last executing test programs: 48.158106715s ago: executing program 1 (id=205): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4c050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x24044055) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000340), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000000)=0x5, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010800000000090000000000000005000400000000000900020073797a3100000000050001000700000013000300686173683a6e65742c696661636500000c00077d0800130000000000050005000a000000"], 0x58}}, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000040)=""/117, 0x75}], 0x1, 0xa, 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000014c0)={0x0, r6}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0xd, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="090000112b000000010f00000500003018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018660000030000000000000006000000186300000b000000000000000e000000186200000c0000000000000002000000059d050005000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xdf73, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000001380)=0x709e, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000000)) sendmsg$AUDIT_USER(r0, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f00000002c0)={0x1010, 0x3ed, 0x200, 0x70bd2c, 0x25dfdbfd, "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", [""]}, 0x1010}, 0x1, 0x0, 0x0, 0x48800}, 0xc4) 47.9861799s ago: executing program 1 (id=208): unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) pread64(r2, &(0x7f0000001140)=""/4109, 0xfffffe08, 0x1) 47.536327445s ago: executing program 1 (id=218): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}, 0x1, 0x0, 0x0, 0x82b76f924476c3d4}, 0x0) 47.3974061s ago: executing program 1 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000080) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="02"], 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000000300404802c0001800b0001006e756d67656e00001c0002800800024000001c5c080003400000000008000140000000000900010073797a30000000000900020073797a32000000001400f0ff1000010000000000000000000000000a"], 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'hsr0\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES8=r6, @ANYRESDEC, @ANYRES16=r5], 0x44}, 0x1, 0x2}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x10d, 0xf, &(0x7f0000000080)="02", 0x1) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xbe) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r10, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @loopback, 0x100000}, 0x1c) 47.169779586s ago: executing program 1 (id=224): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "4772507cbe3d7826", "a200c1a19549c55ab4d93fb750dac8ae286eb70d8b069276f8385b53069bc694", "0600", "8ecb156f4fd9e229"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="c6", 0xfffffd01, 0x8000, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "4772507cbe3d7826", "a200c1a19549c55ab4d93fb750dac8ae286eb70d8b069276f8385b53069bc694", "0600", "8ecb156f4fd9e229"}, 0x38) (async) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) (async) syz_emit_ethernet(0x76, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000080)="c6", 0xfffffd01, 0x8000, 0x0, 0x0) (async) 46.907735085s ago: executing program 1 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r4) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r5, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000d0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 37.320678635s ago: executing program 3 (id=356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0xa, 0x801, 0x0) getsockopt(r2, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000001000000014000000"], 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x78, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x78}, 0x1, 0x600000000000000}, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 32) recvmmsg(r6, &(0x7f0000000880), 0x1, 0x0, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000180)={{r3}, 0x7, &(0x7f00000000c0)=[0x0, 0x7f, 0x9c99, 0x2, 0xb, 0x40, 0x6], 0xcd1, 0x4}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async, rerun: 64) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x184, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x134, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x0, 0x0, 0x3501, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x2, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@rand_addr=0x64010100, @in=@private=0xa010103, @in=@local, 0x33, 0x4, 0x0, 0x3506, 0xa, 0x8}]}]}, 0x184}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 37.228710693s ago: executing program 3 (id=359): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r0], 0xa4}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131014010ff"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x10000002}], 0x10, 0x2, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x1}, &(0x7f0000000240)=0x28) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) r7 = socket(0x2, 0x3, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x5, &(0x7f0000000700)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x38}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x7fffffff}]}, &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0800c217a9f20c7bef57cb178bb3cd050685ce54aaf4b6624976a5d928b27ff46b91b39c713f9ac2a80efd493a96b241c86a827283820625ee5a4f9f5a4fd52a35720f9c88d5b756636f6bc5c530174f79426bc72c43f377c16123901ab6988a3d6bcb5c9c878262cdc6d2", 0x6b}], 0x1, &(0x7f00000011c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x18}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x6c, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x4, 0x5, 0x9, 0x1}}, @void, @void, @val={0x25, 0x3, {0x1, 0x3c}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x0) sendto$inet(r7, 0x0, 0xffeb, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10) recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x44) 37.071303362s ago: executing program 3 (id=362): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)="10a1d35a219830980d3ae6e53bac5d9f7a4deadc822262485e97b6f7b108bfab509e8d424a2653412609a4d1cade56beda1c0cc402e5f43994ba7db33bb31561fc24e0c2fd4c354c408c3e4ca3283e57af0c10b72616083bad5e5a2b3db30cfc360176837fa63fdc1a826ca3", &(0x7f0000000140)=""/50}, 0x20) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x1, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x88) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x8000}}}]}, 0x3c}}, 0x840) 36.768847576s ago: executing program 3 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffff, 0xa000, @dev={0xfe, 0x80, '\x00', 0xff}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x1077, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(r1, &(0x7f0000000200)="89", 0xffe3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_128={{0x303, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", '\x00', "614db5b3ffffffff"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r9, 0x89e8, 0x0) sendmmsg$unix(r8, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb66514b1c5e45ff1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}], 0x48}}], 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x22000000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) r11 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000100)=0xffffffffffffffff, 0x12) 36.709936778s ago: executing program 3 (id=366): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f0800040001000000", 0x24) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0xa, 0x1, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000ade5367f1cbf76641389a87acf29630fe96fa9e056bec49a545e0c157f034b0d7e5def0e78802dffd4182284146dd0c9256388fc1588aa3898a7062a00b233a019d209544a70992cb338e8fbfcf90c3612f42bbca7e356936ee9bb3f0786697f00d7eab018fbf05eca6188f5d4095a8b266", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r2, 0x4, 0x0, 0x0, @void, @value}, 0x10) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000240), &(0x7f0000000180)=@tcp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), &(0x7f00000002c0)=@tcp6=r3}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={&(0x7f00000001c0)="50a9dee061c86a050adbe2d3801800098c926611942d3ede756d3ba4b01ffb9455f2bd67fcf27fe79defd86ef28fe863ce6ae523e473c55e075dd639b8692340ef317358b31244fa30b675eeac79827ef3", &(0x7f0000000080)=""/30, &(0x7f0000000240)="7f019609fd1c7f1c7dd9fa4b6cf23a2a35ac8591f12c4f63cc660213c04adaa7e02720b3d096e00d4035612069347e5dad0cec156a9149590f563b8f7174d957f39c77bdd180a47f89bca313a96a05f058e882172ad347d7f5157a319a83eaffbc4c98c5df00ba4acd5e095a815aa5f8ad186ea554629bce4639383b93bedcffcd5c8f7fde01793c20a1d3849c11e22804cb03445510b4b7d11bb05d57c58aaf8816a32c072e48e89ab5b9adab7fc0e5e010e458db9e9cf3f21169422839100e3ab80c9e9f02d0cafff2e3445910ef343902fd6b3028", &(0x7f0000000340)="4061bb0813b80fbfe8ac6d03f74a5646f728f2a941b20c50b5b49b7a128e27b2e56b82ce439f3d4bf3b8b49b9eb0b0eb2d520beaad9bd9c99eff8a4ae666520de2ba8403151b33fb94468b2c3e7712cc5364c864a66f36d5a876b82a838ab2575590c19887b7967fbb006a6e86a3ce754bc0312c64b60570daee88797167dd7a8a230470b6c5cddd85485f8ff3c9d19dd107", 0x8, r1, 0x4}, 0x38) 36.452863265s ago: executing program 3 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0xefd6, 0x0, 0x6}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x88, r3, 0x110, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x52}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x22}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6c}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x49}, @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x8, 0x1, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x0, 0x3]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}]]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040005"], 0x76}}, 0xc000) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000380)={0x4, 0x3, "ef012d", 0x4, 0x5}) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000340)=0x1e) 19.945879567s ago: executing program 4 (id=582): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0x2000000f}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0x2000000f}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x3d, 0x7b}}) r5 = socket$caif_stream(0x25, 0x1, 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x52, r1, 0x2000) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000500)={{0x0, 0x4d6, 0x8, 0x3ff8, 0xb50, 0x2, 0x1, 0x1, 0x80000001, 0x9, 0x99, 0x2, 0x100000000000000, 0x0, 0x600000000000000}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000500)={{0x0, 0x4d6, 0x8, 0x3ff8, 0xb50, 0x2, 0x1, 0x1, 0x80000001, 0x9, 0x99, 0x2, 0x100000000000000, 0x0, 0x600000000000000}}) r7 = socket(0x18, 0x0, 0x0) close(r7) getsockname$packet(r7, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001500)={r6, 0x5}) 19.885911454s ago: executing program 4 (id=583): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x6, 0x93a6, &(0x7f0000000280)="c09c8c60f08f5dac3664ec734610fbd21be4198cb6cbb157b3c5da48ceb0c9b9f6160fd25abc980ee557088dee7b87471737e5a9f0f0247524526a40ea2f584692cedaa7b0efb282af0613f3e95577a9ea388afe8d1e587c844d7ac219656d1abf7da61b1c29", 0x66) 19.73548312s ago: executing program 4 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_LABELS_MASK={0x0, 0x17, [0x2d, 0x64b7aba2, 0x81, 0x6, 0x6]}]}, 0x1c}}, 0x8000) 19.481048536s ago: executing program 4 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x75}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40840) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r4, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01}, 0x810) 14.292803156s ago: executing program 4 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x75}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40840) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r4, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01}, 0x810) 6.485296332s ago: executing program 4 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x75}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40840) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r4, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01}, 0x810) 657.418575ms ago: executing program 2 (id=755): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) r0 = socket$can_bcm(0x1d, 0x2, 0x2) close(r0) (async) close(r0) 549.380568ms ago: executing program 2 (id=757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x6}}]}, 0x24}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 508.916775ms ago: executing program 0 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/224, 0xe0}], 0x1}, 0x401}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdb7b}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x2011) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) (async) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/224, 0xe0}], 0x1}, 0x401}], 0x1, 0x0, 0x0) (async) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdb7b}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x2011) (async) 378.228192ms ago: executing program 0 (id=759): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6cc7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x2, 0xfffff9a3, 0x4, 0x103, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6cc7}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x2, 0xfffff9a3, 0x4, 0x103, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) (async) 313.079527ms ago: executing program 2 (id=760): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a05fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 312.783852ms ago: executing program 0 (id=761): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000010000000000001000000018000180140002006e657464657673696d3000000000000005000d"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@srh, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x68) 279.885672ms ago: executing program 2 (id=762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000b80)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r10, 0xfffffffc}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r10, 0x19f00000}, &(0x7f00000001c0)=0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 256.587372ms ago: executing program 0 (id=763): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff56ab}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xad7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x8804) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}}, 0x0) 116.95748ms ago: executing program 0 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9c, r1, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000680)="6e396043c7f73cdb24daad17f83ce74b34cd63b8facb5c284d61010075bfdbc35cfe8116ba2125d355b852159de6df41715a3e9d41970b39c9293403d0e740dd1fd8e8b590936714c68252a41c8876cefdd8a3b4e05edd64fafd10e7ab0feabc0e", 0x0, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000140)="d98ee0f74370dd54f7ef9333dcce"}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x5c}}, 0x0) 115.984324ms ago: executing program 2 (id=765): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) getpeername(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080007000000000020000000496f008800660000401190780a010102ac14141a44101c6000000001004d9078020000000100000001000000cc9076053333c98aab3d501bf817920a8da263c567a486ff0a1b2e8f78165e397d591a13c426e5901e02555e5cf04d15853745e0ace7a15e4078ad604dbe515d90701aad8601dc8a67b8332ccc4f325c"], 0x96) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x8, @local, 0x9}}}, 0x3a) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="78b67e73", @ANYRES16=r5, @ANYBLOB="01002cbd70400400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x10040084}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002dbd7000000000001300000008000300", @ANYRES32=r10, @ANYBLOB="1c5690dafb255dd897"], 0x1c}}, 0x0) 74.614177ms ago: executing program 0 (id=766): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@remote, r3}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r5], 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 0s ago: executing program 2 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000480}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x809}, 0x80d0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 58.094207][ T5820] cgroup: Unknown subsys name 'net' [ 58.225069][ T5820] cgroup: Unknown subsys name 'cpuset' [ 58.232899][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.576032][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.707389][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.713617][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.717054][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.725167][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.737738][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.745823][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.752013][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.754222][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.768908][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.769442][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.779620][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.784415][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.792425][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.809504][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.817207][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.824670][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.835921][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.844326][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.856308][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.865861][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.873071][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.881404][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.888735][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.896534][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.904537][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.911893][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.912702][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.926603][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.927683][ T5147] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.943027][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.225863][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 62.413958][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 62.459489][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 62.470032][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 62.494512][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.502953][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.510446][ T5839] bridge_slave_0: entered allmulticast mode [ 62.517997][ T5839] bridge_slave_0: entered promiscuous mode [ 62.565655][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.573030][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.580192][ T5839] bridge_slave_1: entered allmulticast mode [ 62.587054][ T5839] bridge_slave_1: entered promiscuous mode [ 62.609624][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 62.655101][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.696381][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.703750][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.710925][ T5831] bridge_slave_0: entered allmulticast mode [ 62.718095][ T5831] bridge_slave_0: entered promiscuous mode [ 62.740067][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.780820][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.788425][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.795688][ T5831] bridge_slave_1: entered allmulticast mode [ 62.802651][ T5831] bridge_slave_1: entered promiscuous mode [ 62.834534][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.841707][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.849185][ T5832] bridge_slave_0: entered allmulticast mode [ 62.856551][ T5832] bridge_slave_0: entered promiscuous mode [ 62.876662][ T5839] team0: Port device team_slave_0 added [ 62.889167][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.896452][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.904040][ T5832] bridge_slave_1: entered allmulticast mode [ 62.910618][ T5832] bridge_slave_1: entered promiscuous mode [ 62.933334][ T5839] team0: Port device team_slave_1 added [ 62.939237][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.946494][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.953963][ T5846] bridge_slave_0: entered allmulticast mode [ 62.960525][ T5846] bridge_slave_0: entered promiscuous mode [ 62.979237][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.005010][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.012550][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.019701][ T5846] bridge_slave_1: entered allmulticast mode [ 63.026528][ T5846] bridge_slave_1: entered promiscuous mode [ 63.051234][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.064343][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.080024][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.087375][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.094980][ T5830] bridge_slave_0: entered allmulticast mode [ 63.101570][ T5830] bridge_slave_0: entered promiscuous mode [ 63.126256][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.150477][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.158040][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.165880][ T5830] bridge_slave_1: entered allmulticast mode [ 63.172983][ T5830] bridge_slave_1: entered promiscuous mode [ 63.180109][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.187216][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.213531][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.228493][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.248021][ T5831] team0: Port device team_slave_0 added [ 63.268311][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.278540][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.305355][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.318410][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.332898][ T5832] team0: Port device team_slave_0 added [ 63.339846][ T5831] team0: Port device team_slave_1 added [ 63.378455][ T5832] team0: Port device team_slave_1 added [ 63.403421][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.415234][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.451538][ T5846] team0: Port device team_slave_0 added [ 63.474173][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.481158][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.507459][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.531026][ T5839] hsr_slave_0: entered promiscuous mode [ 63.537805][ T5839] hsr_slave_1: entered promiscuous mode [ 63.546855][ T5846] team0: Port device team_slave_1 added [ 63.561642][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.568767][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.594811][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.607525][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.614588][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.640579][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.653008][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.660020][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.686153][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.704478][ T5830] team0: Port device team_slave_0 added [ 63.713152][ T5830] team0: Port device team_slave_1 added [ 63.750803][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.758228][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.784617][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.797061][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.804125][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.830471][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.863019][ T5837] Bluetooth: hci0: command tx timeout [ 63.871876][ T5837] Bluetooth: hci3: command tx timeout [ 63.885883][ T5831] hsr_slave_0: entered promiscuous mode [ 63.892876][ T5831] hsr_slave_1: entered promiscuous mode [ 63.898897][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.907029][ T5831] Cannot create hsr debugfs directory [ 63.913156][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.920124][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.946360][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.959128][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.966165][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.992169][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.022751][ T5837] Bluetooth: hci2: command tx timeout [ 64.022771][ T54] Bluetooth: hci4: command tx timeout [ 64.023067][ T5147] Bluetooth: hci1: command tx timeout [ 64.077861][ T5846] hsr_slave_0: entered promiscuous mode [ 64.085154][ T5846] hsr_slave_1: entered promiscuous mode [ 64.091200][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.098947][ T5846] Cannot create hsr debugfs directory [ 64.118300][ T5832] hsr_slave_0: entered promiscuous mode [ 64.124818][ T5832] hsr_slave_1: entered promiscuous mode [ 64.130799][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.138543][ T5832] Cannot create hsr debugfs directory [ 64.217951][ T5830] hsr_slave_0: entered promiscuous mode [ 64.224394][ T5830] hsr_slave_1: entered promiscuous mode [ 64.230341][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.238717][ T5830] Cannot create hsr debugfs directory [ 64.499672][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.518019][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.527624][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.551312][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.607625][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.616593][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.626541][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.638834][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.720645][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.730854][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.740927][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.764403][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.850770][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.861746][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.898855][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.921152][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.935016][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.974179][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.986298][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.014591][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.028475][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.050900][ T2211] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.058216][ T2211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.069421][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.107155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.114376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.155277][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.172933][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.208738][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.257639][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.284386][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.307710][ T2211] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.314903][ T2211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.336173][ T2211] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.343429][ T2211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.354267][ T2211] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.361497][ T2211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.427544][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.439938][ T4778] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.447116][ T4778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.472456][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.516431][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.526011][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.554922][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.570463][ T2211] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.577649][ T2211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.617845][ T2211] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.625039][ T2211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.639134][ T2211] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.646273][ T2211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.691205][ T2211] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.698338][ T2211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.714630][ T5839] veth0_vlan: entered promiscuous mode [ 65.800317][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.813485][ T5839] veth1_vlan: entered promiscuous mode [ 65.861493][ T5839] veth0_macvtap: entered promiscuous mode [ 65.925008][ T5839] veth1_macvtap: entered promiscuous mode [ 65.943723][ T5147] Bluetooth: hci3: command tx timeout [ 65.943734][ T5837] Bluetooth: hci0: command tx timeout [ 66.003526][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.026442][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.047297][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.069864][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.079308][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.102408][ T5837] Bluetooth: hci2: command tx timeout [ 66.103237][ T54] Bluetooth: hci4: command tx timeout [ 66.107918][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.128161][ T5147] Bluetooth: hci1: command tx timeout [ 66.178054][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.210534][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.245822][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.278814][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.364198][ T5831] veth0_vlan: entered promiscuous mode [ 66.396709][ T5831] veth1_vlan: entered promiscuous mode [ 66.425168][ T5832] veth0_vlan: entered promiscuous mode [ 66.455927][ T5832] veth1_vlan: entered promiscuous mode [ 66.501490][ T5846] veth0_vlan: entered promiscuous mode [ 66.528136][ T5846] veth1_vlan: entered promiscuous mode [ 66.542283][ T5831] veth0_macvtap: entered promiscuous mode [ 66.543066][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.551173][ T5831] veth1_macvtap: entered promiscuous mode [ 66.571571][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.615768][ T2211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.626354][ T2211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.643345][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.658430][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.673641][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.687998][ T5832] veth0_macvtap: entered promiscuous mode [ 66.709543][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.720338][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.733104][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.750909][ T5830] veth0_vlan: entered promiscuous mode [ 66.761352][ T5832] veth1_macvtap: entered promiscuous mode [ 66.768791][ T5846] veth0_macvtap: entered promiscuous mode [ 66.786614][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.818123][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.827758][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.838113][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.846967][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.866631][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.877705][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.888292][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.906817][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.928898][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.937722][ T5846] veth1_macvtap: entered promiscuous mode [ 66.957199][ T5830] veth1_vlan: entered promiscuous mode [ 66.974387][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.989150][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.999570][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.019960][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.038767][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.071250][ T5916] trusted_key: syz.0.6 sent an empty control message without MSG_MORE. [ 67.080296][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.094370][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.104424][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.115113][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.125085][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.138608][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.143711][ T5918] openvswitch: netlink: IP tunnel TTL not specified. [ 67.150878][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.173974][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.183204][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.192343][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.201053][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.218683][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.229463][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.240591][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.252867][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.263549][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.274586][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.286125][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.295522][ T5916] lo: entered promiscuous mode [ 67.305739][ T5916] tunl0: entered promiscuous mode [ 67.313730][ T5916] gre0: entered promiscuous mode [ 67.325415][ T5916] gretap0: entered promiscuous mode [ 67.333935][ T5916] erspan0: entered promiscuous mode [ 67.340976][ T5916] ip_vti0: entered promiscuous mode [ 67.383463][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.393783][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.418419][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.427477][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.496232][ T5830] veth0_macvtap: entered promiscuous mode [ 67.581507][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.600596][ T5922] Bluetooth: MGMT ver 1.23 [ 67.604821][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.636322][ T5830] veth1_macvtap: entered promiscuous mode [ 67.681011][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.698000][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.722013][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.732969][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.743356][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.753964][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.764341][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.775048][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.788008][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.798835][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.810033][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.847849][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.859103][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.870040][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.870154][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.887639][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.898248][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.908447][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.919088][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.929550][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.940151][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.951826][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.967945][ T5927] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 67.990707][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.999712][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008609][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.018098][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.023037][ T5147] Bluetooth: hci0: command tx timeout [ 68.026941][ T54] Bluetooth: hci3: command tx timeout [ 68.073015][ T4778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.101361][ T4778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.181975][ T54] Bluetooth: hci1: command tx timeout [ 68.185502][ T5147] Bluetooth: hci2: command tx timeout [ 68.193165][ T54] Bluetooth: hci4: command tx timeout [ 68.222891][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.230761][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.241016][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.258257][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.393123][ T4778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.431921][ T4778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.484807][ T5938] pimreg: entered allmulticast mode [ 68.498854][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.527825][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.548505][ T5938] pimreg: left allmulticast mode [ 68.688876][ T5943] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.723796][ T5938] sctp: [Deprecated]: syz.0.11 (pid 5938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.723796][ T5938] Use struct sctp_sack_info instead [ 68.821510][ T5938] bond1: entered allmulticast mode [ 68.872532][ T5938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.976060][ T5952] ip6t_srh: unknown srh invflags A757 [ 69.071251][ T5954] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 69.213587][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 69.541726][ T5972] sctp: [Deprecated]: syz.4.17 (pid 5972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.541726][ T5972] Use struct sctp_sack_info instead [ 69.908561][ T5995] x_tables: duplicate underflow at hook 3 [ 70.017310][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 70.061490][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'. [ 70.103302][ T54] Bluetooth: hci3: command tx timeout [ 70.108768][ T54] Bluetooth: hci0: command tx timeout [ 70.261928][ T54] Bluetooth: hci2: command tx timeout [ 70.274720][ T54] Bluetooth: hci4: command tx timeout [ 70.274769][ T5147] Bluetooth: hci1: command tx timeout [ 70.335148][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30'. [ 70.355876][ T6017] tipc: Started in network mode [ 70.360873][ T6017] tipc: Node identity 7, cluster identity 5 [ 70.367613][ T6017] tipc: Node number set to 7 [ 70.374875][ T6021] netlink: 204 bytes leftover after parsing attributes in process `syz.1.32'. [ 70.402400][ T6017] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 70.558880][ T6030] IPv4: Oversized IP packet from 172.20.20.24 [ 70.567267][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 70.574399][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 70.622272][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 70.639742][ T6035] netlink: 'syz.3.38': attribute type 29 has an invalid length. [ 70.712637][ T6037] netlink: 'syz.3.38': attribute type 29 has an invalid length. [ 70.748776][ T6037] netlink: 524 bytes leftover after parsing attributes in process `syz.3.38'. [ 70.770625][ T6037] unsupported nla_type 58 [ 70.970370][ T6050] netlink: 52 bytes leftover after parsing attributes in process `syz.4.42'. [ 70.989861][ T6051] netlink: 52 bytes leftover after parsing attributes in process `syz.4.42'. [ 71.034863][ T6054] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET) [ 71.125613][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.477446][ T6074] can: request_module (can-proto-4) failed. [ 71.648022][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.669867][ T6091] netlink: 'syz.2.56': attribute type 7 has an invalid length. [ 71.679535][ T6091] netlink: 'syz.2.56': attribute type 8 has an invalid length. [ 71.692694][ T6091] gretap0: entered promiscuous mode [ 71.699530][ T6091] gretap0: left promiscuous mode [ 71.785984][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.792978][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.873568][ T6100] veth1_to_batadv: mtu less than device minimum [ 72.083101][ T6116] warning: `syz.3.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.096753][ T6116] netlink: 'syz.3.63': attribute type 29 has an invalid length. [ 72.113818][ T6116] netlink: 'syz.3.63': attribute type 29 has an invalid length. [ 72.182133][ T5147] Bluetooth: hci0: command tx timeout [ 72.250777][ T6125] Zero length message leads to an empty skb [ 72.337486][ T6136] xt_hashlimit: max too large, truncated to 1048576 [ 72.576854][ T6151] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.723846][ T6161] xt_nat: multiple ranges no longer supported [ 73.050050][ T6181] openvswitch: netlink: Flow actions attr not present in new flow. [ 73.157878][ T6185] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 73.369295][ T6200] x_tables: duplicate underflow at hook 3 [ 73.597428][ T6212] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 74.152623][ T6250] __nla_validate_parse: 18 callbacks suppressed [ 74.152642][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 74.313298][ T6260] tc_dump_action: action bad kind [ 74.634835][ T6280] syzkaller1: entered promiscuous mode [ 74.648826][ T6280] syzkaller1: entered allmulticast mode [ 74.675477][ T6282] bridge0: port 1(bridge_slave_0) entered listening state [ 74.683400][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 74.877161][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 74.978347][ T6301] bridge_slave_0: default FDB implementation only supports local addresses [ 75.107074][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 75.307822][ T6327] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 75.345615][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.353895][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.375679][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.383021][ T6327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.390914][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.398164][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.413376][ T6327] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 75.450653][ T6329] tap0: tun_chr_ioctl cmd 2148553947 [ 75.801905][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 75.810764][ T6354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.137'. [ 75.834536][ T6356] netlink: 100 bytes leftover after parsing attributes in process `syz.2.138'. [ 75.960310][ T6363] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 75.972139][ T6363] netlink: 766 bytes leftover after parsing attributes in process `syz.2.141'. [ 75.999408][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 76.020841][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.143'. [ 76.030365][ T6368] netlink: 'syz.0.142': attribute type 39 has an invalid length. [ 76.043294][ T6369] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 76.246416][ T6382] IPv4: Oversized IP packet from 172.20.20.24 [ 76.253746][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 76.260112][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 76.292035][ T6382] : entered promiscuous mode [ 76.440235][ T6396] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 76.494270][ T6399] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 77.698349][ T6472] bridge0: port 3(batadv1) entered blocking state [ 77.722488][ T6472] bridge0: port 3(batadv1) entered disabled state [ 77.742074][ T6472] batadv1: entered allmulticast mode [ 77.761077][ T6472] batadv1: entered promiscuous mode [ 77.952213][ T6478] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.961288][ T6478] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.970318][ T6478] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.979265][ T6478] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.990730][ T51] IPVS: starting estimator thread 0... [ 78.091970][ T6478] vxlan0: entered promiscuous mode [ 78.102932][ T6485] IPVS: using max 18 ests per chain, 43200 per kthread [ 78.121892][ T6478] vxlan0: entered allmulticast mode [ 78.195310][ T5883] IPVS: starting estimator thread 0... [ 78.201389][ T6491] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 78.214100][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 78.223736][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 78.295027][ T6497] IPVS: using max 18 ests per chain, 43200 per kthread [ 78.549939][ T6511] netlink: 'syz.0.187': attribute type 6 has an invalid length. [ 78.596826][ T6510] netlink: 'syz.0.187': attribute type 6 has an invalid length. [ 78.687862][ T6520] netem: incorrect gi model size [ 78.707611][ T6520] netem: change failed [ 79.039039][ T6546] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 79.068619][ T6553] xt_cgroup: invalid path, errno=-2 [ 79.100061][ T6548] syz_tun: entered allmulticast mode [ 79.164172][ T6542] syz_tun: left allmulticast mode [ 79.396210][ T6569] __nla_validate_parse: 13 callbacks suppressed [ 79.396228][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.207'. [ 79.643695][ T6579] syzkaller0: entered allmulticast mode [ 79.666822][ T6579] syzkaller0 (unregistering): left allmulticast mode [ 79.900401][ T6601] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 79.959825][ T6603] netlink: 'syz.2.216': attribute type 3 has an invalid length. [ 79.980676][ T6603] netlink: 666 bytes leftover after parsing attributes in process `syz.2.216'. [ 80.014319][ T6607] tipc: Enabling of bearer rejected, failed to enable media [ 80.162147][ T6612] netlink: 72 bytes leftover after parsing attributes in process `syz.1.220'. [ 80.237404][ T6616] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 80.345097][ T6622] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 80.355126][ T6622] netlink: 'syz.2.225': attribute type 2 has an invalid length. [ 80.535314][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.565363][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 80.600514][ T6634] netlink: 'syz.2.229': attribute type 10 has an invalid length. [ 80.669019][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.703409][ T6634] team0: Device ipvlan1 failed to register rx_handler [ 80.745074][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 80.786095][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.869947][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 80.923438][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.126188][ T6650] netlink: 60 bytes leftover after parsing attributes in process `syz.2.236'. [ 81.240337][ T11] bridge_slave_1: left allmulticast mode [ 81.242074][ T6656] Unsupported ieee802154 address type: 0 [ 81.252088][ T11] bridge_slave_1: left promiscuous mode [ 81.272334][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.305128][ T11] bridge_slave_0: left allmulticast mode [ 81.310827][ T11] bridge_slave_0: left promiscuous mode [ 81.337731][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.415120][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.429396][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.437613][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.448602][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.457964][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.466854][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.546295][ T6671] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 82.009211][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.021236][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.035317][ T25] cfg80211: failed to load regulatory.db [ 82.043957][ T11] bond0 (unregistering): Released all slaves [ 82.068582][ T6671] bond0: entered promiscuous mode [ 82.076329][ T6671] bond_slave_0: entered promiscuous mode [ 82.082893][ T6671] bond_slave_1: entered promiscuous mode [ 82.113264][ T6675] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 82.159208][ T6683] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 82.340824][ T6688] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 82.341803][ T6687] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 82.369547][ T6688] netlink: 'syz.2.245': attribute type 2 has an invalid length. [ 82.510144][ T6694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.611172][ T11] hsr_slave_0: left promiscuous mode [ 82.630478][ T11] hsr_slave_1: left promiscuous mode [ 82.640420][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.651988][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.683439][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.691079][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.712299][ T11] veth1_macvtap: left promiscuous mode [ 82.718129][ T11] veth0_macvtap: left promiscuous mode [ 82.724072][ T11] veth1_vlan: left promiscuous mode [ 82.730416][ T11] veth0_vlan: left promiscuous mode [ 83.167618][ T11] team0 (unregistering): Port device team_slave_1 removed [ 83.206085][ T11] team0 (unregistering): Port device team_slave_0 removed [ 83.544583][ T5147] Bluetooth: hci0: command tx timeout [ 83.558618][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 83.715706][ T6663] chnl_net:caif_netlink_parms(): no params data found [ 83.789646][ T6718] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 83.831317][ T6718] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 83.852855][ T6718] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 83.881444][ T6718] netlink: 'syz.2.252': attribute type 2 has an invalid length. [ 83.890661][ T6718] netlink: 76 bytes leftover after parsing attributes in process `syz.2.252'. [ 84.073081][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.083658][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.103663][ T6663] bridge_slave_0: entered allmulticast mode [ 84.129668][ T6663] bridge_slave_0: entered promiscuous mode [ 84.172568][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.191303][ T6749] netlink: 56 bytes leftover after parsing attributes in process `syz.0.259'. [ 84.210744][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 84.230362][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.262660][ T6663] bridge_slave_1: entered allmulticast mode [ 84.282053][ T6749] netlink: 'syz.0.259': attribute type 3 has an invalid length. [ 84.290899][ T6757] tipc: Can't bind to reserved service type 2 [ 84.297438][ T6749] netlink: 'syz.0.259': attribute type 2 has an invalid length. [ 84.302224][ T6663] bridge_slave_1: entered promiscuous mode [ 84.360372][ T6746] "syz.0.259" (6746) uses obsolete ecb(arc4) skcipher [ 84.436811][ T6765] __nla_validate_parse: 2 callbacks suppressed [ 84.436829][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 84.485394][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 84.504222][ T6663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.544739][ T6663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.547769][ T11] IPVS: stop unused estimator thread 0... [ 84.650447][ T6663] team0: Port device team_slave_0 added [ 84.674059][ T6663] team0: Port device team_slave_1 added [ 84.764802][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 84.792294][ T6779] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'. [ 84.804513][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.811499][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.857510][ T6663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.891678][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.910513][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.953247][ T6663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.978545][ T6789] syzkaller0: entered promiscuous mode [ 84.984236][ T6789] syzkaller0: entered allmulticast mode [ 84.998475][ T6789] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 85.106382][ T6663] hsr_slave_0: entered promiscuous mode [ 85.128671][ T6663] hsr_slave_1: entered promiscuous mode [ 85.163537][ T6663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.189077][ T6663] Cannot create hsr debugfs directory [ 85.392820][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.277'. [ 85.622559][ T5147] Bluetooth: hci0: command tx timeout [ 85.958548][ T6839] netlink: 192 bytes leftover after parsing attributes in process `syz.2.286'. [ 85.978734][ T6839] netlink: 156 bytes leftover after parsing attributes in process `syz.2.286'. [ 86.013548][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.286'. [ 86.048874][ T6839] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 86.248469][ T6663] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.276609][ T6663] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.304084][ T6663] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.304151][ T6857] netlink: zone id is out of range [ 86.323765][ T6857] netlink: zone id is out of range [ 86.326215][ T6663] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.331198][ T6857] netlink: zone id is out of range [ 86.349968][ T6857] netlink: zone id is out of range [ 86.355605][ T6857] netlink: zone id is out of range [ 86.363119][ T6857] netlink: del zone limit has 8 unknown bytes [ 86.591587][ T6663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.650206][ T6663] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.694691][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.701875][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.743228][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.750464][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.108073][ T6861] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 87.247815][ T6920] netlink: 76 bytes leftover after parsing attributes in process `syz.4.302'. [ 87.316085][ T6663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.520453][ T6663] veth0_vlan: entered promiscuous mode [ 87.574871][ T6663] veth1_vlan: entered promiscuous mode [ 87.576685][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.309'. [ 87.631497][ T6944] xt_hashlimit: invalid rate [ 87.669603][ T6948] netlink: 'syz.4.312': attribute type 1 has an invalid length. [ 87.672070][ T6663] veth0_macvtap: entered promiscuous mode [ 87.744553][ T6663] veth1_macvtap: entered promiscuous mode [ 87.780396][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.821897][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.847986][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.860757][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.881449][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.899304][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.933910][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.949197][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.969252][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.013615][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.031523][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.046992][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.061199][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.085411][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.106509][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.117278][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.128744][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.147999][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.194222][ T6663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.206988][ T6663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.217301][ T6663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.226596][ T6663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.260274][ T6975] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 88.272071][ T6975] netlink: 'syz.2.321': attribute type 2 has an invalid length. [ 88.408330][ T6982] netlink: 'syz.2.323': attribute type 28 has an invalid length. [ 88.414388][ T2211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.418325][ T6982] netlink: 'syz.2.323': attribute type 3 has an invalid length. [ 88.448467][ T2211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.462560][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.525754][ T4778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.544258][ T4778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.751470][ T7000] tipc: Started in network mode [ 88.764306][ T7000] tipc: Node identity 7, cluster identity 5 [ 88.770422][ T7000] tipc: Node number set to 7 [ 88.889986][ T7007] x_tables: duplicate underflow at hook 2 [ 88.988127][ T7013] netlink: 'syz.4.333': attribute type 1 has an invalid length. [ 89.049577][ T7017] tipc: Trying to set illegal importance in message [ 89.222596][ T7031] vlan3: entered allmulticast mode [ 89.229009][ T7031] erspan0: entered allmulticast mode [ 89.530603][ T7049] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 89.562280][ C1] Illegal XDP return value 16128 on prog (id 61) dev veth0_to_bridge, expect packet loss! [ 89.648765][ T7055] netlink: 'syz.3.348': attribute type 2 has an invalid length. [ 89.652791][ T7053] __nla_validate_parse: 7 callbacks suppressed [ 89.652807][ T7053] netlink: 59 bytes leftover after parsing attributes in process `syz.4.349'. [ 89.659346][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 89.673467][ T7053] netlink: 932 bytes leftover after parsing attributes in process `syz.4.349'. [ 89.847143][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 90.201230][ T7090] netlink: 256 bytes leftover after parsing attributes in process `syz.4.357'. [ 90.206110][ T7091] @ÿ: renamed from bond_slave_0 (while UP) [ 90.229586][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 90.238292][ T7090] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.248754][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 90.266861][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.358'. [ 90.366971][ T7095] xt_CT: No such helper "snmp" [ 90.423185][ T7102] unsupported nlmsg_type 40 [ 90.667149][ T7115] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.126703][ T4778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.219839][ T4778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.231517][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.241337][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.249914][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.259131][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.267000][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.278425][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.378490][ T4778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.475993][ T4778] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.793021][ T4778] bridge_slave_1: left allmulticast mode [ 91.798739][ T4778] bridge_slave_1: left promiscuous mode [ 91.832257][ T4778] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.858336][ T4778] bridge_slave_0: left allmulticast mode [ 91.874292][ T7152] xt_CT: No such helper "pptp" [ 91.878419][ T4778] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.137558][ T4778] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 92.146233][ T4778] @ÿ: left promiscuous mode [ 92.154343][ T4778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.167846][ T4778] bond_slave_1: left promiscuous mode [ 92.175295][ T4778] bond0 (unregistering): Released all slaves [ 92.188469][ T4778] bond1 (unregistering): Released all slaves [ 92.208264][ T7117] chnl_net:caif_netlink_parms(): no params data found [ 92.226185][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 92.630221][ T7184] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 92.649899][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.657189][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.662814][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 92.677551][ T7117] bridge_slave_0: entered allmulticast mode [ 92.685515][ T7117] bridge_slave_0: entered promiscuous mode [ 92.698507][ T7184] netlink: 'syz.0.385': attribute type 2 has an invalid length. [ 92.710861][ T7182] macsec0: entered promiscuous mode [ 92.758730][ T4778] hsr_slave_0: left promiscuous mode [ 92.770576][ T4778] hsr_slave_1: left promiscuous mode [ 92.776756][ T4778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.785388][ T4778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.802601][ T4778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.816976][ T4778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.852302][ T4778] veth1_macvtap: left promiscuous mode [ 92.857890][ T4778] veth0_macvtap: left promiscuous mode [ 92.864116][ T4778] veth1_vlan: left promiscuous mode [ 92.869430][ T4778] veth0_vlan: left promiscuous mode [ 93.305145][ T5837] Bluetooth: hci2: command tx timeout [ 93.342795][ T4778] team0 (unregistering): Port device team_slave_1 removed [ 93.385802][ T4778] team0 (unregistering): Port device team_slave_0 removed [ 93.786496][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.796309][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.803781][ T7117] bridge_slave_1: entered allmulticast mode [ 93.810467][ T7117] bridge_slave_1: entered promiscuous mode [ 93.911646][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.963331][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.985161][ T7203] netlink: 'syz.0.391': attribute type 15 has an invalid length. [ 94.025924][ T7117] team0: Port device team_slave_0 added [ 94.053954][ T7117] team0: Port device team_slave_1 added [ 94.094749][ T7209] pim6reg: entered allmulticast mode [ 94.159745][ T7209] pim6reg: left allmulticast mode [ 94.199136][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.209274][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.237812][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.282909][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.289906][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.382350][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.409160][ T4778] IPVS: stop unused estimator thread 0... [ 94.481369][ T7117] hsr_slave_0: entered promiscuous mode [ 94.500438][ T7117] hsr_slave_1: entered promiscuous mode [ 94.507466][ T7117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.521885][ T7117] Cannot create hsr debugfs directory [ 94.670971][ T7236] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 94.686021][ T7236] __nla_validate_parse: 3 callbacks suppressed [ 94.686038][ T7236] netlink: 224 bytes leftover after parsing attributes in process `syz.2.400'. [ 94.710518][ T7238] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 94.761278][ T7238] netlink: 224 bytes leftover after parsing attributes in process `syz.2.400'. [ 94.956980][ T7247] syzkaller1: entered promiscuous mode [ 94.973162][ T7247] syzkaller1: entered allmulticast mode [ 95.193868][ T7258] veth0_to_team: entered promiscuous mode [ 95.221539][ T7258] veth0_to_team: entered allmulticast mode [ 95.275941][ T7117] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.311593][ T7117] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.341967][ T7117] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.382456][ T7117] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.393195][ T5837] Bluetooth: hci2: command tx timeout [ 95.550903][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.578147][ T7117] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.590012][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.597212][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.634617][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.641834][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.856028][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.893353][ T7117] veth0_vlan: entered promiscuous mode [ 95.906790][ T7117] veth1_vlan: entered promiscuous mode [ 95.936095][ T7117] veth0_macvtap: entered promiscuous mode [ 95.945665][ T7117] veth1_macvtap: entered promiscuous mode [ 95.963597][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.974362][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.984639][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.995832][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.006329][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.016995][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.027777][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.038357][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.049587][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.067931][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.078606][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.088614][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.099902][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.111398][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.123734][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.134002][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.144821][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.155559][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.165634][ T7117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.174469][ T7117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.183607][ T7117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.192521][ T7117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.259547][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.268373][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.291451][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.299656][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.458058][ T7294] Bluetooth: MGMT ver 1.23 [ 96.693474][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 96.703344][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.416'. [ 96.960884][ T7315] netlink: 596 bytes leftover after parsing attributes in process `syz.4.422'. [ 97.083458][ T7320] xt_l2tp: unknown flags: 18 [ 97.198225][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 97.396136][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 97.405029][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 97.462694][ T54] Bluetooth: hci2: command tx timeout [ 97.513392][ T7337] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 97.616810][ T7344] netlink: 104 bytes leftover after parsing attributes in process `syz.0.432'. [ 97.780285][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 99.750152][ T7387] __nla_validate_parse: 1 callbacks suppressed [ 99.750166][ T7387] netlink: 25 bytes leftover after parsing attributes in process `syz.4.448'. [ 100.576714][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 100.604317][ T7400] netlink: 'syz.0.451': attribute type 30 has an invalid length. [ 100.617741][ T7400] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.627050][ T7400] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.636531][ T7400] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.645975][ T7400] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.758789][ T7405] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 100.842972][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'. [ 100.900590][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.458'. [ 100.921474][ T7414] netlink: 'syz.4.458': attribute type 7 has an invalid length. [ 100.940021][ T7414] netlink: 'syz.4.458': attribute type 8 has an invalid length. [ 100.948074][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 101.137832][ T7428] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 101.152645][ T7429] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.170177][ T7428] netlink: 236 bytes leftover after parsing attributes in process `syz.0.463'. [ 101.190190][ T7430] syz.0.463 (7430) used greatest stack depth: 17808 bytes left [ 101.642693][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 101.670382][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 101.816112][ T7467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.472'. [ 101.829863][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.472'. [ 102.420842][ T7503] (unnamed net_device) (uninitialized): up delay (1025) is not a multiple of miimon (3), value rounded to 1023 ms [ 102.465313][ T7506] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 103.122671][ T7549] netlink: 'syz.4.501': attribute type 2 has an invalid length. [ 103.275982][ T7553] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 103.296384][ T7553] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 103.385675][ T7566] IPv6: sit1: Disabled Multicast RS [ 103.398777][ T7566] sit1: entered allmulticast mode [ 103.440508][ T7569] netlink: 'syz.4.506': attribute type 6 has an invalid length. [ 103.636829][ T7575] netlink: 'syz.4.509': attribute type 1 has an invalid length. [ 103.674966][ T7581] ip6_vti0: Master is either lo or non-ether device [ 104.062741][ T7595] x_tables: duplicate underflow at hook 3 [ 104.126542][ T7597] netlink: 'syz.0.517': attribute type 5 has an invalid length. [ 104.441379][ T7613] netlink: 'syz.2.523': attribute type 62 has an invalid length. [ 104.442912][ T7615] x_tables: ip_tables: osf match: only valid for protocol 6 [ 105.030360][ T7651] __nla_validate_parse: 20 callbacks suppressed [ 105.030377][ T7651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'. [ 105.400795][ T7676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 105.468561][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 105.721443][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 105.740908][ T7696] netlink: 76 bytes leftover after parsing attributes in process `syz.2.549'. [ 105.763101][ T7696] nbd: illegal input index -8454144 [ 105.775478][ T7696] netlink: 165 bytes leftover after parsing attributes in process `syz.2.549'. [ 106.085250][ T7712] openvswitch: netlink: Tunnel attr 9 has unexpected len 8 expected 2 [ 106.222076][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.557'. [ 106.347670][ T7729] netlink: 224 bytes leftover after parsing attributes in process `syz.2.561'. [ 106.376878][ T7733] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.499734][ T7729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.561'. [ 106.655451][ T7754] validate_nla: 1 callbacks suppressed [ 106.655469][ T7754] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 106.696734][ T7754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.714225][ T7754] bond3: (slave gretap1): making interface the new active one [ 106.723098][ T7754] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 106.755643][ T7754] geneve2: entered promiscuous mode [ 106.771175][ T7754] geneve2: entered allmulticast mode [ 106.903200][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.570'. [ 107.008889][ T7777] : renamed from bond0 (while UP) [ 107.115021][ T7784] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 107.301013][ T7793] tipc: Enabling of bearer rejected, failed to enable media [ 107.415046][ T7795] Bluetooth: MGMT ver 1.23 [ 107.530242][ T7804] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 108.390293][ T7833] xfrm1: entered allmulticast mode [ 108.409425][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.419783][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.428192][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.438098][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.445942][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.453295][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.651677][ T7852] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 108.677652][ T7852] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 108.693974][ T7837] chnl_net:caif_netlink_parms(): no params data found [ 108.814846][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.831075][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.839154][ T7837] bridge_slave_0: entered allmulticast mode [ 108.847294][ T7837] bridge_slave_0: entered promiscuous mode [ 108.856970][ T7837] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.864522][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.871873][ T7837] bridge_slave_1: entered allmulticast mode [ 108.879136][ T7837] bridge_slave_1: entered promiscuous mode [ 108.931528][ T7837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.963444][ T7837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.034814][ T7837] team0: Port device team_slave_0 added [ 109.055278][ T7837] team0: Port device team_slave_1 added [ 109.098845][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.110293][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.138984][ T7837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.160643][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.167980][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.194318][ T7837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.265597][ T7837] hsr_slave_0: entered promiscuous mode [ 109.281444][ T7837] hsr_slave_1: entered promiscuous mode [ 109.288397][ T7837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.306303][ T7837] Cannot create hsr debugfs directory [ 109.531177][ T7837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.546450][ T7837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.662271][ T7837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.674090][ T7837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.715661][ T7885] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.725247][ T7885] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.734525][ T7885] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.744269][ T7885] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.754078][ T7885] geneve2: entered promiscuous mode [ 109.759319][ T7885] geneve2: entered allmulticast mode [ 109.768410][ T7885] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.778038][ T7885] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.787508][ T7885] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.796914][ T7885] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.850407][ T7837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.860895][ T7837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.970498][ T7837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.983166][ T7837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.162131][ T7897] netlink: 'syz.2.609': attribute type 12 has an invalid length. [ 110.169246][ T7898] __nla_validate_parse: 6 callbacks suppressed [ 110.169264][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 110.171010][ T7897] netlink: 'syz.2.609': attribute type 29 has an invalid length. [ 110.195208][ T7897] netlink: 'syz.2.609': attribute type 2 has an invalid length. [ 110.203411][ T7897] netlink: 'syz.2.609': attribute type 2 has an invalid length. [ 110.211074][ T7897] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 110.219066][ T7897] netlink: 'syz.2.609': attribute type 37 has an invalid length. [ 110.228102][ T7897] netlink: 'syz.2.609': attribute type 2 has an invalid length. [ 110.236274][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.243822][ T7837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.279665][ T7837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.301496][ T7837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.317874][ T7837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.450535][ T7908] syzkaller1: entered promiscuous mode [ 110.456930][ T7908] syzkaller1: entered allmulticast mode [ 110.500112][ T7837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.512833][ T5845] Bluetooth: hci1: command tx timeout [ 110.517611][ T7837] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.544914][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.552198][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.596785][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.603975][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.718514][ T7837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.722337][ T7918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.819957][ T7918] netlink: 108 bytes leftover after parsing attributes in process `syz.2.615'. [ 110.951455][ T7837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.205488][ T7945] x_tables: duplicate underflow at hook 2 [ 111.269560][ T7837] veth0_vlan: entered promiscuous mode [ 111.286191][ T7837] veth1_vlan: entered promiscuous mode [ 111.315900][ T7837] veth0_macvtap: entered promiscuous mode [ 111.338371][ T7837] veth1_macvtap: entered promiscuous mode [ 111.370201][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.385423][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.400283][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.418298][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.428307][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.442434][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.459975][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.472262][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.484336][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.495233][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.514966][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.553714][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.565213][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.579154][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.591152][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.614895][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.627944][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.638170][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.648983][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.659316][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.670352][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.690245][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.710226][ T7837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.719108][ T7837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.739357][ T7837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.748410][ T7837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.811565][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 111.883071][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.890919][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.925843][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.938919][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.967145][ T7969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.059010][ T7971] tipc: Started in network mode [ 112.072948][ T7971] tipc: Node identity da66eae130a9, cluster identity 4711 [ 112.080289][ T7971] tipc: Enabled bearer , priority 0 [ 112.088471][ T7971] syzkaller0: entered promiscuous mode [ 112.094427][ T7971] syzkaller0: entered allmulticast mode [ 112.112686][ T7971] tipc: Resetting bearer [ 112.783108][ T7968] tipc: Resetting bearer [ 112.806778][ T7968] tipc: Disabling bearer [ 112.967173][ T7981] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 113.154837][ T79] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.578348][ T8007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 113.768614][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.782391][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.792373][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.804662][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.824740][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 113.842139][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.903963][ T79] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.948943][ T8023] sctp: [Deprecated]: syz.2.648 (pid 8023) Use of int in maxseg socket option. [ 113.948943][ T8023] Use struct sctp_assoc_value instead [ 114.157652][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.651'. [ 114.198260][ T8016] chnl_net:caif_netlink_parms(): no params data found [ 114.267267][ T8036] netlink: 108 bytes leftover after parsing attributes in process `syz.2.653'. [ 114.269703][ T79] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.405212][ T79] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.422449][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.429791][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.438805][ T8016] bridge_slave_0: entered allmulticast mode [ 114.446553][ T8016] bridge_slave_0: entered promiscuous mode [ 114.453538][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 114.455747][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.469566][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.478023][ T8016] bridge_slave_1: entered allmulticast mode [ 114.485314][ T8016] bridge_slave_1: entered promiscuous mode [ 114.495713][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 114.498738][ T8043] netlink: 'syz.0.654': attribute type 12 has an invalid length. [ 114.550572][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.582696][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.647211][ T8016] team0: Port device team_slave_0 added [ 114.661353][ T8016] team0: Port device team_slave_1 added [ 114.729394][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.751813][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.839904][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.883733][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.901238][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.951999][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.982233][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 115.009374][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 115.018500][ T8060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.662'. [ 115.028875][ T79] bridge_slave_1: left allmulticast mode [ 115.042172][ T79] bridge_slave_1: left promiscuous mode [ 115.048096][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.077333][ T79] bridge_slave_0: left allmulticast mode [ 115.086105][ T79] bridge_slave_0: left promiscuous mode [ 115.093372][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.421669][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.432505][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.442830][ T79] bond0 (unregistering): Released all slaves [ 115.474437][ T8016] hsr_slave_0: entered promiscuous mode [ 115.492505][ T8016] hsr_slave_1: entered promiscuous mode [ 115.498748][ T8016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.519122][ T8016] Cannot create hsr debugfs directory [ 115.937650][ T79] hsr_slave_0: left promiscuous mode [ 115.944939][ T54] Bluetooth: hci1: command tx timeout [ 115.968447][ T79] hsr_slave_1: left promiscuous mode [ 115.977425][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.998508][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.009283][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.028415][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.065380][ T79] veth1_macvtap: left promiscuous mode [ 116.071069][ T79] veth0_macvtap: left promiscuous mode [ 116.076852][ T79] veth1_vlan: left promiscuous mode [ 116.083818][ T79] veth0_vlan: left promiscuous mode [ 116.190994][ T8092] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 116.627044][ T79] team0 (unregistering): Port device team_slave_1 removed [ 116.668985][ T79] team0 (unregistering): Port device team_slave_0 removed [ 117.345257][ T8110] Only authenc() type AEADs are supported by ESSIV [ 117.509337][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 117.521932][ T8114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 117.685341][ T8016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.708163][ T8016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.724408][ T8016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.746730][ T8016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.771501][ T8118] team0: Device vti0 is of different type [ 117.899540][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.946822][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.968546][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.975730][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.999416][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.006620][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.022341][ T54] Bluetooth: hci1: command tx timeout [ 118.321512][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.713568][ T8016] veth0_vlan: entered promiscuous mode [ 118.729503][ T8016] veth1_vlan: entered promiscuous mode [ 118.785130][ T8016] veth0_macvtap: entered promiscuous mode [ 118.796237][ T8016] veth1_macvtap: entered promiscuous mode [ 118.814496][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 118.829571][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.844329][ T8177] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 118.853384][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.865069][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.877051][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.887188][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.897808][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.908019][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.918983][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.929649][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.940712][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.980524][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.008500][ T8182] netlink: 5540 bytes leftover after parsing attributes in process `syz.2.695'. [ 119.028712][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.047285][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.060697][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.071814][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.081647][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.092170][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.102212][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.114280][ T8189] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.121625][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.131929][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.143622][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.156096][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.176145][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'. [ 119.198141][ T8016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.215067][ T8016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.234372][ T8016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.247682][ T8016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.304852][ T8193] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 119.322970][ T8193] team0: Device hsr_slave_0 failed to register rx_handler [ 119.450783][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.470304][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.496733][ T8200] netlink: 108 bytes leftover after parsing attributes in process `syz.0.700'. [ 119.511878][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 119.513756][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.537708][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.541296][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'. [ 120.640719][ T8220] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 120.708552][ T8222] netlink: 10 bytes leftover after parsing attributes in process `syz.0.708'. [ 120.723447][ T8222] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 120.780456][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 121.015819][ T8096] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.197557][ T8239] netlink: zone id is out of range [ 121.209070][ T8239] netlink: zone id is out of range [ 121.331260][ T8240] batadv1: left allmulticast mode [ 121.338680][ T8240] batadv1: left promiscuous mode [ 121.351667][ T8240] bridge0: port 3(batadv1) entered disabled state [ 121.374199][ T8240] bridge_slave_1: left allmulticast mode [ 121.380087][ T8240] bridge_slave_1: left promiscuous mode [ 121.388784][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.394342][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.399149][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.415620][ T8240] bridge_slave_0: left allmulticast mode [ 121.421385][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.422222][ T8240] bridge_slave_0: left promiscuous mode [ 121.435130][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.437931][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.451017][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.458607][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.574198][ T8096] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.666721][ T8096] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.753063][ T8096] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.930100][ T8241] chnl_net:caif_netlink_parms(): no params data found [ 122.079746][ T8096] bridge_slave_1: left allmulticast mode [ 122.092151][ T8096] bridge_slave_1: left promiscuous mode [ 122.098996][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.124047][ T8096] bridge_slave_0: left allmulticast mode [ 122.129765][ T8096] bridge_slave_0: left promiscuous mode [ 122.139164][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.530658][ T8096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.548461][ T8096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.558470][ T8096] bond0 (unregistering): Released all slaves [ 122.577115][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.584810][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.592997][ T8241] bridge_slave_0: entered allmulticast mode [ 122.600337][ T8241] bridge_slave_0: entered promiscuous mode [ 122.617708][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.646254][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.671614][ T8241] bridge_slave_1: entered allmulticast mode [ 122.692452][ T8241] bridge_slave_1: entered promiscuous mode [ 122.794922][ T8241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.807729][ T8241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.935474][ T8241] team0: Port device team_slave_0 added [ 122.944444][ T8241] team0: Port device team_slave_1 added [ 122.987417][ T8285] __nla_validate_parse: 2 callbacks suppressed [ 122.987435][ T8285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.725'. [ 123.039669][ T8096] hsr_slave_0: left promiscuous mode [ 123.046274][ T8096] hsr_slave_1: left promiscuous mode [ 123.054710][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.068529][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.079489][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.087422][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.117707][ T8096] veth1_macvtap: left promiscuous mode [ 123.130979][ T8096] veth0_macvtap: left promiscuous mode [ 123.136995][ T8096] veth1_vlan: left promiscuous mode [ 123.152098][ T8096] veth0_vlan: left promiscuous mode [ 123.544764][ T54] Bluetooth: hci1: command tx timeout [ 123.586594][ T8096] team0 (unregistering): Port device team_slave_1 removed [ 123.636586][ T8096] team0 (unregistering): Port device team_slave_0 removed [ 124.038802][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.048562][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.075060][ T8241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.092459][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.099602][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.132178][ T8241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.287418][ T8241] hsr_slave_0: entered promiscuous mode [ 124.305347][ T8241] hsr_slave_1: entered promiscuous mode [ 124.311417][ T8241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.319508][ T8241] Cannot create hsr debugfs directory [ 124.335001][ T8299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.730'. [ 124.680784][ T8317] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 124.708716][ T8317] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 124.723317][ T8317] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 124.732145][ T8317] netlink: 'syz.2.734': attribute type 2 has an invalid length. [ 124.743728][ T8317] netlink: 76 bytes leftover after parsing attributes in process `syz.2.734'. [ 124.752817][ T8318] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 124.763424][ T8318] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 124.778989][ T8318] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 124.788457][ T8318] netlink: 'syz.2.734': attribute type 2 has an invalid length. [ 124.800556][ T8318] netlink: 76 bytes leftover after parsing attributes in process `syz.2.734'. [ 124.818029][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'. [ 124.942665][ T8241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.966335][ T8241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.989403][ T8241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.016878][ T8241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.131061][ T8241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.168066][ T8337] netlink: 'syz.2.740': attribute type 2 has an invalid length. [ 125.178651][ T8241] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.194017][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.201206][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.219240][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.226417][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.434938][ T8345] veth0_macvtap: left promiscuous mode [ 125.447308][ T8345] macvtap0: entered allmulticast mode [ 125.458219][ T8345] macvtap0: refused to change device tx_queue_len [ 125.501468][ T8348] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 125.524994][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.532925][ T8348] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 125.541584][ T8348] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 125.622278][ T54] Bluetooth: hci1: command tx timeout [ 125.718239][ T8352] netlink: 260 bytes leftover after parsing attributes in process `syz.0.744'. [ 125.823382][ T8241] veth0_vlan: entered promiscuous mode [ 125.836447][ T8241] veth1_vlan: entered promiscuous mode [ 125.870379][ T8241] veth0_macvtap: entered promiscuous mode [ 125.894896][ T8241] veth1_macvtap: entered promiscuous mode [ 125.919889][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.941137][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.968007][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.968240][ T8369] xt_bpf: check failed: parse error [ 125.980395][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.995109][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.006057][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.016160][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.027557][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.037705][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.048287][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.060281][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.080473][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.091231][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.101320][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.112132][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.122306][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.133841][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.143825][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.154475][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.164488][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.175309][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.189664][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.204987][ T8241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.216611][ T8241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.225770][ T8241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.236122][ T8241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.347831][ T8096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.363780][ T8096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.386557][ T8374] validate_nla: 1 callbacks suppressed [ 126.386573][ T8374] netlink: 'syz.0.748': attribute type 12 has an invalid length. [ 126.403430][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.412103][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.422755][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.749'. [ 126.424754][ T8376] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 126.671327][ T8386] netlink: 168 bytes leftover after parsing attributes in process `syz.0.752'. [ 126.838150][ T8395] tipc: Enabling of bearer rejected, failed to enable media [ 126.865596][ T8398] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 126.874793][ T8398] netlink: 'syz.2.757': attribute type 2 has an invalid length. [ 126.938441][ T8405] tipc: Enabled bearer , priority 0 [ 126.966187][ T8404] netlink: 248 bytes leftover after parsing attributes in process `syz.0.758'. [ 126.966663][ T8405] tipc: Disabling bearer [ 127.086927][ T8416] IPVS: length: 1116562828 != 24 [ 127.167671][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 127.195007][ T8421] sctp: [Deprecated]: syz.2.762 (pid 8421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.195007][ T8421] Use struct sctp_sack_info instead [ 127.300641][ T8428] syzkaller1: entered promiscuous mode [ 127.307024][ T8428] syzkaller1: entered allmulticast mode [ 127.473704][ T5884] ================================================================== [ 127.481902][ T5884] BUG: KASAN: slab-use-after-free in __mutex_lock+0x830/0x1010 [ 127.489453][ T5884] Read of size 8 at addr ffff888029f14320 by task kworker/0:3/5884 [ 127.497855][ T5884] [ 127.500175][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: kworker/0:3 Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 [ 127.500190][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.500199][ T5884] Workqueue: events l2cap_chan_timeout [ 127.500225][ T5884] Call Trace: [ 127.500235][ T5884] [ 127.500242][ T5884] dump_stack_lvl+0x241/0x360 [ 127.500258][ T5884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.500271][ T5884] ? __pfx__printk+0x10/0x10 [ 127.500284][ T5884] ? _printk+0xd5/0x120 [ 127.500295][ T5884] ? __virt_addr_valid+0x183/0x530 [ 127.500307][ T5884] ? __virt_addr_valid+0x183/0x530 [ 127.500319][ T5884] print_report+0x16e/0x5b0 [ 127.500333][ T5884] ? __virt_addr_valid+0x183/0x530 [ 127.500344][ T5884] ? __virt_addr_valid+0x183/0x530 [ 127.500354][ T5884] ? __virt_addr_valid+0x45f/0x530 [ 127.500365][ T5884] ? __phys_addr+0xba/0x170 [ 127.500383][ T5884] ? __mutex_lock+0x830/0x1010 [ 127.500398][ T5884] kasan_report+0x143/0x180 [ 127.500413][ T5884] ? __mutex_lock+0x830/0x1010 [ 127.500430][ T5884] __mutex_lock+0x830/0x1010 [ 127.500446][ T5884] ? __mutex_lock+0x602/0x1010 [ 127.500463][ T5884] ? l2cap_chan_timeout+0x63/0x360 [ 127.500481][ T5884] ? __pfx___mutex_lock+0x10/0x10 [ 127.500496][ T5884] ? __pfx_lock_acquire+0x10/0x10 [ 127.500517][ T5884] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.500537][ T5884] l2cap_chan_timeout+0x63/0x360 [ 127.500555][ T5884] ? process_scheduled_works+0x9c6/0x18e0 [ 127.500570][ T5884] process_scheduled_works+0xabe/0x18e0 [ 127.500594][ T5884] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.500612][ T5884] ? assign_work+0x364/0x3d0 [ 127.500627][ T5884] worker_thread+0x870/0xd30 [ 127.500647][ T5884] ? __kthread_parkme+0x169/0x1d0 [ 127.500664][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 127.500679][ T5884] kthread+0x7a9/0x920 [ 127.500696][ T5884] ? __pfx_kthread+0x10/0x10 [ 127.500713][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 127.500728][ T5884] ? __pfx_kthread+0x10/0x10 [ 127.500744][ T5884] ? __pfx_kthread+0x10/0x10 [ 127.500766][ T5884] ? __pfx_kthread+0x10/0x10 [ 127.500782][ T5884] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.500795][ T5884] ? lockdep_hardirqs_on+0x99/0x150 [ 127.500810][ T5884] ? __pfx_kthread+0x10/0x10 [ 127.500827][ T5884] ret_from_fork+0x4b/0x80 [ 127.500843][ T5884] ? __pfx_kthread+0x10/0x10 [ 127.500860][ T5884] ret_from_fork_asm+0x1a/0x30 [ 127.500879][ T5884] [ 127.500883][ T5884] [ 127.734189][ T5884] Allocated by task 6922: [ 127.738531][ T5884] kasan_save_track+0x3f/0x80 [ 127.743217][ T5884] __kasan_kmalloc+0x98/0xb0 [ 127.747806][ T5884] __kmalloc_cache_noprof+0x243/0x390 [ 127.753256][ T5884] l2cap_conn_add+0xa9/0x8e0 [ 127.757834][ T5884] l2cap_chan_connect+0x61e/0xeb0 [ 127.762868][ T5884] l2cap_sock_connect+0x620/0x950 [ 127.767914][ T5884] kernel_connect+0x119/0x180 [ 127.772583][ T5884] rfcomm_dlc_open+0xadc/0x10d0 [ 127.777420][ T5884] rfcomm_sock_connect+0x305/0x610 [ 127.782520][ T5884] __sys_connect+0x288/0x2d0 [ 127.787104][ T5884] __x64_sys_connect+0x7a/0x90 [ 127.791856][ T5884] do_syscall_64+0xf3/0x230 [ 127.796345][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.802227][ T5884] [ 127.804541][ T5884] Freed by task 6663: [ 127.808499][ T5884] kasan_save_track+0x3f/0x80 [ 127.813167][ T5884] kasan_save_free_info+0x40/0x50 [ 127.818265][ T5884] __kasan_slab_free+0x59/0x70 [ 127.823103][ T5884] kfree+0x196/0x430 [ 127.826983][ T5884] hci_conn_hash_flush+0x1be/0x350 [ 127.832099][ T5884] hci_dev_close_sync+0xa8b/0x1260 [ 127.837198][ T5884] hci_unregister_dev+0x20b/0x510 [ 127.842209][ T5884] vhci_release+0x80/0xd0 [ 127.846612][ T5884] __fput+0x3e9/0x9f0 [ 127.850582][ T5884] task_work_run+0x24f/0x310 [ 127.855160][ T5884] do_exit+0xa2a/0x28e0 [ 127.859304][ T5884] do_group_exit+0x207/0x2c0 [ 127.863884][ T5884] __x64_sys_exit_group+0x3f/0x40 [ 127.868898][ T5884] x64_sys_call+0x26a8/0x26b0 [ 127.873570][ T5884] do_syscall_64+0xf3/0x230 [ 127.878063][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.883950][ T5884] [ 127.886298][ T5884] The buggy address belongs to the object at ffff888029f14000 [ 127.886298][ T5884] which belongs to the cache kmalloc-1k of size 1024 [ 127.900355][ T5884] The buggy address is located 800 bytes inside of [ 127.900355][ T5884] freed 1024-byte region [ffff888029f14000, ffff888029f14400) [ 127.914249][ T5884] [ 127.916562][ T5884] The buggy address belongs to the physical page: [ 127.922957][ T5884] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29f10 [ 127.931722][ T5884] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 127.940418][ T5884] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 127.948052][ T5884] page_type: f5(slab) [ 127.952032][ T5884] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 127.960603][ T5884] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 127.969176][ T5884] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 127.977923][ T5884] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 127.986598][ T5884] head: 00fff00000000003 ffffea0000a7c401 ffffffffffffffff 0000000000000000 [ 127.995257][ T5884] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 128.003910][ T5884] page dumped because: kasan: bad access detected [ 128.010318][ T5884] page_owner tracks the page as allocated [ 128.016019][ T5884] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11, tgid 11 (kworker/u8:0), ts 76570196640, free_ts 76535056754 [ 128.035032][ T5884] post_alloc_hook+0x1f4/0x240 [ 128.039792][ T5884] get_page_from_freelist+0x365c/0x37a0 [ 128.045326][ T5884] __alloc_frozen_pages_noprof+0x292/0x710 [ 128.051114][ T5884] alloc_pages_mpol+0x311/0x660 [ 128.056041][ T5884] allocate_slab+0x8f/0x3a0 [ 128.060552][ T5884] ___slab_alloc+0xc27/0x14a0 [ 128.065218][ T5884] __slab_alloc+0x58/0xa0 [ 128.069537][ T5884] __kmalloc_noprof+0x2e6/0x4c0 [ 128.074381][ T5884] ieee802_11_parse_elems_full+0xd9/0x2750 [ 128.080270][ T5884] ieee80211_ibss_rx_queued_mgmt+0x4cf/0x2e00 [ 128.086325][ T5884] ieee80211_iface_work+0x8dc/0xf90 [ 128.091601][ T5884] cfg80211_wiphy_work+0x2f0/0x490 [ 128.096722][ T5884] process_scheduled_works+0xabe/0x18e0 [ 128.102259][ T5884] worker_thread+0x870/0xd30 [ 128.106837][ T5884] kthread+0x7a9/0x920 [ 128.110894][ T5884] ret_from_fork+0x4b/0x80 [ 128.115295][ T5884] page last free pid 6410 tgid 6407 stack trace: [ 128.121612][ T5884] free_frozen_pages+0xe0d/0x10e0 [ 128.126642][ T5884] __put_partials+0x160/0x1c0 [ 128.131323][ T5884] put_cpu_partial+0x17c/0x250 [ 128.136085][ T5884] __slab_free+0x290/0x380 [ 128.140495][ T5884] qlist_free_all+0x9a/0x140 [ 128.145076][ T5884] kasan_quarantine_reduce+0x14f/0x170 [ 128.150522][ T5884] __kasan_slab_alloc+0x23/0x80 [ 128.155361][ T5884] kmem_cache_alloc_noprof+0x1d9/0x380 [ 128.160809][ T5884] taskstats_exit+0x360/0xa60 [ 128.165473][ T5884] do_exit+0x9a8/0x28e0 [ 128.169617][ T5884] do_group_exit+0x207/0x2c0 [ 128.174199][ T5884] get_signal+0x168c/0x1720 [ 128.178734][ T5884] arch_do_signal_or_restart+0x96/0x860 [ 128.184288][ T5884] syscall_exit_to_user_mode+0xce/0x340 [ 128.189828][ T5884] do_syscall_64+0x100/0x230 [ 128.194411][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.200296][ T5884] [ 128.202605][ T5884] Memory state around the buggy address: [ 128.208218][ T5884] ffff888029f14200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.216262][ T5884] ffff888029f14280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.224311][ T5884] >ffff888029f14300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.232367][ T5884] ^ [ 128.237458][ T5884] ffff888029f14380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.245503][ T5884] ffff888029f14400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.253578][ T5884] ================================================================== [ 128.263589][ T5884] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.270822][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: kworker/0:3 Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 [ 128.281689][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.291748][ T5884] Workqueue: events l2cap_chan_timeout [ 128.297216][ T5884] Call Trace: [ 128.300481][ T5884] [ 128.303403][ T5884] dump_stack_lvl+0x241/0x360 [ 128.308075][ T5884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.313349][ T5884] ? __pfx__printk+0x10/0x10 [ 128.317933][ T5884] ? vscnprintf+0x5d/0x90 [ 128.322255][ T5884] panic+0x349/0x880 [ 128.326139][ T5884] ? check_panic_on_warn+0x21/0xb0 [ 128.331242][ T5884] ? __pfx_panic+0x10/0x10 [ 128.335646][ T5884] ? mark_lock+0x9a/0x360 [ 128.339962][ T5884] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 128.345844][ T5884] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 128.351725][ T5884] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.358050][ T5884] ? print_report+0x519/0x5b0 [ 128.362815][ T5884] check_panic_on_warn+0x86/0xb0 [ 128.367745][ T5884] ? __mutex_lock+0x830/0x1010 [ 128.372500][ T5884] end_report+0x77/0x160 [ 128.376740][ T5884] kasan_report+0x154/0x180 [ 128.381233][ T5884] ? __mutex_lock+0x830/0x1010 [ 128.385993][ T5884] __mutex_lock+0x830/0x1010 [ 128.390576][ T5884] ? __mutex_lock+0x602/0x1010 [ 128.395336][ T5884] ? l2cap_chan_timeout+0x63/0x360 [ 128.400440][ T5884] ? __pfx___mutex_lock+0x10/0x10 [ 128.405454][ T5884] ? __pfx_lock_acquire+0x10/0x10 [ 128.410474][ T5884] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.416796][ T5884] l2cap_chan_timeout+0x63/0x360 [ 128.421733][ T5884] ? process_scheduled_works+0x9c6/0x18e0 [ 128.427448][ T5884] process_scheduled_works+0xabe/0x18e0 [ 128.433010][ T5884] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.438979][ T5884] ? assign_work+0x364/0x3d0 [ 128.443560][ T5884] worker_thread+0x870/0xd30 [ 128.448142][ T5884] ? __kthread_parkme+0x169/0x1d0 [ 128.453156][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 128.458256][ T5884] kthread+0x7a9/0x920 [ 128.462315][ T5884] ? __pfx_kthread+0x10/0x10 [ 128.466895][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 128.471995][ T5884] ? __pfx_kthread+0x10/0x10 [ 128.476672][ T5884] ? __pfx_kthread+0x10/0x10 [ 128.481296][ T5884] ? __pfx_kthread+0x10/0x10 [ 128.485878][ T5884] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.491087][ T5884] ? lockdep_hardirqs_on+0x99/0x150 [ 128.496396][ T5884] ? __pfx_kthread+0x10/0x10 [ 128.501077][ T5884] ret_from_fork+0x4b/0x80 [ 128.505512][ T5884] ? __pfx_kthread+0x10/0x10 [ 128.510142][ T5884] ret_from_fork_asm+0x1a/0x30 [ 128.514994][ T5884] [ 128.518357][ T5884] Kernel Offset: disabled [ 128.522667][ T5884] Rebooting in 86400 seconds..