f20a9573e3306618b392", 0x6b}], 0x1}}], 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) sendmsg$qrtr(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x2a, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000140)="9bc9e7c9520a833d1fa737225e5a7c9379868b67a83b8f886b08be8e4cfd8f963fcd99d0546ba8e0abd8f6020985fd41166ee0dc755353a4280946480299ed48fd740527524d89aca0801dfa708865dbee49a4876914c7d4a4c55972e38d2f29a92409643a563d62c99293", 0x6b}, {&(0x7f0000000280)="e59f68c4adcf772b11fc9faff1887e1e27996fa59a24f55ec37f3d3ba5af1050cac0d1de4a60b1ecd266a02a62bda9e42c82355bd3d909a743305a29948728e46fb4a25acbb3cb9564532127d9b4a5871b83261f9ae218f34189ee2435ead905d16ee5ddcdf5365f163168f53459175a094e86f5d074ae8425c618f6c607049e2188697db2723ad17add5673c6917bd3502d054c5e1665a161efef211899a918223841324c9f4ba3d34e43695b73d73ce3d433b599f4fef04c074be14239241e2a4abc4b31259a693b79e4d2fd8a22938df1c8286d604703dd95a0f4cd6708be", 0xe0}, {&(0x7f00000001c0)="dea2f81c7a", 0x5}, {&(0x7f0000000440)="0fa6f64e74b2b3c7bfd381b3397d04f04791f2392566694a0f6a43b994d3511d704fff0411b3c011f76bb97ea49ace1c7092f0f481f21eca4c772340d41f9aa628f273c017ca2c", 0x47}], 0x4, &(0x7f0000000ac0), 0x0, 0xcc3ff663f1012333}, 0x38) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 39.624758269s ago: executing program 4 (id=1351): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000180), &(0x7f0000000200)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB="08000400000600000a519ca81b44000100aa2aaaaaaa"], 0x50}}, 0x0) bind$packet(r2, &(0x7f0000000240)={0x11, 0x1, r5, 0x1, 0x8c, 0x6, @local}, 0x14) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1700ed0000000000010000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x20) write(r0, &(0x7f0000000000)="05000000010006", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 39.602241653s ago: executing program 3 (id=1352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="b2d3addc717502bd4d21edd918cd958012ed11808cfadb555533109a24484c5b5d911e7fb1052345ae9d1410f216cf6e569c90751821d55168c5c030a34e086e39a8ca8e6cf9da72a52ef303ae1fca7c759774cdc806990ac923d48d994dc98ba16fa6be8a6800b9a5f8bacfbfda778a2130912666c64e1761a74f", 0x7b}], 0x1) accept4$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x10, 0x800) (async) r1 = accept4$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x10, 0x800) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r0}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}]}, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r6, 0x4}, &(0x7f00000003c0)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r6, 0x4}, &(0x7f00000003c0)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) (async) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000080), 0xfffffffffffffed2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}, 0x1, 0x0, 0x0, 0x6000001}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000500)={0x0, 0xc74c, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000500)={0x0, 0xc74c, 0x8}, 0x8) recvmmsg(r8, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/4084, 0xff4}, {&(0x7f00000002c0)=""/136, 0xae}, {&(0x7f0000000380)=""/174, 0xae}], 0x3}, 0x8000}], 0x1, 0x12002, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = socket(0x15, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) sendmmsg$inet(r9, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="006da8a3e110d95067958a996c7c01", 0xf}], 0x1}}], 0x1, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000200), 0x4) 39.225193672s ago: executing program 4 (id=1353): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x41ccf1b0700cceea, &(0x7f0000000080)={0x11, 0x8117, r2, 0x1, 0x4}, 0x14) socket$packet(0x11, 0x0, 0x300) 39.096842102s ago: executing program 4 (id=1355): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="c97f4ba56d736879595d29f90a9bc079e4683ed9714b3de1acb614b97240ce07e98a999f7fc6c114111f7b72b70483880676ad7722406c0d441e006518ce0317e9e13825a91cd69d20f7748d6d60cfe9bc13de5273ad3ad0e456828c4e362d20bcff9f3844ad3f7f27b503ef18ef28f852406ba240a31907cdd2939c761f52f8709384e5ac01ebc1cbb5d5850415e11780ade25d86a508b962cb64ff8e7cd391f7bfe4e6d48a87a54f9651152c8437fe853ce275f025946615ff83efd200691111dbc0", 0xc3}, {&(0x7f00000001c0)}, {&(0x7f0000000740)="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", 0xfe}, {&(0x7f0000000280)="db735cbf9e848790204eace084497fa0b450f84a87507256977eb8a8389ed0dc80e6d0503631fea9033d42f9ab0add671f27754a443b8974e1e59ae761cf2ab34bdfa31679d825fd4329e91c5985ae56a3b773a5bc7179114e21757b98c672feb23040f2e3f32f237b496532d2872750e87aac3da2ce6a83cb1164661843f4138f02fb1c13c8a5230116c91e1405121eabff9e9092671e05879216f578fc1a", 0x9f}], 0x4}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a00000000000000ff01000000000000000000000000000100000000000000000200120002000200000000000000000006002b00000000000000000000000000fc010000000000000000000000000000fc010200000000000000000000000000040004"], 0xc0}}, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg$kcm(r5, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000540)=""/234, 0xea, 0x40000182, 0x0, 0x0) close(r3) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100370004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) ppoll(&(0x7f0000000240)=[{r7, 0x8180}, {r9, 0x4008}], 0x2, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 35.195475808s ago: executing program 2 (id=1347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010003", 0x67) 28.765535938s ago: executing program 2 (id=1347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010003", 0x67) 24.466246422s ago: executing program 32 (id=1352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="b2d3addc717502bd4d21edd918cd958012ed11808cfadb555533109a24484c5b5d911e7fb1052345ae9d1410f216cf6e569c90751821d55168c5c030a34e086e39a8ca8e6cf9da72a52ef303ae1fca7c759774cdc806990ac923d48d994dc98ba16fa6be8a6800b9a5f8bacfbfda778a2130912666c64e1761a74f", 0x7b}], 0x1) accept4$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x10, 0x800) (async) r1 = accept4$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x10, 0x800) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r0}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}]}, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r6, 0x4}, &(0x7f00000003c0)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r6, 0x4}, &(0x7f00000003c0)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) (async) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000080), 0xfffffffffffffed2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}, 0x1, 0x0, 0x0, 0x6000001}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000500)={0x0, 0xc74c, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000500)={0x0, 0xc74c, 0x8}, 0x8) recvmmsg(r8, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/4084, 0xff4}, {&(0x7f00000002c0)=""/136, 0xae}, {&(0x7f0000000380)=""/174, 0xae}], 0x3}, 0x8000}], 0x1, 0x12002, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = socket(0x15, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) sendmmsg$inet(r9, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="006da8a3e110d95067958a996c7c01", 0xf}], 0x1}}], 0x1, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000200), 0x4) 24.048983077s ago: executing program 33 (id=1355): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="c97f4ba56d736879595d29f90a9bc079e4683ed9714b3de1acb614b97240ce07e98a999f7fc6c114111f7b72b70483880676ad7722406c0d441e006518ce0317e9e13825a91cd69d20f7748d6d60cfe9bc13de5273ad3ad0e456828c4e362d20bcff9f3844ad3f7f27b503ef18ef28f852406ba240a31907cdd2939c761f52f8709384e5ac01ebc1cbb5d5850415e11780ade25d86a508b962cb64ff8e7cd391f7bfe4e6d48a87a54f9651152c8437fe853ce275f025946615ff83efd200691111dbc0", 0xc3}, {&(0x7f00000001c0)}, {&(0x7f0000000740)="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", 0xfe}, {&(0x7f0000000280)="db735cbf9e848790204eace084497fa0b450f84a87507256977eb8a8389ed0dc80e6d0503631fea9033d42f9ab0add671f27754a443b8974e1e59ae761cf2ab34bdfa31679d825fd4329e91c5985ae56a3b773a5bc7179114e21757b98c672feb23040f2e3f32f237b496532d2872750e87aac3da2ce6a83cb1164661843f4138f02fb1c13c8a5230116c91e1405121eabff9e9092671e05879216f578fc1a", 0x9f}], 0x4}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a00000000000000ff01000000000000000000000000000100000000000000000200120002000200000000000000000006002b00000000000000000000000000fc010000000000000000000000000000fc010200000000000000000000000000040004"], 0xc0}}, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg$kcm(r5, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000540)=""/234, 0xea, 0x40000182, 0x0, 0x0) close(r3) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100370004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) ppoll(&(0x7f0000000240)=[{r7, 0x8180}, {r9, 0x4008}], 0x2, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 20.352494028s ago: executing program 2 (id=1347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010003", 0x67) 11.436390116s ago: executing program 2 (id=1347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010003", 0x67) 2.113019657s ago: executing program 0 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='1\a\x00\x00\x00\x00\x00\x00\x00\x008'], 0x64}, 0x1, 0x2}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002880)={&(0x7f0000002840)='kfree_skb\x00', r4}, 0x10) (async, rerun: 64) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400408008000100", @ANYRES32, @ANYBLOB="080003001900000008001b"], 0x3c}}, 0x0) 2.077360267s ago: executing program 6 (id=1610): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x21, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) 1.925593597s ago: executing program 6 (id=1611): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0xffffffff, 0x10001, {{0x3e, 0x4, 0x1, 0x3, 0xf8, 0x68, 0x0, 0x25, 0x2f, 0x0, @remote, @empty, {[@cipso={0x86, 0x23, 0x3, [{0x7, 0xd, "19282c2691774585120b3c"}, {0x0, 0x10, "c4293e20bbbce121b8d8014ae45a"}]}, @timestamp_addr={0x44, 0x1c, 0xb1, 0x1, 0xd, [{@rand_addr=0x64010100, 0xa0000}, {@multicast2, 0x2}, {@rand_addr=0x64010102, 0xd}]}, @rr={0x7, 0x2b, 0x91, [@broadcast, @broadcast, @remote, @rand_addr=0x64010101, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @local]}, @generic={0x94, 0xa, "00e70d560081d452"}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0x5d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102, @remote, @loopback, @multicast1, @remote, @private=0xa010102, @remote]}, @ssrr={0x89, 0x7, 0xe3, [@multicast1]}, @timestamp_addr={0x44, 0x3c, 0xc0, 0x1, 0x2, [{@rand_addr=0x64010102, 0x8}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x4}, {@rand_addr=0x64010101, 0x80000000}, {@multicast2, 0x8}, {@empty, 0x3ff}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_getlink={0x30, 0x12, 0x100, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x20200, 0x10}, [@IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f00000003c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180001fc0000000000000000000000009500000000000000a4d10000f2f5d72cb71eeca0e5f5983509a2d02ddfcd29772cc5390c378cf299b95edd211e3810e2394e3e7ec34e5fe062ec43aa762db4e167926c104e0e02d4ff105bce4350b5dde709c7adac1fd57691c618fbb4e9d762c5c5b09cbd4dc05063b33e9233b6c759863e51c7c7e48dc44c443c0e5553129a3c6ad54c7642b72b9be72ed35156513a7c6d67975cc3ed543cfb4d0fd8783d0842afcd7c50853655a1c6d5e76ff741a9a9e6364c4a76c9eb458ce013b5dee2dabafa87d37add342f938e9b83bc650256ffc6435e095300b1460eb4a2513455186a234a05067bd08ffc4f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x20, 0x12, 0x1, 0x70bd29, 0x25dfdbfc}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000000000000000000000008000000ffffff9e000000000000000000000000ffff"], 0x4c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001f80)={0x0, 0xfffffead, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x14, 0x42, 0x1, 0x70bd27, 0x25dfdbfc, {0x1}}, 0x14}}, 0x20000040) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0xfffffffc, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000001fc0)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5cffcbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b07040634740db66b709c58cf35ebedaf55b14cf6bdc19e5836ce29de3b1cc7c08c933bb55e3cc1998d5b115cda6bd52ec306f3de547590a5cb6b4a5b0000000000", 0xe87}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="ed89bb3b5d7dcb55503c2b81b83770744483cef2e327723a31a199a94e59c73990e9aae381905c4f0d6921a7f183f331992b96867a3bbe4770c33c9887593095dcc4d53ca33d8999ce363a657b1a21583a6ddd3db5e107da2ff2d80375d52c71fbd7728d4e310f404c93408dff9eb7839812c48bb5310119ea92f99e73ceed395b82ee21a4fa46416f39c4dfecdd490a0dbae357b77dea99a609c97a59", 0x9d}], 0x5, 0x0, 0x0, 0x2000c810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)) 1.89442131s ago: executing program 6 (id=1613): r0 = socket$inet(0xa, 0x3, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000380)="03", 0x0}, 0x20) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000140)=0xb2, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0xc38, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x20) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) listen(r0, 0x8) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x30) sendmmsg$inet6(r5, &(0x7f0000004480)=[{{0x0, 0x59, &(0x7f0000000340)=[{&(0x7f0000000540)="005d465b9529308ba36889bb", 0x1}], 0x1}}, {{0xfffffffffffffffd, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="bf8843", 0x3}], 0x1, &(0x7f00000048c0)=ANY=[@ANYBLOB="700100"], 0x170}}], 0x2, 0x40) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r5) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24004045) close(r5) 1.874076858s ago: executing program 0 (id=1614): syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c0000000000110000000000000000004e2000089078"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c00990000000000000000003c005e80080005000000000008000300000000000800090000000000100001000000000000000000000000000800070000000000080001"], 0x5c}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000003"], 0x114}], 0x1}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x18, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) (async) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000008c0)={&(0x7f0000000280), 0xc, &(0x7f0000000880)={&(0x7f00000002c0)={0x4c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000001) (async, rerun: 64) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4]}}) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xe1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8b}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x101]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1b}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x458, 0x3f4, 0x400, 0x70bd27, 0x25dfdbfd, {0x6, 0x0, 0x3d, [0x200, 0x1, 0x5, 0x66cbcd7d, 0x8, 0x5, 0xb, 0x9, 0x1, 0x7, 0x8, 0x400, 0xfffffffa, 0x10001, 0xfffffff9, 0x4, 0x7, 0x3, 0x9, 0x0, 0x2, 0x1, 0xe, 0x7fff, 0x7ff, 0x0, 0xb, 0xa, 0x8, 0xffffffff, 0x8, 0x9, 0x4, 0x0, 0x0, 0x5, 0x89d2, 0x7, 0x8, 0x101, 0x8, 0x7, 0x9, 0x7, 0x7168, 0x6, 0x1, 0x1ff, 0xfffffffc, 0x7f, 0xd, 0x1ff, 0xeb0a, 0x4, 0xfffffffe, 0x1, 0x200, 0x1, 0x92, 0x979, 0xe, 0x10, 0x10000, 0x7ff], [0x4, 0x8, 0x4, 0x6, 0x8, 0x1, 0x1, 0x54, 0x1, 0x4, 0x2, 0xffc0, 0x7, 0x200, 0x3, 0x3, 0x2, 0x5, 0x8001, 0xd3, 0x6, 0x19, 0x81, 0x7, 0x9, 0x40, 0x4, 0x7f6, 0x21b6, 0x7, 0x10000, 0x9, 0x1, 0x8, 0x4, 0x43, 0x3, 0x0, 0xc8a2, 0xd39d, 0x7, 0x40, 0x80, 0x8, 0x9, 0x8, 0x8, 0x54, 0x0, 0x4, 0x9, 0x1ff, 0x200, 0x9, 0x5, 0x0, 0xfff, 0xa, 0x400, 0x2, 0x2, 0x401, 0x4], [0xffff, 0x5, 0x5442, 0xfd, 0x100, 0x12a, 0x1000, 0xff, 0x2d8, 0x76, 0x6, 0xe1d8a3c, 0xfffffc00, 0xada7, 0x2, 0x7ff, 0x1000, 0xb, 0x8b, 0x3, 0x20, 0x9, 0x2, 0x4, 0x6, 0x66c, 0x7, 0x4, 0x2, 0x0, 0x2, 0x8000, 0xfffffe01, 0x7, 0xe, 0x1, 0x9, 0x5, 0x1, 0x7, 0x10001, 0xfffffffe, 0x3, 0x5, 0x8, 0x2, 0x8, 0x9, 0x5, 0x5, 0x6c, 0x7, 0x0, 0x9, 0x3, 0x9, 0x8, 0x49, 0x265c0000, 0x100, 0x1000, 0x87, 0x83e95e8, 0xf], [0xd, 0x85f, 0x96, 0x10001, 0xf20b, 0x3, 0x8, 0xd87, 0xca1e, 0x22d3d8fb, 0x2, 0x7, 0x3f00eb5b, 0x7, 0x6, 0x3, 0x3, 0x400, 0x3d, 0x6, 0x8, 0x7, 0x800, 0x7, 0x30, 0x9, 0x3, 0x6, 0x3, 0xfffffffd, 0xf11, 0x6, 0x12a, 0x4, 0x44, 0x7bf, 0x10000, 0x7, 0xf, 0x6, 0xfffffff7, 0x6f, 0x932, 0x8, 0x4, 0x9, 0x0, 0x9, 0xfffffffe, 0x8, 0x4, 0x8, 0x0, 0x90, 0x8, 0x9, 0x9e7, 0x1, 0x6, 0x9, 0x8001, 0xfffffffa, 0x5, 0x3], 0x35, ['netdevsim0\x00', '\x00', 'veth0\x00', 'netdevsim0\x00', 'SEG6\x00', '-#[,[\\^!^-].@%@#+\xa6\x00']}, [""]}, 0x458}}, 0x330e8766262d12a0) 1.701273256s ago: executing program 6 (id=1615): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0)="7e9c41dd3d", &(0x7f0000000240)}, 0x20) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {0x6}, {0x0, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x4000) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000600000006000b0000"], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r8, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) r10 = socket$netlink(0x10, 0x3, 0x10) r11 = socket$kcm(0xa, 0x1, 0x106) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x48844}, 0x20000004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r12) openat$cgroup_devices(r0, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r12) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r13, 0x400448e4, &(0x7f0000000000)) sendmsg$kcm(r11, &(0x7f00000019c0)={&(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x24004059) close(r11) 1.670963498s ago: executing program 0 (id=1616): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800887280cffa0da890033678e98001c00"], 0x44}}, 0x0) 1.501931326s ago: executing program 0 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)={0x28, r4, 0x401, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.501132246s ago: executing program 5 (id=1619): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="a5", 0x34000, 0x4001, 0x0, 0x0) 1.473005069s ago: executing program 6 (id=1620): r0 = socket$inet6(0xa, 0x1, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) sendmmsg$alg(r0, &(0x7f0000000d40)=[{0x20000000, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x44810}], 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000280)="240000001a005f0214f9d9270904007d75fffffe280000000df7414f1718520de54a0044701c494bcd2d849355ff5a2653167a1b5850bf061fe47b6136d6a57e95d7dbcf", 0xfffffffffffffe55) sendmmsg$alg(r2, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="754ec5f38ced350c713fa2fe", 0xc}, {&(0x7f0000000080)="cc4d3ddd45494c4d429925e2f3c221be1aa616c91b2272ab5e28fc29d5abec810228ae37bdb07bf72c8c9a7efbc6945d10961fc9e9da67343e859bfb951fa579e5aff5bd76c190407f5b385390a579161916b942ee1e0d9300f2cf", 0x5b}, {&(0x7f0000000100)="ab77e7d38d397e60adc5e596bf94ffabee2cd076ecdddce9a14ede235874a35bb97509afe4cca2", 0x27}, {&(0x7f0000000140)="df16bc3a8dc4b53595e863cf4718036431503c2cd534c1e865ace84547710bab96354a3865ac3bb314365ca0c97b2b3dd3ebb2b9adc2ee1fc029fdab369bb83f813dcddd9df49ce4315090d611c3585c47b74190ce82f372b16ae6f6c281c99f37eee3910d6cbc7fc159d9fbb8e01df3828ad64d64eb9b8c4b4bdc99d96c76aa3c7343d830ce7f51d936668f8e34be75535c1f73d78fcc8ca980bf259f392f25c39ac5948abb442a272ca0d1060a8fbf29441a5ea1eb06f5822c7be7af7121", 0xbf}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000440)="6b39eeaa2e534cbce77fe996841cad9335dda8dc8f71536e091888212fcd56881ffcacb9093c9081bf4494fd47f4b4e07b47903f6e661b4b4a7d2fd2cdc8ebd1a6f88aead41a0542fadf785929bec3304b3c00e84883b92a247bda8fad55f47d8853db2b75d94e5d40d4713207996c8ba46b7fcd5244328e417e965dccf4917dfb3579ec3c64d208cec52e4ebde5970e0dff6ad1ccbe0c3907900889ae1c430abbd4e5a7e507768e441b951108", 0xad}, {&(0x7f0000000600)="01dfda5da97db15b66a5c0c52bd3a2f1cff0e9d6bab58e360f8c2f88f295d64de95630013ce6d40d2c6f4da422023d4b9e49e0ee1c8da98d64e35d6f26bd20f2ec7265c56b0ba66c3070944cfd364b580f8e19c7dac24be974127bc4959a848d8c11c850352e2bd4648e48e213ad2ff45bf1f2aff158572210ec27651d4fe161cf4c48fb5736b0e3b048accd56203ab83585a66874b074f7d1c39d1dce60d8722fb3206bcadd509d68b368f63c2eaf6b3468888b6dff7e3805950ea926b452ba01b83cf6d3ed461af885b22bf9a577a0e2a13ea8b365d14ea9c2f08d84ada0b6fddaf0580abec410ce16a377f56b10c34bbda246a409", 0xf6}, {&(0x7f0000000700)="9dcaa5410ec4b936db225b69882c8d626529aa17681773bc33b06602fdce8a14e3ca4633f8546b69ff7b792980d903766262739c053da61e950617d42ce1a5982e16462c3398f24b3409226b591543bf5b717023f9d11fb5e306fb82f3f2ab12419d4f2360d3206a2f4a7891e2a3424fe3ad6a9641bd296a9dfcf6f9fdce3cdbe5feecd0517ac35c7390272bd8e1d7a2b9eb0a99573f139a560d0940bce619f8e29723c5479eba54859ba629492c5348b08310b9510e44ab1e5e4fbe1699381c514aec12eac2e548dc4518fcc06d87518db63e777d3c71b7ae724632636f065e8c83f91fae86f2e773e1ad0ecfb0", 0xee}, {&(0x7f0000000800)="94be556f7f47ae87c5c4730f01bef0466fcc35b99c5b004ba5ebca5e342479c82d77fa368c4c0d11079735b8e56c62d398314483f4bbdf3c0002aa348b0f09ab40973bc5754fa0e2ecb8ddfc88a8c8a5b01f5933144aa68967d3d5e166e835a0b8c462703e54c631dbef2ae1e8595f556d7a413cf0d3ff8f40b078344e5950d307c823c652a3105405042e2018b3cf7f6c9f006d8ea77f9a9f38ddce0bfaac288a20ef0e9c190d3c61adb5d56645ba002811c8b94a2c86ff1c7815e62817898d2f9559109fae496e4d76697433a165c37518aa3dde9a55736e", 0xd9}], 0x9, &(0x7f0000002340)=ANY=[@ANYRES32=r0], 0xf8, 0x4000800}, {0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="913b5827dd52f52c", 0x8}, {&(0x7f0000000a00)="93e6df580db78384132e0b5a68674938516968914b26c6e4c55104ae14053b916862b60f522a86375e838b2bcd6c7963ca0ae98663fc3f01e52e1f21b814bc411334049e8ad60e336279afb42d728dcd591fb2a63bfcc9bbbd454f96becb6dac09a0d3d358d0e9c670c5e9d168bea93c7790393ff481306b760f1e3f5daf0b4a3ecbf38319974f0e66b88f35c3232afaef55ae067861fd9d2e38525f27c5f7aaad349b6a11fa581db47740315f7337853781c2fd5dc3d21e57bb4407d7148fe807b2a1773955c80f7db255ff36c7d29e8f44ac2b0dafec34c5514d3cb9", 0xdd}, {&(0x7f0000000b00)="a3598655cca7a944e187d12792dbc71a29068aafef24787b0ea6b288fb6dd88f503d74d2b961e20f5ff0001948d0415fe39715ff70c086", 0x37}, {&(0x7f0000000b40)="2e79e80fe6e3d78a46369d46d2ee6ee640124b2d1378f316188b7698e58660704b4575f9f3797f4320d0af7a86cc307b8730c1675d2a8f8a9e79d12c3cd1a87b24ed93c7c7013ced9c9c9039c32fef1bdf9175dca2a837401126b7d74361b8445342b0757caae5410c1d8614d03cc5502978a619279925932977499b77b804cad7bd17721efaed7ff672b3e2d455d9db343884f7898081c11fe3024ab4df9008a38e22ed78818d13063dcf3cb6e71de892012b", 0xb3}], 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="300000000000001717010000020000001a0000001dfa6e27c36842f6317ba9f263d985bb4eabe44a9b879e11e9330000180f50000000000017010000020000000300000007af3600180000000000000017010000030000000100000000000000"], 0x60, 0x8840}, {0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001d80)="911d9dfd299ab1784b0373cd2d121c1c2300d5b8f6fa586c8d964c6c954bf005aa416f955d253ac813347b2ad8c01de3a49d3911f7ab7be51e750980751dae2861ebd2ada98370b461cc44f0116ee2ab3054b14f00b4d58c54dc00196ba47fe8c3561d8881f4caf397b06e0a0bee5064513d0ea2e5447021ae2ad947b5cfc86f19c516b66ae572e28c625a3bce2a32b44e57cfda32b47e042fa5407819a025316e7d9d919a2972f203f1a49321549578b4eb1125a57ada0c4dcc29", 0xbb}, {&(0x7f0000001e40)="52fbbf00a72cf63c28f0b037f8b079c03e33b54a7d8e7bd878ba54a5a4e1b9888b33af35019d91a3ca037b2bc43e37a21a47578c3fe121cb0db96c888d4331696bdca4f0583bbdc19a611ec88f7c3b270b25115a2c1baf7e9ae8401da10311d93e2acc0f349a09433612f547cdf0c61ca1bdac5486511c2f4ccda4da4ea43162700c081d1947b8a9347653f7055abee9f0688944fa329daa9cb984a22b2788266d526bb657a2022f2dbe9c3bc0d8a4b2db1c2f96458b6ec2071521aa296120237ac6fc37c36e13", 0xc7}, {&(0x7f0000001f40)="1ba1a4588ad59f77e99f924731f2163349ea8de9c56ca304e08a29785557a211ccf7a67c66b63db56b32ac8dad79bae7cfa59adcd3327b4c4ff74cca6af8bc8b82c9760f311de4d8108f3c6d7d20b4cf09d8d01d43a33788cf2c03825853958f2d739f9260affa3f15848bdb78c5db4efb05ab460056861c920b6ccfeac4592fa7e5091a5738a73b185bd875234fc2c50f90765c3856440594381d745ea6b0159132817b88cc28768e3a688606e5fa6a2b864ad5a0fc79d5dfd9fd102d77289dd4b08bf513b0438e46ec1f95da42b46d1dc7808bedaaa48285274123cc4e22e7bdf870583a", 0xe5}, {&(0x7f0000002040)="52406e4e9c5b9bbb54e8a7552495b7865d9f2ba2b1a98b1a4a9cd501223e071f633649bb1a8e17a95b2422197639fd0163bc4c3bcaa2a677ff8edb9e57a817d35991da292c2be3f7eecd101121e59f000c88ba2e81776d52983db0a5ca2397cd895e9a320fda1a6bb55b102cdffa8dfd9e2646a753ef03413263149e47765785df9f063536d757c5346debb93285e169", 0x90}, {&(0x7f0000000d00)="2505eab8df409f98cc9b95ce3a07a431114ac4d1a6", 0x15}, {&(0x7f0000002100)="1ae1a934673cc087cfb14c4073fd0740f01d778afa5011c6994dd66104bb36143a031400d7ac90d7f92ad0e87695f0c58277ba44d0621ebb1edc3a31942561f4bc5f7f8ce87f9e27dc5674a4d336ad43bcb3f8cfb6dcb242f1a2673663055efb813278cf0fa087db7891d26e910322d86e72c55263dae3f148d2fe7630f498410763924a0f3c7c7e01654f046aa1617fe00367a186455deeeae6675b2b1a2bb663c4c5fa828ab134dd595ae98032aea5b5c3fc02ce97521429f0888d8efdc19fd1c845ea93054dcdad6499c0350d5ab49b017f7277", 0xd5}], 0x6, 0x0, 0x0, 0x4000}], 0x3, 0x40040) 1.381634694s ago: executing program 0 (id=1621): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x2, 0x9, [0x1ff, 0x1ff, 0x9, 0x6, 0x9, 0xf5ac, 0x0, 0x4000, 0xfff]}, &(0x7f0000000100)=0x1a) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) (async) r2 = accept$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) write(r0, &(0x7f0000000240)="3477c088e7a382b32b4a78d0e1ba2b46f930edba8270a00990174e504887b5cf0386fb036be1248304e027fcd9d0040fa6440c09fa845ccde149605a40e3a4357828b09d25b891bca3a0d3c2d30fe785ca10249bb9dc8210d593511d4b63fc86c3b5bf78722ef7cdf1f91d2ec49312994d3d499e790b0da4b0be375980d17656a0df0d501d67143ec7cf130ce48247eab86bdd63d9b085428d2a4077f3371520c7f6ca3ee1a97b304be28601", 0xac) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x58}}}}}, 0x28}}, 0xc4) (async, rerun: 64) r5 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 64) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000004c0)={{r5}, "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"}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'syztnl0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x2f, 0x8a, 0xb, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast1, 0x1, 0x8, 0x9233}}) sendmsg$nl_route(r0, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)=@bridge_newvlan={0x48, 0x70, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4044000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000016c0)={r0}) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001740), r0) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x70, r8, 0x820, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x13}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000001880)={r1, 0x0, 0x4725, 0x6ebd, 0x4, 0x7f}, &(0x7f00000018c0)=0x14) (async, rerun: 64) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0xcc, 0x0, 0xffffffffffffffff, 0xd, '\x00', r6, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c80)={0x0, 0x703589fa, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_ext={0x1c, 0x2d, &(0x7f00000019c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb9b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b40)='syzkaller\x00', 0xffffffff, 0x10, &(0x7f0000001b80)=""/16, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001c00)={0x0, 0x8, 0x8001, 0xbd2}, 0x10, 0x5958, 0xffffffffffffffff, 0x7, &(0x7f0000001cc0)=[r12, r9, r9, 0x1, r13], &(0x7f0000001d00)=[{0x5, 0x1, 0xf, 0xa}, {0x5, 0x3, 0xb, 0x8}, {0x5, 0x4, 0xa, 0x5}, {0x4, 0x5, 0x2, 0x9}, {0x0, 0x4, 0xd, 0x1}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x2, 0x7, 0xb}], 0x10, 0x5, @void, @value}, 0x94) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000002300)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f00000022c0)={&(0x7f0000001ec0)={0x3e4, r14, 0x222, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xa3, 0x45, "a1d0db26634ea8bd4985038bb69addb9cd6165d006a757d4652c8c5ccc0be837a9702c2f2f87326434538ddce3fdcd92d0f7799279a366a30ab4fe32d9f7896d39e4745a223d0eb04b03e16644b2f1fcb7815e7a494af466ddbca71a72ef6044f83ded1d37a3eea831c55d2833629c1410a73471bd62ec3b40623989c9effebe3bcd486ff9e0db5f0f1b3317a12480263c348b86707a8f81bcaf9662367e5f"}, @NL80211_ATTR_TESTDATA={0xe5, 0x45, "c55110bbc03b6262d410ead7dcdfdfd56edaf27f8f3acd0772dcb7e0dc47f8ac585546b32d191cf8099fec4457e27fdcb11f51ec274c0c42e2400a2878da8587db3949389bf61c5d4b613d01833270b7a7820e7d04fc2d782e92cc99f722c5cf073c529c60b78057481288df89be466046266dd51a9a075ef7ba9a6da01b859e060bea46bd3937f70b1cdd299208329811eb301fd0f2e2aeecefd668536c16d0ba2c58611b994cc206159154d73329234e37b3cb192daf2c5b91264f33fa5dcd9c4cdb700ee4ae3a7c1a74c18a8515810c600a5dd39a6dce4f43667fa7eec421e8"}, @NL80211_ATTR_TESTDATA={0xa6, 0x45, "7b861db7e245f436f2cc1c49d61f4b5784c319eb98446115447d4b6dee6b811a09717b4dd1b83c7486132b85d6a653987c996a46e715d6d1eb15ae987f85db193ac1ba9d570b1978f91628514de3c39a836ddfe46bd668f69c89acc5c3ef7378f4050080a2911def9dcd1954e39fb758db337f9ef81396454e0b815d95d38e73f2ce5cc98d62b1f6c0b65fc52107dcdf9647661446904e98d3276355519262079b1c"}, @NL80211_ATTR_TESTDATA={0x9c, 0x45, "5348b5babf62560240bacb3d4b0c9db40b878f46e3348100dd854decd48bbb8674e5d8ab2fdba8d19dbfa6b76230fd9678cc0c8038cfa5e34909155e88b40300042470b108fc6ab1b923b4c4e4eeb9b49cb370955eeab07d6a9ce1145ef8396767888be01da0d82d9a04f3569b569f1674007d684cb886900975c0d06cf6beab5f39e328299585f40a69b6748abed6731775bb5c4a33ce86"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "869434d851eefbb80ea4093980f66b9f7b1259d576376c80fa65bf04"}, @NL80211_ATTR_TESTDATA={0xdd, 0x45, "702b0a69745952a9f753949ce16ca8ffb5efded5141e02192deb1d577bd7f36cb428fe00eccfa095e5ce853da6d45a5e4e16fd12f23a23d4e93534aa6c290f2b4af3784f7d9d9fa4e9dc27573ddb9891738d91ed56b57eb34ea2f8ccc17d7d545b8d960c4adf62f92e7051e7e3f7508b8db037750be75c0019af47854121775ddd9f39e19bd3d703db03a383ffa339a107100eb76e423462bcd600de57ed2052c587e3906550cd5e6a59724a68ca0e092193e0ecfcb7ed9b34b096482ece80c365abb448827967b2eb9a9c0f0467538c47ac1554360e44bf71"}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x200a001}, 0x4000000) listen(r2, 0xfffffff8) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r13, 0x50009418, &(0x7f0000002340)={{r9}, 0x0, 0x4, @unused=[0xfa2f, 0x4, 0x100000001, 0xc36], @name="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"}) (async) getsockname(r5, &(0x7f0000003340)=@can, &(0x7f00000033c0)=0x80) bind$alg(r0, &(0x7f0000003400)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003480)='./cgroup/syz0\x00', 0x1ff) 1.293995771s ago: executing program 5 (id=1622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xefffffffffffffff}]}, 0x24}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028008003100000000000c002e"], 0x48}}, 0x0) 1.292054603s ago: executing program 2 (id=1347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010003", 0x67) 528.177531ms ago: executing program 0 (id=1623): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b409000000000010ae00000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(xcbc(aes))\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 32) ppoll(&(0x7f0000000480)=[{r1, 0x404}], 0x1, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)={[0x1]}, 0x8) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000440)=r3, 0x4) 527.582985ms ago: executing program 5 (id=1624): r0 = socket(0x2, 0x3, 0x63) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x34}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) socket$packet(0x11, 0x3, 0x300) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) socket(0x2, 0x3, 0x63) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x34}}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) (async) 527.04237ms ago: executing program 6 (id=1625): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x52}, &(0x7f00000001c0)=0x9c) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r3, 0x8940, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r5, @ANYBLOB="100000000002000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01020000000000000000000000000900020673797a3100000000080003400000004008010a4000000000080005400000002c0900010073797a3100000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r7) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000180)=0x5) (async) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 370.610305ms ago: executing program 5 (id=1626): socket(0x2a, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) (async) unshare(0x62040200) 117.983334ms ago: executing program 5 (id=1627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r2, 0xd7735000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r4, 0x8919, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1628): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) kernel console output (not intermixed with test programs): 'syz.3.982': attribute type 9 has an invalid length. [ 129.580763][ T9262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.659759][ T7742] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.712774][ T9262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.898182][ T9351] warn_alloc: 1 callbacks suppressed [ 129.898202][ T9351] syz.3.986: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 129.941659][ T9262] team0: Port device team_slave_0 added [ 129.958285][ T9351] CPU: 0 UID: 0 PID: 9351 Comm: syz.3.986 Not tainted 6.13.0-rc5-syzkaller-00162-gf552b3037d0c #0 [ 129.968932][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.979015][ T9351] Call Trace: [ 129.982324][ T9351] [ 129.985288][ T9351] dump_stack_lvl+0x241/0x360 [ 129.990011][ T9351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.995244][ T9351] ? __pfx__printk+0x10/0x10 [ 129.999882][ T9351] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 130.006343][ T9351] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 130.012900][ T9351] warn_alloc+0x278/0x410 [ 130.017276][ T9351] ? __pfx_warn_alloc+0x10/0x10 [ 130.022175][ T9351] ? xskq_create+0xb6/0x170 [ 130.026713][ T9351] ? __get_vm_area_node+0x1c8/0x2d0 [ 130.031945][ T9351] ? __get_vm_area_node+0x25c/0x2d0 [ 130.037178][ T9351] __vmalloc_node_range_noprof+0x62f/0x1380 [ 130.043122][ T9351] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.049475][ T9351] ? __kasan_kmalloc+0x98/0xb0 [ 130.054262][ T9351] vmalloc_user_noprof+0x74/0x80 [ 130.059200][ T9351] ? xskq_create+0xb6/0x170 [ 130.063707][ T9351] xskq_create+0xb6/0x170 [ 130.068041][ T9351] xsk_init_queue+0xa1/0x100 [ 130.072651][ T9351] xsk_setsockopt+0x598/0x950 [ 130.077351][ T9351] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.082587][ T9351] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.087462][ T9351] ? __pfx_lock_acquire+0x10/0x10 [ 130.092490][ T9351] ? aa_sock_opt_perm+0x79/0x120 [ 130.097444][ T9351] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.102649][ T9351] do_sock_setsockopt+0x3af/0x720 [ 130.107859][ T9351] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 130.113408][ T9351] ? __fget_files+0x395/0x410 [ 130.118134][ T9351] ? __fget_files+0x2a/0x410 [ 130.122762][ T9351] __x64_sys_setsockopt+0x1ee/0x280 [ 130.127978][ T9351] do_syscall_64+0xf3/0x230 [ 130.132498][ T9351] ? clear_bhb_loop+0x35/0x90 [ 130.137176][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.143088][ T9351] RIP: 0033:0x7f8305785d29 [ 130.147523][ T9351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.167412][ T9351] RSP: 002b:00007f83064e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.175837][ T9351] RAX: ffffffffffffffda RBX: 00007f8305976080 RCX: 00007f8305785d29 [ 130.183808][ T9351] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009 [ 130.191788][ T9351] RBP: 00007f8305801b08 R08: 0000000000000004 R09: 0000000000000000 [ 130.199759][ T9351] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 130.207730][ T9351] R13: 0000000000000000 R14: 00007f8305976080 R15: 00007ffe5f0b9298 [ 130.215732][ T9351] [ 130.222512][ T9351] Mem-Info: [ 130.226192][ T9351] active_anon:4293 inactive_anon:0 isolated_anon:0 [ 130.226192][ T9351] active_file:1293 inactive_file:38275 isolated_file:0 [ 130.226192][ T9351] unevictable:768 dirty:46 writeback:0 [ 130.226192][ T9351] slab_reclaimable:10919 slab_unreclaimable:99429 [ 130.226192][ T9351] mapped:29338 shmem:1424 pagetables:659 [ 130.226192][ T9351] sec_pagetables:0 bounce:0 [ 130.226192][ T9351] kernel_misc_reclaimable:0 [ 130.226192][ T9351] free:1338639 free_pcp:1570 free_cma:0 [ 130.271676][ T9351] Node 0 active_anon:17072kB inactive_anon:0kB active_file:5172kB inactive_file:153024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117352kB dirty:184kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11772kB pagetables:2536kB sec_pagetables:0kB all_unreclaimable? no [ 130.281545][ T9262] team0: Port device team_slave_1 added [ 130.314428][ T9351] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 130.346676][ T9351] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.381840][ T9351] lowmem_reserve[]: 0 2465 2466 0 0 [ 130.387479][ T9351] Node 0 DMA32 free:1434812kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:17136kB inactive_anon:0kB active_file:5172kB inactive_file:152192kB unevictable:1536kB writepending:180kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:5532kB local_pcp:4556kB free_cma:0kB [ 130.418234][ T9351] lowmem_reserve[]: 0 0 0 0 0 [ 130.423007][ T9351] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 130.450192][ T9351] lowmem_reserve[]: 0 0 0 0 0 [ 130.455146][ T9351] Node 1 Normal free:3904772kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:904kB local_pcp:408kB free_cma:0kB [ 130.534323][ T9351] lowmem_reserve[]: 0 0 0 0 0 [ 130.545267][ T9351] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 130.566865][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.574646][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.579710][ T9351] Node 0 [ 130.601109][ T9262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.616505][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.623568][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.641790][ T5835] Bluetooth: hci0: command tx timeout [ 130.650129][ T9262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.685007][ T9364] syz.0.990 (9364) used greatest stack depth: 18640 bytes left [ 130.688075][ T9351] DMA32: 70*4kB (UME) 36*8kB (UME) 36*16kB (UME) 47*32kB (ME) 63*64kB (ME) 30*128kB (UME) 11*256kB (UM) 5*512kB (UM) 16*1024kB (UME) 3*2048kB (UM) 342*4096kB (M) = 1439256kB [ 130.724666][ T9351] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 130.738113][ T9351] Node 1 Normal: 27*4kB (UE) 61*8kB (UME) 31*16kB (UME) 186*32kB (UME) 86*64kB (UME) 36*128kB (UME) 14*256kB (UME) 10*512kB (UME) 6*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3904772kB [ 130.781642][ T9262] hsr_slave_0: entered promiscuous mode [ 130.794290][ T9351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.818604][ T9262] hsr_slave_1: entered promiscuous mode [ 130.834539][ T9351] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.853828][ T9351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.853839][ T9262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.853857][ T9351] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.874549][ T9262] Cannot create hsr debugfs directory [ 130.885172][ T9351] 40992 total pagecache pages [ 130.891120][ T9351] 0 pages in swap cache [ 130.897800][ T9351] Free swap = 124996kB [ 130.902225][ T9351] Total swap = 124996kB [ 130.927110][ T9351] 2097051 pages RAM [ 130.941807][ T9351] 0 pages HighMem/MovableOnly [ 130.954365][ T9351] 427007 pages reserved [ 130.958586][ T9351] 0 pages cma reserved [ 131.080477][ T7742] bridge_slave_1: left allmulticast mode [ 131.088207][ T7742] bridge_slave_1: left promiscuous mode [ 131.094041][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.095851][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 131.111664][ T7742] bridge_slave_0: left allmulticast mode [ 131.119996][ T7742] bridge_slave_0: left promiscuous mode [ 131.126348][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.469350][ T7742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.481081][ T7742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.491479][ T7742] bond0 (unregistering): Released all slaves [ 131.676697][ T9399] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1000'. [ 131.689650][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 131.880590][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 131.893856][ T9409] netlink: 'syz.0.1005': attribute type 10 has an invalid length. [ 131.951345][ T9409] team0: Device veth1_macvtap failed to register rx_handler [ 132.020320][ T9409] syz.0.1005 (9409) used greatest stack depth: 18384 bytes left [ 132.052320][ T7742] hsr_slave_0: left promiscuous mode [ 132.066360][ T7742] hsr_slave_1: left promiscuous mode [ 132.077324][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.087098][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.099497][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.107432][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.132905][ T7742] veth1_macvtap: left promiscuous mode [ 132.138855][ T7742] veth0_macvtap: left promiscuous mode [ 132.145116][ T7742] veth1_vlan: left promiscuous mode [ 132.154096][ T7742] veth0_vlan: left promiscuous mode [ 132.260388][ T9422] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1007'. [ 132.637456][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 132.700044][ T7742] team0 (unregistering): Port device team_slave_1 removed [ 132.714482][ T5835] Bluetooth: hci0: command tx timeout [ 132.748875][ T9430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 132.771671][ T7742] team0 (unregistering): Port device team_slave_0 removed [ 132.867908][ T9432] netlink: 'syz.2.1010': attribute type 5 has an invalid length. [ 133.116871][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.124166][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.312378][ T9431] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1010'. [ 133.505710][ T9442] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 133.525228][ T9442] netlink: 'syz.3.1014': attribute type 3 has an invalid length. [ 133.592554][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.600267][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.626292][ T9448] netlink: 'syz.4.1015': attribute type 32 has an invalid length. [ 133.803581][ T9457] netlink: 'syz.2.1020': attribute type 8 has an invalid length. [ 133.891334][ T9457] erspan0: entered promiscuous mode [ 133.897853][ T9468] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 133.909120][ T9457] erspan0: left promiscuous mode [ 133.920688][ T9463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.928508][ T9463] IPv6: NLM_F_CREATE should be set when creating new route [ 133.961831][ T9468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.986569][ T9472] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.994473][ T9472] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 134.012631][ T9472] bond4: (slave vti0): Error -95 calling set_mac_address [ 134.013567][ T9469] __nla_validate_parse: 5 callbacks suppressed [ 134.013584][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1022'. [ 134.083246][ T9468] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 134.092764][ T9468] bond4: (slave batadv1): making interface the new active one [ 134.101741][ T9468] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 134.114356][ T9262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.128565][ T9262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.148691][ T9475] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 134.170353][ T9262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.197462][ T9262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.316898][ C0] Illegal XDP return value 16128 on prog (id 270) dev lo, expect packet loss! [ 134.358181][ T9262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.382200][ T9262] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.431561][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.438932][ T7742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.482737][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.489968][ T7742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.571813][ T9499] netlink: 4340 bytes leftover after parsing attributes in process `syz.0.1031'. [ 134.586430][ T9499] x_tables: duplicate underflow at hook 2 [ 134.599052][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1030'. [ 134.793287][ T9512] tipc: Enabled bearer , priority 10 [ 134.804325][ T5835] Bluetooth: hci0: command tx timeout [ 134.813559][ T9509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1034'. [ 134.852244][ T9262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.898533][ T9509] (unnamed net_device) (uninitialized): option ad_select: invalid value (95) [ 135.007485][ T9262] veth0_vlan: entered promiscuous mode [ 135.022473][ T9262] veth1_vlan: entered promiscuous mode [ 135.115700][ T9262] veth0_macvtap: entered promiscuous mode [ 135.149696][ T9262] veth1_macvtap: entered promiscuous mode [ 135.175381][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.191765][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.203027][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.220344][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.233422][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.246301][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.261936][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.288064][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.304415][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.315406][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.326177][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.336440][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.347698][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.359308][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.375369][ T9262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.384746][ T9262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.393625][ T9262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.405342][ T9262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.534593][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.542504][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.590504][ T7737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.610861][ T7737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.056365][ T9572] tipc: Started in network mode [ 136.062143][ T9572] tipc: Node identity ac14140f, cluster identity 4711 [ 136.070252][ T9572] tipc: New replicast peer: 255.255.255.255 [ 136.083125][ T9572] tipc: Enabled bearer , priority 10 [ 136.118597][ T9573] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 136.365866][ T9586] sit1: entered promiscuous mode [ 136.371454][ T9586] sit1: entered allmulticast mode [ 136.390504][ T9585] netlink: 'syz.0.1058': attribute type 4 has an invalid length. [ 136.449475][ T9592] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 136.458404][ T9592] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 136.500094][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 136.500200][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 136.588297][ T9589] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 136.603134][ T9589] batadv1: entered promiscuous mode [ 136.611967][ T9589] team0: Port device batadv1 added [ 136.631167][ T9588] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 136.653635][ T9588] batadv2: entered promiscuous mode [ 136.670506][ T9588] team0: Port device batadv2 added [ 137.058146][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.081871][ T25] tipc: Node number set to 2886997007 [ 137.196138][ T5835] Bluetooth: hci2: command tx timeout [ 137.365260][ T9637] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 137.600816][ T9646] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 137.775857][ T9661] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 137.855616][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.880109][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.895195][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.929236][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.974501][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.981964][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.983198][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.052068][ T9663] tipc: Enabling of bearer rejected, already enabled [ 138.095449][ T9675] sctp: [Deprecated]: syz.0.1074 (pid 9675) Use of int in max_burst socket option deprecated. [ 138.095449][ T9675] Use struct sctp_assoc_value instead [ 138.143194][ T9664]  speed is unknown, defaulting to 1000 [ 138.185092][ T9678] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 138.234523][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1075'. [ 138.552874][ T9664] chnl_net:caif_netlink_parms(): no params data found [ 138.765256][ T9694] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 138.879665][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.146896][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.210717][ T9693] syzkaller1: entered promiscuous mode [ 139.216542][ T9693] syzkaller1: entered allmulticast mode [ 139.311340][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.325489][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.347540][ T9664] bridge_slave_0: entered allmulticast mode [ 139.368385][ T9664] bridge_slave_0: entered promiscuous mode [ 139.407426][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.423622][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.432322][ T9664] bridge_slave_1: entered allmulticast mode [ 139.441901][ T9664] bridge_slave_1: entered promiscuous mode [ 139.469805][ T9720] netlink: 'syz.4.1081': attribute type 6 has an invalid length. [ 139.511714][ T9720] netlink: 'syz.4.1081': attribute type 6 has an invalid length. [ 139.541195][ T35] bridge_slave_1: left allmulticast mode [ 139.547234][ T35] bridge_slave_1: left promiscuous mode [ 139.553119][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.595721][ T35] bridge_slave_0: left allmulticast mode [ 139.602184][ T35] bridge_slave_0: left promiscuous mode [ 139.615127][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.817371][ T9729] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.084526][ T5835] Bluetooth: hci0: command tx timeout [ 140.240213][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.253224][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.264149][ T35] bond0 (unregistering): Released all slaves [ 140.273939][ T9720] netlink: 'syz.4.1081': attribute type 6 has an invalid length. [ 140.289339][ T9664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.317582][ T9664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.330244][ T9723] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 140.397768][ T9720] netlink: 'syz.4.1081': attribute type 6 has an invalid length. [ 140.539685][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 140.599028][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 140.645399][ T9761] netlink: 'syz.3.1090': attribute type 1 has an invalid length. [ 140.751104][ T9664] team0: Port device team_slave_0 added [ 140.763405][ T9761] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 140.783684][ T9773] netlink: 'syz.2.1093': attribute type 6 has an invalid length. [ 140.809413][ T9769] IPv6: sit2: Disabled Multicast RS [ 140.819750][ T9773] netlink: 'syz.2.1093': attribute type 6 has an invalid length. [ 140.844053][ T9664] team0: Port device team_slave_1 added [ 141.128173][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.145568][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.192443][ T9664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.298979][ T35] hsr_slave_0: left promiscuous mode [ 141.310033][ T35] hsr_slave_1: left promiscuous mode [ 141.320679][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.330708][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.346379][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.365183][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.416698][ T35] veth1_macvtap: left promiscuous mode [ 141.430269][ T35] veth0_macvtap: left promiscuous mode [ 141.443033][ T35] veth1_vlan: left promiscuous mode [ 141.456442][ T35] veth0_vlan: left promiscuous mode [ 141.606646][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1102'. [ 142.130540][ T35] team0 (unregistering): Port device team_slave_1 removed [ 142.161500][ T5835] Bluetooth: hci0: command tx timeout [ 142.198745][ T35] team0 (unregistering): Port device team_slave_0 removed [ 142.298095][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1106'. [ 142.788437][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.796248][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.822811][ T9664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.968186][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1109'. [ 143.045670][ T9664] hsr_slave_0: entered promiscuous mode [ 143.101332][ T9664] hsr_slave_1: entered promiscuous mode [ 143.123936][ T9664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.133211][ T9664] Cannot create hsr debugfs directory [ 143.216431][ T9851] syzkaller1: entered promiscuous mode [ 143.222232][ T9851] syzkaller1: entered allmulticast mode [ 143.251534][ T9851] syzkaller1: left promiscuous mode [ 143.258864][ T9851] syzkaller1: left allmulticast mode [ 143.261190][ T9854] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 143.299823][ T9851] netlink: 'syz.3.1111': attribute type 4 has an invalid length. [ 143.316174][ T9853] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 143.341524][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1112'. [ 143.521310][ T9864] netlink: 'syz.4.1113': attribute type 10 has an invalid length. [ 143.556030][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 143.693463][ T9664] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.704671][ T9664] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.713856][ T9664] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.727268][ T9664] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.800825][ T9664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.824400][ T9664] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.842277][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.849447][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.865480][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.872708][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.124058][ T9664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.205544][ T9664] veth0_vlan: entered promiscuous mode [ 144.230383][ T9664] veth1_vlan: entered promiscuous mode [ 144.234706][ T5835] Bluetooth: hci0: command tx timeout [ 144.322193][ T9664] veth0_macvtap: entered promiscuous mode [ 144.357676][ T9664] veth1_macvtap: entered promiscuous mode [ 144.399492][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.426525][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.442362][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.453267][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.464373][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.475459][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.487278][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.504777][ T9892] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1121'. [ 144.538892][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.573628][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.583645][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.594403][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.604463][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.615131][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.626352][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.657172][ T9664] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.668761][ T9664] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.681172][ T9664] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.690539][ T9664] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.704770][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1124'. [ 144.945405][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.953352][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.007558][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1127'. [ 145.024450][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.032599][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.139795][ T9914] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 145.323371][ T9933] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 145.398339][ T9938] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 145.409077][ T9938] nbd: couldn't find a device at index 20 [ 145.419617][ T9938] geneve2: entered promiscuous mode [ 145.427329][ T9938] geneve2: entered allmulticast mode [ 145.561100][ T9944] ip6t_srh: unknown srh invflags A757 [ 145.585257][ T9945] __nla_validate_parse: 1 callbacks suppressed [ 145.585276][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 145.605721][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 145.669499][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1135'. [ 145.907057][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 145.952124][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 145.972810][ T9976] netlink: set zone limit has 8 unknown bytes [ 146.009217][ T9966] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.029716][ T9978] vxcan2: entered allmulticast mode [ 146.043040][ T9978] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.050358][ T9978] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 146.061862][ T9978] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 146.077590][ T9976] sch_fq: defrate 0 ignored. [ 146.256438][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1146'. [ 146.266534][ T9989] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 146.301277][ T9991] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1147'. [ 146.310841][ T9991] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 146.470934][ T9999]  speed is unknown, defaulting to 1000 [ 146.796843][T10012] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 146.846077][T10012] bond6: entered promiscuous mode [ 146.852306][T10012] bond6: entered allmulticast mode [ 146.858951][T10012] 8021q: adding VLAN 0 to HW filter on device bond6 [ 146.884297][T10014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1153'. [ 146.945057][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 146.965025][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 147.228928][ T7740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.059324][T10075] netlink: 'syz.3.1162': attribute type 10 has an invalid length. [ 148.443271][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.443885][ T7740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.473366][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.486946][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.505642][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.523973][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.533216][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.672877][ T7740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.675874][T10107] Bluetooth: MGMT ver 1.23 [ 148.728223][T10095]  speed is unknown, defaulting to 1000 [ 148.854026][ T7740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.053546][T10123] netlink: 'syz.2.1175': attribute type 4 has an invalid length. [ 149.140914][T10095] chnl_net:caif_netlink_parms(): no params data found [ 149.193981][ T7740] bridge_slave_1: left allmulticast mode [ 149.206141][ T7740] bridge_slave_1: left promiscuous mode [ 149.213391][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.233623][ T7740] bridge_slave_0: left allmulticast mode [ 149.242745][ T7740] bridge_slave_0: left promiscuous mode [ 149.271169][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.780757][ T7740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.808958][ T7740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.827534][T10150] netlink: 'syz.3.1181': attribute type 2 has an invalid length. [ 149.841793][T10150] netlink: 'syz.3.1181': attribute type 8 has an invalid length. [ 149.841800][ T7740] bond0 (unregistering): Released all slaves [ 150.144097][T10167] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 150.163321][T10163] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 150.276924][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.291464][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.299005][T10095] bridge_slave_0: entered allmulticast mode [ 150.328216][T10095] bridge_slave_0: entered promiscuous mode [ 150.348122][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.364392][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.378315][T10095] bridge_slave_1: entered allmulticast mode [ 150.410167][T10095] bridge_slave_1: entered promiscuous mode [ 150.643488][ T5835] Bluetooth: hci0: command tx timeout [ 150.668608][T10195] __nla_validate_parse: 5 callbacks suppressed [ 150.668633][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 150.716060][ T54] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 150.762875][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.794348][T10195] 8021q: adding VLAN 0 to HW filter on device bond7 [ 150.805692][T10198] vxcan4: entered allmulticast mode [ 150.817531][T10206] block nbd0: not configured, cannot reconfigure [ 150.830014][T10198] 8021q: adding VLAN 0 to HW filter on device bond7 [ 150.840299][T10198] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 150.869214][T10198] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 150.930784][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.068610][ T7740] hsr_slave_0: left promiscuous mode [ 151.083361][ T7740] hsr_slave_1: left promiscuous mode [ 151.112793][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.122430][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.134602][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.142244][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.194813][ T7740] veth1_macvtap: left promiscuous mode [ 151.200391][ T7740] veth0_macvtap: left promiscuous mode [ 151.214919][ T7740] veth1_vlan: left promiscuous mode [ 151.220276][ T7740] veth0_vlan: left promiscuous mode [ 151.876733][ T7740] team0 (unregistering): Port device team_slave_1 removed [ 151.933100][ T7740] team0 (unregistering): Port device team_slave_0 removed [ 152.477963][T10095] team0: Port device team_slave_0 added [ 152.633994][T10095] team0: Port device team_slave_1 added [ 152.715468][ T54] Bluetooth: hci0: command 0x041b tx timeout [ 152.765347][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.791136][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.845482][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.886282][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.902940][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.937835][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.053073][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1218'. [ 153.073608][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 153.075625][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'. [ 153.097996][T10095] hsr_slave_0: entered promiscuous mode [ 153.113287][T10095] hsr_slave_1: entered promiscuous mode [ 153.137211][T10095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.156409][T10095] Cannot create hsr debugfs directory [ 153.217142][T10282] netlink: 'syz.0.1220': attribute type 1 has an invalid length. [ 153.244847][T10282] netlink: 'syz.0.1220': attribute type 2 has an invalid length. [ 153.322856][T10286] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 153.340676][T10288] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 153.566321][T10300] Unsupported ieee802154 address type: 0 [ 153.860654][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'. [ 153.906139][T10315] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.219891][T10095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.280647][T10333] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 154.293528][T10095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.360856][T10333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.381205][T10095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.420978][T10095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 154.484697][T10332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.492797][T10332] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 154.505494][T10332] bond3: (slave vcan1): Error -95 calling set_mac_address [ 154.667465][T10355] netlink: 'syz.3.1245': attribute type 10 has an invalid length. [ 154.695758][T10355] syz_tun: entered promiscuous mode [ 154.769719][T10355] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 154.794426][ T54] Bluetooth: hci0: command 0x041b tx timeout [ 154.868315][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.908822][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.956986][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.964144][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.028440][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.036025][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.154046][T10095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.353407][T10396] netlink: 'syz.0.1252': attribute type 1 has an invalid length. [ 155.578948][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.746098][T10095] veth0_vlan: entered promiscuous mode [ 155.760367][T10095] veth1_vlan: entered promiscuous mode [ 155.812212][T10095] veth0_macvtap: entered promiscuous mode [ 155.855153][T10095] veth1_macvtap: entered promiscuous mode [ 155.871023][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.881606][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.891525][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.902117][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.912002][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.922603][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.933789][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.943677][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.954360][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.964291][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.975023][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.984916][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.995519][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.006437][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.037546][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 156.080899][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 156.101712][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1258'. [ 156.112604][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1260'. [ 156.113551][T10095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.146984][T10095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.164002][T10095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.172984][T10095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.201591][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'. [ 156.356718][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 156.444119][T10453] IPv6: Can't replace route, no match found [ 156.522093][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.542670][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.602614][T10465] xt_bpf: check failed: parse error [ 156.614142][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.629334][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.722641][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1271'. [ 156.823618][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 156.884456][ T54] Bluetooth: hci0: command 0x041b tx timeout [ 156.923632][T10485] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1274'. [ 156.933238][T10486] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1274'. [ 157.214826][T10500] ip6gre1: entered promiscuous mode [ 157.220529][T10500] ip6gre1: entered allmulticast mode [ 157.260993][T10502] ip6erspan0: entered allmulticast mode [ 157.276229][T10504] tipc: Enabling of bearer rejected, failed to enable media [ 157.416139][T10511] Bluetooth: MGMT ver 1.23 [ 157.425414][T10514] netlink: 'syz.4.1285': attribute type 21 has an invalid length. [ 157.433566][T10514] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.457212][T10514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.464605][T10514] IPv6: NLM_F_CREATE should be set when creating new route [ 157.471898][T10514] IPv6: NLM_F_CREATE should be set when creating new route [ 157.479199][T10514] IPv6: NLM_F_CREATE should be set when creating new route [ 157.525675][T10517] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 157.620828][T10520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.811969][ T7740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.849834][T10522] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 158.159439][ T7740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.422607][T10529] ip6t_srh: unknown srh match flags 536B [ 158.567937][ T7740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.630155][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.651598][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.666062][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.681225][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.694665][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.702123][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.860831][ T7740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.911018][T10552] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 158.979016][T10542]  speed is unknown, defaulting to 1000 [ 158.979317][T10552] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 159.124752][ T7740] bridge_slave_1: left allmulticast mode [ 159.130516][ T7740] bridge_slave_1: left promiscuous mode [ 159.136996][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.147238][ T7740] bridge_slave_0: left allmulticast mode [ 159.153013][ T7740] bridge_slave_0: left promiscuous mode [ 159.159668][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.568895][ T7740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.580998][ T7740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.591246][ T7740] bond0 (unregistering): Released all slaves [ 159.604628][T10566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.868683][T10580] dvmrp1: entered allmulticast mode [ 159.874534][T10581] dvmrp1: left allmulticast mode [ 160.000383][T10584] netlink: 'syz.2.1305': attribute type 4 has an invalid length. [ 160.092472][ T7740] hsr_slave_0: left promiscuous mode [ 160.112076][ T7740] hsr_slave_1: left promiscuous mode [ 160.131986][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.139917][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.155766][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.163606][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.215920][ T7740] veth1_macvtap: left promiscuous mode [ 160.221521][ T7740] veth0_macvtap: left promiscuous mode [ 160.241320][ T7740] veth1_vlan: left promiscuous mode [ 160.247009][ T7740] veth0_vlan: left promiscuous mode [ 160.721984][ T7740] team0 (unregistering): Port device team_slave_1 removed [ 160.772675][ T7740] team0 (unregistering): Port device team_slave_0 removed [ 160.874898][ T5835] Bluetooth: hci0: command tx timeout [ 161.043897][T10610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.402090][T10542] chnl_net:caif_netlink_parms(): no params data found [ 161.643746][T10634] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 161.652950][T10631] veth5: entered allmulticast mode [ 161.672404][T10542] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.684865][T10542] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.702407][T10542] bridge_slave_0: entered allmulticast mode [ 161.713436][T10542] bridge_slave_0: entered promiscuous mode [ 161.741468][T10542] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.770559][T10542] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.782465][T10542] bridge_slave_1: entered allmulticast mode [ 161.800991][T10542] bridge_slave_1: entered promiscuous mode [ 161.881399][T10644] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 161.916444][T10542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.927527][T10640] netlink: 'syz.2.1321': attribute type 4 has an invalid length. [ 161.951554][T10542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.057977][T10542] team0: Port device team_slave_0 added [ 162.074672][T10542] team0: Port device team_slave_1 added [ 162.122327][T10657] __nla_validate_parse: 12 callbacks suppressed [ 162.122354][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1326'. [ 162.141043][T10542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.146076][T10657] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 162.154599][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.154632][T10542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.157779][T10542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.215393][T10659] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 162.220105][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.227752][T10660] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.259541][T10542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.338570][T10542] hsr_slave_0: entered promiscuous mode [ 162.360920][T10542] hsr_slave_1: entered promiscuous mode [ 162.378450][T10542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.394439][T10542] Cannot create hsr debugfs directory [ 162.416399][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 162.517652][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 162.614624][T10675] netlink: 'syz.2.1332': attribute type 12 has an invalid length. [ 162.822221][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 162.916420][T10689] netlink: 'syz.4.1339': attribute type 62 has an invalid length. [ 162.955053][ T5835] Bluetooth: hci0: command tx timeout [ 163.183156][T10542] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.234715][T10542] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.311718][T10542] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.327614][T10542] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.336911][T10714] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1345'. [ 163.498673][T10542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.523529][T10542] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.535365][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.542813][ T7740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.604667][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.611849][ T7740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.778938][T10728] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1348'. [ 163.981212][T10542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.044577][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 164.075866][T10738] Bluetooth: MGMT ver 1.23 [ 164.083975][T10542] veth0_vlan: entered promiscuous mode [ 164.101334][T10542] veth1_vlan: entered promiscuous mode [ 164.157210][T10542] veth0_macvtap: entered promiscuous mode [ 164.177191][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.179087][T10542] veth1_macvtap: entered promiscuous mode [ 164.201146][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.214004][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.226453][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.236122][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 164.245109][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.277463][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.288288][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.299241][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.310222][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.320880][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.332514][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.355788][T10542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.401731][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.413853][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.433109][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.452335][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.464095][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.475701][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.486884][T10542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.509951][T10740]  speed is unknown, defaulting to 1000 [ 164.519429][T10542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.529210][T10542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.539092][T10542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.547962][T10542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.683613][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.694608][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.720864][ T7740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.735144][ T7740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.855633][T10740] chnl_net:caif_netlink_parms(): no params data found [ 164.871106][T10762] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 164.932554][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 164.994045][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.001891][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.011821][T10740] bridge_slave_0: entered allmulticast mode [ 165.019207][T10740] bridge_slave_0: entered promiscuous mode [ 165.027951][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.043459][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.044839][ T54] Bluetooth: hci0: command tx timeout [ 165.050995][T10740] bridge_slave_1: entered allmulticast mode [ 165.068190][T10740] bridge_slave_1: entered promiscuous mode [ 165.106826][T10740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.119511][T10740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.157052][T10740] team0: Port device team_slave_0 added [ 165.169098][T10740] team0: Port device team_slave_1 added [ 165.202551][T10740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.210162][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.237069][T10740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.250318][T10740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.257847][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.285120][T10740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.329947][T10740] hsr_slave_0: entered promiscuous mode [ 165.336833][T10740] hsr_slave_1: entered promiscuous mode [ 165.342981][T10740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.351773][T10740] Cannot create hsr debugfs directory [ 165.455600][T10740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.532863][T10740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.603444][T10740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.656012][T10740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.769850][T10740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.778848][T10740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.789817][T10740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.799720][T10740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.870644][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.887609][T10740] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.899209][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.906403][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.927761][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.934922][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.973698][T10740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.986209][T10740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.155317][T10740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.212033][T10740] veth0_vlan: entered promiscuous mode [ 166.233684][T10740] veth1_vlan: entered promiscuous mode [ 166.258803][T10740] veth0_macvtap: entered promiscuous mode [ 166.272830][T10740] veth1_macvtap: entered promiscuous mode [ 166.291302][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.311253][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.324380][ T54] Bluetooth: hci3: command tx timeout [ 166.333354][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.344109][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.355090][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.366011][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.376759][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.388034][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.399592][T10740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.412770][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.424107][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.434121][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.445247][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.455156][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.465872][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.477230][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.489058][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.500098][T10740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.513656][T10740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.522662][T10740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.531667][T10740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.541066][T10740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.609715][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.624754][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.646784][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.655233][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.262349][T10791] tipc: Started in network mode [ 167.268018][T10791] tipc: Node identity 56eee5cc6112, cluster identity 4711 [ 167.276389][T10791] tipc: Enabled bearer , priority 7 [ 167.290809][T10791] ªªªªªª: renamed from syzkaller0 [ 167.296951][T10791] tipc: Disabling bearer [ 167.304123][T10791] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1365'. [ 167.391390][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 167.628245][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 167.677051][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 167.688354][T10808] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 167.700633][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 167.710724][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'. [ 168.404116][ T7740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.640832][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.656748][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.665422][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.680062][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.687945][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 168.699377][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.731300][T10824]  speed is unknown, defaulting to 1000 [ 168.833042][T10824] chnl_net:caif_netlink_parms(): no params data found [ 168.930863][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.939684][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.948121][T10824] bridge_slave_0: entered allmulticast mode [ 168.967844][T10824] bridge_slave_0: entered promiscuous mode [ 168.976690][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.983913][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.995411][T10824] bridge_slave_1: entered allmulticast mode [ 169.011895][T10824] bridge_slave_1: entered promiscuous mode [ 169.060878][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.077189][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.138935][T10824] team0: Port device team_slave_0 added [ 169.149116][T10824] team0: Port device team_slave_1 added [ 169.185189][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.192190][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.220515][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.236497][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.243572][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.270858][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.346343][T10824] hsr_slave_0: entered promiscuous mode [ 169.352913][T10824] hsr_slave_1: entered promiscuous mode [ 169.362285][T10824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.370409][T10824] Cannot create hsr debugfs directory [ 169.379627][T10844] geneve2: entered promiscuous mode [ 169.385594][T10844] geneve2: entered allmulticast mode [ 169.392061][T10844] bridge3: port 1(geneve2) entered blocking state [ 169.398814][T10844] bridge3: port 1(geneve2) entered disabled state [ 169.502239][T10846] netlink: 'syz.0.1381': attribute type 29 has an invalid length. [ 169.513145][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 169.785132][ T7740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.816915][T10856] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 169.877592][ T7740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.943551][ T7740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.972743][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'. [ 169.986164][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 170.089381][ T7740] bridge_slave_1: left allmulticast mode [ 170.095365][ T7740] bridge_slave_1: left promiscuous mode [ 170.101081][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.109940][ T7740] bridge_slave_0: left allmulticast mode [ 170.116320][ T7740] bridge_slave_0: left promiscuous mode [ 170.122145][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.485233][ T7740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.497591][ T7740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.507842][ T7740] bond0 (unregistering): Released all slaves [ 170.714886][ T5838] Bluetooth: hci3: command tx timeout [ 170.863260][ T7740] hsr_slave_0: left promiscuous mode [ 170.872177][ T7740] hsr_slave_1: left promiscuous mode [ 170.903741][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.911607][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.931170][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.938882][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.964586][ T7740] veth1_macvtap: left promiscuous mode [ 170.970293][ T7740] veth0_macvtap: left promiscuous mode [ 170.976059][ T7740] veth1_vlan: left promiscuous mode [ 170.981671][ T7740] veth0_vlan: left promiscuous mode [ 171.502044][ T7740] team0 (unregistering): Port device team_slave_1 removed [ 171.558954][ T7740] team0 (unregistering): Port device team_slave_0 removed [ 172.073400][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 172.171469][T10824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.188839][T10824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.208900][T10824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.254996][T10824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.359065][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.380794][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.394122][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.401315][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.430890][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.438071][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.681099][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.730257][T10824] veth0_vlan: entered promiscuous mode [ 172.741633][T10824] veth1_vlan: entered promiscuous mode [ 172.772633][T10824] veth0_macvtap: entered promiscuous mode [ 172.791535][T10824] veth1_macvtap: entered promiscuous mode [ 172.797785][ T5838] Bluetooth: hci3: command tx timeout [ 172.812308][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.823172][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.833356][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.843961][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.854086][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.864683][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.874908][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.885852][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.897212][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.909799][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.920814][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.932210][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.943074][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.952961][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.963850][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.974371][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.985249][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.996239][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.010724][T10824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.019613][T10824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.028703][T10824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.037890][T10824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.048345][T10917] netlink: 'syz.0.1402': attribute type 2 has an invalid length. [ 173.137245][ T7742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.148533][ T7742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.179767][ T7742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.188154][ T7742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.361996][T10927] tipc: Enabling not permitted [ 173.369363][T10927] tipc: Enabling of bearer rejected, failed to enable media [ 173.506453][T10933] netlink: 'syz.0.1409': attribute type 3 has an invalid length. [ 173.521702][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 174.311233][T10978] netlink: 'syz.0.1424': attribute type 11 has an invalid length. [ 174.426175][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'. [ 174.435537][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'. [ 174.838620][ T7740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.098197][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.111227][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.120838][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.130910][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.139986][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.147772][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.177750][T10999]  speed is unknown, defaulting to 1000 [ 175.290025][T10999] chnl_net:caif_netlink_parms(): no params data found [ 175.342218][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.349512][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.357503][T10999] bridge_slave_0: entered allmulticast mode [ 175.365251][T10999] bridge_slave_0: entered promiscuous mode [ 175.376037][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.384035][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.391658][T10999] bridge_slave_1: entered allmulticast mode [ 175.398896][T10999] bridge_slave_1: entered promiscuous mode [ 175.422935][T10999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.437129][T10999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.495180][T10999] team0: Port device team_slave_0 added [ 175.523620][T10999] team0: Port device team_slave_1 added [ 175.544033][T11011] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.1431'. [ 175.554001][T11011] openvswitch: netlink: Flow key attr not present in new flow. [ 175.564523][T11011] netlink: 'syz.0.1431': attribute type 10 has an invalid length. [ 175.575088][T11011] hsr0: entered promiscuous mode [ 175.582644][T11011] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 175.593031][T11011] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 175.606899][T11011] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 175.614896][T10999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.621883][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.648260][T10999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.662127][T10999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.669501][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.696748][T10999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.723232][T11016] xt_ipcomp: unknown flags B [ 175.751484][T10999] hsr_slave_0: entered promiscuous mode [ 175.760710][T10999] hsr_slave_1: entered promiscuous mode [ 175.776875][T10999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.793214][T10999] Cannot create hsr debugfs directory [ 175.878822][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 175.902575][T11020] netlink: 'syz.0.1434': attribute type 10 has an invalid length. [ 175.917364][T11020] syz_tun: entered promiscuous mode [ 175.928631][T11020] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 176.005354][ T5913] IPVS: starting estimator thread 0... [ 176.011446][T11020] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.094498][T11022] IPVS: using max 38 ests per chain, 91200 per kthread [ 176.255634][T11029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1436'. [ 176.500356][ T7740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.571772][ T7740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.637924][ T7740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.748721][ T7740] bridge_slave_1: left allmulticast mode [ 176.755377][ T7740] bridge_slave_1: left promiscuous mode [ 176.762048][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.773510][ T7740] bridge_slave_0: left allmulticast mode [ 176.779572][ T7740] bridge_slave_0: left promiscuous mode [ 176.788531][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.154926][T11032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1437'. [ 177.166431][T11032] netlink: 'syz.0.1437': attribute type 7 has an invalid length. [ 177.176326][T11032] netlink: 'syz.0.1437': attribute type 8 has an invalid length. [ 177.185860][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 177.204849][ T54] Bluetooth: hci3: command tx timeout [ 177.300019][ T7740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.319602][ T7740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.339326][ T7740] bond0 (unregistering): Released all slaves [ 177.368937][T11032] erspan0: entered promiscuous mode [ 177.377518][T11032] batadv_slave_1: entered promiscuous mode [ 177.387801][T11032] gretap0: entered promiscuous mode [ 177.399084][T11032] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 177.409314][T11032] Cannot create hsr debugfs directory [ 177.652820][T11037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.697438][ T7740] hsr_slave_0: left promiscuous mode [ 177.703449][ T7740] hsr_slave_1: left promiscuous mode [ 177.724592][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.732072][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.745126][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.752587][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.810280][ T7740] veth1_macvtap: left promiscuous mode [ 177.825405][ T7740] veth0_macvtap: left promiscuous mode [ 177.831184][ T7740] veth1_vlan: left promiscuous mode [ 177.841281][ T7740] veth0_vlan: left promiscuous mode [ 178.463516][ T7740] team0 (unregistering): Port device team_slave_1 removed [ 178.518095][ T7740] team0 (unregistering): Port device team_slave_0 removed [ 179.188060][T10999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.225067][T10999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.251413][T10999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.275950][ T54] Bluetooth: hci3: command tx timeout [ 179.293469][T10999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.506436][T11052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'. [ 179.572572][T10999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.586649][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.597580][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.607198][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.616380][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.623998][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.631632][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.657383][T10999] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.684557][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.691771][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.725953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.733181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.792407][T10999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.801009][T11059] xt_nfacct: accounting object `syz1' does not exists [ 179.812526][T11054]  speed is unknown, defaulting to 1000 [ 180.060458][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.098758][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.114626][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.118381][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.168964][T11054] chnl_net:caif_netlink_parms(): no params data found [ 180.180494][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.195692][ T5838] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 180.217598][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.233017][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1449'. [ 180.293415][T10999] veth0_vlan: entered promiscuous mode [ 180.336765][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.346484][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.356648][T11054] bridge_slave_0: entered allmulticast mode [ 180.366969][T11054] bridge_slave_0: entered promiscuous mode [ 180.377233][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.386083][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.396253][T11054] bridge_slave_1: entered allmulticast mode [ 180.406316][T11054] bridge_slave_1: entered promiscuous mode [ 180.462296][T11068]  speed is unknown, defaulting to 1000 [ 180.466990][T10999] veth1_vlan: entered promiscuous mode [ 180.500983][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.515751][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.583523][T11054] team0: Port device team_slave_0 added [ 180.624497][T11054] team0: Port device team_slave_1 added [ 180.660374][T11054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.667873][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.695140][T11054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.720216][T11054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.727351][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.759240][T11054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.779798][T11085] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1452'. [ 180.789514][T11085] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1452'. [ 180.852823][T10999] veth0_macvtap: entered promiscuous mode [ 180.911434][T10999] veth1_macvtap: entered promiscuous mode [ 180.928263][T11054] hsr_slave_0: entered promiscuous mode [ 180.938197][T11054] hsr_slave_1: entered promiscuous mode [ 180.945118][T11054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.945128][T11088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1453'. [ 180.966404][T11054] Cannot create hsr debugfs directory [ 180.985633][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.996845][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.024382][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.049293][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.059576][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.070300][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.080342][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.090988][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.102433][T10999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.166985][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.182235][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.194031][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.204959][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.215674][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.227041][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.238136][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.248667][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.261228][T10999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.263757][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 181.270341][T11068] chnl_net:caif_netlink_parms(): no params data found [ 181.306452][T10999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.310213][T11095] netlink: 'syz.0.1455': attribute type 1 has an invalid length. [ 181.315467][T10999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.315505][T10999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.315532][T10999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.354939][ T54] Bluetooth: hci3: command tx timeout [ 181.457947][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.465610][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.472893][T11068] bridge_slave_0: entered allmulticast mode [ 181.480508][T11068] bridge_slave_0: entered promiscuous mode [ 181.504747][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.511976][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.522653][T11068] bridge_slave_1: entered allmulticast mode [ 181.531914][T11068] bridge_slave_1: entered promiscuous mode [ 181.619372][T11068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.648394][T11068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.657694][T11054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.674824][ T54] Bluetooth: hci5: command tx timeout [ 181.685273][T11054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.692131][ T7740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.702968][T11054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.714377][ T7740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.738053][T11054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.773651][ T7362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.783322][ T7362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.785606][T11068] team0: Port device team_slave_0 added [ 181.800375][T11068] team0: Port device team_slave_1 added [ 181.832361][T11068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.839861][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.866285][T11068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.895752][T11068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.902725][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.929381][T11068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.987740][T11068] hsr_slave_0: entered promiscuous mode [ 181.998292][T11068] hsr_slave_1: entered promiscuous mode [ 182.007154][T11068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.014940][T11068] Cannot create hsr debugfs directory [ 182.234802][ T54] Bluetooth: hci6: command tx timeout [ 182.243639][T11104] tap0: tun_chr_ioctl cmd 1074025675 [ 182.249330][T11104] tap0: persist disabled [ 182.314048][T11054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.352341][T11068] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.378835][T11054] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.410307][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.417491][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.435460][T11068] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.462474][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.469643][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.482259][T11068] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.492531][T11068] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.541449][T11054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.561248][T11054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.709226][T11068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.733694][T11068] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.759657][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.766806][ T7740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.791185][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.798417][ T7740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.821634][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.832405][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 183.106658][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.257316][ T7742] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.382382][ T7742] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.432887][T11054] veth0_vlan: entered promiscuous mode [ 183.456010][T11054] veth1_vlan: entered promiscuous mode [ 183.498992][ T7742] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.552386][T11054] veth0_macvtap: entered promiscuous mode [ 183.593753][ T7742] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.615622][T11054] veth1_macvtap: entered promiscuous mode [ 183.636799][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.657029][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.669488][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.684005][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.704288][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.716548][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.730538][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.742949][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.753000][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.763847][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.775226][T11054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.783480][ T54] Bluetooth: hci5: command tx timeout [ 183.866151][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.896500][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.924261][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.944325][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.965689][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.984282][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.003009][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.024966][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.044284][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.065397][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.077130][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.086796][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.093897][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.105581][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.113302][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 184.121418][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.129703][T11054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.215463][T11054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.231813][T11054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.254389][T11054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.263163][T11054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.307940][T11068] veth0_vlan: entered promiscuous mode [ 184.332594][ T5838] Bluetooth: hci6: command tx timeout [ 184.344377][ T7742] bridge_slave_1: left allmulticast mode [ 184.350099][ T7742] bridge_slave_1: left promiscuous mode [ 184.356838][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.369598][ T7742] bridge_slave_0: left allmulticast mode [ 184.376014][ T7742] bridge_slave_0: left promiscuous mode [ 184.382708][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.768281][ T7742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.779888][ T7742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.790384][ T7742] bond0 (unregistering): Released all slaves [ 184.832978][T11068] veth1_vlan: entered promiscuous mode [ 184.853078][T11140]  speed is unknown, defaulting to 1000 [ 184.998072][T11068] veth0_macvtap: entered promiscuous mode [ 185.079618][ T7740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.091706][T11068] veth1_macvtap: entered promiscuous mode [ 185.115036][ T7740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.181001][ T7742] hsr_slave_0: left promiscuous mode [ 185.190787][ T7742] hsr_slave_1: left promiscuous mode [ 185.200868][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.209270][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.221750][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.229556][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.252570][ T7742] veth1_macvtap: left promiscuous mode [ 185.258331][ T7742] veth0_macvtap: left promiscuous mode [ 185.263911][ T7742] veth1_vlan: left promiscuous mode [ 185.269570][ T7742] veth0_vlan: left promiscuous mode [ 185.759977][ T7742] team0 (unregistering): Port device team_slave_1 removed [ 185.806434][ T7742] team0 (unregistering): Port device team_slave_0 removed [ 185.834817][ T5838] Bluetooth: hci5: command tx timeout [ 186.238027][ T5838] Bluetooth: hci3: command tx timeout [ 186.341211][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.352761][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.381004][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.392604][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.414376][ T5838] Bluetooth: hci6: command tx timeout [ 186.414413][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 186.419818][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 186.426002][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 186.444539][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.448469][T11156] netlink: 'syz.0.1468': attribute type 2 has an invalid length. [ 186.465929][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.476395][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.487475][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.497451][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.507950][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.517955][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.529798][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.546766][T11068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.595768][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.606458][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.616959][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.627583][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.638079][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.657453][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.680456][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.691268][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.701409][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.711906][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.723065][T11068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.732470][T11140] chnl_net:caif_netlink_parms(): no params data found [ 186.799239][T11068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.811902][T11068] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.821956][T11068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.830978][T11068] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.011636][T11140] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.013626][T11166] netlink: 'syz.5.1442': attribute type 3 has an invalid length. [ 187.025069][T11140] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.034001][T11140] bridge_slave_0: entered allmulticast mode [ 187.055037][T11140] bridge_slave_0: entered promiscuous mode [ 187.094130][T11140] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.107936][T11140] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.116585][T11140] bridge_slave_1: entered allmulticast mode [ 187.132690][T11140] bridge_slave_1: entered promiscuous mode [ 187.211746][ T7740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.228111][ T7740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.239106][T11140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.253592][T11140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.310130][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.320974][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.355783][T11140] team0: Port device team_slave_0 added [ 187.432172][T11140] team0: Port device team_slave_1 added [ 187.479551][T11140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.501466][T11140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.531922][T11140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.545656][T11140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.553038][T11140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.580356][T11140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.614934][T11180] veth5: entered allmulticast mode [ 187.683824][T11140] hsr_slave_0: entered promiscuous mode [ 187.693514][T11140] hsr_slave_1: entered promiscuous mode [ 187.718098][T11140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.726342][T11140] Cannot create hsr debugfs directory [ 187.765680][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 187.796222][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 187.915301][ T5833] Bluetooth: hci5: command tx timeout [ 187.942823][T11203] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1480'. [ 188.324556][ T5833] Bluetooth: hci3: command tx timeout [ 188.475845][ T5833] Bluetooth: hci6: command tx timeout [ 188.501787][T11228] workqueue: name exceeds WQ_NAME_LEN. Truncating to: þÜ»}ÆÓžäءÑV§ïj×ì·Pbôõ=Ì [ 188.558788][T11140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.620719][T11140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.653304][T11140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.678108][T11140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.864051][T11140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.908656][T11248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1491'. [ 188.932546][T11140] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.960442][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.967666][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.005699][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.012907][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.113271][T11252] team0: Device wg2 is of different type [ 189.285506][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1495'. [ 189.299114][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1495'. [ 189.320998][T11263] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1497'. [ 189.338408][T11263] netlink: 'syz.0.1497': attribute type 9 has an invalid length. [ 189.348415][T11268] netlink: 'syz.6.1496': attribute type 9 has an invalid length. [ 189.396267][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1497'. [ 189.500184][T11140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.552193][T11140] veth0_vlan: entered promiscuous mode [ 189.564080][T11140] veth1_vlan: entered promiscuous mode [ 189.599490][T11140] veth0_macvtap: entered promiscuous mode [ 189.609431][T11140] veth1_macvtap: entered promiscuous mode [ 189.628455][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.639288][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.649312][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.659830][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.669784][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.680494][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.690429][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.700978][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.710965][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.721941][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.732233][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.742782][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.753896][T11140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.807204][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.830575][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.851980][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.867392][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.877661][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.888889][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.898804][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.909687][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.926904][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.937886][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.948218][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.958762][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.970792][T11140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.984742][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1502'. [ 190.047480][T11140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.073315][T11140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.101511][T11140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.112583][T11140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.289063][T11300] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1507'. [ 190.299763][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.323612][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.376869][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.393695][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.401643][ T5833] Bluetooth: hci3: command tx timeout [ 190.621201][T11316] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 190.630430][T11316] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 190.641879][T11316] netlink: 'syz.0.1513': attribute type 13 has an invalid length. [ 190.650609][T11316] netlink: 'syz.0.1513': attribute type 58 has an invalid length. [ 190.743758][T11320] bridge0: port 3(hsr_slave_1) entered blocking state [ 190.756535][T11320] bridge0: port 3(hsr_slave_1) entered disabled state [ 190.764050][T11320] hsr_slave_1: entered allmulticast mode [ 190.771772][T11320] hsr_slave_1: left allmulticast mode [ 190.893343][T11330] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 191.043414][T11338] IPv6: Can't replace route, no match found [ 191.276308][T11350] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 191.317318][T11350] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 191.542954][T11366] openvswitch: netlink: Missing key (keys=40, expected=80) [ 191.558073][T11366] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 191.773471][T11378]  speed is unknown, defaulting to 1000 [ 192.206067][T11396] team0: No ports can be present during mode change [ 192.449165][ T7740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.278764][T11421] vlan0: entered promiscuous mode [ 193.317013][T11421] team0: Device vlan0 is already an upper device of the team interface [ 193.369787][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.381382][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.403467][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.423233][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.454587][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.461974][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.526403][ T7740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.662141][ T7740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.728212][T11424]  speed is unknown, defaulting to 1000 [ 193.793025][ T7740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.100227][ T7740] bridge_slave_1: left allmulticast mode [ 194.106743][ T7740] bridge_slave_1: left promiscuous mode [ 194.112539][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.128582][ T7740] bridge_slave_0: left allmulticast mode [ 194.144653][ T7740] bridge_slave_0: left promiscuous mode [ 194.150663][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.231287][T11467] __nla_validate_parse: 6 callbacks suppressed [ 194.231317][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'. [ 194.564478][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.571937][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.619059][ T7740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.632120][ T7740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.643904][ T7740] bond0 (unregistering): Released all slaves [ 194.656955][T11462] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 194.665457][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1557'. [ 194.691681][T11424] chnl_net:caif_netlink_parms(): no params data found [ 194.816485][T11479] netlink: 'syz.5.1560': attribute type 1 has an invalid length. [ 194.834446][T11479] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1560'. [ 194.966602][T11424] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.994815][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.020774][T11424] bridge_slave_0: entered allmulticast mode [ 195.029350][T11424] bridge_slave_0: entered promiscuous mode [ 195.135945][T11424] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.148105][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.159830][T11424] bridge_slave_1: entered allmulticast mode [ 195.170412][T11424] bridge_slave_1: entered promiscuous mode [ 195.194113][T11495] netlink: 'syz.6.1566': attribute type 4 has an invalid length. [ 195.238899][ T7740] hsr_slave_0: left promiscuous mode [ 195.252700][ T7740] hsr_slave_1: left promiscuous mode [ 195.259266][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.270146][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.279194][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.287629][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.321545][ T7740] veth1_macvtap: left promiscuous mode [ 195.330429][ T7740] veth0_macvtap: left promiscuous mode [ 195.339364][ T7740] veth1_vlan: left promiscuous mode [ 195.348313][ T7740] veth0_vlan: left promiscuous mode [ 195.524634][ T5848] Bluetooth: hci3: command tx timeout [ 195.916767][ T7740] team0 (unregistering): Port device team_slave_1 removed [ 195.987638][ T7740] team0 (unregistering): Port device team_slave_0 removed [ 196.514140][T11424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.527355][T11503] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 196.560622][T11508] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 196.577793][T11508] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 196.594367][T11508] gretap1: entered promiscuous mode [ 196.604441][T11508] gretap1: entered allmulticast mode [ 196.617504][T11424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.822459][T11424] team0: Port device team_slave_0 added [ 196.850733][T11514] bond0: (slave syz_tun): Releasing backup interface [ 196.877285][T11514] bridge_slave_0: left allmulticast mode [ 196.886616][T11514] bridge_slave_0: left promiscuous mode [ 196.895936][T11514] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.910009][T11514] bridge_slave_1: left allmulticast mode [ 196.917290][T11514] bridge_slave_1: left promiscuous mode [ 196.923762][T11514] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.936280][T11514] bond0: (slave bond_slave_0): Releasing backup interface [ 196.962908][T11514] bond0: (slave bond_slave_1): Releasing backup interface [ 196.992526][T11514] team0: Port device team_slave_0 removed [ 197.010500][T11514] team0: Port device team_slave_1 removed [ 197.019037][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.028858][T11514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.038640][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.048764][T11514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.063930][T11514] bond0: (slave bond2): Releasing backup interface [ 197.082613][T11514] bond3: (slave ip6gretap1): Removing an active aggregator [ 197.092607][ T35] bond3: Warning: Found an uninitialized port [ 197.100308][T11514] bond3: (slave ip6gretap1): Releasing backup interface [ 197.125689][T11514] bond4: (slave batadv1): Releasing active interface [ 197.142284][T11514] bridge3: port 1(geneve2) entered disabled state [ 197.156163][T11424] team0: Port device team_slave_1 added [ 197.206737][T11523] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 197.207298][T11515] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 197.376809][T11531] syzkaller1: entered promiscuous mode [ 197.392896][T11531] syzkaller1: entered allmulticast mode [ 197.424644][T11541] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 (while UP) [ 197.449456][T11424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.453315][T11541] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 197.464551][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.525736][T11424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.564124][T11424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.571989][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.598160][ T5848] Bluetooth: hci3: command tx timeout [ 197.639540][T11424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.703725][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1580'. [ 197.746706][T11424] hsr_slave_0: entered promiscuous mode [ 197.775858][T11424] hsr_slave_1: entered promiscuous mode [ 197.797808][T11424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.807586][T11424] Cannot create hsr debugfs directory [ 197.822016][ T908] IPVS: starting estimator thread 0... [ 197.915440][T11558] IPVS: using max 28 ests per chain, 67200 per kthread [ 197.953915][T11566] netlink: 'syz.6.1584': attribute type 18 has an invalid length. [ 197.959676][T11564] .: renamed from bond0 (while UP) [ 197.980401][T11566] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.989300][T11566] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.998308][T11566] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.007223][T11566] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.055002][T11566] sctp: [Deprecated]: syz.6.1584 (pid 11566) Use of int in max_burst socket option. [ 198.055002][T11566] Use struct sctp_assoc_value instead [ 198.336137][T11578] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1588'. [ 198.380983][T11578] vlan0: entered allmulticast mode [ 198.644671][T11587]  speed is unknown, defaulting to 1000 [ 198.695398][T11424] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.735526][T11424] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.757175][T11424] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.784906][T11424] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.967037][T11424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.008908][T11424] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.058778][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.065998][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.106845][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.113961][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.292776][T11588]  speed is unknown, defaulting to 1000 [ 199.573527][T11614]  speed is unknown, defaulting to 1000 [ 199.600627][T11424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.679962][ T5848] Bluetooth: hci3: command tx timeout [ 199.849976][T11424] veth0_vlan: entered promiscuous mode [ 199.869676][T11424] veth1_vlan: entered promiscuous mode [ 199.913638][T11424] veth0_macvtap: entered promiscuous mode [ 199.925979][T11424] veth1_macvtap: entered promiscuous mode [ 200.078514][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.124377][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.153896][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.183187][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.214613][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.247106][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.264915][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.275573][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.285525][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.296158][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.307253][T11424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.321105][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.331666][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.341593][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.352213][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.362135][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.373147][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.383822][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.394731][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.404919][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.415639][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.427359][T11424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.486844][T11424] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.514363][T11424] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.523797][T11424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.564658][T11424] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.692015][T11631] netlink: 'syz.5.1602': attribute type 3 has an invalid length. [ 200.891368][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.914392][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.998930][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.029477][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.371980][T11652]  speed is unknown, defaulting to 1000 [ 201.482031][T11659] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1609'. [ 201.751177][T11672] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1614'. [ 201.785859][T11672] NCSI netlink: No device for ifindex 0 [ 201.874735][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1615'. [ 201.921790][T11681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1616'. [ 201.996403][T11683] syz.5.1617[11683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.385187][ T1077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.960790][ T1077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.087793][T11710] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1625'. [ 203.254929][ T1077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.363883][ T1077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.519318][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.537671][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.557959][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.568679][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.577573][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.592782][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.621465][T10734] ================================================================== [ 203.629572][T10734] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 203.637868][T10734] Read of size 8 at addr ffff888031219858 by task syz.3.1352/10734 [ 203.645794][T10734] [ 203.648145][T10734] CPU: 0 UID: 0 PID: 10734 Comm: syz.3.1352 Not tainted 6.13.0-rc5-syzkaller-00162-gf552b3037d0c #0 [ 203.658923][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.668999][T10734] Call Trace: [ 203.672304][T10734] [ 203.675261][T10734] dump_stack_lvl+0x241/0x360 [ 203.679969][T10734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.685191][T10734] ? __pfx__printk+0x10/0x10 [ 203.689822][T10734] ? _printk+0xd5/0x120 [ 203.694003][T10734] ? __virt_addr_valid+0x183/0x530 [ 203.699144][T10734] ? __virt_addr_valid+0x183/0x530 [ 203.704279][T10734] print_report+0x169/0x550 [ 203.708817][T10734] ? __virt_addr_valid+0x183/0x530 [ 203.714049][T10734] ? __virt_addr_valid+0x183/0x530 [ 203.719190][T10734] ? __virt_addr_valid+0x45f/0x530 [ 203.724424][T10734] ? __phys_addr+0xba/0x170 [ 203.728950][T10734] ? skb_queue_purge_reason+0xb9/0x500 [ 203.734437][T10734] kasan_report+0x143/0x180 [ 203.738998][T10734] ? skb_queue_purge_reason+0xb9/0x500 [ 203.744499][T10734] skb_queue_purge_reason+0xb9/0x500 [ 203.749816][T10734] ? mark_lock+0x9a/0x360 [ 203.754158][T10734] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 203.760143][T10734] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 203.765827][T10734] ? drain_workqueue+0x2d3/0x3a0 [ 203.770761][T10734] vhci_flush+0x44/0x50 [ 203.774925][T10734] ? __pfx_vhci_flush+0x10/0x10 [ 203.779777][T10734] hci_dev_reset+0x42a/0x5d0 [ 203.784365][T10734] sock_do_ioctl+0x158/0x460 [ 203.788957][T10734] ? __pfx_sock_do_ioctl+0x10/0x10 [ 203.794074][T10734] sock_ioctl+0x626/0x8e0 [ 203.798401][T10734] ? __pfx_sock_ioctl+0x10/0x10 [ 203.803247][T10734] ? __fget_files+0x2a/0x410 [ 203.807841][T10734] ? __fget_files+0x2a/0x410 [ 203.812512][T10734] ? __pfx_sock_ioctl+0x10/0x10 [ 203.817361][T10734] __se_sys_ioctl+0xf5/0x170 [ 203.821951][T10734] do_syscall_64+0xf3/0x230 [ 203.826458][T10734] ? clear_bhb_loop+0x35/0x90 [ 203.831134][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.837029][T10734] RIP: 0033:0x7f8305785d29 [ 203.841483][T10734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.861095][T10734] RSP: 002b:00007f8306501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.869516][T10734] RAX: ffffffffffffffda RBX: 00007f8305975fa0 RCX: 00007f8305785d29 [ 203.877493][T10734] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000006 [ 203.885462][T10734] RBP: 00007f8305801b08 R08: 0000000000000000 R09: 0000000000000000 [ 203.893426][T10734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.901390][T10734] R13: 0000000000000000 R14: 00007f8305975fa0 R15: 00007ffe5f0b9298 [ 203.909365][T10734] [ 203.912376][T10734] [ 203.914689][T10734] Allocated by task 10542: [ 203.919098][T10734] kasan_save_track+0x3f/0x80 [ 203.923773][T10734] __kasan_kmalloc+0x98/0xb0 [ 203.928446][T10734] __kmalloc_cache_noprof+0x243/0x390 [ 203.933816][T10734] vhci_open+0x57/0x360 [ 203.937967][T10734] misc_open+0x2cc/0x340 [ 203.942203][T10734] chrdev_open+0x521/0x600 [ 203.946616][T10734] do_dentry_open+0xbe1/0x1b70 [ 203.951378][T10734] vfs_open+0x3e/0x330 [ 203.955443][T10734] path_openat+0x2c84/0x3590 [ 203.960023][T10734] do_filp_open+0x27f/0x4e0 [ 203.964519][T10734] do_sys_openat2+0x13e/0x1d0 [ 203.969197][T10734] __x64_sys_openat+0x247/0x2a0 [ 203.974043][T10734] do_syscall_64+0xf3/0x230 [ 203.978566][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.984474][T10734] [ 203.986797][T10734] Freed by task 10542: [ 203.990852][T10734] kasan_save_track+0x3f/0x80 [ 203.995528][T10734] kasan_save_free_info+0x40/0x50 [ 204.000546][T10734] __kasan_slab_free+0x59/0x70 [ 204.005302][T10734] kfree+0x196/0x430 [ 204.009280][T10734] vhci_release+0xbc/0xd0 [ 204.013615][T10734] __fput+0x23c/0xa50 [ 204.017591][T10734] task_work_run+0x24f/0x310 [ 204.022182][T10734] do_exit+0xa2a/0x28e0 [ 204.026333][T10734] do_group_exit+0x207/0x2c0 [ 204.030919][T10734] __x64_sys_exit_group+0x3f/0x40 [ 204.035941][T10734] x64_sys_call+0x26a8/0x26b0 [ 204.040610][T10734] do_syscall_64+0xf3/0x230 [ 204.045111][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.051091][T10734] [ 204.053412][T10734] The buggy address belongs to the object at ffff888031219800 [ 204.053412][T10734] which belongs to the cache kmalloc-1k of size 1024 [ 204.067462][T10734] The buggy address is located 88 bytes inside of [ 204.067462][T10734] freed 1024-byte region [ffff888031219800, ffff888031219c00) [ 204.081272][T10734] [ 204.083590][T10734] The buggy address belongs to the physical page: [ 204.089997][T10734] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31218 [ 204.098759][T10734] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 204.107271][T10734] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 204.114818][T10734] page_type: f5(slab) [ 204.118798][T10734] raw: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 204.127378][T10734] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 204.135981][T10734] head: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 204.144651][T10734] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 204.153338][T10734] head: 00fff00000000003 ffffea0000c48601 ffffffffffffffff 0000000000000000 [ 204.162028][T10734] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 204.170798][T10734] page dumped because: kasan: bad access detected [ 204.177228][T10734] page_owner tracks the page as allocated [ 204.182939][T10734] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5743, tgid 5743 (dhcpcd-run-hook), ts 50967385240, free_ts 50943136534 [ 204.204655][T10734] post_alloc_hook+0x1f3/0x230 [ 204.209433][T10734] get_page_from_freelist+0x365c/0x37a0 [ 204.215004][T10734] __alloc_pages_noprof+0x292/0x710 [ 204.220193][T10734] alloc_pages_mpol_noprof+0x3e8/0x680 [ 204.225677][T10734] alloc_slab_page+0x6a/0x110 [ 204.230458][T10734] allocate_slab+0x5a/0x2b0 [ 204.235060][T10734] ___slab_alloc+0xc27/0x14a0 [ 204.239735][T10734] __slab_alloc+0x58/0xa0 [ 204.244184][T10734] __kmalloc_noprof+0x2e6/0x4c0 [ 204.249583][T10734] load_elf_binary+0x2eb/0x2770 [ 204.254801][T10734] bprm_execve+0xaf5/0x17a0 [ 204.259421][T10734] do_execveat_common+0x55f/0x6f0 [ 204.264633][T10734] __x64_sys_execve+0x92/0xb0 [ 204.269488][T10734] do_syscall_64+0xf3/0x230 [ 204.274086][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.280072][T10734] page last free pid 5740 tgid 5740 stack trace: [ 204.286588][T10734] free_unref_page+0xd3f/0x1010 [ 204.291647][T10734] __put_partials+0x160/0x1c0 [ 204.296348][T10734] put_cpu_partial+0x17c/0x250 [ 204.301129][T10734] __slab_free+0x290/0x380 [ 204.305571][T10734] qlist_free_all+0x9a/0x140 [ 204.310187][T10734] kasan_quarantine_reduce+0x14f/0x170 [ 204.315729][T10734] __kasan_slab_alloc+0x23/0x80 [ 204.320574][T10734] kmem_cache_alloc_noprof+0x1d9/0x380 [ 204.326049][T10734] getname_flags+0xb7/0x540 [ 204.330566][T10734] vfs_fstatat+0x3f/0x130 [ 204.334943][T10734] __x64_sys_newfstatat+0x11d/0x1a0 [ 204.340150][T10734] do_syscall_64+0xf3/0x230 [ 204.344658][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.350724][T10734] [ 204.353054][T10734] Memory state around the buggy address: [ 204.358712][T10734] ffff888031219700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 204.366789][T10734] ffff888031219780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 204.374882][T10734] >ffff888031219800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.382939][T10734] ^ [ 204.389866][T10734] ffff888031219880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.397916][T10734] ffff888031219900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.405974][T10734] ================================================================== [ 204.420484][T10734] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 204.427728][T10734] CPU: 1 UID: 0 PID: 10734 Comm: syz.3.1352 Not tainted 6.13.0-rc5-syzkaller-00162-gf552b3037d0c #0 [ 204.438487][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 204.448585][T10734] Call Trace: [ 204.451867][T10734] [ 204.454814][T10734] dump_stack_lvl+0x241/0x360 [ 204.459494][T10734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.464704][T10734] ? __pfx__printk+0x10/0x10 [ 204.469296][T10734] ? preempt_schedule+0xe1/0xf0 [ 204.474141][T10734] ? vscnprintf+0x5d/0x90 [ 204.478474][T10734] panic+0x349/0x880 [ 204.482369][T10734] ? check_panic_on_warn+0x21/0xb0 [ 204.487481][T10734] ? __pfx_panic+0x10/0x10 [ 204.491898][T10734] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 204.497875][T10734] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 204.504208][T10734] ? print_report+0x502/0x550 [ 204.508890][T10734] check_panic_on_warn+0x86/0xb0 [ 204.513827][T10734] ? skb_queue_purge_reason+0xb9/0x500 [ 204.519902][T10734] end_report+0x77/0x160 [ 204.524139][T10734] kasan_report+0x154/0x180 [ 204.528643][T10734] ? skb_queue_purge_reason+0xb9/0x500 [ 204.534105][T10734] skb_queue_purge_reason+0xb9/0x500 [ 204.539392][T10734] ? mark_lock+0x9a/0x360 [ 204.543724][T10734] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 204.549621][T10734] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 204.555259][T10734] ? drain_workqueue+0x2d3/0x3a0 [ 204.560200][T10734] vhci_flush+0x44/0x50 [ 204.564365][T10734] ? __pfx_vhci_flush+0x10/0x10 [ 204.569248][T10734] hci_dev_reset+0x42a/0x5d0 [ 204.573844][T10734] sock_do_ioctl+0x158/0x460 [ 204.578461][T10734] ? __pfx_sock_do_ioctl+0x10/0x10 [ 204.583591][T10734] sock_ioctl+0x626/0x8e0 [ 204.587936][T10734] ? __pfx_sock_ioctl+0x10/0x10 [ 204.592787][T10734] ? __fget_files+0x2a/0x410 [ 204.597388][T10734] ? __fget_files+0x2a/0x410 [ 204.601998][T10734] ? __pfx_sock_ioctl+0x10/0x10 [ 204.606935][T10734] __se_sys_ioctl+0xf5/0x170 [ 204.611523][T10734] do_syscall_64+0xf3/0x230 [ 204.616024][T10734] ? clear_bhb_loop+0x35/0x90 [ 204.620692][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.626615][T10734] RIP: 0033:0x7f8305785d29 [ 204.631024][T10734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.650723][T10734] RSP: 002b:00007f8306501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.659181][T10734] RAX: ffffffffffffffda RBX: 00007f8305975fa0 RCX: 00007f8305785d29 [ 204.667169][T10734] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000006 [ 204.675325][T10734] RBP: 00007f8305801b08 R08: 0000000000000000 R09: 0000000000000000 [ 204.683985][T10734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.692037][T10734] R13: 0000000000000000 R14: 00007f8305975fa0 R15: 00007ffe5f0b9298 [ 204.700026][T10734] [ 204.703325][T10734] Kernel Offset: disabled [ 204.707954][T10734] Rebooting in 86400 seconds..