last executing test programs: 57.7934177s ago: executing program 1 (id=346): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r3, 0x531, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@flushpolicy={0x40, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0x2, 0x5a, 0x4}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797ad44e91bc28d42631446548cdfc30000000003c000000090a010400000000000000000700000008000a400000000009000200a438d7e473797a31000000000900010073797a30000000000000001a0e000021400000000c0a01010000000000000000070000060900020073790b31000000001400038010000080080003400000000204000b800900010073797a300000000014000000100001000000000000000000"], 0xc4}}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 49.695624699s ago: executing program 1 (id=346): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r3, 0x531, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@flushpolicy={0x40, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0x2, 0x5a, 0x4}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797ad44e91bc28d42631446548cdfc30000000003c000000090a010400000000000000000700000008000a400000000009000200a438d7e473797a31000000000900010073797a30000000000000001a0e000021400000000c0a01010000000000000000070000060900020073790b31000000001400038010000080080003400000000204000b800900010073797a300000000014000000100001000000000000000000"], 0xc4}}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 40.294460076s ago: executing program 1 (id=346): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r3, 0x531, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@flushpolicy={0x40, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0x2, 0x5a, 0x4}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797ad44e91bc28d42631446548cdfc30000000003c000000090a010400000000000000000700000008000a400000000009000200a438d7e473797a31000000000900010073797a30000000000000001a0e000021400000000c0a01010000000000000000070000060900020073790b31000000001400038010000080080003400000000204000b800900010073797a300000000014000000100001000000000000000000"], 0xc4}}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 27.165142775s ago: executing program 1 (id=346): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r3, 0x531, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@flushpolicy={0x40, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0x2, 0x5a, 0x4}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797ad44e91bc28d42631446548cdfc30000000003c000000090a010400000000000000000700000008000a400000000009000200a438d7e473797a31000000000900010073797a30000000000000001a0e000021400000000c0a01010000000000000000070000060900020073790b31000000001400038010000080080003400000000204000b800900010073797a300000000014000000100001000000000000000000"], 0xc4}}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.361694796s ago: executing program 1 (id=346): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r3, 0x531, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@flushpolicy={0x40, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0x2, 0x5a, 0x4}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797ad44e91bc28d42631446548cdfc30000000003c000000090a010400000000000000000700000008000a400000000009000200a438d7e473797a31000000000900010073797a30000000000000001a0e000021400000000c0a01010000000000000000070000060900020073790b31000000001400038010000080080003400000000204000b800900010073797a300000000014000000100001000000000000000000"], 0xc4}}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.073924428s ago: executing program 1 (id=346): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r3, 0x531, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@flushpolicy={0x40, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0x2, 0x5a, 0x4}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797ad44e91bc28d42631446548cdfc30000000003c000000090a010400000000000000000700000008000a400000000009000200a438d7e473797a31000000000900010073797a30000000000000001a0e000021400000000c0a01010000000000000000070000060900020073790b31000000001400038010000080080003400000000204000b800900010073797a300000000014000000100001000000000000000000"], 0xc4}}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.615297796s ago: executing program 4 (id=747): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x400, 0x1, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000080)=0xfffffffe, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e200000000000000000000e10000000000092d7d6d"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f0000000700)=@framed={{}, [@map_fd]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) listen(r3, 0x8) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)='.', 0x1}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="17000000bd00000000ff00000600"/24, @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r4 = socket(0x2b, 0x80801, 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x79118b3ee5622451, @void, @value}, 0x28) setsockopt(r5, 0x800000010d, 0x2, 0x0, 0x0) getsockopt$inet_int(r5, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) 3.460922061s ago: executing program 4 (id=749): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b66e92c9a330f4a18bc9b6337e2ec5ef5014be4520c4f8eae2841e", 0x23}], 0x1}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40814}, 0xc800) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x1, {0x1, 0xff}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x1, 0x0, {0x0, 0xff}, {0x2, 0x0, 0x1}, 0x0, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0xa, 0x4}, {0x0, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r9, 0x10d, 0xe0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/pid\x00') 3.278746586s ago: executing program 2 (id=752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x80000d0) (async) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000180)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x7b52, 0x4) (async) recvfrom(r4, 0x0, 0x0, 0x2, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x400, 0x0, @loopback, 0xfffffffc}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x201}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040044) 3.276024765s ago: executing program 3 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf2521000000", @ANYRES32=r2, @ANYBLOB="0a00060008"], 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4004800) 3.204713263s ago: executing program 2 (id=754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x3c, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8e8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x810) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffffffffd21, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24084040) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1a, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, [@alu={0x7, 0x1, 0xc, 0x7, 0x9, 0x2, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x3a, &(0x7f0000000700)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x9, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x4, 0x1, 0xb, 0x7}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000000c0)='mm_collapse_huge_page_swapin\x00', r4, 0x0, 0x7}, 0x18) 3.07558698s ago: executing program 3 (id=755): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x80, 0x20, 0x6, 0x2, {{0x8, 0x4, 0x0, 0x3b, 0x20, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x8a, [@private=0xa010102, @local]}]}}}}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/1, 0x1}], 0x4, &(0x7f00000006c0)=""/178, 0xb2}, 0x20) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)="89c064", 0x3}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) write(r4, &(0x7f0000000540)="d5e227572845", 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000900)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f00000007c0)={0x24, @none={0x0, 0x1}}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000480)="ff57a211", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000009, 0x10012, r7, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f0000000880)=0x7, 0x8) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendto$packet(r1, &(0x7f00000002c0)="12ccf7e8c25f48779c841ace21040500d3fc", 0x12, 0x80000, &(0x7f0000000140)={0x11, 0x5, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz0\x00', 0x1ff) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) sendto$inet(r10, &(0x7f00000003c0)="714590ce594937a5e81d1f0e86d40829fb4885e7699d8930e8fa44e971b53e24e581229a210e81f75b37ef9f3472b898d62d8e0b98ddb289813f9a273b7783b5e0bb40acad9cee2bf2bf28f0fa42fceb8385da074857f975bdf7f901ea666dfd7e8b9a3b6e506f885a3c16399820f29ad5ec707af28d84f38b655aeb1ffa2126106bc9a7c60a33c85123412cea9c0d2bb6e7cbbe1c666cfa7e3348a892829335b470ea4a796c61b23165cb006e068ec4051a85b5866350cb18cff512", 0xbc, 0x40001, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/228, 0xe4}], 0x1) 2.931842933s ago: executing program 0 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00f30000000000b29a21d0cda796fa0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = socket(0x29, 0x800, 0x6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2e0000dda0f0c8dc653473", @ANYRES16=r7, @ANYBLOB="00042abd7000ffdbdf256f000000080026005014000008009f0007000000050019010e000000080026006c090000080026006c090000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) recvmmsg(r10, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000001, &(0x7f0000000a00)) unshare(0x4000600) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r12}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800001000010000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="5d580000000000002c001a80280002802400018008001c00000000000800060097fa0d5808000000ff03000008000200070000000a000200bbbbbbbbbbbb0000"], 0x58}}, 0x0) 2.927549431s ago: executing program 2 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xdd, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01c8141d50bcb4ab91254500000008000300", @ANYRES32=r4], 0x30}}, 0x4000040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d65746100000000140002800800014000000010080002"], 0xf8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007112110000a62d5be5000000000000009df5ecdb7647d6549bc69fefec255bf4bd2f3e76c111b7658e074a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.295648494s ago: executing program 2 (id=758): syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000120001000000000000010000fc0000000000000000000000000000010000000000000a0014000d000a0101020000000000000000000000000800160006000000"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a0"], 0xfdef) 2.28486208s ago: executing program 4 (id=759): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000900)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4b2ad17faeecced100e303a84192621adf0ad9aae82a7fdac906fd7c2559b2f2", "df54a0d2181be8ff699f50b382856212056a3abdc495280e2fc976486f65c3c9672fca84a657e06548cf602cfd8b5314", "2b7630f9f9f115aa49ca32a3434f7896d928633f4f810cb5ee639568", {"ce000000000000005851853e00", "b0738f143c59c31a44c7efc278597bf3"}}}}}}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c00098008"], 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}]}, 0x28}}, 0x0) 2.172005903s ago: executing program 0 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x84, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x8e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x1) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8014) socket(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x8, 0x2, 0x0, 0xfffffffb, 0x25dfdbfb}, 0x10}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200440069700180cc49b980996e0b0b33040000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r8, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3c}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x48}}, 0x0) 2.061363753s ago: executing program 3 (id=761): r0 = epoll_create1(0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x600) (async) recvfrom$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000005000100070000000900020073797a00001400078008001300ffffffff0800124000000004050005000a000000050004000000000011000300686173683a6e65742c6e65740000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4044001}, 0x4000) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, 0x0, 0x20000000) (async) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000008d269f6600020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003a305000100000000000c0002"], 0xc0}}, 0x0) (async) shutdown(r3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) poll(&(0x7f0000000300)=[{r11, 0x404}], 0x1, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000021000000000000003b810000810000006d0080080700e7ffffffffff9430671c219ef08bc5a32d359c13b405ecf1cebe6290cd443e9dc1489cb63693c8cd8f56e4314cc18205d837623942b837f87255efcb45c4be7232239870b06df85f2695120efa20484ac15d07a1a4858f9075bb7d3717f02405704d681da4eeaf3b021b200b524855e349af6848597f2245228ad892f5f06ff4e0704fcf3b6b1a96b09cac"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xffffffffffffffdb, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r2) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0xa002a008}) 2.032611309s ago: executing program 4 (id=762): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000e80)={&(0x7f0000000d80)=""/206, 0xce, 0x7fff, 0x2}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x3c, r4, 0x1, 0x78bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000490001002bbd7000000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000000080000", 0x1c) sendto$netrom(r8, &(0x7f0000000bc0)="a47937225e867de69d641371e700ea0293a0ed42179884d7eaf79dadc7f68146000c6986b493e9dd520dcfdbda6c27173d16231cbd811ccaf8feb4cd02ef78da86d0da300ef480f054736595f9dc155b38e2faf8ba77bb95885fd44031973c26", 0x60, 0x44055, &(0x7f0000000c40)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="34000000150a010400000000000000000200000608000340000000040900010073797a30000000000900020073797a31000000003e1817e81e9473a492a7ca59942c61a51936e3d755aa08bbc2689d5ff3d2506e65ee21e16f23062d25476b65e36efdd50e01467a9b6424b17462fed4d6feb3ccdc84033404dc151c9bdfdbe1dd5c692716c41960ae49ab9b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.907367285s ago: executing program 0 (id=763): r0 = socket(0x2a, 0x2, 0xc3) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @private=0xa010102}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000}, 0x50) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000140)={0x34, r4, 0xc01, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.82752349s ago: executing program 3 (id=764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1.775225745s ago: executing program 2 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf25210000000800", @ANYRES32=r2, @ANYBLOB="0a00060008"], 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4004800) 1.615410479s ago: executing program 0 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e23, 0x0, @empty, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0xfd9a}, 0x0, {[0x400000, 0x5, 0xb, 0x500, 0x40, 0x0, 0x3, 0x9]}}, 0x5c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000340)={0x0, 0x6, 0x1, 0x36, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2]}, 0x38) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r2, 0x3, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r8, r5, 0x16, 0x2002, 0x0, @value=r9, @void, @void, @void, r7}, 0x20) r10 = socket$isdn(0x22, 0x3, 0x23) ioctl$IMCTRLREQ(r10, 0x80044945, &(0x7f0000000640)={0x80, 0x4, 0x8, 0x5}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r11, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) write(r8, &(0x7f00000007c0)="e4e2418c00834301b508320c02e560df70a51486248a", 0x16) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a80)={'sit0\x00', &(0x7f00000009c0)={'gre0\x00', 0x0, 0x20, 0x20, 0x5, 0x1, {{0x26, 0x4, 0x2, 0x2, 0x98, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x0, 0x2}, {0x2, 0x4, "ad51"}, {0x7, 0x4, "59bb"}, {0x2, 0x9, "ccb5c15f3a6463"}, {0x6, 0x12, "ed7e0004aac611794327437e9cb87cce"}, {0x0, 0x10, "e8913f856e6cf9c1f499ce2eb1ac"}, {0x0, 0xb, "cbb48b9b775a0433a7"}, {0x1, 0x8, "45f58b08188e"}]}, @end, @timestamp_prespec={0x44, 0x34, 0x6e, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x9}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xb80}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002580)={'syztnl1\x00', &(0x7f0000002500)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x0, 0x6b4dca63, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x8000, 0x7, 0x9, 0x32}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000002640)={'gretap0\x00', &(0x7f00000025c0)={'erspan0\x00', 0x0, 0x10, 0x80, 0x4, 0x9, {{0xb, 0x4, 0x3, 0x24, 0x2c, 0x65, 0x0, 0x6, 0x29, 0x0, @local, @empty, {[@noop, @ssrr={0x89, 0x13, 0xf0, [@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000029c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002c40)={'batadv0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002cc0)=[{{&(0x7f0000000800)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000840)="2fb0abaef9c017324735f1edf44806e0f9dac080d431cc5703284a86b1c50641bbb1e81aa338e081402d3cf31353ffedbea8362225320d103f1924df13f5594698c2ba95cacd6dcc8a8987c3c6253c9f111ba8ef330cd04c93c37d662524b37ba1570b2324e74a2072e4d855945477a23d5fbc73b138d46ec2f9bce84fc975e5d75e084893c6cb1e083c89685206791555d8ae4afd2236f0774e52e6deb0acf79b", 0xa1}], 0x1, &(0x7f0000000ac0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@end, @noop, @timestamp_addr={0x44, 0xc, 0x8e, 0x1, 0x7, [{@remote, 0xfffffff8}]}]}}}, @ip_retopts={{0x124, 0x0, 0x7, {[@cipso={0x86, 0x2e, 0x2, [{0x2, 0xc, "9ace977d39a0a01345a3"}, {0xd, 0x11, "b0325fa3c8c55c31d9b0a649ceb335"}, {0x2, 0xb, "9164f0497694fd796e"}]}, @lsrr={0x83, 0x1b, 0x31, [@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @private=0xa010101, @private=0xa010101, @local]}, @ssrr={0x89, 0xf, 0x99, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0xc7, 0x1, 0x2, [{@broadcast, 0xffff}, {@local}, {@broadcast}]}, @cipso={0x86, 0x75, 0x1, [{0x6, 0x6, 'D0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000980)={'gre0\x00', 0x800}) vmsplice(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="99f64193a96d742268ac79b7b3946d6b59224aed5afbd0651420e7c27e6c28698e4a907cc39fae20eb643185300b754d978dd7e2c6f280581169be00f01f90fdae76df97ff139242d6c35e98bafd7720d4a06f681694f6c29bc80fe835374c9342c973e1797f39db404effea41d9c8e6ecbd45993b26607aeba5a68a6ed6dfaad30ef22d3ca3575e460b8e1911e33441", 0x90}, {&(0x7f0000000a80)="683ec633c53e592247d1ed1f5957c0ee63e39ff30bf37f", 0x17}, {&(0x7f0000000ac0)="fe4871c9f7e9475014d6879c3b9027c4f03b4eab9ab1622f65e1f6d5c7a366794ad85e3db45a80e09cff387c6fe4bff240b35fb264208d953803aa3c5240034d8c3e1ce96f23643af71375206cd4bb0097031b4fe51457cceb51fa0b95af38c25486569c58ac58686474038ef57a8e3fa1b4a6f95d6f7a069344663ed5c5059da5eda2d8140d002e715e236785230e72e4b4215c66ec1f2ddf8af4706d92336153341b177dc3ddaa191bbb02c13876c0dc3f2740ee6e65fe6551d67dacce785141ea343299ebdd7dd187a9590331af", 0xcf}], 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x18, 0x9, 0x6, 0x7, 0x404, r7, 0x5, '\x00', r9, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000cc0)={0x0, 0xe8, "7d9f9c9999576452e54f78938ad43cf8ed50dcf04766ce9e696a8d1209126467dfa375803c46736e4b454633ceada301d2aafe0b45d5f523fa4b069ea7f07fd1890a85a2d93a2e42d6e3ce1159116d4b1f3b83677b79ec0a2d4899498bdbc960cecb66f6656e4de47aaa797fc315ae7c2cf1730e8a8861bbbdfacd0eeb9588e943bbd1383a62cc867e61b77a31f0750a511bc7632f3a7a15c8c18d09ac7fa722d66b9544c173871591c44d4f0591a96aa6d23c56c110448ba03aa4646ea451857703a3eede06d290a33e2380b068e56bdce44b3d55e38e086d76d90bb0ab2a65c1fdc9d8ed6c1885"}, &(0x7f0000000dc0)=0xf0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000e00)={r10, 0x5a, "af09125f51dcb0df5fc06d22653644b64370f428453083e2781d4794df0facd1820baecd1bc97374643dffd1af2a448c2dee0ab5d9f726cc4cd507590e52c91cf23396a89d6a8adfc7c13f94ffac682eb65633e89a1547ca6adf"}, &(0x7f0000000e80)=0x62) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000ec0)=[@in6={0xa, 0x4e20, 0x8a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}, @in={0x2, 0x4e20, @broadcast}], 0x2c) pipe(&(0x7f0000000f00)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0xc0c89425, &(0x7f0000000f40)={"8f250c1e899ca6fb5655ef017b78117d", 0x0, 0x0, {0x1, 0x7fffffff}, {0x3ff, 0x33}, 0x101, [0xfffffffffffffec5, 0x8, 0xc4f4, 0x2, 0xe, 0x6, 0xa, 0x5, 0x10, 0x9, 0x7, 0x1, 0xd0c40, 0xfffffffffffff801, 0x0, 0x3d]}) ioctl$BTRFS_IOC_WAIT_SYNC(r11, 0x40089416, &(0x7f0000001040)=r12) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0xff, 0x3}, {0xf, 0x3}, {0x6, 0x1}, {0x9, 0x5}, {0xe4, 0x3}, {0x2, 0x7}, {0x5, 0x7}, {0x5, 0x6}, {0x7}, {0x4, 0x7}, {0xc9, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x7b, 0x7}, {0xca, 0x3}, {0xa}, {0xcd, 0x1}, {0x8, 0x6}, {0x7, 0x6}, {0x8, 0x1}], "cada5d95443b9ea4"}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 228.035912ms ago: executing program 3 (id=770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) unshare(0x20000400) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f00000000c0)=""/16, 0x10}], 0x5, &(0x7f0000000880)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000780)=""/110, 0x6e}, &(0x7f0000000280), 0x30}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x9}, &(0x7f0000000300)=0x101, &(0x7f0000000500)=0xffffffffffffffff, 0x6, 0x6, 0x7, 0xc, 0x14, 0x8a9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xc}, @zcopy_cookie={0x18, 0x114, 0xc, 0x75bb}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @cswp={0x58, 0x114, 0x7, {{0x80000000, 0x3}, &(0x7f0000000800)=0x7ff, &(0x7f0000000840)=0x10, 0xf0f, 0x0, 0xd, 0x6, 0x8}}], 0x128, 0x4000080}, 0x40) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async, rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (async) sendto$inet(r6, &(0x7f0000000380)='g', 0x1, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 81.809657ms ago: executing program 3 (id=771): r0 = socket$netlink(0x10, 0x3, 0xb) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d268847", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x8, @empty}}, 0x0, 0x2000, 0x0, 0xc, 0x26}, 0x9c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@assoc={0x18, 0x117, 0x4, 0xa6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x8045}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0xffffffffffffffac, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x20, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_rxfh={0x46, 0x0, 0xb, 0xfffffffc, 0x6, "750cdc", 0xffffffff}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x6c, r9, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="565378c7125ee20580bfb5a9c68e5ecbe43f3b02000000000000092a04d100"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6a71f3eb17c6b94df8661efa8e2a5e717840652ad5fa719b"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000015000100000000000000000002180000", @ANYRES32=r6, @ANYBLOB="4bd08ccc0df2a98e"], 0x20}, 0x1, 0x0, 0x0, 0x4004044}, 0x844) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100)=0xffff64eb, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x37, 0xe, 0xffffffffffffffff, @void, @value}, 0x20) sendmmsg$inet(r1, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='3', 0x1}], 0x1}}], 0x2, 0x60cd894) 61.220221ms ago: executing program 0 (id=772): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 4 (id=773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='.'], 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}]}], {0x14}}, 0x68}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4], 0x44}}, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000001580)={{{@in6=@remote, @in6=@private2, 0x4e21, 0xfffb, 0x4e22, 0xfffd, 0xa, 0x80, 0xc0, 0x3c}, {0x34, 0x7fff, 0x7fff, 0x9, 0x6, 0xd, 0x0, 0x12000000000}, {0xf, 0xa0f, 0xe, 0x1}, 0x83b, 0x6e6bb7, 0x1, 0x1, 0x1, 0x6f23e161ad6863d5}, {{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in6=@loopback, 0x3504, 0x4, 0x3, 0x78, 0x3, 0x7fffffff, 0x755f}}, 0xe8) (async) r10 = socket(0x1, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="fb71f919568b5400e00707e7797f45db0fde140fddffd02e45bb7164cc162c421c35c08ad6497462aafa5fae2b4210df98767db7df087ff81e6632b1182fa0528c874c210d0f62ce49cfd2613afe159d0a696f3f33fb692226df327836afd2ffa7fb412a4bdbd126172bb0aa73df548c17b4", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000000001800", @ANYRES32=r12, @ANYRES32=r11, @ANYRES16=r3, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r13, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x45) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "66068bd7ab6fade84d00ad9daec23457cd905e8ab3122a07346f67efe045af75", "94f88140561f17e5c9ae9895480debb308427b3bb807faaee05bcf866466bd21", "05749a6192ea177170bddd1eeafa2884ac325f71703bab20d80cbe3763d0a0b2", "60071f3673f8df3778d71fa8d811fa6cde5d235551d9b31a40b83844bac31356", "dbe8283f107d9be60b1ace3158d169bc5dd967a8d9bb4402d9e478a23852d142", "0d25f0d10a765f6bf9cd839c", 0x9, 0x10001, 0x9, 0x3, 0x8a3}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 59.331368][ T5817] cgroup: Unknown subsys name 'net' [ 59.458171][ T5817] cgroup: Unknown subsys name 'cpuset' [ 59.466220][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.761815][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.429662][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.438180][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.446999][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.447218][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.463685][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.465410][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.479022][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.481634][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.487310][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.499361][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.501079][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.507167][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.515507][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.522354][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.530526][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.536863][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.550081][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.551052][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.558341][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.568168][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.571818][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.579057][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.587124][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.593400][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.599662][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.607278][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.617757][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.634259][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.646024][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.657808][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.037028][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 65.102133][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 65.177205][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 65.235941][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 65.329182][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.337783][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.345328][ T5830] bridge_slave_0: entered allmulticast mode [ 65.351981][ T5830] bridge_slave_0: entered promiscuous mode [ 65.360009][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 65.370193][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.377371][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.384583][ T5830] bridge_slave_1: entered allmulticast mode [ 65.391531][ T5830] bridge_slave_1: entered promiscuous mode [ 65.432071][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.439658][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.447191][ T5828] bridge_slave_0: entered allmulticast mode [ 65.453749][ T5828] bridge_slave_0: entered promiscuous mode [ 65.483015][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.490311][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.498224][ T5834] bridge_slave_0: entered allmulticast mode [ 65.505080][ T5834] bridge_slave_0: entered promiscuous mode [ 65.523703][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.530882][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.538550][ T5828] bridge_slave_1: entered allmulticast mode [ 65.545454][ T5828] bridge_slave_1: entered promiscuous mode [ 65.570881][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.578621][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.585902][ T5834] bridge_slave_1: entered allmulticast mode [ 65.592466][ T5834] bridge_slave_1: entered promiscuous mode [ 65.601741][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.615562][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.670369][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.683446][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.718448][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.726709][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.734326][ T5827] bridge_slave_0: entered allmulticast mode [ 65.741106][ T5827] bridge_slave_0: entered promiscuous mode [ 65.749348][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.756659][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.763851][ T5827] bridge_slave_1: entered allmulticast mode [ 65.771153][ T5827] bridge_slave_1: entered promiscuous mode [ 65.792554][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.804857][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.816840][ T5830] team0: Port device team_slave_0 added [ 65.838388][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.845870][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.853247][ T5829] bridge_slave_0: entered allmulticast mode [ 65.861415][ T5829] bridge_slave_0: entered promiscuous mode [ 65.884921][ T5830] team0: Port device team_slave_1 added [ 65.900050][ T5828] team0: Port device team_slave_0 added [ 65.909247][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.916534][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.923706][ T5829] bridge_slave_1: entered allmulticast mode [ 65.931844][ T5829] bridge_slave_1: entered promiscuous mode [ 65.941730][ T5834] team0: Port device team_slave_0 added [ 65.950162][ T5834] team0: Port device team_slave_1 added [ 65.964694][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.976186][ T5828] team0: Port device team_slave_1 added [ 65.983525][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.050791][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.071438][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.078866][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.105101][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.133758][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.153229][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.160363][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.186908][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.198400][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.205671][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.231902][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.243705][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.251072][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.277323][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.290757][ T5827] team0: Port device team_slave_0 added [ 66.299195][ T5827] team0: Port device team_slave_1 added [ 66.311607][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.318908][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.344944][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.367882][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.375145][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.401208][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.424803][ T5829] team0: Port device team_slave_0 added [ 66.432867][ T5829] team0: Port device team_slave_1 added [ 66.488702][ T5830] hsr_slave_0: entered promiscuous mode [ 66.495361][ T5830] hsr_slave_1: entered promiscuous mode [ 66.502323][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.512774][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.539707][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.559824][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.566954][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.593026][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.605778][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.612757][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.638916][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.670354][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.677519][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.703735][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.714852][ T5837] Bluetooth: hci1: command tx timeout [ 66.714858][ T5840] Bluetooth: hci0: command tx timeout [ 66.715246][ T5840] Bluetooth: hci2: command tx timeout [ 66.726522][ T5144] Bluetooth: hci3: command tx timeout [ 66.726736][ T5144] Bluetooth: hci4: command tx timeout [ 66.753347][ T5834] hsr_slave_0: entered promiscuous mode [ 66.760073][ T5834] hsr_slave_1: entered promiscuous mode [ 66.766862][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.774776][ T5834] Cannot create hsr debugfs directory [ 66.793079][ T5828] hsr_slave_0: entered promiscuous mode [ 66.799599][ T5828] hsr_slave_1: entered promiscuous mode [ 66.807682][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.815466][ T5828] Cannot create hsr debugfs directory [ 66.855482][ T5827] hsr_slave_0: entered promiscuous mode [ 66.861639][ T5827] hsr_slave_1: entered promiscuous mode [ 66.867899][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.876001][ T5827] Cannot create hsr debugfs directory [ 66.944591][ T5829] hsr_slave_0: entered promiscuous mode [ 66.950782][ T5829] hsr_slave_1: entered promiscuous mode [ 66.957458][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.965742][ T5829] Cannot create hsr debugfs directory [ 67.225912][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.260585][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.286385][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.309119][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.353457][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.369871][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.393279][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.402930][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.452855][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.479937][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.492638][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.513167][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.539446][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.550205][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.591664][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.616331][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.678075][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.692786][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.706224][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.718973][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.730722][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.802501][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.827240][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.834582][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.848585][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.870949][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.878123][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.905855][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.926203][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.953842][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.961012][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.974388][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.981500][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.041480][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.058278][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.090584][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.101326][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.117989][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.125127][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.171621][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.178818][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.197328][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.232711][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.271879][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.279065][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.321557][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.349092][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.356293][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.402933][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.410161][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.457534][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.464674][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.493934][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.522622][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.709394][ T5830] veth0_vlan: entered promiscuous mode [ 68.732596][ T5828] veth0_vlan: entered promiscuous mode [ 68.754474][ T5830] veth1_vlan: entered promiscuous mode [ 68.779518][ T5828] veth1_vlan: entered promiscuous mode [ 68.796561][ T5837] Bluetooth: hci3: command tx timeout [ 68.797250][ T55] Bluetooth: hci1: command tx timeout [ 68.802128][ T5837] Bluetooth: hci0: command tx timeout [ 68.808076][ T5840] Bluetooth: hci4: command tx timeout [ 68.813970][ T5144] Bluetooth: hci2: command tx timeout [ 68.829043][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.917354][ T5830] veth0_macvtap: entered promiscuous mode [ 68.933876][ T5828] veth0_macvtap: entered promiscuous mode [ 68.952460][ T5828] veth1_macvtap: entered promiscuous mode [ 69.003371][ T5830] veth1_macvtap: entered promiscuous mode [ 69.021544][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.037060][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.075417][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.087939][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.099512][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.108942][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.132661][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.142461][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.152234][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.161639][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.181702][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.193514][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.207572][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.220669][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.239122][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.249093][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.258108][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.267189][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.338624][ T5829] veth0_vlan: entered promiscuous mode [ 69.376230][ T5829] veth1_vlan: entered promiscuous mode [ 69.400764][ T5827] veth0_vlan: entered promiscuous mode [ 69.438122][ T5834] veth0_vlan: entered promiscuous mode [ 69.457227][ T5827] veth1_vlan: entered promiscuous mode [ 69.492536][ T5834] veth1_vlan: entered promiscuous mode [ 69.506140][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.517121][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.519772][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.532555][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.556059][ T5829] veth0_macvtap: entered promiscuous mode [ 69.586894][ T5829] veth1_macvtap: entered promiscuous mode [ 69.633219][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.639094][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.647998][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.660110][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.662418][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.673573][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.687000][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.697776][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.710012][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.735181][ T5834] veth0_macvtap: entered promiscuous mode [ 69.772159][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.787665][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.798086][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.808921][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.824647][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.847852][ T5827] veth0_macvtap: entered promiscuous mode [ 69.857941][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.877917][ T5834] veth1_macvtap: entered promiscuous mode [ 69.888710][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.899557][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.908499][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.917485][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.931131][ T5827] veth1_macvtap: entered promiscuous mode [ 70.017080][ T5916] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 70.036669][ T5916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.063910][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.075298][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.085493][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.096013][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.105943][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.116462][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.127470][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.137658][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.148164][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.158391][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.170882][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.181005][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.191829][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.203582][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.251067][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.273773][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.295041][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.313477][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.364439][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.384121][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.414239][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.427273][ T5926] ebt_limit: overflow, try lower: 0/0 [ 70.434419][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.446298][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.525121][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.533885][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.562683][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.588590][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.652829][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.684124][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.709094][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.720522][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.731505][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.743782][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.760188][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.771188][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.790689][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.832939][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.860858][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.875184][ T5144] Bluetooth: hci2: command tx timeout [ 70.876847][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.880606][ T5144] Bluetooth: hci4: command tx timeout [ 70.880638][ T5144] Bluetooth: hci0: command tx timeout [ 70.891896][ T5840] Bluetooth: hci1: command tx timeout [ 70.895091][ T5144] Bluetooth: hci3: command tx timeout [ 70.911354][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.328253][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.373780][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.479178][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.510654][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.626218][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.627396][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.656361][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.680593][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.705911][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.713912][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.868375][ T5990] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 71.942552][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 71.966191][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.974231][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.009262][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.031980][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.120189][ T5992] Zero length message leads to an empty skb [ 72.235498][ T5997] netlink: 'syz.4.5': attribute type 22 has an invalid length. [ 72.248605][ T5997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.257141][ T5998] Cannot find add_set index 32768 as target [ 72.275469][ T5992] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 72.296142][ T5992] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 72.364955][ T5992] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 72.375447][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.383915][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.453259][ T6003] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 72.511962][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 72.809641][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 72.873186][ T6012] netlink: 'syz.4.12': attribute type 7 has an invalid length. [ 72.916746][ T6012] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12'. [ 72.955096][ T5144] Bluetooth: hci1: command tx timeout [ 72.960580][ T5144] Bluetooth: hci0: command tx timeout [ 72.966607][ T5837] Bluetooth: hci3: command tx timeout [ 72.967322][ T5840] Bluetooth: hci4: command tx timeout [ 72.972018][ T5837] Bluetooth: hci2: command tx timeout [ 73.021180][ T6014] Illegal XDP return value 4294967262 on prog (id 8) dev N/A, expect packet loss! [ 73.139385][ T5911] IPVS: starting estimator thread 0... [ 73.158168][ T6015] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 73.206447][ T6017] dccp_close: ABORT with 140 bytes unread [ 73.265785][ T6026] IPVS: using max 24 ests per chain, 57600 per kthread [ 73.289942][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 73.310415][ T6031] netlink: 'syz.0.17': attribute type 7 has an invalid length. [ 73.318312][ T6031] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 73.326407][ T6031] netlink: 204 bytes leftover after parsing attributes in process `syz.0.17'. [ 73.506234][ T5881] IPVS: starting estimator thread 0... [ 73.626537][ T6023] dccp_close: ABORT with 172 bytes unread [ 73.634168][ T6034] IPVS: using max 24 ests per chain, 57600 per kthread [ 73.722666][ T6038] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.750418][ T6038] Bluetooth: MGMT ver 1.23 [ 73.771209][ T6038] ip6tnl1: entered promiscuous mode [ 73.778781][ T6038] ip6tnl1: entered allmulticast mode [ 74.047546][ T6028] dccp_close: ABORT with 172 bytes unread [ 74.348555][ T6051] FAULT_INJECTION: forcing a failure. [ 74.348555][ T6051] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.366095][ T6049] netlink: 128 bytes leftover after parsing attributes in process `syz.3.22'. [ 74.381040][ T6051] CPU: 0 UID: 0 PID: 6051 Comm: syz.2.24 Not tainted 6.13.0-rc5-syzkaller-00835-ga8a6531164e5 #0 [ 74.391605][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.401693][ T6051] Call Trace: [ 74.404976][ T6051] [ 74.407905][ T6051] dump_stack_lvl+0x241/0x360 [ 74.412607][ T6051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.417809][ T6051] ? __pfx__printk+0x10/0x10 [ 74.422399][ T6051] ? __pfx_lock_release+0x10/0x10 [ 74.427422][ T6051] should_fail_ex+0x3b0/0x4e0 [ 74.432102][ T6051] _copy_from_user+0x2f/0xc0 [ 74.436718][ T6051] copy_msghdr_from_user+0xae/0x680 [ 74.441966][ T6051] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 74.447811][ T6051] ? __fget_files+0x2a/0x410 [ 74.452421][ T6051] ? __fget_files+0x2a/0x410 [ 74.457025][ T6051] __sys_sendmsg+0x209/0x350 [ 74.461617][ T6051] ? __pfx_lock_release+0x10/0x10 [ 74.466648][ T6051] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.471763][ T6051] ? __pfx_vfs_write+0x10/0x10 [ 74.476552][ T6051] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.482884][ T6051] ? do_syscall_64+0x100/0x230 [ 74.487651][ T6051] ? do_syscall_64+0xb6/0x230 [ 74.492328][ T6051] do_syscall_64+0xf3/0x230 [ 74.496833][ T6051] ? clear_bhb_loop+0x35/0x90 [ 74.501508][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.507433][ T6051] RIP: 0033:0x7f9dbf585d29 [ 74.511871][ T6051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.531485][ T6051] RSP: 002b:00007f9dc02f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.539904][ T6051] RAX: ffffffffffffffda RBX: 00007f9dbf775fa0 RCX: 00007f9dbf585d29 [ 74.547872][ T6051] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 74.555845][ T6051] RBP: 00007f9dc02f4090 R08: 0000000000000000 R09: 0000000000000000 [ 74.563813][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.571788][ T6051] R13: 0000000000000000 R14: 00007f9dbf775fa0 R15: 00007ffff30c1bd8 [ 74.579776][ T6051] [ 74.610416][ T6049] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 74.715956][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 74.748371][ T6059] warning: `syz.1.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.780080][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 74.790361][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 74.813084][ T6059] bridge_slave_1: left allmulticast mode [ 74.819046][ T6059] bridge_slave_1: left promiscuous mode [ 74.825541][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.842640][ T6061] netlink: 'syz.4.27': attribute type 7 has an invalid length. [ 74.954154][ T6059] bridge_slave_0: left allmulticast mode [ 74.959982][ T6059] bridge_slave_0: left promiscuous mode [ 74.967843][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.053061][ T6072] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 75.113756][ T6072] bond1 (unregistering): Released all slaves [ 75.260744][ T6076] bond1 (unregistering): Released all slaves [ 75.389199][ T6076] bond1 (unregistering): Released all slaves [ 75.583536][ T6095] FAULT_INJECTION: forcing a failure. [ 75.583536][ T6095] name failslab, interval 1, probability 0, space 0, times 1 [ 75.613667][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.0.38 Not tainted 6.13.0-rc5-syzkaller-00835-ga8a6531164e5 #0 [ 75.624238][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.634322][ T6095] Call Trace: [ 75.637629][ T6095] [ 75.640590][ T6095] dump_stack_lvl+0x241/0x360 [ 75.645304][ T6095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.650546][ T6095] ? __pfx__printk+0x10/0x10 [ 75.655178][ T6095] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 75.661200][ T6095] ? __pfx___might_resched+0x10/0x10 [ 75.666527][ T6095] should_fail_ex+0x3b0/0x4e0 [ 75.671249][ T6095] should_failslab+0xac/0x100 [ 75.675958][ T6095] kmem_cache_alloc_node_noprof+0x77/0x380 [ 75.681808][ T6095] ? __alloc_skb+0x1c3/0x440 [ 75.686446][ T6095] __alloc_skb+0x1c3/0x440 [ 75.690942][ T6095] ? __pfx___alloc_skb+0x10/0x10 [ 75.695920][ T6095] ? netlink_autobind+0xd6/0x2f0 [ 75.700902][ T6095] ? netlink_autobind+0x2b0/0x2f0 [ 75.705971][ T6095] netlink_sendmsg+0x638/0xcb0 [ 75.710783][ T6095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.716107][ T6095] ? aa_sock_msg_perm+0x91/0x160 [ 75.721054][ T6095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.726355][ T6095] __sock_sendmsg+0x221/0x270 [ 75.731054][ T6095] ____sys_sendmsg+0x52a/0x7e0 [ 75.735842][ T6095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.741133][ T6095] ? __fget_files+0x2a/0x410 [ 75.745747][ T6095] ? __fget_files+0x2a/0x410 [ 75.750372][ T6095] __sys_sendmsg+0x269/0x350 [ 75.754976][ T6095] ? __pfx_lock_release+0x10/0x10 [ 75.760024][ T6095] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.765175][ T6095] ? __pfx_vfs_write+0x10/0x10 [ 75.769976][ T6095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.776332][ T6095] ? do_syscall_64+0x100/0x230 [ 75.781117][ T6095] ? do_syscall_64+0xb6/0x230 [ 75.785803][ T6095] do_syscall_64+0xf3/0x230 [ 75.790320][ T6095] ? clear_bhb_loop+0x35/0x90 [ 75.795010][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.800907][ T6095] RIP: 0033:0x7f0104985d29 [ 75.805320][ T6095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.824938][ T6095] RSP: 002b:00007f0105825038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.833357][ T6095] RAX: ffffffffffffffda RBX: 00007f0104b75fa0 RCX: 00007f0104985d29 [ 75.841331][ T6095] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 75.849300][ T6095] RBP: 00007f0105825090 R08: 0000000000000000 R09: 0000000000000000 [ 75.857266][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.865237][ T6095] R13: 0000000000000000 R14: 00007f0104b75fa0 R15: 00007ffd2dc1d468 [ 75.873219][ T6095] [ 75.882313][ T6103] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌU!' [ 75.904303][ T6103] CPU: 1 UID: 0 PID: 6103 Comm: syz.2.39 Not tainted 6.13.0-rc5-syzkaller-00835-ga8a6531164e5 #0 [ 75.914874][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.924955][ T6103] Call Trace: [ 75.928259][ T6103] [ 75.931217][ T6103] dump_stack_lvl+0x241/0x360 [ 75.935939][ T6103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.941180][ T6103] ? __pfx__printk+0x10/0x10 [ 75.945811][ T6103] ? __kmalloc_cache_noprof+0x243/0x390 [ 75.951408][ T6103] ? sysfs_warn_dup+0x51/0xa0 [ 75.956121][ T6103] sysfs_warn_dup+0x8e/0xa0 [ 75.960659][ T6103] sysfs_do_create_link_sd+0xbe/0x110 [ 75.966071][ T6103] device_add_class_symlinks+0x1c5/0x250 [ 75.971742][ T6103] device_add+0x553/0xbf0 [ 75.976115][ T6103] wiphy_register+0x1a58/0x27b0 [ 75.981022][ T6103] ? __pfx_wiphy_register+0x10/0x10 [ 75.986254][ T6103] ? minstrel_ht_alloc+0x72b/0x860 [ 75.991415][ T6103] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 75.997527][ T6103] ieee80211_register_hw+0x30fb/0x3e10 [ 76.003031][ T6103] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.009414][ T6103] ? ieee80211_register_hw+0x1581/0x3e10 [ 76.015105][ T6103] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 76.020956][ T6103] ? __asan_memset+0x23/0x50 [ 76.025554][ T6103] ? __hrtimer_init+0x170/0x250 [ 76.030437][ T6103] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 76.036182][ T6103] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 76.042247][ T6103] ? kstrndup+0x5c/0xb0 [ 76.046400][ T6103] ? __asan_memcpy+0x40/0x70 [ 76.050990][ T6103] hwsim_new_radio_nl+0xece/0x2290 [ 76.056115][ T6103] ? __pfx___nla_validate_parse+0x10/0x10 [ 76.061837][ T6103] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 76.067414][ T6103] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 76.073754][ T6103] genl_rcv_msg+0xb14/0xec0 [ 76.078267][ T6103] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.083316][ T6103] ? __pfx_lock_acquire+0x10/0x10 [ 76.088340][ T6103] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 76.093886][ T6103] ? __pfx___might_resched+0x10/0x10 [ 76.099176][ T6103] netlink_rcv_skb+0x1e3/0x430 [ 76.103939][ T6103] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.108968][ T6103] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.114289][ T6103] genl_rcv+0x28/0x40 [ 76.118282][ T6103] netlink_unicast+0x7f6/0x990 [ 76.123056][ T6103] ? __pfx_netlink_unicast+0x10/0x10 [ 76.128359][ T6103] ? __virt_addr_valid+0x45f/0x530 [ 76.133479][ T6103] ? __phys_addr_symbol+0x2f/0x70 [ 76.138509][ T6103] ? __check_object_size+0x47a/0x730 [ 76.143803][ T6103] netlink_sendmsg+0x8e4/0xcb0 [ 76.148579][ T6103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.153872][ T6103] ? aa_sock_msg_perm+0x91/0x160 [ 76.158820][ T6103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.164128][ T6103] __sock_sendmsg+0x221/0x270 [ 76.168828][ T6103] ____sys_sendmsg+0x52a/0x7e0 [ 76.173609][ T6103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.178897][ T6103] ? __fget_files+0x2a/0x410 [ 76.183500][ T6103] ? __fget_files+0x2a/0x410 [ 76.188099][ T6103] __sys_sendmsg+0x269/0x350 [ 76.192691][ T6103] ? vma_end_read+0x18/0x170 [ 76.197283][ T6103] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.202426][ T6103] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.208409][ T6103] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.214751][ T6103] ? exc_page_fault+0x590/0x8b0 [ 76.219624][ T6103] ? do_syscall_64+0xb6/0x230 [ 76.224318][ T6103] do_syscall_64+0xf3/0x230 [ 76.228836][ T6103] ? clear_bhb_loop+0x35/0x90 [ 76.233518][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.239409][ T6103] RIP: 0033:0x7f9dbf585d29 [ 76.243823][ T6103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.263434][ T6103] RSP: 002b:00007f9dc02d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.271862][ T6103] RAX: ffffffffffffffda RBX: 00007f9dbf776080 RCX: 00007f9dbf585d29 [ 76.279874][ T6103] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 76.287847][ T6103] RBP: 00007f9dbf601b08 R08: 0000000000000000 R09: 0000000000000000 [ 76.295814][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.303788][ T6103] R13: 0000000000000001 R14: 00007f9dbf776080 R15: 00007ffff30c1bd8 [ 76.311769][ T6103] [ 76.421974][ T6110] netlink: 'syz.4.42': attribute type 11 has an invalid length. [ 76.981031][ T6134] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 77.010655][ T6136] ebt_among: dst integrity fail: 101 [ 77.072291][ T6140] __nla_validate_parse: 3 callbacks suppressed [ 77.072313][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 77.148590][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 77.192959][ T6140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 77.236584][ T6133] netem: change failed [ 77.994678][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 78.061624][ T6164] bridge1: entered promiscuous mode [ 78.098331][ T6164] bridge1: entered allmulticast mode [ 78.131585][ T6164] team0: Port device bridge1 added [ 78.435183][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 78.646233][ T6207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.66'. [ 78.933049][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 78.991254][ T6221] netlink: 'syz.2.68': attribute type 7 has an invalid length. [ 79.041311][ T6221] netlink: 'syz.2.68': attribute type 3 has an invalid length. [ 79.076806][ T6221] netlink: 204 bytes leftover after parsing attributes in process `syz.2.68'. [ 79.123059][ T5840] Bluetooth: hci3: command tx timeout [ 79.296255][ T6237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.349890][ T5881] IPVS: starting estimator thread 0... [ 79.364831][ T6228] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 79.415565][ T6246] Bluetooth: MGMT ver 1.23 [ 79.524408][ T6243] IPVS: using max 25 ests per chain, 60000 per kthread [ 79.541833][ T6249] vlan2: entered promiscuous mode [ 80.170437][ T6282] netlink: 'syz.3.83': attribute type 4 has an invalid length. [ 80.425014][ T6306] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 80.450246][ T6304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.84'. [ 80.483458][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 80.785883][ T6328] netlink: 'syz.2.90': attribute type 7 has an invalid length. [ 80.811523][ T6328] netlink: 'syz.2.90': attribute type 3 has an invalid length. [ 80.870941][ T6330] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 81.928515][ T836] cfg80211: failed to load regulatory.db [ 83.326459][ T6409] __nla_validate_parse: 8 callbacks suppressed [ 83.326486][ T6409] netlink: 44 bytes leftover after parsing attributes in process `syz.4.118'. [ 83.709121][ T6421] netlink: 'syz.1.121': attribute type 3 has an invalid length. [ 83.806195][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 84.492751][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 84.581572][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'. [ 84.626869][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'. [ 84.902092][ T6453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.132'. [ 85.425628][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 85.448614][ T6492] netlink: 'syz.3.143': attribute type 7 has an invalid length. [ 85.459284][ T6492] netlink: 'syz.3.143': attribute type 3 has an invalid length. [ 85.467315][ T6492] netlink: 204 bytes leftover after parsing attributes in process `syz.3.143'. [ 85.547913][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'. [ 85.549975][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'. [ 85.580879][ T6498] netlink: 'syz.1.142': attribute type 4 has an invalid length. [ 85.594058][ T6494] macvlan1: entered promiscuous mode [ 85.606026][ T6494] macvlan1: left promiscuous mode [ 85.642805][ T5912] IPVS: starting estimator thread 0... [ 85.642854][ T6492] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.764610][ T6503] IPVS: using max 24 ests per chain, 57600 per kthread [ 86.087771][ T6484] dccp_close: ABORT with 172 bytes unread [ 86.366059][ T6534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.380117][ T6536] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 86.405774][ T6534] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 86.421850][ T6536] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 86.503884][ T6534] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 86.588200][ T6551] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 86.888715][ T6565] netlink: 'syz.3.163': attribute type 7 has an invalid length. [ 86.913951][ T6565] netlink: 'syz.3.163': attribute type 3 has an invalid length. [ 86.941170][ T6569] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 86.985810][ T6571] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 87.000747][ T6571] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 87.128487][ T6576] netlink: 'syz.1.166': attribute type 7 has an invalid length. [ 87.144746][ T6576] netlink: 'syz.1.166': attribute type 3 has an invalid length. [ 87.273725][ T974] IPVS: starting estimator thread 0... [ 87.290508][ T6576] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 87.384174][ T6585] IPVS: using max 21 ests per chain, 50400 per kthread [ 87.837844][ T6598] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 88.322669][ T6622] veth0_to_bridge: entered promiscuous mode [ 88.380159][ T6627] __nla_validate_parse: 8 callbacks suppressed [ 88.380178][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 88.455893][ T6627] netlink: 204 bytes leftover after parsing attributes in process `syz.1.181'. [ 88.479382][ T6627] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 88.829456][ T6618] veth0_to_bridge: left promiscuous mode [ 89.085969][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 89.101405][ T6642] netlink: 204 bytes leftover after parsing attributes in process `syz.2.184'. [ 89.111405][ T6642] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.127087][ T6643] Cannot find add_set index 0 as target [ 89.202446][ T6630] dccp_close: ABORT with 172 bytes unread [ 89.299794][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 89.316087][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 89.326681][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 89.346591][ T6646] bond1: entered promiscuous mode [ 89.352118][ T6646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.450428][ T6646] bond1 (unregistering): Released all slaves [ 89.508497][ T6653] netlink: 68 bytes leftover after parsing attributes in process `syz.1.187'. [ 90.642382][ T6704] team0: No ports can be present during mode change [ 90.669776][ T6705] team0: No ports can be present during mode change [ 90.910996][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.206'. [ 90.981045][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 91.026298][ T6721] validate_nla: 4 callbacks suppressed [ 91.026317][ T6721] netlink: 'syz.3.208': attribute type 7 has an invalid length. [ 91.053499][ T6721] netlink: 'syz.3.208': attribute type 3 has an invalid length. [ 91.093829][ T6726] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 91.197053][ T6728] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 91.252966][ T6732] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 91.310449][ T6734] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 91.463332][ T6743] C: renamed from team_slave_0 (while UP) [ 91.489801][ T6743] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 91.502296][ T6743] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 91.647136][ T6752] netlink: 'syz.1.221': attribute type 14 has an invalid length. [ 91.915742][ T6772] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 92.394216][ T6804] netlink: 'syz.3.237': attribute type 2 has an invalid length. [ 92.410592][ T6804] fþ²¹¥‰: entered promiscuous mode [ 92.413576][ T6806] netlink: 'syz.0.238': attribute type 7 has an invalid length. [ 92.432133][ T6806] netlink: 'syz.0.238': attribute type 3 has an invalid length. [ 92.449183][ T6806] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 92.708281][ T6823] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 92.726794][ T6823] macvlan2: entered allmulticast mode [ 92.732536][ T6823] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 92.955032][ T5840] Bluetooth: hci0: command tx timeout [ 93.058721][ T6842] IPv6: addrconf: prefix option has invalid lifetime [ 93.642129][ T6874] __nla_validate_parse: 8 callbacks suppressed [ 93.642148][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 93.643582][ T6869] netlink: 40 bytes leftover after parsing attributes in process `syz.4.257'. [ 93.680509][ T6869] netlink: 80 bytes leftover after parsing attributes in process `syz.4.257'. [ 93.694167][ T6869] netlink: 32 bytes leftover after parsing attributes in process `syz.4.257'. [ 93.703184][ T6869] erspan0: entered promiscuous mode [ 93.803625][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 93.882304][ T6879] netlink: 'syz.4.260': attribute type 7 has an invalid length. [ 93.914412][ T6879] netlink: 'syz.4.260': attribute type 3 has an invalid length. [ 93.922382][ T6879] netlink: 204 bytes leftover after parsing attributes in process `syz.4.260'. [ 93.934800][ T6883] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 94.089500][ T6894] netlink: 55 bytes leftover after parsing attributes in process `syz.3.264'. [ 94.442547][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.270'. [ 94.612067][ T6912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.761073][ T6912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.787592][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 94.814444][ T6930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.276'. [ 94.850165][ T6929] openvswitch: netlink: Missing key (keys=40, expected=100) [ 94.866356][ T6912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.083352][ T6912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.324986][ T6912] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.342224][ T6912] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.410028][ T6912] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.454126][ T6912] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.611019][ T7012] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 96.724964][ T7022] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 96.905339][ T7012] syzkaller1: entered promiscuous mode [ 96.926130][ T7012] syzkaller1: entered allmulticast mode [ 97.150028][ T7050] validate_nla: 2 callbacks suppressed [ 97.150050][ T7050] netlink: 'syz.3.306': attribute type 10 has an invalid length. [ 97.226168][ T7050] team0: Port device netdevsim0 added [ 97.295744][ T7053] veth0_to_team: entered promiscuous mode [ 97.305155][ T7053] veth0_to_team: entered allmulticast mode [ 97.640627][ T7078] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 97.642834][ T7074] netlink: 'syz.3.315': attribute type 7 has an invalid length. [ 98.080003][ T7094] sctp: [Deprecated]: syz.1.320 (pid 7094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.080003][ T7094] Use struct sctp_sack_info instead [ 98.161162][ T7096] pim6reg1: entered promiscuous mode [ 98.174161][ T7096] pim6reg1: entered allmulticast mode [ 98.507951][ T7111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.536878][ T7111] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 98.699585][ T7120] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 98.773234][ T7127] netlink: 'syz.1.332': attribute type 21 has an invalid length. [ 98.967051][ T7142] __nla_validate_parse: 44 callbacks suppressed [ 98.967073][ T7142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.337'. [ 99.091157][ T7142] syz.1.337 (7142) used greatest stack depth: 18384 bytes left [ 99.156975][ T7155] netlink: 880 bytes leftover after parsing attributes in process `syz.2.340'. [ 99.653291][ T7179] nbd: illegal input index -1 [ 99.703966][ T7132] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 99.786973][ T7186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.349'. [ 99.895760][ T7194] netlink: 'syz.3.350': attribute type 30 has an invalid length. [ 99.915957][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 99.954888][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 99.981065][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.985805][ T7192] netlink: 'syz.4.351': attribute type 10 has an invalid length. [ 99.997669][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.007328][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.012167][ T7188] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 100.033843][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.042774][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.051799][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.080621][ T7192] team0: Port device netdevsim0 added [ 100.330720][ T7207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.354'. [ 100.426266][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 100.427774][ T7196] chnl_net:caif_netlink_parms(): no params data found [ 100.507061][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 100.531186][ T7217] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 100.833060][ T7225] Cannot find add_set index 0 as target [ 100.941744][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.973323][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.024280][ T7196] bridge_slave_0: entered allmulticast mode [ 101.046106][ T7196] bridge_slave_0: entered promiscuous mode [ 101.077668][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.094401][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.111873][ T7196] bridge_slave_1: entered allmulticast mode [ 101.131132][ T7196] bridge_slave_1: entered promiscuous mode [ 101.170465][ T7249] netlink: 'syz.0.364': attribute type 4 has an invalid length. [ 101.184239][ T7249] netlink: 17 bytes leftover after parsing attributes in process `syz.0.364'. [ 101.298932][ T7196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.327640][ T7196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.434456][ T5840] Bluetooth: hci3: command tx timeout [ 101.558650][ T7196] team0: Port device team_slave_0 added [ 101.590764][ T7196] team0: Port device team_slave_1 added [ 101.720895][ T7258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.755615][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.762611][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.837854][ T7196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.892994][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.910473][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.949088][ T7196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.076144][ T5840] Bluetooth: hci4: command tx timeout [ 102.283160][ T7196] hsr_slave_0: entered promiscuous mode [ 102.303320][ T7196] hsr_slave_1: entered promiscuous mode [ 102.338544][ T7196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.354156][ T7196] Cannot create hsr debugfs directory [ 102.443658][ T7283] syz_tun: entered allmulticast mode [ 102.573621][ T7295] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 102.592750][ T7295] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 102.605540][ T7283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.612168][ T7295] netlink: 56 bytes leftover after parsing attributes in process `syz.0.377'. [ 102.622813][ T7283] bond0: (slave bond1): Enslaving as an active interface with an up link [ 102.651613][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.659026][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.668049][ T7295] bridge0: entered allmulticast mode [ 102.698747][ T7298] bridge_slave_0: left allmulticast mode [ 102.705868][ T7298] bridge_slave_0: left promiscuous mode [ 102.711725][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.725748][ T7298] bridge_slave_1: left allmulticast mode [ 102.731451][ T7298] bridge_slave_1: left promiscuous mode [ 102.745321][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.759472][ T7298] bond0: (slave bond_slave_0): Releasing backup interface [ 102.781904][ T7298] bond0: (slave bond_slave_1): Releasing backup interface [ 102.849696][ T7298] team0: Port device team_slave_0 removed [ 102.882324][ T7298] team0: Port device team_slave_1 removed [ 102.891411][ T7298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.903949][ T7298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.946433][ T7298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.954510][ T7298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.004692][ T7298] team0: Port device netdevsim0 removed [ 103.029703][ T7298] team0: Port device bridge1 removed [ 103.109646][ T7282] syz_tun: left allmulticast mode [ 103.338170][ T7196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.511822][ T7196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.640589][ T7196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.778056][ T7196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.910329][ T7355] sctp: [Deprecated]: syz.3.392 (pid 7355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.910329][ T7355] Use struct sctp_sack_info instead [ 104.018452][ T7196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.043714][ T7196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.129206][ T7196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.152551][ T7196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.160723][ T5840] Bluetooth: hci4: command tx timeout [ 104.286528][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.309236][ T7196] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.326170][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.334375][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.362655][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.369831][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.996673][ T7196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.052640][ T7196] veth0_vlan: entered promiscuous mode [ 105.090258][ T7196] veth1_vlan: entered promiscuous mode [ 105.215676][ T7407] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 105.285629][ T7410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.289155][ T7196] veth0_macvtap: entered promiscuous mode [ 105.301911][ T7410] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 105.310631][ T7411] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 105.339878][ T7196] veth1_macvtap: entered promiscuous mode [ 105.510774][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.544127][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.560861][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.571772][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.587405][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.604118][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.614299][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.625812][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.636916][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.647590][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.658414][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.669257][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.680053][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.690354][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.700896][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.711065][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.721919][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.733436][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.747018][ T7196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.756061][ T7196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.765106][ T7196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.773834][ T7196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.802410][ T7420] __nla_validate_parse: 7 callbacks suppressed [ 105.802428][ T7420] netlink: 96 bytes leftover after parsing attributes in process `syz.2.408'. [ 106.026908][ T7430] netlink: 'syz.3.411': attribute type 2 has an invalid length. [ 106.053226][ T7426] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 106.073450][ T7430] netlink: 'syz.3.411': attribute type 1 has an invalid length. [ 106.081695][ T7426] netlink: 'syz.0.409': attribute type 2 has an invalid length. [ 106.139747][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.162260][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.234802][ T5840] Bluetooth: hci4: command tx timeout [ 106.260371][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.289502][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.475780][ T7449] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 106.514061][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 106.691897][ T7464] netlink: 'syz.2.420': attribute type 2 has an invalid length. [ 106.865347][ T7469] netlink: 96 bytes leftover after parsing attributes in process `syz.3.421'. [ 106.879019][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 107.359696][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.428'. [ 107.376125][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.428'. [ 107.538461][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 107.636091][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.873568][ T7503] netlink: 'syz.4.431': attribute type 16 has an invalid length. [ 107.902210][ T7503] netlink: 'syz.4.431': attribute type 17 has an invalid length. [ 107.926409][ T7503] netlink: 3 bytes leftover after parsing attributes in process `syz.4.431'. [ 108.267018][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.282231][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.291271][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.297887][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.438'. [ 108.310047][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.327745][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.338965][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.368873][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 108.402168][ T7527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.709451][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.745908][ T7519] chnl_net:caif_netlink_parms(): no params data found [ 108.912006][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.113728][ T7566] dccp_invalid_packet: P.Data Offset(10) too large [ 109.143491][ T7566] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 109.171441][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.205468][ T7565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.353306][ T7565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.412686][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.420035][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.428352][ T7519] bridge_slave_0: entered allmulticast mode [ 109.435969][ T7519] bridge_slave_0: entered promiscuous mode [ 109.444709][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.451840][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.467226][ T7519] bridge_slave_1: entered allmulticast mode [ 109.474772][ T7519] bridge_slave_1: entered promiscuous mode [ 109.564682][ T7519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.586959][ T7519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.685994][ T7519] team0: Port device team_slave_0 added [ 109.764809][ T7519] team0: Port device team_slave_1 added [ 109.830537][ T7613] xt_l2tp: invalid flags combination: 4 [ 109.877934][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.901106][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.950479][ T7519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.971419][ T1105] bridge_slave_1: left allmulticast mode [ 109.987323][ T1105] bridge_slave_1: left promiscuous mode [ 109.994761][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.015000][ T1105] bridge_slave_0: left allmulticast mode [ 110.023206][ T1105] bridge_slave_0: left promiscuous mode [ 110.029063][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.397769][ T5840] Bluetooth: hci4: command tx timeout [ 110.578171][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.590983][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.602005][ T1105] bond0 (unregistering): Released all slaves [ 110.611958][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.619361][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.649539][ T7519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.704873][ T7639] bond0: (slave wlan1): Releasing backup interface [ 111.019914][ T7519] hsr_slave_0: entered promiscuous mode [ 111.036337][ T7519] hsr_slave_1: entered promiscuous mode [ 111.056437][ T7519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.075480][ T7519] Cannot create hsr debugfs directory [ 111.139979][ T7666] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 111.166307][ T7670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.325547][ T7670] xt_recent: Unsupported userspace flags (00000042) [ 111.400270][ T1105] hsr_slave_0: left promiscuous mode [ 111.421079][ T1105] hsr_slave_1: left promiscuous mode [ 111.433052][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.461943][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.488041][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.504204][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.523729][ T7686] dccp_invalid_packet: P.Data Offset(172) too large [ 111.586350][ T1105] veth1_macvtap: left promiscuous mode [ 111.605311][ T1105] veth0_macvtap: left promiscuous mode [ 111.623138][ T1105] veth1_vlan: left promiscuous mode [ 111.637447][ T1105] veth0_vlan: left promiscuous mode [ 112.210718][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 112.258172][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 112.478302][ T5840] Bluetooth: hci4: command tx timeout [ 112.880226][ T7717] __nla_validate_parse: 9 callbacks suppressed [ 112.880245][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 113.246715][ T7733] tipc: Started in network mode [ 113.256257][ T7741] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 113.294413][ T7733] tipc: Node identity 6, cluster identity 4711 [ 113.341886][ T7733] tipc: Node number set to 6 [ 113.809640][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 113.863234][ T7519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.911277][ T7519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.008045][ T7519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.065842][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 114.164608][ T7519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.482364][ T7519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.554938][ T5840] Bluetooth: hci4: command tx timeout [ 114.570918][ T7519] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.621333][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.628528][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.689457][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.696690][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.962461][ T7793] : entered promiscuous mode [ 115.147350][ T7809] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 115.153236][ T7519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.240663][ T7812] team0: Port device gtp0 added [ 115.287529][ T7519] veth0_vlan: entered promiscuous mode [ 115.302598][ T7519] veth1_vlan: entered promiscuous mode [ 115.357898][ T7519] veth0_macvtap: entered promiscuous mode [ 115.381598][ T7519] veth1_macvtap: entered promiscuous mode [ 115.439177][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.472218][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.487277][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.500296][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.513598][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.524802][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.534906][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.536881][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 115.547309][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.566013][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.576785][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.587604][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.606042][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.616959][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.626923][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.637655][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.649590][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.670734][ T7519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.680230][ T7519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.689047][ T7519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.697987][ T7519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.838139][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.853257][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.897216][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.912797][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.336991][ T7841] netlink: 76 bytes leftover after parsing attributes in process `syz.0.506'. [ 116.346109][ T7841] nbd: couldn't find a device at index 64 [ 117.034783][ T7877] netlink: 112 bytes leftover after parsing attributes in process `syz.3.517'. [ 117.054472][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 117.059404][ T7878] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 117.084198][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 117.095369][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 117.118535][ T6290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.179151][ T7874] netlink: 'syz.3.517': attribute type 66 has an invalid length. [ 117.276601][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'. [ 117.441253][ T7890] netlink: 'syz.0.522': attribute type 30 has an invalid length. [ 117.461079][ T7890] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 117.530013][ T7896] sit0: entered promiscuous mode [ 117.563674][ T7896] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 117.801194][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.830700][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.839826][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.851597][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.944562][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.953868][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.020096][ T6290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.332818][ T7929] netlink: 'syz.0.533': attribute type 4 has an invalid length. [ 118.341573][ T7929] __nla_validate_parse: 3 callbacks suppressed [ 118.341590][ T7929] netlink: 17 bytes leftover after parsing attributes in process `syz.0.533'. [ 118.441176][ T7912] chnl_net:caif_netlink_parms(): no params data found [ 118.615040][ T7936] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 118.782058][ T6290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.833775][ T7941] IPv6: sit1: Disabled Multicast RS [ 118.936337][ T6290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.002408][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.017072][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.033197][ T7912] bridge_slave_0: entered allmulticast mode [ 119.054209][ T7912] bridge_slave_0: entered promiscuous mode [ 119.072411][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.091490][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.101716][ T7912] bridge_slave_1: entered allmulticast mode [ 119.115195][ T7912] bridge_slave_1: entered promiscuous mode [ 119.206390][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.268051][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.995017][ T5849] Bluetooth: hci4: command tx timeout [ 120.148212][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.156509][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.279274][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.543'. [ 120.378385][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.543'. [ 120.448103][ T7983] nbd: device at index 64 is going down [ 120.569408][ T7986] netlink: 256 bytes leftover after parsing attributes in process `syz.3.544'. [ 120.966283][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.546'. [ 121.296622][ T7951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.408026][ T7951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.901370][ T7951] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.930942][ T7951] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.945214][ T7951] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.954326][ T7951] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.075878][ T5849] Bluetooth: hci4: command tx timeout [ 122.148586][ T7912] team0: Port device team_slave_0 added [ 122.328318][ T7912] team0: Port device team_slave_1 added [ 122.388847][ T8000] netlink: 'syz.2.547': attribute type 12 has an invalid length. [ 122.424769][ T6290] bridge_slave_1: left allmulticast mode [ 122.435947][ T6290] bridge_slave_1: left promiscuous mode [ 122.454455][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.474925][ T6290] bridge_slave_0: left allmulticast mode [ 122.480628][ T6290] bridge_slave_0: left promiscuous mode [ 122.494453][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.225073][ T6290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.248870][ T6290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.269647][ T6290] bond0 (unregistering): Released all slaves [ 123.293265][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.310031][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.340087][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.380559][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.387655][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.413836][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.500355][ T8000] batadv_slave_0: entered promiscuous mode [ 123.506528][ T8000] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 123.997860][ T7912] hsr_slave_0: entered promiscuous mode [ 124.007704][ T7912] hsr_slave_1: entered promiscuous mode [ 124.044692][ T7912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.052351][ T7912] Cannot create hsr debugfs directory [ 124.092560][ T8019] netlink: 'syz.3.552': attribute type 10 has an invalid length. [ 124.155428][ T5849] Bluetooth: hci4: command tx timeout [ 124.265764][ T6290] hsr_slave_0: left promiscuous mode [ 124.294208][ T6290] hsr_slave_1: left promiscuous mode [ 124.302930][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.321139][ T6290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.341995][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.364269][ T6290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.444859][ T6290] veth1_macvtap: left promiscuous mode [ 124.462854][ T6290] veth0_macvtap: left promiscuous mode [ 124.479928][ T6290] veth1_vlan: left promiscuous mode [ 124.499163][ T6290] veth0_vlan: left promiscuous mode [ 125.237270][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 125.410944][ T6290] team0 (unregistering): Port device team_slave_1 removed [ 125.456308][ T6290] team0 (unregistering): Port device team_slave_0 removed [ 125.842481][ T8019] macvlan0: entered allmulticast mode [ 125.849376][ T8019] veth1_vlan: entered allmulticast mode [ 125.859608][ T8019] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 126.092414][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.557'. [ 126.234424][ T5849] Bluetooth: hci4: command tx timeout [ 126.420172][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.560'. [ 126.516099][ T8050] netlink: 'syz.4.562': attribute type 33 has an invalid length. [ 126.839376][ T8042] lo speed is unknown, defaulting to 1000 [ 126.921555][ T8042] lo speed is unknown, defaulting to 1000 [ 126.929943][ T7912] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.950820][ T7912] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.981310][ T8042] lo speed is unknown, defaulting to 1000 [ 126.994875][ T7912] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.017134][ T7912] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.090161][ T8042] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.151905][ T8042] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 127.285047][ T8042] lo speed is unknown, defaulting to 1000 [ 127.324702][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.342352][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.346326][ T8042] lo speed is unknown, defaulting to 1000 [ 127.383152][ T8042] lo speed is unknown, defaulting to 1000 [ 127.394827][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.402016][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.467692][ T8042] lo speed is unknown, defaulting to 1000 [ 127.478393][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.485569][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.504921][ T8042] lo speed is unknown, defaulting to 1000 [ 127.542612][ T8042] lo speed is unknown, defaulting to 1000 [ 127.561902][ T7912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.605293][ T8042] lo speed is unknown, defaulting to 1000 [ 127.866816][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.875476][ T8086] sit0: entered promiscuous mode [ 127.895883][ T8086] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 127.903824][ T8086] netlink: 1 bytes leftover after parsing attributes in process `syz.4.571'. [ 127.986137][ T7912] veth0_vlan: entered promiscuous mode [ 128.009316][ T7912] veth1_vlan: entered promiscuous mode [ 128.046445][ T7912] veth0_macvtap: entered promiscuous mode [ 128.057080][ T7912] veth1_macvtap: entered promiscuous mode [ 128.095413][ T8095] netlink: 'syz.4.574': attribute type 21 has an invalid length. [ 128.103538][ T8095] netlink: 132 bytes leftover after parsing attributes in process `syz.4.574'. [ 128.119082][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.132867][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.152330][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.164684][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.175461][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.188998][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.200504][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.213954][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 128.223038][ T8098] netlink: 736 bytes leftover after parsing attributes in process `syz.0.575'. [ 128.235279][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.247075][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.257720][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.275527][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.291076][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.331498][ T7912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.343124][ T7912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.360177][ T7912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.371170][ T7912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.535447][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.543680][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.569854][ T6290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.577959][ T6290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.720747][ T8112] netlink: 'syz.3.577': attribute type 3 has an invalid length. [ 128.861152][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 128.873323][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 129.007752][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.584'. [ 129.105287][ T8135] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 129.154932][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.169416][ T8135] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.233352][ T8140] trusted_key: syz.0.589 sent an empty control message without MSG_MORE. [ 129.478399][ T8147] tipc: Started in network mode [ 129.501525][ T8147] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 129.512778][ T8147] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 129.522228][ T8147] tipc: Enabled bearer , priority 10 [ 130.186291][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.519883][ T8] tipc: Node number set to 1 [ 130.881504][ T8173] __nla_validate_parse: 3 callbacks suppressed [ 130.881524][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 130.942914][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 131.050794][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.073659][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.091068][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.100372][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.114532][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 131.121889][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.168008][ T8183] lo speed is unknown, defaulting to 1000 [ 131.441431][ T8183] chnl_net:caif_netlink_parms(): no params data found [ 131.656822][ T8201] netlink: 'syz.4.605': attribute type 32 has an invalid length. [ 131.693961][ T8201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.605'. [ 131.807389][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.865513][ T8183] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.884329][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.895131][ T8183] bridge_slave_0: entered allmulticast mode [ 131.908989][ T8183] bridge_slave_0: entered promiscuous mode [ 132.042657][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.074880][ T8183] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.085648][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.103568][ T8183] bridge_slave_1: entered allmulticast mode [ 132.117285][ T8183] bridge_slave_1: entered promiscuous mode [ 132.194128][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.247356][ T8222] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 132.278926][ T8183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.298568][ T8219] lo speed is unknown, defaulting to 1000 [ 132.311115][ T8183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.459112][ T8183] team0: Port device team_slave_0 added [ 132.493838][ T8183] team0: Port device team_slave_1 added [ 132.650268][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.674076][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.700159][ T8183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.712815][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.720507][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.746705][ T8183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.785409][ T8226] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 132.815272][ T1105] bridge_slave_1: left allmulticast mode [ 132.821036][ T1105] bridge_slave_1: left promiscuous mode [ 132.826881][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.855527][ T1105] bridge_slave_0: left allmulticast mode [ 132.859961][ T8232] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 132.861196][ T1105] bridge_slave_0: left promiscuous mode [ 132.885588][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.123732][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.134123][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.199290][ T5840] Bluetooth: hci4: command tx timeout [ 133.454650][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.467590][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.481565][ T1105] bond0 (unregistering): Released all slaves [ 133.607849][ T8183] hsr_slave_0: entered promiscuous mode [ 133.669709][ T8183] hsr_slave_1: entered promiscuous mode [ 133.705962][ T8183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.713768][ T8183] Cannot create hsr debugfs directory [ 134.068543][ T1105] hsr_slave_0: left promiscuous mode [ 134.093244][ T1105] hsr_slave_1: left promiscuous mode [ 134.099802][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.107375][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.125300][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.132760][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.180002][ T1105] veth1_macvtap: left promiscuous mode [ 134.186224][ T1105] veth0_macvtap: left promiscuous mode [ 134.192152][ T1105] veth1_vlan: left promiscuous mode [ 134.198598][ T1105] veth0_vlan: left promiscuous mode [ 134.211187][ T8251] netlink: 'syz.0.618': attribute type 2 has an invalid length. [ 134.238164][ T8251] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 135.068574][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 135.127219][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 135.274452][ T5840] Bluetooth: hci4: command tx timeout [ 135.852805][ T8252] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 136.096973][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 136.925886][ T8278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.089105][ T8183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.326800][ T8183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.341239][ T8285] lo speed is unknown, defaulting to 1000 [ 137.358938][ T8183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.389375][ T8183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.426673][ T5840] Bluetooth: hci4: command tx timeout [ 137.542488][ T8183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.562918][ T8183] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.650848][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.658062][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.688122][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.695361][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.742494][ T8183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.753317][ T8183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.899810][ T8301] lo speed is unknown, defaulting to 1000 [ 138.015778][ T8317] netlink: 'syz.4.635': attribute type 2 has an invalid length. [ 138.157436][ T8183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.414732][ T8183] veth0_vlan: entered promiscuous mode [ 138.482956][ T8183] veth1_vlan: entered promiscuous mode [ 138.570733][ T8183] veth0_macvtap: entered promiscuous mode [ 138.619172][ T8183] veth1_macvtap: entered promiscuous mode [ 138.759508][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.776638][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.789140][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.800340][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.811634][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.822434][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.848972][ T8183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.894920][ T8348] : renamed from bond0 [ 138.976136][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.010878][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.024291][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.035141][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.046496][ T8183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.199826][ T8183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.208880][ T8183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.217848][ T8183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.226669][ T8183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.435261][ T5840] Bluetooth: hci4: command tx timeout [ 139.451479][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.494201][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.545267][ T8376] lo speed is unknown, defaulting to 1000 [ 139.563193][ T8374] tipc: Enabling of bearer rejected, failed to enable media [ 139.608614][ T8374] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 40852 - 0 [ 139.623420][ T8374] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 40852 - 0 [ 139.632787][ T8374] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 40852 - 0 [ 139.642384][ T8374] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 40852 - 0 [ 139.660521][ T8374] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 39879 - 0 [ 139.670159][ T8374] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 39879 - 0 [ 139.679513][ T8374] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 39879 - 0 [ 139.688513][ T8374] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 39879 - 0 [ 139.697594][ T8374] geneve2: entered promiscuous mode [ 139.702826][ T8374] geneve2: entered allmulticast mode [ 139.765421][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 139.803704][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.829340][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.869176][ T8390] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 139.880019][ T8390] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.888794][ T8390] gretap1: entered promiscuous mode [ 139.894225][ T8390] gretap1: entered allmulticast mode [ 140.113768][ T8391] lo speed is unknown, defaulting to 1000 [ 141.042169][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 141.072670][ T8429] tipc: New replicast peer: 255.255.255.255 [ 141.110572][ T8429] tipc: Enabled bearer , priority 10 [ 141.409073][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.667'. [ 141.429653][ T8453] TCP: TCP_TX_DELAY enabled [ 141.441424][ T8453] netlink: 312 bytes leftover after parsing attributes in process `syz.2.666'. [ 141.451484][ T8449] netlink: 'syz.4.667': attribute type 1 has an invalid length. [ 141.470664][ T8449] netlink: 'syz.4.667': attribute type 2 has an invalid length. [ 141.492392][ T8449] netlink: 2 bytes leftover after parsing attributes in process `syz.4.667'. [ 141.594691][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 141.674099][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 142.732482][ T5967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.853611][ T8474] macsec1: entered allmulticast mode [ 142.924610][ T8474] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 142.990378][ T8474] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 143.060541][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.069848][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.078922][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.088124][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.099478][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.107860][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.216673][ T5967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.361717][ T5967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.409716][ T8498] netlink: 'syz.3.678': attribute type 21 has an invalid length. [ 143.434793][ T8489] lo speed is unknown, defaulting to 1000 [ 143.506561][ T5967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.913768][ T5967] bridge_slave_1: left allmulticast mode [ 143.944753][ T5967] bridge_slave_1: left promiscuous mode [ 143.951587][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.015444][ T5967] bridge_slave_0: left allmulticast mode [ 144.021171][ T5967] bridge_slave_0: left promiscuous mode [ 144.054599][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.758772][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.779064][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.796100][ T5967] bond0 (unregistering): Released all slaves [ 144.903807][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 144.941944][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.685'. [ 145.038119][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 145.080047][ T8530] vlan3: entered promiscuous mode [ 145.194756][ T5840] Bluetooth: hci4: command tx timeout [ 145.266082][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.274991][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.282253][ T8489] bridge_slave_0: entered allmulticast mode [ 145.338230][ T8489] bridge_slave_0: entered promiscuous mode [ 145.372223][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.392116][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.421759][ T8489] bridge_slave_1: entered allmulticast mode [ 145.430082][ T8489] bridge_slave_1: entered promiscuous mode [ 145.514417][ T5967] hsr_slave_0: left promiscuous mode [ 145.542423][ T5967] hsr_slave_1: left promiscuous mode [ 145.543084][ T8553] x_tables: duplicate underflow at hook 2 [ 145.554693][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.571129][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.581413][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.589370][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.625119][ T5967] veth1_macvtap: left promiscuous mode [ 145.630701][ T5967] veth0_macvtap: left promiscuous mode [ 145.636474][ T5967] veth1_vlan: left promiscuous mode [ 145.641800][ T5967] veth0_vlan: left promiscuous mode [ 146.292451][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 146.410285][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 147.090017][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 147.108108][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 147.142032][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 147.167185][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'. [ 147.231081][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.249085][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.291038][ T5840] Bluetooth: hci4: command tx timeout [ 147.426849][ T8489] team0: Port device team_slave_0 added [ 147.453245][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 147.480029][ T8489] team0: Port device team_slave_1 added [ 147.501105][ T8578] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.511614][ T8578] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.521995][ T8578] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.530661][ T8578] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.558392][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 147.567089][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 147.607442][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.610229][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 147.615936][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 147.639062][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.698991][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.722741][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.733762][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.778637][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.879687][ T8605] netlink: 'syz.0.703': attribute type 32 has an invalid length. [ 147.933717][ T8489] hsr_slave_0: entered promiscuous mode [ 147.958866][ T8489] hsr_slave_1: entered promiscuous mode [ 147.966656][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.975053][ T8489] Cannot create hsr debugfs directory [ 148.275772][ T8611] lo speed is unknown, defaulting to 1000 [ 148.787104][ T8489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.820762][ T8489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.835482][ T8489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.864295][ T8489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.034980][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.068067][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.105637][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.112822][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.172204][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.179399][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.354719][ T5840] Bluetooth: hci4: command tx timeout [ 149.456948][ T8632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.709'. [ 149.675693][ T8640] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 149.730827][ T8640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 149.824235][ T8646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.878028][ T8646] bridge0: port 3(bond2) entered blocking state [ 149.913287][ T8646] bridge0: port 3(bond2) entered disabled state [ 149.950720][ T8646] bond2: entered allmulticast mode [ 149.968007][ T8646] bond2: entered promiscuous mode [ 150.040349][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.153574][ T8489] veth0_vlan: entered promiscuous mode [ 150.188288][ T8489] veth1_vlan: entered promiscuous mode [ 150.242545][ T8489] veth0_macvtap: entered promiscuous mode [ 150.255671][ T8489] veth1_macvtap: entered promiscuous mode [ 150.270886][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.281581][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.291585][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.302121][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.312032][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.322675][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.333746][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.399000][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.409555][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.419443][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.429950][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.440881][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.451374][ T8489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.460413][ T8489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.469404][ T8489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.478230][ T8489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.688545][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.702003][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.750870][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.763007][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.557411][ T8726] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 151.579756][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.599683][ T8726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.606811][ T8726] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 151.618260][ T8726] bond0: (slave vcan1): Error -95 calling set_mac_address [ 151.644562][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 151.652550][ T8727] bond0: (slave batadv1): making interface the new active one [ 151.668473][ T8727] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 151.686678][ T8729] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 151.695944][ T8729] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 152.249591][ T1081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.096097][ T8746] __nla_validate_parse: 1 callbacks suppressed [ 153.096115][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 153.097424][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 153.197135][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 153.297573][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 153.298860][ T8757] bond_slave_1: invalid flags given to default FDB implementation [ 153.453644][ T8765] openvswitch: netlink: IP tunnel dst address not specified [ 153.529060][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.539465][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.548456][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.595707][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.614522][ T8777] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.616246][ T1081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.713658][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.727488][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 153.745343][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.805183][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 153.852195][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 153.892501][ T1081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.957626][ T8794] syzkaller1: entered promiscuous mode [ 153.963331][ T8794] syzkaller1: entered allmulticast mode [ 154.005445][ T8766] lo speed is unknown, defaulting to 1000 [ 154.030448][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 154.092681][ T1081] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.097244][ T8803] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 154.162104][ T8803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.172695][ T8803] team0: Port device batadv0 added [ 154.297797][ T8808] Unsupported ieee802154 address type: 0 [ 154.370516][ T8810] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 154.373085][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 154.388978][ T1081] bridge_slave_1: left allmulticast mode [ 154.395310][ T1081] bridge_slave_1: left promiscuous mode [ 154.401238][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.422582][ T1081] bridge_slave_0: left allmulticast mode [ 154.428663][ T1081] bridge_slave_0: left promiscuous mode [ 154.435202][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.452574][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.757'. [ 154.842129][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.854344][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.867744][ T1081] bond0 (unregistering): Released all slaves [ 155.130948][ T8831] netlink: 'syz.0.760': attribute type 142 has an invalid length. [ 155.288555][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.296191][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.303463][ T8766] bridge_slave_0: entered allmulticast mode [ 155.319358][ T8837] netlink: 76 bytes leftover after parsing attributes in process `syz.3.761'. [ 155.329132][ T8766] bridge_slave_0: entered promiscuous mode [ 155.374882][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.390746][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.412631][ T8766] bridge_slave_1: entered allmulticast mode [ 155.425291][ T8766] bridge_slave_1: entered promiscuous mode [ 155.592415][ T1081] hsr_slave_0: left promiscuous mode [ 155.601405][ T1081] hsr_slave_1: left promiscuous mode [ 155.621497][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.636759][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.649073][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.657376][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.685578][ T1081] veth1_macvtap: left promiscuous mode [ 155.691269][ T1081] veth0_macvtap: left promiscuous mode [ 155.697260][ T1081] veth1_vlan: left promiscuous mode [ 155.702802][ T1081] veth0_vlan: left promiscuous mode [ 155.835389][ T5840] Bluetooth: hci4: command tx timeout [ 156.361194][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 156.410341][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 156.866247][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.936848][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.091749][ T8766] team0: Port device team_slave_0 added [ 157.124735][ T8766] team0: Port device team_slave_1 added [ 157.266689][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.273770][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.323703][ T8766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.323843][ T8885] ================================================================== [ 157.342315][ T8885] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50 [ 157.350228][ T8885] Read of size 4 at addr ffff88805b11a5b8 by task syz.4.773/8885 [ 157.357942][ T8885] [ 157.360272][ T8885] CPU: 0 UID: 0 PID: 8885 Comm: syz.4.773 Not tainted 6.13.0-rc5-syzkaller-00835-ga8a6531164e5 #0 [ 157.370873][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.380949][ T8885] Call Trace: [ 157.384237][ T8885] [ 157.387177][ T8885] dump_stack_lvl+0x241/0x360 [ 157.391886][ T8885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.397119][ T8885] ? __pfx__printk+0x10/0x10 [ 157.401725][ T8885] ? _printk+0xd5/0x120 [ 157.405896][ T8885] ? __virt_addr_valid+0x183/0x530 [ 157.411031][ T8885] ? __virt_addr_valid+0x183/0x530 [ 157.416173][ T8885] print_report+0x169/0x550 [ 157.420703][ T8885] ? __virt_addr_valid+0x183/0x530 [ 157.425834][ T8885] ? __virt_addr_valid+0x183/0x530 [ 157.430955][ T8885] ? __virt_addr_valid+0x45f/0x530 [ 157.436074][ T8885] ? __phys_addr+0xba/0x170 [ 157.440601][ T8885] ? hci_sock_get_cookie+0x49/0x50 [ 157.445740][ T8885] kasan_report+0x143/0x180 [ 157.450257][ T8885] ? hci_sock_get_cookie+0x49/0x50 [ 157.455381][ T8885] hci_sock_get_cookie+0x49/0x50 [ 157.460339][ T8885] mgmt_cmd_status+0x1be/0x4d0 [ 157.465133][ T8885] cmd_complete_rsp+0x114/0x180 [ 157.470002][ T8885] mgmt_pending_foreach+0xd1/0x130 [ 157.475120][ T8885] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 157.480512][ T8885] __mgmt_power_off+0x183/0x430 [ 157.485390][ T8885] ? __pfx___mgmt_power_off+0x10/0x10 [ 157.490776][ T8885] ? __mutex_trylock_common+0x183/0x2e0 [ 157.496329][ T8885] ? __pfx___might_resched+0x10/0x10 [ 157.501622][ T8885] ? __pfx___mutex_trylock_common+0x10/0x10 [ 157.507516][ T8885] ? rcu_is_watching+0x15/0xb0 [ 157.512292][ T8885] ? trace_contention_end+0x3c/0x120 [ 157.517588][ T8885] ? __mutex_lock+0x37f/0xee0 [ 157.522293][ T8885] ? mark_lock+0x9a/0x360 [ 157.526649][ T8885] ? hci_dev_close_sync+0x5c8/0x11c0 [ 157.531946][ T8885] ? __pfx___mutex_lock+0x10/0x10 [ 157.536974][ T8885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.542968][ T8885] ? lockdep_hardirqs_on+0x99/0x150 [ 157.548170][ T8885] ? _raw_spin_unlock_irq+0x2e/0x50 [ 157.553372][ T8885] ? drain_workqueue+0x2d3/0x3a0 [ 157.558319][ T8885] ? hci_discovery_set_state+0x57/0x180 [ 157.563880][ T8885] hci_dev_close_sync+0x6c4/0x11c0 [ 157.569010][ T8885] hci_dev_close+0x112/0x210 [ 157.573641][ T8885] sock_do_ioctl+0x158/0x460 [ 157.578271][ T8885] ? __pfx_sock_do_ioctl+0x10/0x10 [ 157.583438][ T8885] sock_ioctl+0x626/0x8e0 [ 157.587782][ T8885] ? __pfx_sock_ioctl+0x10/0x10 [ 157.592662][ T8885] ? __fget_files+0x2a/0x410 [ 157.597262][ T8885] ? __fget_files+0x2a/0x410 [ 157.601864][ T8885] ? __pfx_sock_ioctl+0x10/0x10 [ 157.606721][ T8885] __se_sys_ioctl+0xf5/0x170 [ 157.611345][ T8885] do_syscall_64+0xf3/0x230 [ 157.615853][ T8885] ? clear_bhb_loop+0x35/0x90 [ 157.620543][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.626439][ T8885] RIP: 0033:0x7f1c1cb85d29 [ 157.630866][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.650472][ T8885] RSP: 002b:00007f1c1a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.658917][ T8885] RAX: ffffffffffffffda RBX: 00007f1c1cd76080 RCX: 00007f1c1cb85d29 [ 157.666907][ T8885] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006 [ 157.674897][ T8885] RBP: 00007f1c1cc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 157.682887][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.690867][ T8885] R13: 0000000000000000 R14: 00007f1c1cd76080 R15: 00007ffd63ff64c8 [ 157.698855][ T8885] [ 157.701889][ T8885] [ 157.704217][ T8885] Allocated by task 6713: [ 157.708598][ T8885] kasan_save_track+0x3f/0x80 [ 157.713275][ T8885] __kasan_kmalloc+0x98/0xb0 [ 157.717869][ T8885] __kmalloc_noprof+0x285/0x4c0 [ 157.722741][ T8885] sk_prot_alloc+0xe0/0x210 [ 157.727267][ T8885] sk_alloc+0x38/0x370 [ 157.731348][ T8885] bt_sock_alloc+0x3c/0x340 [ 157.735858][ T8885] hci_sock_create+0xa1/0x190 [ 157.740556][ T8885] bt_sock_create+0x161/0x230 [ 157.745254][ T8885] __sock_create+0x4c0/0xa30 [ 157.749850][ T8885] __sys_socket+0x150/0x3c0 [ 157.754448][ T8885] __x64_sys_socket+0x7a/0x90 [ 157.759132][ T8885] do_syscall_64+0xf3/0x230 [ 157.763640][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.769532][ T8885] [ 157.771842][ T8885] Freed by task 8886: [ 157.775818][ T8885] kasan_save_track+0x3f/0x80 [ 157.780507][ T8885] kasan_save_free_info+0x40/0x50 [ 157.785553][ T8885] __kasan_slab_free+0x59/0x70 [ 157.790320][ T8885] kfree+0x196/0x430 [ 157.794213][ T8885] __sk_destruct+0x479/0x5f0 [ 157.798842][ T8885] mgmt_pending_remove+0x13e/0x1a0 [ 157.803960][ T8885] mgmt_pending_foreach+0xd1/0x130 [ 157.809069][ T8885] mgmt_index_removed+0x133/0x390 [ 157.814098][ T8885] hci_sock_bind+0xcce/0x1150 [ 157.818793][ T8885] __sys_bind+0x1e4/0x290 [ 157.823126][ T8885] __x64_sys_bind+0x7a/0x90 [ 157.827626][ T8885] do_syscall_64+0xf3/0x230 [ 157.832139][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.838035][ T8885] [ 157.840357][ T8885] The buggy address belongs to the object at ffff88805b11a000 [ 157.840357][ T8885] which belongs to the cache kmalloc-2k of size 2048 [ 157.854424][ T8885] The buggy address is located 1464 bytes inside of [ 157.854424][ T8885] freed 2048-byte region [ffff88805b11a000, ffff88805b11a800) [ 157.868414][ T8885] [ 157.870737][ T8885] The buggy address belongs to the physical page: [ 157.877165][ T8885] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805b119000 pfn:0x5b118 [ 157.887251][ T8885] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.895769][ T8885] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 157.904297][ T8885] page_type: f5(slab) [ 157.908289][ T8885] raw: 00fff00000000240 ffff88801ac42000 ffffea0001f94c10 ffff88801ac40948 [ 157.914421][ T5840] Bluetooth: hci4: command tx timeout [ 157.916868][ T8885] raw: ffff88805b119000 0000000000080006 00000001f5000000 0000000000000000 [ 157.916887][ T8885] head: 00fff00000000240 ffff88801ac42000 ffffea0001f94c10 ffff88801ac40948 [ 157.916902][ T8885] head: ffff88805b119000 0000000000080006 00000001f5000000 0000000000000000 [ 157.948169][ T8885] head: 00fff00000000003 ffffea00016c4601 ffffffffffffffff 0000000000000000 [ 157.956852][ T8885] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 157.965532][ T8885] page dumped because: kasan: bad access detected [ 157.971959][ T8885] page_owner tracks the page as allocated [ 157.977674][ T8885] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1081, tgid 1081 (kworker/u8:5), ts 70811205823, free_ts 16143493777 [ 157.998861][ T8885] post_alloc_hook+0x1f3/0x230 [ 158.003624][ T8885] get_page_from_freelist+0x365c/0x37a0 [ 158.009181][ T8885] __alloc_pages_noprof+0x292/0x710 [ 158.014401][ T8885] alloc_pages_mpol_noprof+0x3e8/0x680 [ 158.019869][ T8885] alloc_slab_page+0x6a/0x110 [ 158.024545][ T8885] allocate_slab+0x5a/0x2b0 [ 158.029055][ T8885] ___slab_alloc+0xc27/0x14a0 [ 158.033740][ T8885] __slab_alloc+0x58/0xa0 [ 158.038072][ T8885] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 158.044508][ T8885] kmalloc_reserve+0x111/0x2a0 [ 158.049282][ T8885] pskb_expand_head+0x1f0/0x1380 [ 158.054237][ T8885] netlink_trim+0x1d6/0x2e0 [ 158.058747][ T8885] netlink_broadcast_filtered+0x76/0x12a0 [ 158.064464][ T8885] nlmsg_notify+0xfb/0x1c0 [ 158.068888][ T8885] netdev_state_change+0x139/0x1a0 [ 158.074012][ T8885] linkwatch_do_dev+0x112/0x170 [ 158.078865][ T8885] page last free pid 1 tgid 1 stack trace: [ 158.084673][ T8885] free_unref_page+0xd3f/0x1010 [ 158.089538][ T8885] free_contig_range+0x14c/0x430 [ 158.094489][ T8885] destroy_args+0x92/0x910 [ 158.098917][ T8885] debug_vm_pgtable+0x4be/0x550 [ 158.103758][ T8885] do_one_initcall+0x248/0x870 [ 158.108528][ T8885] do_initcall_level+0x157/0x210 [ 158.113481][ T8885] do_initcalls+0x3f/0x80 [ 158.117803][ T8885] kernel_init_freeable+0x435/0x5d0 [ 158.123000][ T8885] kernel_init+0x1d/0x2b0 [ 158.127353][ T8885] ret_from_fork+0x4b/0x80 [ 158.131775][ T8885] ret_from_fork_asm+0x1a/0x30 [ 158.136546][ T8885] [ 158.138890][ T8885] Memory state around the buggy address: [ 158.144515][ T8885] ffff88805b11a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.152593][ T8885] ffff88805b11a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.160662][ T8885] >ffff88805b11a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.168722][ T8885] ^ [ 158.174626][ T8885] ffff88805b11a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.182690][ T8885] ffff88805b11a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.190744][ T8885] ================================================================== [ 158.236223][ T8885] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.243468][ T8885] CPU: 0 UID: 0 PID: 8885 Comm: syz.4.773 Not tainted 6.13.0-rc5-syzkaller-00835-ga8a6531164e5 #0 [ 158.254076][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.264151][ T8885] Call Trace: [ 158.267435][ T8885] [ 158.270371][ T8885] dump_stack_lvl+0x241/0x360 [ 158.275072][ T8885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.280282][ T8885] ? __pfx__printk+0x10/0x10 [ 158.284869][ T8885] ? preempt_schedule+0xe1/0xf0 [ 158.289727][ T8885] ? vscnprintf+0x5d/0x90 [ 158.294073][ T8885] panic+0x349/0x880 [ 158.297975][ T8885] ? check_panic_on_warn+0x21/0xb0 [ 158.303073][ T8885] ? __pfx_panic+0x10/0x10 [ 158.307487][ T8885] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 158.313462][ T8885] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 158.319778][ T8885] ? print_report+0x502/0x550 [ 158.324454][ T8885] check_panic_on_warn+0x86/0xb0 [ 158.329384][ T8885] ? hci_sock_get_cookie+0x49/0x50 [ 158.334497][ T8885] end_report+0x77/0x160 [ 158.338730][ T8885] kasan_report+0x154/0x180 [ 158.343230][ T8885] ? hci_sock_get_cookie+0x49/0x50 [ 158.348343][ T8885] hci_sock_get_cookie+0x49/0x50 [ 158.353280][ T8885] mgmt_cmd_status+0x1be/0x4d0 [ 158.358042][ T8885] cmd_complete_rsp+0x114/0x180 [ 158.362890][ T8885] mgmt_pending_foreach+0xd1/0x130 [ 158.367998][ T8885] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 158.373367][ T8885] __mgmt_power_off+0x183/0x430 [ 158.378225][ T8885] ? __pfx___mgmt_power_off+0x10/0x10 [ 158.383594][ T8885] ? __mutex_trylock_common+0x183/0x2e0 [ 158.389133][ T8885] ? __pfx___might_resched+0x10/0x10 [ 158.394409][ T8885] ? __pfx___mutex_trylock_common+0x10/0x10 [ 158.400297][ T8885] ? rcu_is_watching+0x15/0xb0 [ 158.405057][ T8885] ? trace_contention_end+0x3c/0x120 [ 158.410333][ T8885] ? __mutex_lock+0x37f/0xee0 [ 158.415001][ T8885] ? mark_lock+0x9a/0x360 [ 158.419322][ T8885] ? hci_dev_close_sync+0x5c8/0x11c0 [ 158.424601][ T8885] ? __pfx___mutex_lock+0x10/0x10 [ 158.429617][ T8885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.435586][ T8885] ? lockdep_hardirqs_on+0x99/0x150 [ 158.440773][ T8885] ? _raw_spin_unlock_irq+0x2e/0x50 [ 158.445962][ T8885] ? drain_workqueue+0x2d3/0x3a0 [ 158.450892][ T8885] ? hci_discovery_set_state+0x57/0x180 [ 158.456433][ T8885] hci_dev_close_sync+0x6c4/0x11c0 [ 158.461540][ T8885] hci_dev_close+0x112/0x210 [ 158.466127][ T8885] sock_do_ioctl+0x158/0x460 [ 158.470727][ T8885] ? __pfx_sock_do_ioctl+0x10/0x10 [ 158.475837][ T8885] sock_ioctl+0x626/0x8e0 [ 158.480159][ T8885] ? __pfx_sock_ioctl+0x10/0x10 [ 158.485012][ T8885] ? __fget_files+0x2a/0x410 [ 158.489595][ T8885] ? __fget_files+0x2a/0x410 [ 158.494177][ T8885] ? __pfx_sock_ioctl+0x10/0x10 [ 158.499023][ T8885] __se_sys_ioctl+0xf5/0x170 [ 158.503634][ T8885] do_syscall_64+0xf3/0x230 [ 158.508130][ T8885] ? clear_bhb_loop+0x35/0x90 [ 158.512798][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.518684][ T8885] RIP: 0033:0x7f1c1cb85d29 [ 158.523091][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.542706][ T8885] RSP: 002b:00007f1c1a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.551130][ T8885] RAX: ffffffffffffffda RBX: 00007f1c1cd76080 RCX: 00007f1c1cb85d29 [ 158.559191][ T8885] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006 [ 158.567160][ T8885] RBP: 00007f1c1cc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 158.575125][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.583086][ T8885] R13: 0000000000000000 R14: 00007f1c1cd76080 R15: 00007ffd63ff64c8 [ 158.591056][ T8885] [ 158.594365][ T8885] Kernel Offset: disabled [ 158.598700][ T8885] Rebooting in 86400 seconds..