last executing test programs: 51.536425035s ago: executing program 0 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0xe, 0xb, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, {[@rr={0x7, 0xb, 0x17, [@private=0xa010101, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, 0x88adfda5, 0x800}}, 0x20}}, 0x15) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000450ac3bf297ea03da465d27533135e59ac", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000004000000000000000000000085007a00004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000e4abdf6c0000000007020000f8ffffffb703000008000000b700000000000085000000820000009500000000000000", @ANYRESHEX=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 42.337576164s ago: executing program 0 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0xe, 0xb, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, {[@rr={0x7, 0xb, 0x17, [@private=0xa010101, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, 0x88adfda5, 0x800}}, 0x20}}, 0x15) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000450ac3bf297ea03da465d27533135e59ac", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000004000000000000000000000085007a00004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000e4abdf6c0000000007020000f8ffffffb703000008000000b700000000000085000000820000009500000000000000", @ANYRESHEX=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 32.887987837s ago: executing program 0 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0xe, 0xb, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, {[@rr={0x7, 0xb, 0x17, [@private=0xa010101, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, 0x88adfda5, 0x800}}, 0x20}}, 0x15) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000450ac3bf297ea03da465d27533135e59ac", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000004000000000000000000000085007a00004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000e4abdf6c0000000007020000f8ffffffb703000008000000b700000000000085000000820000009500000000000000", @ANYRESHEX=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 22.7205636s ago: executing program 0 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0xe, 0xb, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, {[@rr={0x7, 0xb, 0x17, [@private=0xa010101, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, 0x88adfda5, 0x800}}, 0x20}}, 0x15) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000450ac3bf297ea03da465d27533135e59ac", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000004000000000000000000000085007a00004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000e4abdf6c0000000007020000f8ffffffb703000008000000b700000000000085000000820000009500000000000000", @ANYRESHEX=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 12.391662346s ago: executing program 0 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0xe, 0xb, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, {[@rr={0x7, 0xb, 0x17, [@private=0xa010101, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, 0x88adfda5, 0x800}}, 0x20}}, 0x15) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000450ac3bf297ea03da465d27533135e59ac", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000004000000000000000000000085007a00004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000e4abdf6c0000000007020000f8ffffffb703000008000000b700000000000085000000820000009500000000000000", @ANYRESHEX=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 3.982150117s ago: executing program 4 (id=1786): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @exit], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x201, 0x0, 0xe}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read(r4, &(0x7f0000001480)=""/213, 0xd5) socket$inet(0x2, 0x2, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) r5 = socket(0x1e, 0x4, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x201, 0x0, 0xe}, 0x10) r6 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006c2d73300c0000000c000380040003800400040018000180140002007465616d3000000000000000000000008a9f23d63cb6f0e1932b1574fbd7d257ea2ca0d304ad392376a85b51db538d9620735f7c038e5104dc4fabf2d012ba469fe9366a2fd055c48d3d1708f55fc90dc1cb112fb536218c83c708c08b185e583a16d16d9020975237313ab55f69b63c663ef805dd21d4c3"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.139114912s ago: executing program 1 (id=1794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1}, 0x18) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="8010e60080ed78", 0x206c}], 0x1}}], 0x1, 0x40000) r3 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x6a, 0x4, 0x0, 0x4) (async) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x6a, 0x4, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x14, 0x70bd26, 0x25dfdbfe, {0xa, 0x75fcdd2308cdb375, 0x80, 0x1, 0xfd, 0x4, 0xfe, 0x4, 0xa00}, [@RTA_PRIORITY={0x8, 0x6, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x14, 0x70bd26, 0x25dfdbfe, {0xa, 0x75fcdd2308cdb375, 0x80, 0x1, 0xfd, 0x4, 0xfe, 0x4, 0xa00}, [@RTA_PRIORITY={0x8, 0x6, 0x1}]}, 0x24}}, 0x0) 3.044865728s ago: executing program 3 (id=1796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2c8, 0x3, 0x240, 0x140, 0x229, 0x240, 0x140, 0x4c000000, 0x238, 0x328, 0x328, 0x238, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x70, 0xd8, 0x0, {0x0, 0x700}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x400, 0x71a5, 0x40, 'syz1\x00', 'syz1\x00', {0x401}}}}, {{@ip={@loopback, @empty, 0xff000000, 0xff, 'dvmrp1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x21}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23400, 0x101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001400"], 0x38}, 0x20040001) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xa4, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_EXPECT_MASK={0x80, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) 3.017692368s ago: executing program 0 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0xe, 0xb, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010100, {[@rr={0x7, 0xb, 0x17, [@private=0xa010101, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, 0x88adfda5, 0x800}}, 0x20}}, 0x15) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000450ac3bf297ea03da465d27533135e59ac", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000004000000000000000000000085007a00004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000e4abdf6c0000000007020000f8ffffffb703000008000000b700000000000085000000820000009500000000000000", @ANYRESHEX=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 2.97498464s ago: executing program 4 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000024000780080002"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.019281946s ago: executing program 1 (id=1798): r0 = socket(0x2a, 0x2, 0x0) unshare(0x22020400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000fbdb5bcd5e59000008000300", @ANYRES32=r3], 0x30}}, 0x80) 1.99967974s ago: executing program 3 (id=1800): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x374, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf65f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3db00047}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x767f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fe793}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x173679c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3002}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6efb30a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1955}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63c1277b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8310}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54f43f00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x146552f3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb1a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2522edfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dd7d8ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f13cdae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cfef534}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9f5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc797}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc051ac1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a75d003}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x141e}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x149c94c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6dc3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x564d1ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x445b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x119b3ba9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bed3b8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a52045c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcbb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d822792}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf4, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1314b493}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a2f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e3d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d206fbd}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f580380}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51a26ddc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78304dec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc928}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ac4ba30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9d1f4c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b0ed444}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9804}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e1bd59f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x398b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x532a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71a953e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39f5784b}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x489ddbd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x425fe97d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d5a6a43}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ded0024}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4100c038}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10bbc6c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x219c79b4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a7d86f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64046e18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x735149c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe4a76ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14a5b559}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42ba14c2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fddea63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dd9935d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b739c28}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x374}, 0x1, 0x0, 0x0, 0x20000800}, 0x2004c845) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000007c0)=0x50000, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x124, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x28}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20040085}, 0x20040000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000a40)={0x0, 0x480000}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000ac0)={0x0, 0x1}, &(0x7f0000000b00)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000b40)={r6, 0x40, 0x6, 0xbb4, 0x7ff, 0x4000, 0x7, 0x8, {r7, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x2, 0xa, 0x524, 0x9, 0x80000001}}, &(0x7f0000000c00)=0xb0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c40)={'macsec0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000c80)=0x400, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, &(0x7f0000000cc0)="398446a4d1ca3af6c419e3b788680c7803aea715271c8f247985fe024a665ee583b523bc2c6d1a585e2ac9ae13215c8af0e8369fb46c4652cd5358057287d597e2634fd05961a4e4f4d546ea49fd402b1fefb7a331fd570567f0d5082d85a387320b5455f40d", 0x66, 0x20000, &(0x7f0000000d40)={0xa, 0x4e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000d80), 0x8) sendto$packet(r11, &(0x7f0000000dc0)="ea17ae1bcc8387900bdad1239f5da8ae8256d18e4e0aabec1352e00df6e6e0ddcf6a7f65bf4f77483c99efa81f5d4f6b470cba997c1ee25185896e8785c5fed9571cc2a2df2edf3c63b94f185ee58061d93a6b28911e5cbe9025bd0f56d56071e2e8aaf0701479b963325b104ab82b05a74b5bde86a5b2111b836c1e98aa657bf25d66901c1c1bf051c6b2bba1acf50d483eb4382ed6e0fb434bfd52c20bb6c66a35f5", 0xa3, 0x48000, &(0x7f0000000e80)={0x11, 0x18, r0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmmsg$sock(r10, &(0x7f0000002bc0)=[{{&(0x7f0000000ec0)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000f40)="7da39e043709c0426de543fe0e93ef26ef24fedefa148eb9d74e42fd4abe6678f91216eb0bc31d9af8b2f248b38804e91fb081b6a5860475e79e54ed342974dce4783cb5d62c8dcbc50db55d6b0e66188228f4b40cd2ac88501cebf255ea5cb6090e63c3cc976e469b446cb6a2670f4288e21bc4bc5868ddbc689412ef471ec4acf8364c35a204f644c7b5d7fbca9d51e48e3a5e91f694d76a8f358a4ab88d04fab1b531be33d1f628d5d0af7f6032f84ad0807adbb147514cb4ac12dcbcbaf6be9b2fc4f1c616f69bc1f49ce50b3335e3554e133961c040cbb2a9a1834eca63", 0xe0}, {&(0x7f0000001040)="e1a15f3e2fe0bd3891f1eb8f8b65a04e57ab2099ea85b0a308ff601be21a38cbc55687964f7c1b5b99b238a14721a8c28ebbdb3abe9a734c34d417c175ca76570a3350099c0d606ff3a96b559f11cfefad61d173f7c721f994", 0x59}, {&(0x7f00000010c0)="97c2ee7bf875817e348c0eeeaa37eac48435ddd9d955e87f9420b150f91ea4a1a20dcd8d85ab2c2786d96b19137ef8d4746525", 0x33}, {&(0x7f0000001100)="5da24918bee3c95f51e966141631266fa96bbabeca5e7af3cc17894312b785c47ddf9de5ece612276711a90c7d0b5940e27b1e45f114fa88240faac79d90e411fb968a454033b52fe13a6d", 0x4b}, {&(0x7f0000001180)="9ed79a426d0f5c0a82724d9fa3a1ae0c443dab2a4851ab0badc8ebb37e90c1dbf3c54b7d44ace94b5307fe4127c9173075fc92b004e19c5ee587fe34cd3f9dce2438a663e4e8d872aebfc5cb50d85ae3ee0a82e86080ff1daf447f0f7e93863a0f27df18c8eeb6f798b4d03fef4bf5f4f91df4166d757488ad6f13746bfd7f437092e010d0cd7cc8553da8ccd48024f53135645ab59b507a3c0281cb4228d3e211e2152aec7963b05f8d0ecb90c60cac889a3ae5fed51c6863d1e471ce867b10e6ab68f79afc0a079651633a091696cdd7ad731e535913b892a367a8fb0180c88eb15149a5ab9b4951208d8094d20032172bed6bcc3b31e46ae5e5da19b82b605d7b804132ceb2f7d61c3f23c24f80361ef73f78fed5a36ffaca91124c9bd7fb41e642a16e0f06820777653d970dcb206de95a23e8d3e174950c94023cd97f49eea8cd89d8dab14bdd46b9f77f9dc018aad57ff8b09994ea4e6b79bc89ec081ed5b420788321759c03ba77b4f3d4e1997471e81fe47b98577ae77f34c603a4d696595b23f72aad067a99ff9fd90c4bd6ef912bcb95817185c7b6588be70c4bea4cb8cbb4d7d1f7ea2c75a3c9ecebeb629ded1dd4c560c59884764e8395061d17e0d8a4d6f25f441011cf2784829d762972b71e60bebbf59e541d85fafcf7918e42592ba8aa6247beef7d68ecddd9db5a1d7631e56956fb9567f6c12f8d626086de435273453754446263ba59403e9412abba1eca59f1b27c562706a538d981a6a6c763fa37c9341e62c6e11a555f535cbfbfc6e0875af619aa6e890f491518246150657969dae8dcfdba1c3ec9d96a645be93f58ce190e667bbe80275bf2ff5eef4517ed070da4175c9b0b1d5d38f84c5c81df68c92f2d2264ee6ef644b5b0d55fbfee2ccbcec6ec5e7929a7fdde331ad3290960059489928d78cdccde77da700e96f510b36df320448d81a96441f039f5cfa12c34d7eea62eac85225d7226fa8a7c05e5c37b575e4d55b63dcf8bfb1734d4ef114b66e8f2802543928102e1e7bb53c7ef2d3b834adbfde9597b21edc3c3a7b3e143fbdd84c07148ab14b1bbed3d33a11e5ecd075a2276c152f59a0fe8201829514862a0b81647d488e0bb4f7abe14b1b8c663f848cdb9610fbbcea6585319e5b7534a81c6c2ca6fdd1bd627e10e10086b8b23a4473a37ef1de1494730504fbb32b59abe52c2e29536f7f439c7e0dc2b71278110e483bae24376db281d552ebe16c3ab7c9ee1edae57b835333a339e224d78d0b23499ca2c060310d51dbebae3d600ad425cf9f37b65807d2722c3a1b2e23ab6df66d847704c6a9f8f85458e8ea6a94857428cbe490b956d5fc6ee1547254da974f161a66078f63e0c9a6b729ce9615cd3d246cc897c417461927090f8e73cf96c628b7fc41d9ecdd9d078e61e5d709fc04b013489d066c70c3a7c8f5b8bb23ae60af9643b3596001459da5a07667e24658bd070fa565813b1efc0c4ef1bb18d72b1873ecb572656e5c132dc747074bc024c6553b45e074d5de9b17fc290199b0971442bb64db6f730445740f572c186b80c3efc677d8041d02674a3c3016909df21b57c3bd5748b07e582fea68462d9fd670b89601a1cf782cfe5b929f5e0f7c9df65c20803b70b91f2faf97ea9a86eea5ca322d9751b1c34376e24344cb0e88a3f171631453eeae1830c02fa81fb481c5b25596ecb3e69fd7ecb5d7c96b34d5fb4de97dba7438ebabc47ce7e10547accd8e0cf9ca42da7136c5a5a9f68b82748314b6f74875a758e35bb7af0fd7bc58bfadb584ba394793de8676ef6d1cb64bf04d882dded11560001091dbb9062a1e014b67e8698a8bdfa9ed6e040cae2d683b3e086aec9e1542ae5c4afd63a829980f2d6cbd04d5a073ea014facca2abf807dd494ead2f7ff51021906461058cf71fc9e28dd6cbfe72e46d77f85e543fc8e0da82ff4e5d178f29f03e9df50c6309c1f6688a051c91c306c5f934b76de85b21cb216c991ce9c34fd6e9cb707c4062be8ca9d49f23dadeeca003036409cd4cb624949240bbbf634c85862a56e9e66f3b4c22ac4c293a77b2c25f377421020c2d9f15079ce5a7678753ad89733f4130ec40a28cef94dc77c8ee5a6a1cf6e107ae65a20dd5a0b503c4d2273e30a015fa844225c7d4f404829751d66d5c2bb45b2c64414ba5b64224ff8376f514a01a22a64bc2218d725b711def1651420939d69341bb16f77dd6b558651172caa126b5a9c97f6a03ef3e43e69a75bc961234effb0b719be86f1b33d8b68733573d416b440811d21e13f68c2f8cb0ebef14407201192e1dc26dcb13ccbec87f5fdd79a554b14b7c56a770c87eeab52db8a699d5bb483434e22c72768538a26ea52c29eaa7871ed5cba16946ad0155ab5c8a1849d302b76021561a0b2344e0f97526908558f421fb0fc0fd8f89c028492bc0f2c690f1c85e81c0b4425c34c006bbd7faff7338297522b9dc29376c0cd67f53360b105102aa90a69f6d69c2e7d914c464cb6451887c82f1bdea3a33f65b8ae1899f3a9b58560d12dee605a354d0ef5874d0b651bdaf17e42040a2cae0f28cc8ed79d685e39dc8d100152d64bd9562978405af741158bb2424e921b3c0b0da82c96fe7f438f3f15e64cd79a11566ba12d8bfe9d664bd3e7de8591b3f257d0422a101701c8aeec0306af78d39a96b7c52b62187b898b4b56b2bc6b1a29e094941b3fc593538f94638fb9bad439a8b683b401ac7921404813c33b1179a326f10502431c8f1d6cb054b967a673d65b7b0e8813813b58f8e2b20c8ff799a3d3f4db5ef7160dbf37058264f2780c85d1e558fc9b4bcf97bce7a1284bb0856687873a4321cca95a5c3910b7d2c0020387c53c0b5f498b925a2ce6a858c0e6dc54ce2e1111bf0f8e4c8374254096fc15d4c447151c4eb5d47a480478a90a865dac8f2f165a170cc595a94be4ca79350545432cef9d9ba7911d331a548c90388ceda8b439e326b5281e6f87028e9bc48f1f150f07d4eb10cbc0ce8f6e0fc1f4f0f71926e6d04242a22097381a1e8dc9235391d1e45484d323e18611ba187e7a48bec74b529496343cf90328b20832cc21569ab70f75dc6d99f3ce9857ce2362300319e9c2a3b25392dfd749c700c679ecd8aac52bc6939d9c4f4dffbd7c606172955cbf15b835241d252fcf73495bd41199c1dc75b4422ab584a17c9eece1135f516c4ef6485fdf02d5dfaed8909f3abc40da49d8ed9a4e96a7064fb522a2d55cb94066c0988f6501947f8e876a8d1ef663b7372666a0f11f3f38934d1ddca980b880c3737e2b5b4bbc965358ae6c5696b969fedf1d9da9a427b1471e88314a027d4a868da092abd23a17ad113b28ceb61e39ff00f0284f3cf03d7b65b631cb2a47bd2d990b7ea0963c91fc6dce6a07320feca063f2356e2da39ee93c144b3bd85c2020b981ccd30d007e96131cfeca539ed83f8bbd9bd749b8ab457754136ec73f0eb74dfde51ffcd919a4e52f5834b8aba43765c131289f66b7a5df58c4c8d1cd1ac4d532c85c4c884254af36400b083a5a88212e33beaf688bd27bde5375c4a63ded1c3b4795ba59f8213649c12acc05e5104092c1711f5af9a2e9ea0a3261ad55ec9ce56cb7ab56fbbfa75b967930d7c7d88a41d3e86de4568c1e8ef430e2eb3f063e3c64603824c1ad95b51a628b66017d6ebf3db318336dce9f0923d2ee2de3ad10abc6e7f5dd387919ee8a44c1d7a945e5d72c3505ff10cff5e211f523844c4b00bfffb69bc06462cc0ca2479ffe9ec249e7c1431aee311a957854b7b3c13f02fa8b0efaf3d6ef83b3b55940711b790fbe55295de0302ac322b3557bb7fc531222b272b3f5b94fbdd40318a27ddc3e168c391eb0e0bb5877a4b714593bd1c29b17a813e35936aed1c45d21e82c63af0f296a15fc4dd29a0c6d2db098b9cf75bd1cb75260a7a2913ddabe9a84dc5f5d3d52e8a8d19978f24fef59ac012dd5ffa7b402f66440e694c0a3a063e70b0c6271b3207308f6f946b92c07cd191e9d96dd90bf65e10d8db3d9c56a5305dab4b7a4ca706729e4d9a1508a86d879b3f7b507c5ce9e4098e7e2365f3e33d013b877bc9abaea6d8f0c1cfdabbcb3e6fe124e79de754c2dc9858da82a83010858dacb62a1b1b11ef5c463b170a8a632f020b2023065431d0fb13199b901cefb711db00e208824a312b51dfe0bf4ff6bbdbba1f6a04100fb8807ed4bfe4b720b89e1eb64024b01bfa43334a56405de42ea3b09d7120ad9b4fd72b7c6461ebe46592872369d4d063186e82feae60f88fa344c845890e64d230ccc68bd195be80437820f017aa89eac1952f80891fe1d51b3eb16ab3b480895aab31dd76f479e64acd21d5578f53b85cb089c6429687935a425d147b48b8ccf81394df5ff7c02c5537915b80bc47e155989502fa828e027bc0891d3e002162183dd0ad7aa5ba1948fa90805aa973fad9b929acc205960a58d69a504a1f77285b48abbc4494235f4cec5eac8bba25daa1220119c271eb3e3f397e0f9af1621e933b771f9769b0b31a901ae20c17e285b407d7fc092ecd4ad1954cad0a9e7702a805b3e27dc9639c13366f187dddc8616faa8d7d33e1040959fc62cfc23f1f19d701895f0a2164d6e3178fd43ced35df4933e8d4d3eaad67207883b6cb19c480a08766bd3a04f500a15ad5c42bdba442d53379f8b607ed7a0008a9421b3ed6c84556910dc0bba909b2df1f192d45a08e950f32ac29e7390ca367f6d250d8cd884cc79da50b15b5095a94334faa1ca87da922b45ab13a014bc94c926326f5e3525c7eac73ade42adcc771945f4bc88d3af9a762cfa31565ccf7a7f40cc1890fb809420534e7c94407ba1efdb68351500697f0b43e7cc065b548255937b8811936b27c5f9e7068a249ea8bb4cab7a163006c2d517fc804f04cf295e1963ef6fbec14322b3df0ed6bcf8658111559b8444ff269d58d9e4907d37d381e0dffd19fa5fac7840f2563f1899605b38debdd510e761d3ca069958494d9ef38b3db901e05da5c4c8364f0d96479fc7965bf4e63f6abf267477c8afab1db5b7a3fc83beb5cc3540739dd6d27a5191ebfea66cc59d10b79a0e84d1d9fd8ac627d903adbe0ef65c08b970d15cc9e9f2a8b5fa7203be6f7cec64c0504a5594e22dabc5e0eeed84970ae86f070bb44c4e93daa0db0e0a5e88cfe36928fb9451a79db4813cb52e8e62a85d8c31cfbb09a197c4b9c14426c68920848cb6e5c9e4a183379fe3b1e491a2bcf14363dedbaecda80d9f4ff636ecf487f5a20ff6a1d0973a8f3cbd8037b3e3cdbcb25821e394683153c40b2f0d4a53ddfed4286f7c4a521a95b35d1e1a0989d261921c2a953bfdce5a9c824ab41c7fbe1468111a231c315154e7e4dfce44aed3dd30a1a489f25f3d145cbbd15d30db25955b1323babfac5aa830436500cfb5fd5e510e0260ee84b74f71d919c5a0750d13a1ae17781a27cee822986e631d294d8ab09b2f482f03c37b97e6fba29224e945f81ba7cec1722e157796ba1dc6d5d8b0050fa0446b423e605980251c40bc268658dddeabb4d6e2b58e8e47826fb7999bef23b986c253992098db459e7f718d7aec0fc299e1890ebcd23699d8e340637145d8078b7337d68dd95a6b9c76cce86804f3789b6077f3da7cfd752bfec7cbb2c3e4bdb328f9ed2f3bc5813fd23a00c7ee18b4f15e03b8fd7c54f6afa17ab72c6b6878eb2e2a3d72dad86d778914ddca2da8777f17918139d2be25a5ebd279a51ae235a8cbc77dfccf0e24e69129c6d05d8fb663b34", 0x1000}, {&(0x7f0000002180)="3bc6aa290638ef49431d01c2040bdb04", 0x10}], 0x6, &(0x7f0000002240)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}, {{&(0x7f0000002280)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002300)="607b955c4f0f3542408e47cd7228ef12499d7594866ed1f9505b1ff5e99088a1a5dd624dced4a4088a4aabe0a22e63af41845f151813fc46d3b58304d90d58922542b5849f9c61e6dc911345cfa2cacce46da3bfa783afe5c38c9bc8c9a3f093ed5f50945cfa523c1802dac7d90d3ac6ec847f02371a5477f00a7c4e9f44294a58b07c3a4beab24dbbf891f5ab6be7e6bf0e40f928a879cf9bdd3be92f5d862beb08bcd28c20f33d351325d8ca151cd568cbcff1a4606212e0c74264cbfaf2079d8e5029a73c81ba5019416400646aaaa4f35e8ca5ee679288", 0xd9}, {&(0x7f0000002400)="be4a43cac22c9b4f67e52531d03ae1a7e3ae6711d51ce91fe09cea0d36d76c72802baf219774fefd9203d2e109413d2e239ca488265c60e04a8ce3405c882d6cc1436ebbd05f708246e0c4832c8c0619bb94148cd7f5e95eaca4b9b5e8b159932b17268140dede6666ea4e16274a362580c88f82190b73881978476b99d1140381065b493c9e97c50d3ce3319f3f79b3ebaafa69ff8f3cbef1e8faa3371d498eebc013d3c93e488bc5a07fe2", 0xac}, {&(0x7f00000024c0)="c9bccb9d122fd1d678b3e5a9a4895465b62e3e74749a18f53812ff5739ccc47b547a1a2aaa958896f0d9c33451beadca595632f3b27c22933bc02be1b14a697e49e408a2c2dfef4e3da56269c0062c4bd103d2582603b8f1812db26d491ed70c15e74d21081a2c26b3fbd9abdcb85eedc44abbdb1498ac957a6dbc3ec594aec9e58b93c8db03f2d3bc252d55810564cdfaa60269946b74c5727cb892bb3bc2c462734c53aa817a8977ba352907a12d4e0b25979850d55e385f2e9817e8cd9c559f9a848aef", 0xc5}, {&(0x7f00000025c0)="01f2c6e1ed239358bd7a8aa1effdaf68c3974fba87fae09f862c7119a5e6b1331e34de36338cbf356244734ba04661dc0a9296f085eee3fdecbc4e7054572954619ec1e75397d8df9fd7155dc255e455761415cb86369d993459f90a59e23dd89dbcc2e41ac6678d45f86bae180ae61cf3eb2c004d", 0x75}, {&(0x7f0000002640)="a46790f9e036fb24cb5615a2d2bcc6b81e8e0d53fa725b299a2858b025b89721f63ceab9183444b1192aa78208265ac13b736e790d11d7ffb2d3ef17e0f0de37b8da679044e0679e3adbcfcf1f8dd61295df7e9b666a541c7af9a6e8a69a47c9cd5e10ad0d88c9016b61e44b1ab2706f82adb61716", 0x75}], 0x5}}, {{&(0x7f0000002740)=@l2={0x1f, 0x3a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7fff}, 0x80, &(0x7f0000002800)=[{&(0x7f00000027c0)="7afef86262bf93d8f0f658ff239630bf88ae4c4bd93647772803e3cfb1323690ba4bedd80f9dcdfd6067669876cec96d6fee5b", 0x33}], 0x1, &(0x7f0000002840)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}], 0x48}}, {{&(0x7f00000028c0)=@xdp={0x2c, 0xd, r9, 0x3d}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002940)="2a7dc31881e14ecda2ae3c569d190f95a7c7d8760840d68ebb388debce1a0d6674a35f65bc8119890b20f69d82407b55b8", 0x31}], 0x1, &(0x7f00000029c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002a00)="c6794b2f1dce2d69f2bf8556d0cebf3142fdd0c5ca08bd20592f471fed95a1411a0239ebd53adf3bfc8a1f9b699324aa1537f99a355a46ad4ffb5a677ec3b37e3d12d00c6be237cbd9d48ac0ac1e46ae648eceeeb0280004900e9ffe878fa8d582ce8fee21c63519758ce611ad8dd30e28a73782812cdafba2f58b78eb09559525368c05bea9e37b45f7d1ce8c545a29f82c9838c40fd380438fa15fec3c931c0e845136a5cb6bbe1b6789e3afd6cebbec", 0xb1}], 0x1, &(0x7f0000002b00)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xba}}, @mark={{0x14, 0x1, 0x24, 0xff}}], 0x90}}], 0x5, 0x48010) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000002d00)={r8, 0xc, 0x1995}, &(0x7f0000002d40)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000002d80), r11) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e00), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002e40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x40, r12, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8091}, 0x40000) sendmsg$tipc(r11, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f40)="8c8603bc95eea1d87981f6e6d1d4d7997cb15d6999c17599d4aec0309664c61982a8ced08f75acd06c003cc070b513db257447fcaa5cd28c18c8013dd544110616ad0196733babf7b8eea5f671f05196de597178d11a26abf5b97769", 0x5c}, {&(0x7f0000002fc0)="f0a18a3ff54c18a2d13cbee2783205bd815a80504791f48f54a70cd3c70de46971afdd97b4946e9b001e1fefa9c1a0270636f5761a9cf549338c387c72cf852dee2b711718ceebbcc5e70211807220cc457fffc5704437e5968ed76703b7cceea94a7d0eb4c3c155bfb71899c82e5204baaf67a3ed4f1a56be312a03a1b31a062760c1e2f8dbbb2dc6b80a1b2feca43d1a9b8db1a929feaf58ec8005bce846d99323b8e3f4cbda4e5626eff5a75047bbe2b6b57f2f54cdb2b1abf9c5858831c1142d99c0e2bad067410493ca27ba7a139ce83d", 0xd3}, {&(0x7f00000030c0)="b42100f9fbd0c9e2d8405aca9bdc69bb924f1de54ba0158f7c8d5011583e0a5eacc1a8935fa400de1897564c014e2412841f9d0189287bc9d63cb89ff293ca35478daa607a9e23a2e10aaffd0d57cf9a4c0f1ddcc792c7a4629cc3411bd30f470a443bd872e2a3a4ba6571e207ffb8cb40aa2c1b3a370c5af10dabc7ad1ad155e3a6611e5314219f7139d23f0efef722367803976fcc7fcd70441a7b85c64d32f5b20bbca153e31f66c9c8efcc33d26c", 0xb0}, {&(0x7f0000003180)="e173b269e10ca536247656e2df66c3f5dcae5da0919efe92cad4d84e596546d970f4dc6a2cceded765c6ab99dea85a9b161a9386ffedb174211635abd6ebffd9243f0ee20421e9ae7456e58defba5458e7a7985db846429224ea2f1070dcc6a663c0589eb76ca6621788dab1f969", 0x6e}], 0x4, &(0x7f0000003240)="ca19441dd819d71414d4f9ff853b2a894676d5b6b21408aa6be8e6881df44cc1b9bee08ff0be606dc32340e217faab9c3a0fd9b5bd2f234509022c6cd927e6de04670bb568b27042b2474bf201fc2a7d695493f55143ca537fd0d2f1ec9fe593a46e2a2de2af3607a366eaf7b4e31f00cb46265df393538f5590ebb28b200f6b36d96437e2f4f8123a5bbbcef6d02bac4a1583466dffbe65e7cfc7b6ad76a65de681ef0ffad1a73c8e24cd9c2baaf7ee2fd0c05ee37e918f441c863ffcd4b1d7f893361b782855737a6f5a336712b4b0e3c2d804a860dbc40384c62ca9300427e0c1fc0b494a70564fc1491c810d6302d68401f560dd1fd593580f2035b326697c40e590ffca1bfb7ca68b47bffdb2c23e1b6000008fcf564469a2abb13135ef0ecea797cadfadc88c26b84dca228717e97339f42cd8fbf4af73d761e211f57c651ce7190f87cbffaec4947b89bf7386f493e49906790baf4d11f40c9b945cce7e476d2b4c9d4518789254f28fee280d0f6d4566e681a1cad1d9ad77a2145ebe246e28310cf0a0aa5fefdcfad068e7a233db3b00fa2310cc228165000ace430e50efd0e8b74f07be1eb21072e3c9b0dd6a4073fcbbc27fc20de40774fd4afe0b0fce42fa30238d8f866752ff4293437d57c5047a36f3ae1bc1ad650d3f23b408930229a2cd972d0e9770ffaf9b8ba4b690c2cea2426ec1c6382e270d125ebbc1a2682300882bb1f724edbd55f9a5a703d3a90fc3686490c6945a4ee6e3d61845493e08117421a504011b54a185d57043d213f091463e3692567ce10ca6b1c92074a1ba7b8651c32b0520509e0845d14d1b1d888d7c270fa6b0a82d6b3e57553d9f39b1bdb3dd8e1f8346117a47c51ea24554fd1f405448b1015e1a72e6dcafe2cceffd352446ef64ed11bbc5724eb199cdfe23e6612f36aaad8b5cb621b647eb093f90a4b36b66c2136d7467fd344cac62e3e4212c82a3868ef0a4fc11c85c544c946e55abf1c92228f7dbbb571d4aca52362c358d84b3e21f7219de1f51ff7a57bbfce66f2e06e9767c7b5bdd6acfff1d174996a18cfd15de5f27ac2641e98a387fd2c873eaaa4fea05ca53b8094ceb9262c6067e19bbf614ab2cb92aaa7d9f9609c488ecbed80a36ef8eb6f99787fb082243b07250e6a989c848fed189fc5104cf1f39dcb6948553a09963190ab39fa575971b58a6275683144085512eaf4e8e00ae885798238c4c3befed68f0199458ff39b24c8233d28926f2c2ab7cb52c71edecc8ffed1dd5d7b9ace4946ef3995605e42a0e203b9ed8c4739ed668ca17b6b518336d2c2fe56e4107e675943c3b7feed8961dbe1ab4d408790ffc5903caf4d00f30bf729a1c18e3e334eb3ad66cc291fb54d74dbb9afcd66f7ed0b6db6f387b6738262e2e13d2fc6ce94606f3325593bcf60a7ffa286adc7d852a21781feeedff01e6a94a1bc8eed10a75d61e53caab7c8d8bf2acb834f27ac89db6155bbad45cf72a0ba8425d67aa6e4d6d28d4659a84fb7b9ad999b89bfccdd9ad9f1bfe31c410479f5e7e1a8877e38976408d14d37162a79d7ccdb47badabc1d5cb5507c8751f460a9d4c44416a3a2bf93182f79dc416ece85eb7e69b22d3c4803663d36010add3f28735edddc778971cc08740617f320636807351b8c653965d8e683b11816a7bd14c40be29637be3a8b5e5343e43945b7dd2df8d9cad453dcbd2dc7430ab8c74abde9efae582c1d41afb481ff2ef4f8508239c7b3355c9119a1ca35cc0c6209ac6b2a8acb79ce1cc814fa96d5c61c8675dd9dc9e2fb28ea08df1fd71e6376f6170420e95de447ab976cedb03d30e2c83892fd90c6cebe2d3d22b6be83901287e5415d5af0faed2e5e8806791e60aea7bddeec8b47645c9c04de880906181f3298283501633f7d938a9adbc3247c8669d44b53ddd42359e247300780de69be54c52ed67d27ece65b40dc15db8cecef4380100b2f770fb94e4a899c88bbc25b0d4c4f395a675511b6a4b7b3e85161182fdba9c11fd36db9902946dc556609a5be89bbbd413ea1be05d49fd33ddd22cd910a228cf55ffafb5aa92f644e6e2c79b2c7e091f1b7d8a1536575f2adbade2f80ea87e67c4eda72d3e8a476c360bbaef3da2ddfa552718ea38053473a940ead541d6658b6d205572499798055f858fcff59742481da5152723ddc970eb4a7c542d7c2416160fed40d3bd41c2ab1304ce9e1ea548bcefa1d71caa3eedfce48dd8753aef11ac1f8e7e88c157b9e3f91e3019aaf0c1c521608ccfb47f3d134d588b7224abee2d93b921fbb0c99baa3249ae0fe75f7d2cae4daa7443c7cb248a7326d8f90a21594d476c1cc9697b3215c5f900e1445d19a2df49020d7dfe6310b7a14bae5eab30a2422bc909677a70492758225c38b6997519650f42228298c8c242f865686f50c195dcb6299f04fb52f273e4aeee6c11c039daaedc15eee1abf9b3838b36f0bb3e504e956dba328bec5bb6ea95de6c448c653f4afe1188ceb53dc025be152fb21c7bae47c66d6f842aab65a78d1624b4d19c391bff7ccd44a31aeb4dc876cfe4cbeb52f2f6b93ea197d6f1000c1b1ffb98d1c25bcf0660b49b6389d6c1ba207b12b9b271394e9aadc304289f28e39cc948015b00d76bc41544c2868df2868ff177b0011ac1b2f1244bbcbafbb53241cd710e7398c98ccd6eb95ecc383ec06bea1891207c9faeb00425b2f27bedceba31071f2d549d31fb613c0041d7efa9f8d45e6ba096ea8d0e5fe403e124cfff75df287c7ad576c699c238b0c49dd89916f8ce133dd810bb2f6834ad0e95e5cc3bee1f274aea778657d3ca472a74e460e6dd0c551e8347a4a1aa075bce787721dd650d59ba9a11ac40499d6f597186a7dba2202668d3b8c368e86910255ce192291acdfcd8f745f94a41b004bb08cf5d6c23638646cc124363b00b3e476a56e7924c6ee022aa522194eb848fe4997e73e00da3c60f4ca23c3c6b6f8aa02cb4bb104894fcf1b7a6adf7db989946fe04b351bc1fbb4bf299ddcb4aa514b71dd03aa435069fd3dee3329e3ba09fea3620cb4951bab2e130d98c38e07387fcebde877d5b8befaecbbb8dab9491fd282c6aff7ad9bf86a8eeab5614f4806d19ecc8b16e1935ea3b551528a15bb7707605cfbd2d08984a782b9e1171cb0be7bfabfd55c6c545798881a0dbdfbadb5b86079f062588368b431453f2b96d99c3470cb9427988bc56572b004508b161a9a77dd6225180a83922c4018b1c8970f691b5aa3d4051bb8535aaf63a5b30aaab088bc450e3ebb0aab2019649f49d3323e86af63c6e2c5c3e3522e100250ea9bfc2d3a147a3d09dbd768f6485ad81473b7a7a77eab76c73e2110e5e2b0af2a930af5e42e36e2cc34244b72415312286fd40d3152868225858d64a6f66216e6490617f949f1f6f215992c99721d3351191a0f65240c7e1227d0db1363a41d443fc5dbda5ff038f143d61e819563b6f99b99d500f06c9c3da1a86805a706b59b706fa0c7257a2e6c93605fd07074cec17716b2b38118a9f170be241b86c802b2ad81ffe6c693fde5666f5283050df046cced674d659372da763dfe0454e53f56ddb9a36b6b116d8f45dec42b90fa5edb442ce767d4b017afd220e988b9b4d553a3493694fc0360f65f95e456526a390deb940ee57ff3f0212fa942a88ee1dbfe45e98cdcbdd197b817ac17dc783aa2d6a783739f47eacb0295757873ba4cf4af0a0ac0021538cd892dbb6c9d2c6137302cf8c90f16bfe3b299c3a89b16f57e22642051030814bcca99f25e88ed2162dadacfbb86726ec8e4f4303e4eb2c0d58c4f62b1e69324d6aa832c9b0ed73a6b05ee4281279b548978c05f507951131d308dfb7a10460c2e87e250d1f5d25bb106d6e24cb47178da8859d14e82fa542ed8c02a88cf781624551f93cbccef04df3b226c3fe85e9c4cbcd0532b0b6dbe5710294fa40735132f7b350518b365942d46287c762e725cb4cc330b2026b5a6a5c5d2b489e34aa549ac4754eadaafd67593cf9e090bf15867c89ee7afe2145e07feb64c1e0f47d88758d550fe71c415bb6822c6b51104565d6d1d9a6c2c3d0340cd712f50e5c46ff54e94c1c5913572e3f408155573e62a5485dc885ac042ef7be1f0b5a51e1d457aee6dc9dd0d3a60d8b050fadfc4c9faea80adec207e9b4e1c0ec707f9cff0af78a4cc6d2676a98ad54933e71a208219fc04db94028dbf7654fe00e436bf5e7e20bd9d0bd1a1cc633b7d148b3cdca6c831b4155707c867f941fa1cfeeb86b6787ae011767ac0a03db547f2cf8faccbe6284c25eaa73f60fc591f010e368fd8879d8092eed4b07f14a7e2a9fe50a473c140d1239d0acfba2b3f9da5d933aba890b9582c82db909b84682cec95680afbf496ca5a6b706192a2891315cf74cf9fff3dce27f16aa4f00494c4dc1d897392caa30d86c3654357037c8911d622103271d5933be1c5fd168bde94fa589735a5dc0fc77f8e4a8f561ad6874d3eba51874720a41bb0eebd2a7bed67760f9b15121d669a97a0626bff065f2ea9edd78d9661b3022cb5c898a94e14c3824aa731bacbb21e2a34d0d0c39e29df53f3f92f695f9329b038312efef6b681e6c9f35d6f3230ba8135a6e8974a85afad658e44e16382cba673efe4f9cac41cb9c8756df58f5d7f204fc52d8185ba04aab4a622c1a290ab68c0e97e69cbf237519225d1e451f05defe36825d38c4525ee241e96b0a2592321f592dd1b6b22068ff29db514832913397b15d5f4ba6d28476554e0111049a65e26285f7661ddbb7f45a7d36bdcac1e11430cc8634714ce148024ce86c235d802af76dae78449a4f59804a46ce73e189e5c087ba3cc51a149743bd1daff78472c5a68ea55cbae9625564abba9ef0fbf9bbba2f31b226a93a3840ee2fd99764bfb86223671aa7e81e55f0edbe3f3ced0ac88e1f59bfa0b95f2e3306b91a01a56dfefd61653b79221f4b977ef59bdd57fa21b08740e7ad8a7479bd81092ea209e846e42d1496ffae6aa7d3a484fdbe420b7c6e27b2315d99b14b398761d6e2419dc46c67ea866deedfbb4d5384cbda76c4f7b5ea8f4ceb9f32b98418440051f9d69b18524990f0959b12b00b55ee2566e7a29bdfac65d653ef57b79442d9f634a99a44bc603a9f25ff7d71220c6495c7f90f555994bcf70dec9b5d5805af96d4efcf6037bed0b39cecc6524989fc79359750d6f30f61721ff8e3933ad45163f6a9b79fc94000be93e36b17f27c671b9d2a29ccbfb9ceeeeb4659a25eaaad7bd37b0f6609307bff736b13d07a1ad90970d0f50c98939fe339058176f314db9870ab26285f8716a8f05ee8a28d647917799d52a7f2c212a3edf60bf0aff268a61e13090d832effbd25ea6e2b0fa3e0974b84ef6ca31e7988e94d481fad0b9f2ee00e6706f9bb947e96bd5bbe54331df8c4e5ebd179a1cd23622e1e4e44e97dfd767a470aa4d9fbb40a0cd2ee5b0c670cf90c3009a2c6f2ebea6cf3f6fe218e1be0cd25a0ea7c59a7a2f077ae97ec38b0e939a5ed1dd4bbdae9d049df9d3c356f4c5408a73cf554e06d260ff97b9d25b574d22551bd6f8323127f2db0bd54ae8fab54f07ea8a9c282db1f21bee58306e3968e5b14ff15e6d3430a38b91903810280808dafc326d7a9a6e0a1d6d81b756e5ce8abdced3da2c7e1bb6d5fb9e63e368a9ac863bb11d839329285cbbcc288bd22566caee29b4d30bd87a2a5c03d5cfd8a3e43e14c4f7cfc05435ab6aa4de3649fdacd383e3655a8f85e2b5c5ae83a445603e612d4bec661", 0x1000, 0x4000000}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000004280)={0xffffffffffffffff, 0xa, 0x4, 0x10000}) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000042c0)=@bloom_filter={0x1e, 0x3, 0x7, 0x101, 0x10, r11, 0x1, '\x00', r0, r14, 0x2, 0x1, 0x5, 0x6, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004640)={{r14, 0xffffffffffffffff}, &(0x7f00000045c0), &(0x7f0000004600)=r11}, 0x20) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004680)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x7, '\x00', r0, r11, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000047c0)={0x11, 0x21, &(0x7f0000004340)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r11}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xb, 0x5, 0xb, 0xfffffffffffffff0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}], &(0x7f0000004480)='syzkaller\x00', 0x0, 0xb8, &(0x7f00000044c0)=""/184, 0x41000, 0x8, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004580)={0x1, 0xe, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000004700)=[r11, r11, r15, r16, r15, r17, r14, r15, r11], &(0x7f0000004740)=[{0x3, 0x2, 0x5, 0x5}, {0x1, 0x4, 0xe, 0x3}, {0x4, 0x2, 0x2, 0xb}, {0x2, 0x1, 0x9, 0xa}, {0x0, 0x1, 0x10, 0x6}], 0x10, 0x81a, @void, @value}, 0x94) 1.9989469s ago: executing program 4 (id=1801): socket(0x1d, 0x4, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb88a800008100400086dd"], 0x1c) 1.71538091s ago: executing program 1 (id=1803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = epoll_create(0x9) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r9 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r9) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r8}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000001c0)={0x80000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) close(r3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000480)={0x1, 0x1, 0xa, r8, 0xc}, 0xc) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000004040098cede3d12f500000800000007000000001b0000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002494fcac4dabdb4c90579aa524f858bb2ca9789af2d637407aaca581bcd2b36d4ea16ab28054199dbb7eed", @ANYRES32=0x0, @ANYRESOCT=r9, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r12}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000100), 0x1001) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x80, 0x7800, 0xdb3c, 0x7, {{0x26, 0x4, 0x0, 0x8, 0x61, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@noop, @ssrr={0x89, 0x2b, 0x44, [@private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x1, [{@multicast1, 0x8}]}, @lsrr={0x83, 0xf, 0x23, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}]}, @end, @lsrr={0x83, 0x17, 0x1c, [@private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @loopback]}, @lsrr={0x83, 0x17, 0x52, [@empty, @remote, @empty, @multicast2, @remote]}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x5, [{@empty, 0x1}]}]}}}}}) syz_init_net_socket$ax25(0x3, 0x5, 0x6) setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000000280)={r14, 0x1, 0x6, @remote}, 0x10) 1.689590185s ago: executing program 4 (id=1804): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) unshare(0x20000400) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0xffffffff) pselect6(0x40, &(0x7f0000000300)={0x0, 0xffffffffeffffffe, 0x0, 0x0, 0x401, 0xfffffffffffffffe, 0x8, 0xffffffffffffffff}, &(0x7f0000000000)={0x18, 0x20000000000}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="60000000160000047000fedbdf250a1832c998ef3a8997997c9670d75405714cac0a122493d44fca9f8ca52780a1f261c781e1777e8c3e79bdc4670be5f81ecbad33d1c8b9756694d9315f981e2e60c7092226d6e79245d4410f49c18387c948c2f19fc9faafecbef0e7b6", @ANYRES32=0x0, @ANYBLOB="0800090000040000080009000900000008000800000000001400020000000000000000000000000000000001140006000000010009000000a865ffff020000000800090006000000"], 0x60}, 0x1, 0x0, 0x0, 0x2004c811}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) splice(r3, 0x0, r6, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="26000000000000000000000000009e0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x1ffffc50, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x4, 0x5) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x10) vmsplice(r6, &(0x7f0000000700)=[{&(0x7f0000000180)='-', 0x1}], 0x1, 0xa) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r2, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x5b0, 0xffffffff, 0x98, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x518, 0x518, 0x518, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00'}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x2a0, 0x2e0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x610) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xa0, 0x11, 0x148, 0xa0, 0x0, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x1, "be92f87777596354668949a64ff46175eb6b1ba98fd7d954180ca0208614"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000280)) 1.562934888s ago: executing program 3 (id=1806): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='contention_end\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xe, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900ffffffff02dbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x74}}, 0x0) 1.362779365s ago: executing program 2 (id=1807): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1.355536408s ago: executing program 1 (id=1808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12140, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x17) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000003c0)={'veth0_macvtap\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}}, 0x24, {0x2, 0x0, @empty}}) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000), 0x4) 1.266980134s ago: executing program 3 (id=1809): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x73, 0x1}, 0xe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, &(0x7f0000000300)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x6, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x4) listen(r2, 0x2) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xbf, "ab8bb5fa6e5a575259087af040600dffc9a4b337cacd02eba88558769becd692f5ed22017dbd012db6a589137d3cb67e6eb0d734c6b062bcff572140d6f1c097f7ecacadd6e76d54f5dd31dd47d9271da6cbc67b104c9dfbaf619ccda86a6d60175e0a11640dbe6a1dd1a30a69640a1b2ac693519ba44ebf2678cd9926cf88ce603fb681c62e59a317833ccd60c04236b77227c4f9d5119a945e053cccead2a94c3fe36d7cf596a045e2441d43953da57b5ac2d845377c2aeea707f12df1b9"}, &(0x7f0000000040)=0xc7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008840}, 0x48000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x393, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x21c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x180, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x164, 0x6, [@m_nat={0x84, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}]}, {0x31, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92"}, {0xc}, {0xc}}}, @m_connmark={0x3c, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xb, 0x6, "66396e732cf672"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0xa0, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x76, 0x6, "ca8fd735f4c425bd44291fa86781920ab90ff95c64e3d33704248d0546950f6c3113358c2551981c52f5a6dd8a3891697d8ab8d8f56d15025dc3c339c95c2c879249dbbfa3c3f7576ea41a624c8db9b4a2896e26ced3361e33c793332fc709bb25bcdfc387325cb1fac53056bf925e890e91"}, {0xc}, {0xc}}}]}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket(0x10, 0x803, 0x0) socket(0x2a, 0x2, 0x0) 1.226264639s ago: executing program 2 (id=1810): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0xf5) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000a051ce9e91925de60de63d519be990000000f3ffffff00000000000085000000150000001811000023d1733c0a1b034f8a7436b7762c7d19deadf854921981a1f8186cb643d4bdc3e5c9be890d2fc3d8fd5681618fc2cf46a5c1c883ea4c7bfacbc0257b4bdf708926338a0a00ab93a3228ed06f317e3c18e661b725217b0d93c45735401bb8dda384785987cd3ae0813dddc0f18247ca4add1666cf28af81fa1bb18b", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 983.613749ms ago: executing program 3 (id=1811): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfff, @loopback}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f00000005c0)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r1, 0x12) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='xen_cpu_set_ldt\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r1, r2, 0x0, 0x1, &(0x7f0000000380)='\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree_skb\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x61, 0x60000000, 0x0, 0x7000000}, 0x2c) 935.146759ms ago: executing program 1 (id=1812): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES64=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) close(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r2, 0x20}], 0x1, &(0x7f0000000240)={r3, r4+60000000}, &(0x7f0000000280)={[0xe0c]}, 0x8) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x6}}}]}, 0x28}}, 0x0) 930.295918ms ago: executing program 2 (id=1813): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060102000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001800078008000600000000000c00018008000140ac031500050005000200000005000100060000006c09dde17bd24c8cc7f91a1597077280090000002353f5f6cb48d8b16aa871967805672b901e85695eb248ee8a8c4bb6c3f3d2725a7219477aefa3e757ca192c106bd25c4e236d2d3c01b660c36f68dfb8dc7fce32be4cfcbf749867f9297b209c643a496a7b35eb5de9fac2bf4f17606d0dc3e34c06"], 0x64}}, 0x0) r2 = socket(0x4, 0x800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}}], 0x1, 0x4008440) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x19, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x14, {{0x1, 0x0, 0x0, 0xfffffffc, 0x4}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x90}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc, 0x7, {0x1}}, {0xff20, 0x8, {0x0, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0xd, 0x12, r6, 0xf513f000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791046000000000000950005000200"/32], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x200000a, 0x20010, r6, 0xf0005000) socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) socket$packet(0x11, 0x3, 0x300) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fdff"], 0x14}}, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x23, 0x5, 0x0) 754.219491ms ago: executing program 4 (id=1814): socket(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x3000000, @local}}}, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r2 = socket$kcm(0x2, 0xa, 0x2) recvmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000080)=""/7, 0x7}], 0x2}, 0x2040) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb88a800008100400086dd"], 0x1c) 255.090244ms ago: executing program 2 (id=1815): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 182.232927ms ago: executing program 2 (id=1816): r0 = socket(0x1, 0x5, 0x7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 163.669308ms ago: executing program 4 (id=1817): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket(0x840000000002, 0x3, 0xff) connect$bt_l2cap(r2, 0x0, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 43.104594ms ago: executing program 2 (id=1818): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x61ba, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x63, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/87, 0x57}, 0x7}], 0x1, 0x40002043, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x8004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400010400000000000000000a1f0000", @ANYRES32=r8, @ANYBLOB="1400060004000000220000000700000b000000801400020000000000000000000000ff"], 0x40}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001400010400000000000000000a1f0000", @ANYRES32=r4, @ANYBLOB="14000600040000002200000005e6ffffffffff7f140001070000000000000000000000ff0f0000aac0bc7831ad2e402b512f77b466d8998b301dce14e126c1fc2cae67d14f4d9b4c11fa8d8e6e6cf50862dc4d8267e6a155b8d26c6ae20362cf46355df0c44f562558d37692a6b8328ca980965cf44b105508b846ceeb12f3afbd4a"], 0x40}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 37.212228ms ago: executing program 3 (id=1819): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@enum={0x9, 0x7, 0x0, 0x6, 0x4, [{0xf, 0x8000}, {0x1, 0x24}, {0xf, 0xb}, {0x10, 0x7}, {0x7, 0xfffffff9}, {0x2, 0x496}, {0xe, 0x2}]}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0x6}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f, 0x30, 0x30, 0x0, 0x30]}}, &(0x7f0000000140)=""/166, 0x8b, 0xa6, 0x1, 0xd, 0x10000, @value}, 0x28) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@empty, @dev, 0x0}, &(0x7f0000000340)=0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x79, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 1 (id=1820): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffdd, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000213030000000000000000000200ffff080001e900000000"], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x7bb3, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x7bb3, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2000, @rand_addr=0x64010100}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x37}, 0x4}], 0x1, 0x45833af92e4b39ff, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008810}, 0x200088c4) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c000200"], 0x20}}, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f0000000680)=""/134, 0x86}], 0x2}, 0x12022) (async) recvmsg$unix(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f0000000680)=""/134, 0x86}], 0x2}, 0x12022) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000098000000000000004a3a0000020000007e00000008d4b58e48f96242698eadbd4c6cd754705629e6c2e61685773ac24f9559be441589328534aacaf4b9b3a332e932a6322bf2ba306fe1b2707563c6a08f51e4fc959de0f8a8e64b6087436e4f21fdb4cdb1d0c158f4651645ecf4eb3fc264f5d7bd9edf04009724863c2801ecca21b0a3a864901664eb7f8c2b979620f758000000000000", @ANYRESHEX=r0, @ANYRES32=r2], 0xb0, 0x20000080}, 0x10) (async) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000098000000000000004a3a0000020000007e00000008d4b58e48f96242698eadbd4c6cd754705629e6c2e61685773ac24f9559be441589328534aacaf4b9b3a332e932a6322bf2ba306fe1b2707563c6a08f51e4fc959de0f8a8e64b6087436e4f21fdb4cdb1d0c158f4651645ecf4eb3fc264f5d7bd9edf04009724863c2801ecca21b0a3a864901664eb7f8c2b979620f758000000000000", @ANYRESHEX=r0, @ANYRES32=r2], 0xb0, 0x20000080}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x100, @loopback}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) writev(r6, &(0x7f0000000780)=[{0x0}, {&(0x7f00000019c0)="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", 0xc81}], 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) close(r1) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) kernel console output (not intermixed with test programs): nk_deliver_tap+0x3cc/0x7f0 [ 181.849072][ T9593] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.854285][ T9593] netlink_deliver_tap+0x19d/0x1b0 [ 181.859410][ T9593] netlink_unicast+0x7c4/0x990 [ 181.864190][ T9593] ? __pfx_netlink_unicast+0x10/0x10 [ 181.869485][ T9593] ? __virt_addr_valid+0x183/0x530 [ 181.874634][ T9593] ? __check_object_size+0x48e/0x900 [ 181.879950][ T9593] netlink_sendmsg+0x8e4/0xcb0 [ 181.884738][ T9593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.890037][ T9593] ? aa_sock_msg_perm+0x91/0x160 [ 181.894992][ T9593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.900287][ T9593] __sock_sendmsg+0x221/0x270 [ 181.904989][ T9593] ____sys_sendmsg+0x52a/0x7e0 [ 181.909781][ T9593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.915079][ T9593] ? __fget_files+0x2a/0x410 [ 181.919694][ T9593] ? __fget_files+0x2a/0x410 [ 181.924298][ T9593] __sys_sendmmsg+0x36a/0x720 [ 181.929001][ T9593] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.934230][ T9593] ? __pfx_lock_release+0x10/0x10 [ 181.939265][ T9593] ? kstrtouint_from_user+0x128/0x190 [ 181.944669][ T9593] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 181.950582][ T9593] ? ksys_write+0x22a/0x2b0 [ 181.955099][ T9593] ? __pfx_lock_release+0x10/0x10 [ 181.960141][ T9593] ? vfs_write+0x730/0xd30 [ 181.964574][ T9593] ? __mutex_unlock_slowpath+0x21e/0x790 [ 181.970239][ T9593] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 181.976264][ T9593] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.982608][ T9593] ? do_syscall_64+0x100/0x230 [ 181.987387][ T9593] __x64_sys_sendmmsg+0xa0/0xb0 [ 181.992256][ T9593] do_syscall_64+0xf3/0x230 [ 181.996768][ T9593] ? clear_bhb_loop+0x35/0x90 [ 182.001457][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.007359][ T9593] RIP: 0033:0x7f506dd7ff19 [ 182.011794][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.031494][ T9593] RSP: 002b:00007f506bbf6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 182.039923][ T9593] RAX: ffffffffffffffda RBX: 00007f506df45fa0 RCX: 00007f506dd7ff19 [ 182.047906][ T9593] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 182.055909][ T9593] RBP: 00007f506bbf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.063887][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.071867][ T9593] R13: 0000000000000000 R14: 00007f506df45fa0 R15: 00007ffe0f479578 [ 182.079861][ T9593] [ 182.195278][ T9599] vlan2: entered promiscuous mode [ 182.365895][ T9610] ip6gre1: entered allmulticast mode [ 182.668993][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 182.670580][ T9627] delete_channel: no stack [ 182.706948][ T9631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1048'. [ 182.720896][ T9631] vcan0: entered promiscuous mode [ 182.749151][ T9631] vcan0: entered allmulticast mode [ 182.829947][ T9643] macsec0: entered promiscuous mode [ 182.840384][ T9643] macsec0: entered allmulticast mode [ 182.852991][ T9643] veth1_macvtap: entered allmulticast mode [ 182.863115][ T9643] macsec0: left promiscuous mode [ 182.868964][ T9643] macsec0: left allmulticast mode [ 182.875282][ T9643] veth1_macvtap: left allmulticast mode [ 182.961619][ T9648] bridge0: entered promiscuous mode [ 182.983296][ T9648] vlan2: entered promiscuous mode [ 183.006415][ T9648] bridge0: port 1(vlan2) entered blocking state [ 183.016627][ T9648] bridge0: port 1(vlan2) entered disabled state [ 183.031114][ T9648] vlan2: entered allmulticast mode [ 183.039168][ T9648] bridge0: entered allmulticast mode [ 183.061603][ T9648] vlan2: left allmulticast mode [ 183.076044][ T9648] bridge0: left allmulticast mode [ 183.087458][ T9654] openvswitch: netlink: IP tunnel dst address not specified [ 183.098572][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 183.108436][ T9648] bridge0: left promiscuous mode [ 183.139672][ T9650] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1058'. [ 183.151940][ T9653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'. [ 183.155380][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 183.173880][ T9659] ÛÌî]-Ñ: entered allmulticast mode [ 183.205556][ T9659] tunl0: entered allmulticast mode [ 183.240439][ T9659] gre0: entered allmulticast mode [ 183.277331][ T9659] gretap0: entered allmulticast mode [ 183.300611][ T9661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1061'. [ 183.320288][ T9659] erspan0: entered allmulticast mode [ 183.398236][ T9659] ip_vti0: entered allmulticast mode [ 183.400959][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 183.484027][ T9659] ip6_vti0: entered allmulticast mode [ 183.520037][ T9659] sit0: entered allmulticast mode [ 183.554830][ T9659] ip6tnl0: entered allmulticast mode [ 183.655007][ T9659] ip6gre0: entered allmulticast mode [ 183.704126][ T9659] syz_tun: entered allmulticast mode [ 183.806577][ T9659] ip6gretap0: entered allmulticast mode [ 183.833956][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.841325][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.853988][ T9659] bridge0: entered allmulticast mode [ 183.873121][ T9659] vcan0: entered allmulticast mode [ 183.897946][ T9659] dummy0: entered allmulticast mode [ 183.914727][ T9659] nlmon0: entered allmulticast mode [ 183.943996][ T9659] caif0: entered allmulticast mode [ 183.960298][ T9659] batadv0: entered allmulticast mode [ 183.997866][ T9659] vxcan0: entered allmulticast mode [ 184.011773][ T9659] vxcan1: entered allmulticast mode [ 184.025392][ T9659] veth0: entered allmulticast mode [ 184.044404][ T9659] veth1: entered allmulticast mode [ 184.068476][ T9659] wg1: entered allmulticast mode [ 184.086554][ T9659] wg2: entered allmulticast mode [ 184.105579][ T9659] veth0_to_bridge: entered allmulticast mode [ 184.155718][ T9659] veth1_to_bridge: entered allmulticast mode [ 184.202651][ T9659] veth1_to_bond: entered allmulticast mode [ 184.243407][ T9659] veth0_to_team: entered allmulticast mode [ 184.258306][ T9659] team_slave_0: entered allmulticast mode [ 184.278706][ T9659] veth1_to_team: entered allmulticast mode [ 184.295590][ T9659] team_slave_1: entered allmulticast mode [ 184.304374][ T9659] veth0_to_batadv: entered allmulticast mode [ 184.314834][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.338774][ T9659] batadv_slave_0: entered allmulticast mode [ 184.364270][ T9659] veth1_to_batadv: entered allmulticast mode [ 184.385324][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.404457][ T9659] batadv_slave_1: entered allmulticast mode [ 184.435757][ T9659] xfrm0: entered allmulticast mode [ 184.452132][ T9659] veth0_to_hsr: entered allmulticast mode [ 184.481157][ T9659] hsr_slave_0: entered allmulticast mode [ 184.497727][ T9659] veth1_to_hsr: entered allmulticast mode [ 184.515563][ T9659] hsr_slave_1: entered allmulticast mode [ 184.536883][ T9659] hsr0: entered allmulticast mode [ 184.556393][ T9659] veth1_virt_wifi: entered allmulticast mode [ 184.581171][ T9659] veth0_virt_wifi: entered allmulticast mode [ 184.589987][ T9659] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 184.598032][ T9659] veth1_vlan: entered allmulticast mode [ 184.621238][ T9659] vlan0: entered allmulticast mode [ 184.629066][ T9659] vlan1: entered allmulticast mode [ 184.638646][ T9659] macvlan0: entered allmulticast mode [ 184.658227][ T9659] macvlan1: entered allmulticast mode [ 184.675614][ T9659] ipvlan0: entered allmulticast mode [ 184.681415][ T9659] ipvlan1: entered allmulticast mode [ 184.688123][ T9659] veth1_macvtap: entered allmulticast mode [ 184.715627][ T9659] veth0_macvtap: entered allmulticast mode [ 184.727395][ T9659] macvtap0: entered allmulticast mode [ 184.743985][ T9659] macsec0: entered allmulticast mode [ 184.764209][ T9659] geneve0: entered allmulticast mode [ 184.790990][ T9659] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 184.825615][ T9659] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 184.838334][ T9659] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 184.855772][ T9659] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 184.882377][ T9659] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 184.902265][ T9659] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 184.931433][ T9659] bridge1: entered allmulticast mode [ 184.945050][ T9659] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.954257][ T9659] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.964922][ T9659] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.974453][ T9659] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.983776][ T9659] geneve2: left promiscuous mode [ 184.992361][ T9659] bridge_slave_1.: entered allmulticast mode [ 184.998753][ T9659] bond1: entered allmulticast mode [ 185.005482][ T9659] ip6erspan0: entered allmulticast mode [ 185.016440][ T9659] bridge2: entered allmulticast mode [ 185.030440][ T9659] bridge3: entered allmulticast mode [ 185.036107][ T9659] vlan2: left promiscuous mode [ 185.041030][ T9659] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 185.049024][ T9659] macvlan2: entered allmulticast mode [ 185.055847][ T9659] bridge4: entered allmulticast mode [ 185.061298][ T9659] sit1: entered allmulticast mode [ 185.111125][ T9669] netlink: 'syz.2.1059': attribute type 30 has an invalid length. [ 185.863352][ T9715] openvswitch: netlink: IP tunnel dst address not specified [ 185.901586][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 185.935846][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 186.560455][ T9748] FAULT_INJECTION: forcing a failure. [ 186.560455][ T9748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.593982][ T9748] CPU: 0 UID: 0 PID: 9748 Comm: syz.3.1087 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 186.604740][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.614835][ T9748] Call Trace: [ 186.618144][ T9748] [ 186.621102][ T9748] dump_stack_lvl+0x241/0x360 [ 186.625846][ T9748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.631081][ T9748] ? __pfx__printk+0x10/0x10 [ 186.635695][ T9748] ? __pfx_lock_release+0x10/0x10 [ 186.640746][ T9748] should_fail_ex+0x3b0/0x4e0 [ 186.645446][ T9748] _copy_from_user+0x2f/0xc0 [ 186.650058][ T9748] copy_msghdr_from_user+0xae/0x680 [ 186.655278][ T9748] ? __pfx___might_resched+0x10/0x10 [ 186.660601][ T9748] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 186.666425][ T9748] ? __fget_files+0x2a/0x410 [ 186.671030][ T9748] ? __sys_sendmmsg+0x392/0x720 [ 186.675891][ T9748] ? __might_fault+0xaa/0x120 [ 186.680585][ T9748] __sys_sendmmsg+0x32b/0x720 [ 186.685287][ T9748] ? __pfx___sys_sendmmsg+0x10/0x10 [ 186.690615][ T9748] ? __pfx_lock_release+0x10/0x10 [ 186.695653][ T9748] ? kstrtouint_from_user+0x128/0x190 [ 186.701060][ T9748] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 186.706972][ T9748] ? ksys_write+0x22a/0x2b0 [ 186.711492][ T9748] ? __pfx_lock_release+0x10/0x10 [ 186.716532][ T9748] ? vfs_write+0x730/0xd30 [ 186.720964][ T9748] ? __mutex_unlock_slowpath+0x21e/0x790 [ 186.726626][ T9748] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.732623][ T9748] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.738961][ T9748] ? do_syscall_64+0x100/0x230 [ 186.743738][ T9748] __x64_sys_sendmmsg+0xa0/0xb0 [ 186.748604][ T9748] do_syscall_64+0xf3/0x230 [ 186.753113][ T9748] ? clear_bhb_loop+0x35/0x90 [ 186.757801][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.763702][ T9748] RIP: 0033:0x7f46b797ff19 [ 186.768126][ T9748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.787749][ T9748] RSP: 002b:00007f46b86ab058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 186.796202][ T9748] RAX: ffffffffffffffda RBX: 00007f46b7b45fa0 RCX: 00007f46b797ff19 [ 186.804193][ T9748] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 186.812181][ T9748] RBP: 00007f46b86ab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.820169][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.828150][ T9748] R13: 0000000000000000 R14: 00007f46b7b45fa0 R15: 00007ffff3b86728 [ 186.836147][ T9748] [ 187.031923][ T9757] openvswitch: netlink: IP tunnel dst address not specified [ 187.450953][ T9740] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 187.470728][ T9771] sctp: [Deprecated]: syz.0.1094 (pid 9771) Use of int in maxseg socket option. [ 187.470728][ T9771] Use struct sctp_assoc_value instead [ 187.510318][ T9771] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 187.751457][ T9784] __nla_validate_parse: 5 callbacks suppressed [ 187.751482][ T9784] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1096'. [ 187.835659][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 187.888063][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1097'. [ 187.914201][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1097'. [ 188.434352][ T9797] FAULT_INJECTION: forcing a failure. [ 188.434352][ T9797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.474128][ T9797] CPU: 1 UID: 0 PID: 9797 Comm: syz.4.1100 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 188.484917][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.495015][ T9797] Call Trace: [ 188.498330][ T9797] [ 188.501294][ T9797] dump_stack_lvl+0x241/0x360 [ 188.506025][ T9797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.511282][ T9797] ? __pfx__printk+0x10/0x10 [ 188.515916][ T9797] ? __pfx_lock_release+0x10/0x10 [ 188.520991][ T9797] should_fail_ex+0x3b0/0x4e0 [ 188.525707][ T9797] _copy_from_iter+0x21f/0x1e70 [ 188.530605][ T9797] ? __virt_addr_valid+0x183/0x530 [ 188.535761][ T9797] ? __pfx_lock_release+0x10/0x10 [ 188.540836][ T9797] ? __alloc_skb+0x28f/0x440 [ 188.545466][ T9797] ? __pfx__copy_from_iter+0x10/0x10 [ 188.550803][ T9797] ? __virt_addr_valid+0x183/0x530 [ 188.555961][ T9797] ? __virt_addr_valid+0x183/0x530 [ 188.561116][ T9797] ? __virt_addr_valid+0x45f/0x530 [ 188.566288][ T9797] ? __check_object_size+0x48e/0x900 [ 188.571634][ T9797] netlink_sendmsg+0x73d/0xcb0 [ 188.576453][ T9797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.581790][ T9797] ? aa_sock_msg_perm+0x91/0x160 [ 188.586776][ T9797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.592099][ T9797] __sock_sendmsg+0x221/0x270 [ 188.596825][ T9797] ____sys_sendmsg+0x52a/0x7e0 [ 188.601641][ T9797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.606965][ T9797] ? __fget_files+0x2a/0x410 [ 188.611602][ T9797] ? __sys_sendmmsg+0x392/0x720 [ 188.616502][ T9797] ? __might_fault+0xaa/0x120 [ 188.621219][ T9797] __sys_sendmmsg+0x36a/0x720 [ 188.625942][ T9797] ? __pfx___sys_sendmmsg+0x10/0x10 [ 188.631200][ T9797] ? __pfx_lock_release+0x10/0x10 [ 188.636270][ T9797] ? kstrtouint_from_user+0x128/0x190 [ 188.641800][ T9797] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 188.647748][ T9797] ? ksys_write+0x22a/0x2b0 [ 188.652306][ T9797] ? __pfx_lock_release+0x10/0x10 [ 188.657372][ T9797] ? sb_start_write+0x5b/0x1c0 [ 188.662182][ T9797] ? vfs_write+0x730/0xd30 [ 188.666648][ T9797] ? __mutex_unlock_slowpath+0x21e/0x790 [ 188.672343][ T9797] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 188.677369][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 188.678344][ T9797] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.687455][ T9804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'. [ 188.693498][ T9797] ? do_syscall_64+0x100/0x230 [ 188.693537][ T9797] __x64_sys_sendmmsg+0xa0/0xb0 [ 188.693569][ T9797] do_syscall_64+0xf3/0x230 [ 188.693592][ T9797] ? clear_bhb_loop+0x35/0x90 [ 188.693620][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.693644][ T9797] RIP: 0033:0x7f506dd7ff19 [ 188.693666][ T9797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.693687][ T9797] RSP: 002b:00007f506bbf6058 EFLAGS: 00000246 [ 188.709487][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 188.712223][ T9797] ORIG_RAX: 0000000000000133 [ 188.771015][ T9797] RAX: ffffffffffffffda RBX: 00007f506df45fa0 RCX: 00007f506dd7ff19 [ 188.775646][ T9809] openvswitch: netlink: IP tunnel dst address not specified [ 188.778999][ T9797] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 188.779022][ T9797] RBP: 00007f506bbf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.779038][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.779054][ T9797] R13: 0000000000000000 R14: 00007f506df45fa0 R15: 00007ffe0f479578 [ 188.779087][ T9797] [ 188.790017][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 188.939361][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 188.953583][ T9813] netlink: 'syz.3.1105': attribute type 4 has an invalid length. [ 189.127701][ T9822] netlink: 'syz.3.1109': attribute type 5 has an invalid length. [ 189.148243][ T9821] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 189.159832][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1108'. [ 189.702880][ T9847] pimreg: entered allmulticast mode [ 189.710296][ T9847] pimreg: left allmulticast mode [ 189.738549][ T9845] FAULT_INJECTION: forcing a failure. [ 189.738549][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 189.751632][ T9850] openvswitch: netlink: IP tunnel dst address not specified [ 189.775294][ T54] Bluetooth: hci4: link tx timeout [ 189.779448][ T9845] CPU: 1 UID: 0 PID: 9845 Comm: syz.1.1116 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 189.780892][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.791470][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.791487][ T9845] Call Trace: [ 189.791496][ T9845] [ 189.791505][ T9845] dump_stack_lvl+0x241/0x360 [ 189.791543][ T9845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.791575][ T9845] ? __pfx__printk+0x10/0x10 [ 189.791608][ T9845] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 189.791642][ T9845] ? __pfx___might_resched+0x10/0x10 [ 189.791663][ T9845] ? aa_label_sk_perm+0x4f3/0x6c0 [ 189.791702][ T9845] should_fail_ex+0x3b0/0x4e0 [ 189.791728][ T9845] should_failslab+0xac/0x100 [ 189.791762][ T9845] kmem_cache_alloc_node_noprof+0x77/0x380 [ 189.843842][ T5841] Bluetooth: hci4: link tx timeout [ 189.846506][ T9845] ? __alloc_skb+0x1c3/0x440 [ 189.846545][ T9845] __alloc_skb+0x1c3/0x440 [ 189.851237][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.855874][ T9845] ? __pfx___alloc_skb+0x10/0x10 [ 189.855913][ T9845] netlink_sendmsg+0x638/0xcb0 [ 189.855952][ T9845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.855983][ T9845] ? aa_sock_msg_perm+0x91/0x160 [ 189.856013][ T9845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.856039][ T9845] __sock_sendmsg+0x221/0x270 [ 189.856077][ T9845] ____sys_sendmsg+0x52a/0x7e0 [ 189.856118][ T9845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.856145][ T9845] ? __fget_files+0x2a/0x410 [ 189.856173][ T9845] ? __sys_sendmmsg+0x392/0x720 [ 189.856201][ T9845] ? __might_fault+0xaa/0x120 [ 189.856230][ T9845] __sys_sendmmsg+0x36a/0x720 [ 189.856271][ T9845] ? __pfx___sys_sendmmsg+0x10/0x10 [ 189.856311][ T9845] ? __pfx_lock_release+0x10/0x10 [ 189.856338][ T9845] ? kstrtouint_from_user+0x128/0x190 [ 189.856391][ T9845] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 189.863661][ T5841] Bluetooth: hci4: link tx timeout [ 189.867256][ T9845] ? ksys_write+0x22a/0x2b0 [ 189.871838][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.876239][ T9845] ? __pfx_lock_release+0x10/0x10 [ 189.876277][ T9845] ? vfs_write+0x730/0xd30 [ 189.876311][ T9845] ? __mutex_unlock_slowpath+0x21e/0x790 [ 189.876360][ T9845] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.876391][ T9845] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.889522][ T5841] Bluetooth: hci4: link tx timeout [ 189.893698][ T9845] ? do_syscall_64+0x100/0x230 [ 189.893732][ T9845] __x64_sys_sendmmsg+0xa0/0xb0 [ 189.893764][ T9845] do_syscall_64+0xf3/0x230 [ 189.893788][ T9845] ? clear_bhb_loop+0x35/0x90 [ 189.893818][ T9845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.899221][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.904020][ T9845] RIP: 0033:0x7fa10e97ff19 [ 189.904045][ T9845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.904066][ T9845] RSP: 002b:00007fa10f7c9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.904099][ T9845] RAX: ffffffffffffffda RBX: 00007fa10eb45fa0 RCX: 00007fa10e97ff19 [ 189.904117][ T9845] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 189.904134][ T9845] RBP: 00007fa10f7c90a0 R08: 0000000000000000 R09: 0000000000000000 [ 189.904149][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.904164][ T9845] R13: 0000000000000000 R14: 00007fa10eb45fa0 R15: 00007ffc46d3eb38 [ 190.118682][ T9845] [ 190.310845][ T9854] tipc: Started in network mode [ 190.316267][ T9854] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 190.327702][ T9854] tipc: Enabled bearer , priority 10 [ 190.564779][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 190.643685][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 190.876530][ T9886] openvswitch: netlink: IP tunnel dst address not specified [ 190.898447][ T9890] FAULT_INJECTION: forcing a failure. [ 190.898447][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 190.919421][ T9890] CPU: 0 UID: 0 PID: 9890 Comm: syz.0.1131 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 190.930157][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.940247][ T9890] Call Trace: [ 190.943560][ T9890] [ 190.946520][ T9890] dump_stack_lvl+0x241/0x360 [ 190.951255][ T9890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.956508][ T9890] ? __pfx__printk+0x10/0x10 [ 190.961098][ T9892] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 190.968850][ T9890] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 190.974858][ T9890] ? __pfx___might_resched+0x10/0x10 [ 190.980166][ T9890] ? aa_label_sk_perm+0x4f3/0x6c0 [ 190.985209][ T9890] should_fail_ex+0x3b0/0x4e0 [ 190.989903][ T9890] should_failslab+0xac/0x100 [ 190.994598][ T9890] kmem_cache_alloc_node_noprof+0x77/0x380 [ 191.000424][ T9890] ? __alloc_skb+0x1c3/0x440 [ 191.005030][ T9890] __alloc_skb+0x1c3/0x440 [ 191.009460][ T9890] ? __pfx___alloc_skb+0x10/0x10 [ 191.014410][ T9890] netlink_sendmsg+0x638/0xcb0 [ 191.019189][ T9890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.024488][ T9890] ? aa_sock_msg_perm+0x91/0x160 [ 191.029439][ T9890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.034731][ T9890] __sock_sendmsg+0x221/0x270 [ 191.039425][ T9890] ____sys_sendmsg+0x52a/0x7e0 [ 191.044226][ T9890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.049537][ T9890] ? __fget_files+0x2a/0x410 [ 191.054156][ T9890] ? __sys_sendmmsg+0x392/0x720 [ 191.059023][ T9890] ? __might_fault+0xaa/0x120 [ 191.063714][ T9890] __sys_sendmmsg+0x36a/0x720 [ 191.068413][ T9890] ? __pfx___sys_sendmmsg+0x10/0x10 [ 191.073637][ T9890] ? __pfx_lock_release+0x10/0x10 [ 191.078682][ T9890] ? kstrtouint_from_user+0x128/0x190 [ 191.084080][ T9890] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 191.090012][ T9890] ? ksys_write+0x22a/0x2b0 [ 191.094529][ T9890] ? __pfx_lock_release+0x10/0x10 [ 191.099571][ T9890] ? vfs_write+0x730/0xd30 [ 191.104009][ T9890] ? __mutex_unlock_slowpath+0x21e/0x790 [ 191.109668][ T9890] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.115663][ T9890] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.122011][ T9890] ? do_syscall_64+0x100/0x230 [ 191.126787][ T9890] __x64_sys_sendmmsg+0xa0/0xb0 [ 191.131656][ T9890] do_syscall_64+0xf3/0x230 [ 191.136170][ T9890] ? clear_bhb_loop+0x35/0x90 [ 191.140856][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.146757][ T9890] RIP: 0033:0x7fde6457ff19 [ 191.151176][ T9890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.170797][ T9890] RSP: 002b:00007fde65356058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.179224][ T9890] RAX: ffffffffffffffda RBX: 00007fde64745fa0 RCX: 00007fde6457ff19 [ 191.187204][ T9890] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 191.195188][ T9890] RBP: 00007fde653560a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.203171][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.211147][ T9890] R13: 0000000000000000 R14: 00007fde64745fa0 R15: 00007ffea6fcd148 [ 191.219140][ T9890] [ 191.270074][ T9892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.356677][ T9894] bond2: (slave veth3): Enslaving as an active interface with a down link [ 191.377915][ T9892] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 191.378115][ T5933] tipc: Node number set to 4269801642 [ 191.388772][ T9892] bond2: (slave batadv1): making interface the new active one [ 191.402291][ T9892] batadv1: entered promiscuous mode [ 191.408767][ T9892] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 191.956972][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 192.642227][ T9963] FAULT_INJECTION: forcing a failure. [ 192.642227][ T9963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.686221][ T9963] CPU: 1 UID: 0 PID: 9963 Comm: syz.4.1156 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 192.696978][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.707088][ T9963] Call Trace: [ 192.710404][ T9963] [ 192.713367][ T9963] dump_stack_lvl+0x241/0x360 [ 192.718119][ T9963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.723365][ T9963] ? __pfx__printk+0x10/0x10 [ 192.728006][ T9963] ? __pfx_lock_release+0x10/0x10 [ 192.733089][ T9963] should_fail_ex+0x3b0/0x4e0 [ 192.737810][ T9963] _copy_from_iter+0x21f/0x1e70 [ 192.742715][ T9963] ? __virt_addr_valid+0x183/0x530 [ 192.747896][ T9963] ? __pfx_lock_release+0x10/0x10 [ 192.752969][ T9963] ? __alloc_skb+0x28f/0x440 [ 192.757602][ T9963] ? __pfx__copy_from_iter+0x10/0x10 [ 192.762940][ T9963] ? __virt_addr_valid+0x183/0x530 [ 192.768098][ T9963] ? __virt_addr_valid+0x183/0x530 [ 192.773261][ T9963] ? __virt_addr_valid+0x45f/0x530 [ 192.778409][ T9963] ? __check_object_size+0x48e/0x900 [ 192.783735][ T9963] netlink_sendmsg+0x73d/0xcb0 [ 192.788538][ T9963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.793859][ T9963] ? aa_sock_msg_perm+0x91/0x160 [ 192.799004][ T9963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.804312][ T9963] __sock_sendmsg+0x221/0x270 [ 192.809020][ T9963] ____sys_sendmsg+0x52a/0x7e0 [ 192.813814][ T9963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.819112][ T9963] ? __fget_files+0x2a/0x410 [ 192.823715][ T9963] ? __sys_sendmmsg+0x392/0x720 [ 192.828586][ T9963] ? __might_fault+0xaa/0x120 [ 192.833291][ T9963] __sys_sendmmsg+0x36a/0x720 [ 192.837993][ T9963] ? __pfx___sys_sendmmsg+0x10/0x10 [ 192.843217][ T9963] ? __pfx_lock_release+0x10/0x10 [ 192.848255][ T9963] ? kstrtouint_from_user+0x128/0x190 [ 192.854183][ T9963] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 192.860098][ T9963] ? ksys_write+0x22a/0x2b0 [ 192.864619][ T9963] ? __pfx_lock_release+0x10/0x10 [ 192.869674][ T9963] ? vfs_write+0x730/0xd30 [ 192.874130][ T9963] ? __mutex_unlock_slowpath+0x21e/0x790 [ 192.879794][ T9963] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 192.885795][ T9963] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.892140][ T9963] ? do_syscall_64+0x100/0x230 [ 192.896916][ T9963] __x64_sys_sendmmsg+0xa0/0xb0 [ 192.901788][ T9963] do_syscall_64+0xf3/0x230 [ 192.906304][ T9963] ? clear_bhb_loop+0x35/0x90 [ 192.910993][ T9963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.916896][ T9963] RIP: 0033:0x7f506dd7ff19 [ 192.921323][ T9963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.940949][ T9963] RSP: 002b:00007f506bbf6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 192.949381][ T9963] RAX: ffffffffffffffda RBX: 00007f506df45fa0 RCX: 00007f506dd7ff19 [ 192.957363][ T9963] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 192.965342][ T9963] RBP: 00007f506bbf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.973320][ T9963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.981296][ T9963] R13: 0000000000000000 R14: 00007f506df45fa0 R15: 00007ffe0f479578 [ 192.989290][ T9963] [ 193.036476][ T9972] netlink: 'syz.2.1159': attribute type 8 has an invalid length. [ 193.194785][ T9976] __nla_validate_parse: 10 callbacks suppressed [ 193.194808][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1161'. [ 193.203177][ T9981] netlink: 'syz.1.1163': attribute type 8 has an invalid length. [ 193.248483][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 193.510081][T10003] netlink: 'syz.4.1168': attribute type 12 has an invalid length. [ 193.518708][T10003] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1168'. [ 193.707064][T10011] FAULT_INJECTION: forcing a failure. [ 193.707064][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 193.736688][T10011] CPU: 0 UID: 0 PID: 10011 Comm: syz.3.1170 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 193.747537][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.757632][T10011] Call Trace: [ 193.760943][T10011] [ 193.763908][T10011] dump_stack_lvl+0x241/0x360 [ 193.768644][T10011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.773888][T10011] ? __pfx__printk+0x10/0x10 [ 193.778488][T10011] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 193.784480][T10011] ? __pfx___might_resched+0x10/0x10 [ 193.789782][T10011] ? aa_label_sk_perm+0x4f3/0x6c0 [ 193.794929][T10011] should_fail_ex+0x3b0/0x4e0 [ 193.799651][T10011] should_failslab+0xac/0x100 [ 193.804376][T10011] kmem_cache_alloc_node_noprof+0x77/0x380 [ 193.810209][T10011] ? __alloc_skb+0x1c3/0x440 [ 193.814898][T10011] __alloc_skb+0x1c3/0x440 [ 193.819342][T10011] ? __pfx___alloc_skb+0x10/0x10 [ 193.824322][T10011] netlink_sendmsg+0x638/0xcb0 [ 193.829124][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.834416][T10011] ? aa_sock_msg_perm+0x91/0x160 [ 193.839360][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.844664][T10011] __sock_sendmsg+0x221/0x270 [ 193.849389][T10011] ____sys_sendmsg+0x52a/0x7e0 [ 193.854179][T10011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.859476][T10011] ? __fget_files+0x2a/0x410 [ 193.864077][T10011] ? __sys_sendmmsg+0x392/0x720 [ 193.868961][T10011] ? __might_fault+0xaa/0x120 [ 193.873661][T10011] __sys_sendmmsg+0x36a/0x720 [ 193.878367][T10011] ? __pfx___sys_sendmmsg+0x10/0x10 [ 193.883589][T10011] ? __pfx_lock_release+0x10/0x10 [ 193.888623][T10011] ? kstrtouint_from_user+0x128/0x190 [ 193.894027][T10011] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 193.899958][T10011] ? ksys_write+0x22a/0x2b0 [ 193.904476][T10011] ? __pfx_lock_release+0x10/0x10 [ 193.909528][T10011] ? vfs_write+0x730/0xd30 [ 193.913972][T10011] ? __mutex_unlock_slowpath+0x21e/0x790 [ 193.919648][T10011] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 193.925647][T10011] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.932011][T10011] ? do_syscall_64+0x100/0x230 [ 193.936787][T10011] __x64_sys_sendmmsg+0xa0/0xb0 [ 193.941671][T10011] do_syscall_64+0xf3/0x230 [ 193.946192][T10011] ? clear_bhb_loop+0x35/0x90 [ 193.950884][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.956785][T10011] RIP: 0033:0x7f46b797ff19 [ 193.961212][T10011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.980910][T10011] RSP: 002b:00007f46b86ab058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 193.989334][T10011] RAX: ffffffffffffffda RBX: 00007f46b7b45fa0 RCX: 00007f46b797ff19 [ 193.997311][T10011] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 194.005288][T10011] RBP: 00007f46b86ab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 194.013264][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.021240][T10011] R13: 0000000000000000 R14: 00007f46b7b45fa0 R15: 00007ffff3b86728 [ 194.029230][T10011] [ 194.265013][T10027] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1177'. [ 194.278164][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 194.355771][T10027] sctp: [Deprecated]: syz.1.1177 (pid 10027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.355771][T10027] Use struct sctp_sack_info instead [ 194.672050][T10055] sit0: entered promiscuous mode [ 194.680315][T10055] sit0: left allmulticast mode [ 194.689351][T10055] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 194.704452][T10055] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1182'. [ 194.726004][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.788628][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 194.823609][T10065] netlink: 'syz.4.1182': attribute type 2 has an invalid length. [ 194.831629][T10065] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1182'. [ 195.145299][T10078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 195.738034][T10111] ip6gre1: entered promiscuous mode [ 195.743404][T10111] ip6gre1: entered allmulticast mode [ 195.854713][T10115] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1202'. [ 196.075240][T10123] FAULT_INJECTION: forcing a failure. [ 196.075240][T10123] name failslab, interval 1, probability 0, space 0, times 0 [ 196.107079][T10123] CPU: 1 UID: 0 PID: 10123 Comm: syz.2.1205 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 196.117928][T10123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.128037][T10123] Call Trace: [ 196.131347][T10123] [ 196.134307][T10123] dump_stack_lvl+0x241/0x360 [ 196.139040][T10123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.144325][T10123] ? __pfx__printk+0x10/0x10 [ 196.148966][T10123] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 196.154415][T10123] ? __pfx___might_resched+0x10/0x10 [ 196.159769][T10123] should_fail_ex+0x3b0/0x4e0 [ 196.164493][T10123] should_failslab+0xac/0x100 [ 196.169219][T10123] __kmalloc_node_noprof+0xe1/0x4d0 [ 196.174464][T10123] ? __kvmalloc_node_noprof+0x72/0x190 [ 196.179970][T10123] __kvmalloc_node_noprof+0x72/0x190 [ 196.185302][T10123] rhashtable_init_noprof+0x534/0xa60 [ 196.190723][T10123] ? __pfx_fl_classify+0x10/0x10 [ 196.195709][T10123] tcf_proto_create+0x1df/0x2b0 [ 196.200617][T10123] tc_new_tfilter+0x1652/0x1af0 [ 196.205538][T10123] ? __pfx_tc_new_tfilter+0x10/0x10 [ 196.210802][T10123] ? rcu_read_unlock+0x87/0xa0 [ 196.215631][T10123] ? __pfx_tc_new_tfilter+0x10/0x10 [ 196.220877][T10123] rtnetlink_rcv_msg+0x791/0xcf0 [ 196.225864][T10123] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 196.231021][T10123] ? __lock_acquire+0x1397/0x2100 [ 196.236093][T10123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.241618][T10123] netlink_rcv_skb+0x1e3/0x430 [ 196.246516][T10123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.252114][T10123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.257471][T10123] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.262712][T10123] netlink_unicast+0x7f6/0x990 [ 196.267526][T10123] ? __pfx_netlink_unicast+0x10/0x10 [ 196.272837][T10123] ? __virt_addr_valid+0x183/0x530 [ 196.278016][T10123] ? __check_object_size+0x48e/0x900 [ 196.283359][T10123] netlink_sendmsg+0x8e4/0xcb0 [ 196.288180][T10123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.293530][T10123] ? aa_sock_msg_perm+0x91/0x160 [ 196.298520][T10123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.303850][T10123] __sock_sendmsg+0x221/0x270 [ 196.308576][T10123] ____sys_sendmsg+0x52a/0x7e0 [ 196.313405][T10123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.318739][T10123] ? __fget_files+0x2a/0x410 [ 196.323390][T10123] ? __sys_sendmmsg+0x392/0x720 [ 196.328290][T10123] ? __might_fault+0xaa/0x120 [ 196.333025][T10123] __sys_sendmmsg+0x36a/0x720 [ 196.337760][T10123] ? __pfx___sys_sendmmsg+0x10/0x10 [ 196.343019][T10123] ? __pfx_lock_release+0x10/0x10 [ 196.348084][T10123] ? kstrtouint_from_user+0x128/0x190 [ 196.353536][T10123] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 196.359473][T10123] ? ksys_write+0x22a/0x2b0 [ 196.364012][T10123] ? __pfx_lock_release+0x10/0x10 [ 196.369078][T10123] ? vfs_write+0x730/0xd30 [ 196.373535][T10123] ? __mutex_unlock_slowpath+0x21e/0x790 [ 196.379230][T10123] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.385250][T10123] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.391624][T10123] ? do_syscall_64+0x100/0x230 [ 196.396447][T10123] __x64_sys_sendmmsg+0xa0/0xb0 [ 196.401343][T10123] do_syscall_64+0xf3/0x230 [ 196.405886][T10123] ? clear_bhb_loop+0x35/0x90 [ 196.410601][T10123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.416528][T10123] RIP: 0033:0x7f437397ff19 [ 196.420976][T10123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.440634][T10123] RSP: 002b:00007f43746be058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 196.449084][T10123] RAX: ffffffffffffffda RBX: 00007f4373b45fa0 RCX: 00007f437397ff19 [ 196.457070][T10123] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 196.465056][T10123] RBP: 00007f43746be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.473042][T10123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.481026][T10123] R13: 0000000000000000 R14: 00007f4373b45fa0 R15: 00007fffd9dd0dd8 [ 196.489035][T10123] [ 196.507184][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.563409][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.590279][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.611495][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.654992][T10135] bridge_slave_0: left promiscuous mode [ 196.670270][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.683205][T10135] bridge_slave_1: left promiscuous mode [ 196.696616][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.700967][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 196.725306][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.752911][T10135] bond0: (slave bond_slave_1): Releasing backup interface [ 196.765023][T10135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.785568][T10135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.789002][T10153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.803830][T10135] bond2: (slave veth3): Releasing active interface [ 196.824525][T10135] bond2: (slave veth3): the permanent HWaddr of slave - d6:cf:d3:2c:3b:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 196.860210][T10135] bond2: (slave batadv1): Releasing active interface [ 196.869549][T10135] batadv1: left promiscuous mode [ 196.910649][T10147] wg2: left allmulticast mode [ 197.377774][T10131] chnl_net:caif_netlink_parms(): no params data found [ 197.646486][T10131] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.673956][T10131] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.681261][T10131] bridge_slave_0: entered allmulticast mode [ 197.705811][T10197] netlink: 'syz.4.1221': attribute type 7 has an invalid length. [ 197.713260][T10131] bridge_slave_0: entered promiscuous mode [ 197.721282][ T5933] IPVS: starting estimator thread 0... [ 197.730903][T10190] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.748128][T10131] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.783834][T10131] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.791121][T10131] bridge_slave_1: entered allmulticast mode [ 197.813642][T10200] IPVS: using max 22 ests per chain, 52800 per kthread [ 197.814792][T10131] bridge_slave_1: entered promiscuous mode [ 197.914359][T10131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.958312][T10206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.975853][T10131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.103279][T10214] vlan2: entered promiscuous mode [ 198.124607][T10214] vlan2: entered allmulticast mode [ 198.129792][T10214] ip6gretap0: entered allmulticast mode [ 198.162473][T10131] team0: Port device team_slave_0 added [ 198.193107][T10131] team0: Port device team_slave_1 added [ 198.277718][T10218] __nla_validate_parse: 5 callbacks suppressed [ 198.277739][T10218] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1229'. [ 198.341992][T10131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.367818][T10131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.429566][T10131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.495457][T10131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.520576][T10131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.569562][T10131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.758674][T10131] hsr_slave_0: entered promiscuous mode [ 198.773246][T10243] x_tables: duplicate underflow at hook 3 [ 198.788882][T10131] hsr_slave_1: entered promiscuous mode [ 198.807739][ T54] Bluetooth: hci2: command tx timeout [ 198.896786][T10246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1235'. [ 199.376275][T10259] netlink: 'syz.4.1241': attribute type 13 has an invalid length. [ 199.546184][T10268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1242'. [ 199.584101][T10268] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1242'. [ 199.608534][T10268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1242'. [ 199.653203][T10276] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1246'. [ 199.839273][T10286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1249'. [ 199.991707][T10131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.031121][T10131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.062098][T10131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.088110][T10131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.219949][T10131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.237497][T10131] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.252559][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.259848][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.332323][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.336618][T10298] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1254'. [ 200.339512][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.351712][T10298] openvswitch: netlink: Message has 44053 unknown bytes. [ 200.835258][T10131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.893725][ T5848] Bluetooth: hci2: command tx timeout [ 200.949411][T10131] veth0_vlan: entered promiscuous mode [ 201.017405][T10131] veth1_vlan: entered promiscuous mode [ 201.024044][T10324] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1262'. [ 201.055676][T10131] veth0_macvtap: entered promiscuous mode [ 201.066264][T10131] veth1_macvtap: entered promiscuous mode [ 201.081434][T10131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.093701][T10131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.105059][T10131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.161533][T10131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.194551][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 201.216910][T10131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.241103][T10131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.340334][T10131] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.363631][T10131] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.378353][T10131] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.403575][T10131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.633104][ T7931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.645099][ T7931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.830630][ T7953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.854481][ T7953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.923857][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 201.930063][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 201.931940][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 202.264858][T10361] ebt_among: src integrity fail: 100 [ 202.308340][T10368] tap0: tun_chr_ioctl cmd 1074025677 [ 202.327222][T10368] tap0: linktype set to 805 [ 202.844312][T10386] openvswitch: netlink: IP tunnel dst address not specified [ 203.010442][T10390] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 203.258371][T10402] syz.3.1290: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 203.314403][T10402] CPU: 0 UID: 0 PID: 10402 Comm: syz.3.1290 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 203.325234][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.335323][T10402] Call Trace: [ 203.338631][T10402] [ 203.341596][T10402] dump_stack_lvl+0x241/0x360 [ 203.346330][T10402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.351576][T10402] ? __pfx__printk+0x10/0x10 [ 203.356217][T10402] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 203.362691][T10402] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 203.369242][T10402] warn_alloc+0x278/0x410 [ 203.373616][T10402] ? __pfx_warn_alloc+0x10/0x10 [ 203.378520][T10402] ? translate_table+0x174/0x2330 [ 203.383585][T10402] ? __get_vm_area_node+0x1c8/0x2d0 [ 203.388828][T10402] ? __get_vm_area_node+0x25c/0x2d0 [ 203.394074][T10402] __vmalloc_node_range_noprof+0x62f/0x1380 [ 203.400011][T10402] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 203.405816][T10402] ? rcu_is_watching+0x15/0xb0 [ 203.410715][T10402] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.417078][T10402] ? rcu_is_watching+0x15/0xb0 [ 203.421884][T10402] ? trace_kmalloc+0x1f/0xd0 [ 203.426519][T10402] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 203.432027][T10402] ? __kvmalloc_node_noprof+0x72/0x190 [ 203.437554][T10402] __kvmalloc_node_noprof+0x142/0x190 [ 203.442939][T10402] ? translate_table+0x174/0x2330 [ 203.447972][T10402] translate_table+0x174/0x2330 [ 203.452935][T10402] ? __pfx_translate_table+0x10/0x10 [ 203.458223][T10402] ? __might_fault+0xaa/0x120 [ 203.462928][T10402] ? __pfx_lock_release+0x10/0x10 [ 203.467991][T10402] ? __might_fault+0xaa/0x120 [ 203.472686][T10402] ? __might_fault+0xc6/0x120 [ 203.477377][T10402] ? _copy_from_user+0x99/0xc0 [ 203.482162][T10402] ? copy_from_sockptr_offset+0x6b/0xb0 [ 203.487726][T10402] do_ip6t_set_ctl+0xe4c/0x1270 [ 203.492599][T10402] ? __pfx___mutex_trylock_common+0x10/0x10 [ 203.498510][T10402] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 203.503812][T10402] ? __pfx_lock_release+0x10/0x10 [ 203.508856][T10402] ? rcu_is_watching+0x15/0xb0 [ 203.513633][T10402] ? trace_contention_end+0x3c/0x120 [ 203.518938][T10402] ? __mutex_unlock_slowpath+0x21e/0x790 [ 203.524581][T10402] ? __pfx___mutex_lock+0x10/0x10 [ 203.529629][T10402] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.535615][T10402] ? aa_sk_perm+0x96d/0xab0 [ 203.540144][T10402] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.545014][T10402] nf_setsockopt+0x295/0x2c0 [ 203.549615][T10402] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 203.555517][T10402] do_sock_setsockopt+0x3af/0x720 [ 203.560560][T10402] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 203.566136][T10402] ? __fget_files+0x395/0x410 [ 203.570819][T10402] ? __fget_files+0x2a/0x410 [ 203.575427][T10402] __x64_sys_setsockopt+0x1ee/0x280 [ 203.580655][T10402] do_syscall_64+0xf3/0x230 [ 203.585200][T10402] ? clear_bhb_loop+0x35/0x90 [ 203.589903][T10402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.595805][T10402] RIP: 0033:0x7f46b797ff19 [ 203.600228][T10402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.619926][T10402] RSP: 002b:00007f46b86ab058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.628353][T10402] RAX: ffffffffffffffda RBX: 00007f46b7b45fa0 RCX: 00007f46b797ff19 [ 203.636335][T10402] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 203.644341][T10402] RBP: 00007f46b79f3cc8 R08: 00000000000003f0 R09: 0000000000000000 [ 203.652322][T10402] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.660310][T10402] R13: 0000000000000000 R14: 00007f46b7b45fa0 R15: 00007ffff3b86728 [ 203.668304][T10402] [ 203.673284][T10402] Mem-Info: [ 203.679204][T10402] active_anon:6191 inactive_anon:0 isolated_anon:0 [ 203.679204][T10402] active_file:1509 inactive_file:38253 isolated_file:0 [ 203.679204][T10402] unevictable:768 dirty:125 writeback:50 [ 203.679204][T10402] slab_reclaimable:11313 slab_unreclaimable:101111 [ 203.679204][T10402] mapped:28496 shmem:1450 pagetables:582 [ 203.679204][T10402] sec_pagetables:0 bounce:0 [ 203.679204][T10402] kernel_misc_reclaimable:0 [ 203.679204][T10402] free:1339894 free_pcp:563 free_cma:0 [ 203.777111][T10417] __nla_validate_parse: 9 callbacks suppressed [ 203.777133][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 203.788481][T10402] Node 0 active_anon:23924kB inactive_anon:0kB active_file:6036kB inactive_file:152940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:93640kB dirty:408kB writeback:100kB shmem:4264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12784kB pagetables:2412kB sec_pagetables:0kB all_unreclaimable? no [ 203.873696][T10402] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 203.877582][ T7948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.914764][T10402] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.954332][T10402] lowmem_reserve[]: 0 2465 2466 0 0 [ 203.959805][T10402] Node 0 DMA32 free:1441908kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:23980kB inactive_anon:0kB active_file:6036kB inactive_file:152108kB unevictable:1536kB writepending:404kB present:3129332kB managed:2552832kB mlocked:0kB bounce:0kB free_pcp:22144kB local_pcp:532kB free_cma:0kB [ 204.047362][T10402] lowmem_reserve[]: 0 0 0 0 0 [ 204.052169][T10402] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.079556][T10402] lowmem_reserve[]: 0 0 0 0 0 [ 204.084558][T10402] Node 1 Normal free:3902788kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.114077][T10402] lowmem_reserve[]: 0 0 0 0 0 [ 204.119140][T10402] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.132034][T10402] Node 0 DMA32: 85*4kB (UME) 94*8kB (UME) 43*16kB (UME) 242*32kB (UM) 167*64kB (UME) 97*128kB (UME) 15*256kB (UME) 16*512kB (UM) 30*1024kB (UME) 7*2048kB (UME) 336*4096kB (UM) = 1465972kB [ 204.150977][T10402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 204.162695][T10402] Node 1 Normal: 189*4kB (UE) 42*8kB (UME) 46*16kB (UME) 191*32kB (UME) 77*64kB (UME) 28*128kB (UME) 9*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 944*4096kB (M) = 3902788kB [ 204.181470][T10402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.191174][T10402] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.201005][T10402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.210984][T10402] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.220478][T10402] 41212 total pagecache pages [ 204.225252][T10402] 0 pages in swap cache [ 204.229428][T10402] Free swap = 124996kB [ 204.233680][T10402] Total swap = 124996kB [ 204.238131][T10402] 2097051 pages RAM [ 204.242612][T10402] 0 pages HighMem/MovableOnly [ 204.257905][T10402] 426993 pages reserved [ 204.262187][T10402] 0 pages cma reserved [ 204.412548][T10430] openvswitch: netlink: IP tunnel dst address not specified [ 204.424239][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 204.572672][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 204.636859][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.645925][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.654489][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.669361][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.680566][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.688718][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.049421][T10434] chnl_net:caif_netlink_parms(): no params data found [ 205.078311][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1304'. [ 205.133055][T10457] netlink: 'syz.3.1303': attribute type 4 has an invalid length. [ 205.152062][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 205.168442][T10460] Unsupported ieee802154 address type: 0 [ 205.186753][T10463] netlink: 'syz.3.1303': attribute type 4 has an invalid length. [ 205.322273][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.334029][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.354415][T10434] bridge_slave_0: entered allmulticast mode [ 205.381458][T10434] bridge_slave_0: entered promiscuous mode [ 205.426750][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.460909][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.494441][T10434] bridge_slave_1: entered allmulticast mode [ 205.518854][T10434] bridge_slave_1: entered promiscuous mode [ 205.539547][T10478] openvswitch: netlink: IP tunnel dst address not specified [ 205.549502][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 205.582371][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 205.612252][T10434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.625179][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.694324][T10434] team0: Port device team_slave_0 added [ 205.734695][T10434] team0: Port device team_slave_1 added [ 205.856489][ T7948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.946522][T10434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.964800][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.005017][T10434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.070084][ T7948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.105098][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.119388][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.148842][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.240929][T10497] macsec1: entered promiscuous mode [ 206.256532][T10497] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 206.284644][T10497] macsec1: entered allmulticast mode [ 206.317852][T10497] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 206.493765][ T7948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.531893][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 206.533155][T10511] Bluetooth: MGMT ver 1.23 [ 206.548349][T10513] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 206.574686][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 206.690313][T10513] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.723920][ T5842] Bluetooth: hci2: command tx timeout [ 206.736716][T10434] hsr_slave_0: entered promiscuous mode [ 206.746425][T10434] hsr_slave_1: entered promiscuous mode [ 206.754133][T10434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.784684][T10434] Cannot create hsr debugfs directory [ 206.804598][T10515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.850576][T10521] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1321'. [ 206.878351][T10513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.908267][T10513] bond4: (slave batadv0): making interface the new active one [ 206.945091][T10513] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 207.080407][T10526] openvswitch: netlink: IP tunnel dst address not specified [ 207.249703][ T7948] bridge_slave_1: left allmulticast mode [ 207.266598][ T7948] bridge_slave_1: left promiscuous mode [ 207.298721][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.366429][ T7948] bridge_slave_0: left allmulticast mode [ 207.374172][ T7948] bridge_slave_0: left promiscuous mode [ 207.380293][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.109494][ T7948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.130377][ T7948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.150677][ T7948] bond0 (unregistering): Released all slaves [ 208.806068][ T5842] Bluetooth: hci2: command tx timeout [ 209.335996][T10574] __nla_validate_parse: 3 callbacks suppressed [ 209.336018][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 209.444819][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 209.726394][T10582] openvswitch: netlink: IP tunnel dst address not specified [ 209.772118][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 209.874842][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 210.226661][T10595] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 210.883693][ T5842] Bluetooth: hci2: command tx timeout [ 211.058772][T10620] hsr0: entered promiscuous mode [ 211.065234][T10620] macsec3: entered allmulticast mode [ 211.070567][T10620] hsr0: entered allmulticast mode [ 211.082935][T10620] hsr_slave_0: entered allmulticast mode [ 211.104620][T10620] hsr_slave_1: entered allmulticast mode [ 211.239954][T10620] hsr0: left allmulticast mode [ 211.345945][T10620] hsr_slave_0: left allmulticast mode [ 211.365289][T10620] hsr_slave_1: left allmulticast mode [ 211.476950][T10614] macsec3: entered allmulticast mode [ 211.492288][T10614] hsr0: entered allmulticast mode [ 211.499963][T10614] hsr_slave_0: entered allmulticast mode [ 211.510109][T10614] hsr_slave_1: entered allmulticast mode [ 211.521449][T10614] hsr0: left allmulticast mode [ 211.527105][T10614] hsr_slave_0: left allmulticast mode [ 211.532666][T10614] hsr_slave_1: left allmulticast mode [ 211.587974][ T7948] hsr_slave_0: left promiscuous mode [ 211.596588][ T7948] hsr_slave_1: left promiscuous mode [ 211.605031][ T7948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.612839][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.621693][ T7948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.630171][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.666802][ T7948] veth1_macvtap: left promiscuous mode [ 211.674505][ T7948] veth0_macvtap: left promiscuous mode [ 211.680488][ T7948] veth1_vlan: left promiscuous mode [ 211.687800][ T7948] veth0_vlan: left promiscuous mode [ 212.115598][T10636] openvswitch: netlink: IP tunnel dst address not specified [ 212.145804][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 212.282731][ T7948] team0 (unregistering): Port device team_slave_1 removed [ 212.326337][ T7948] team0 (unregistering): Port device team_slave_0 removed [ 212.515658][T10643] netlink: 'syz.4.1352': attribute type 3 has an invalid length. [ 212.537767][T10643] netlink: 548 bytes leftover after parsing attributes in process `syz.4.1352'. [ 212.786085][T10641] netlink: 'syz.4.1352': attribute type 29 has an invalid length. [ 212.951764][T10434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.964070][ T5841] Bluetooth: hci2: command tx timeout [ 213.031978][T10649] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1354'. [ 213.044734][T10434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.076648][T10434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.100321][T10434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.127513][T10653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1355'. [ 213.152695][T10653] dummy0: entered promiscuous mode [ 213.171675][T10653] dummy0: left promiscuous mode [ 213.336233][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.412089][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.471028][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.478263][ T7960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.516549][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.523744][ T7960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.770688][T10678] netlink: 'syz.3.1364': attribute type 39 has an invalid length. [ 213.896197][T10686] openvswitch: netlink: IP tunnel dst address not specified [ 213.917898][T10685] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1367'. [ 213.918509][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 213.952984][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.184019][T10434] veth0_vlan: entered promiscuous mode [ 214.211017][T10434] veth1_vlan: entered promiscuous mode [ 214.322964][T10434] veth0_macvtap: entered promiscuous mode [ 214.380611][T10434] veth1_macvtap: entered promiscuous mode [ 214.448658][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.476004][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.495687][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.529943][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.572735][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.590176][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.635184][T10434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.652504][T10434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.672522][T10434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.681525][T10434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.823118][ T7936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.831764][ T7936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.930772][ T7932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.953752][ T7932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.000050][T10723] netlink: 'syz.2.1374': attribute type 1 has an invalid length. [ 215.043808][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 215.052960][T10723] __nla_validate_parse: 1 callbacks suppressed [ 215.052977][T10723] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1374'. [ 215.363143][T10744] openvswitch: netlink: IP tunnel dst address not specified [ 215.385020][T10746] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.406436][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 215.451436][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 216.226538][ T7952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.508720][T10797] openvswitch: netlink: IP tunnel dst address not specified [ 216.551263][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 216.605808][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 216.705511][T10801] batadv_slave_1: entered promiscuous mode [ 216.751244][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1397'. [ 216.877283][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.886899][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.896628][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.904962][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.913822][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.921120][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.958083][ T7952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.069507][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 217.132133][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 217.294064][ T7952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.499731][ T7952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.600168][T10804] chnl_net:caif_netlink_parms(): no params data found [ 217.736119][ T7952] bridge_slave_1: left allmulticast mode [ 217.741925][ T7952] bridge_slave_1: left promiscuous mode [ 217.747548][T10844] openvswitch: netlink: IP tunnel dst address not specified [ 217.750522][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 217.770229][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.780149][ T7952] bridge_slave_0: left allmulticast mode [ 217.786402][ T7952] bridge_slave_0: left promiscuous mode [ 217.803446][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.342288][ T7952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.360070][ T7952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.381202][ T7952] bond0 (unregistering): Released all slaves [ 218.518606][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.565940][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.595150][T10804] bridge_slave_0: entered allmulticast mode [ 218.632705][T10804] bridge_slave_0: entered promiscuous mode [ 218.673434][T10874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1413'. [ 218.682619][T10874] netlink: 'syz.4.1413': attribute type 5 has an invalid length. [ 218.686291][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.743673][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.771323][T10804] bridge_slave_1: entered allmulticast mode [ 218.783844][T10804] bridge_slave_1: entered promiscuous mode [ 218.927670][T10872] netlink: 'syz.2.1412': attribute type 10 has an invalid length. [ 218.963895][ T5842] Bluetooth: hci2: command tx timeout [ 218.988973][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.100302][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.296754][ T7952] hsr_slave_0: left promiscuous mode [ 219.336730][ T7952] hsr_slave_1: left promiscuous mode [ 219.371807][ T7952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.379611][ T7952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.394084][ T7952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.402582][ T7952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.431079][ T7952] veth1_macvtap: left promiscuous mode [ 219.436908][ T7952] veth0_macvtap: left promiscuous mode [ 219.442540][ T7952] veth1_vlan: left promiscuous mode [ 219.448189][ T7952] veth0_vlan: left promiscuous mode [ 219.775572][T10913] openvswitch: netlink: IP tunnel dst address not specified [ 220.103145][ T7952] team0 (unregistering): Port device team_slave_1 removed [ 220.145119][ T7952] team0 (unregistering): Port device team_slave_0 removed [ 220.597939][T10893] __nla_validate_parse: 2 callbacks suppressed [ 220.597959][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 220.615239][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 220.645335][T10804] team0: Port device team_slave_0 added [ 220.681987][T10804] team0: Port device team_slave_1 added [ 220.810719][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.843416][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.877002][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.922408][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.945708][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.978148][T10933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1430'. [ 220.988363][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 220.998651][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.028906][T10933] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1430'. [ 221.038442][T10933] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1430'. [ 221.047994][ T5842] Bluetooth: hci2: command tx timeout [ 221.069505][T10933] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1430'. [ 221.212960][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 221.268131][T10804] hsr_slave_0: entered promiscuous mode [ 221.285423][T10804] hsr_slave_1: entered promiscuous mode [ 221.330513][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1431'. [ 221.402902][T10949] netlink: 'syz.2.1432': attribute type 16 has an invalid length. [ 221.411371][T10949] netlink: 'syz.2.1432': attribute type 17 has an invalid length. [ 221.479709][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 221.522194][T10953] netlink: 'syz.2.1432': attribute type 3 has an invalid length. [ 221.869379][T10961] openvswitch: netlink: IP tunnel dst address not specified [ 222.102628][T10804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.114387][T10804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.134131][T10804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.152765][T10804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.434931][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.456035][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.486729][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.493938][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.543367][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.550596][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.866029][T10995] openvswitch: netlink: IP tunnel dst address not specified [ 223.124347][ T5842] Bluetooth: hci2: command tx timeout [ 223.215859][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.243361][T11015] netlink: 'syz.4.1451': attribute type 21 has an invalid length. [ 223.350338][T10804] veth0_vlan: entered promiscuous mode [ 223.407670][T10804] veth1_vlan: entered promiscuous mode [ 223.434085][T11025] netlink: 'syz.3.1455': attribute type 5 has an invalid length. [ 223.498874][T10804] veth0_macvtap: entered promiscuous mode [ 223.518049][T10804] veth1_macvtap: entered promiscuous mode [ 223.576487][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.595313][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.607112][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.633199][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.672101][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.694926][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.741395][T11029] netlink: 'syz.4.1457': attribute type 10 has an invalid length. [ 223.753999][T11029] batadv_slave_0: left allmulticast mode [ 223.762642][T11029] batadv_slave_0: entered allmulticast mode [ 223.769571][T11029] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 223.795567][T10804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.813448][T10804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.831694][T10804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.841912][T10804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.861761][T11042] openvswitch: netlink: IP tunnel dst address not specified [ 224.022734][ T3575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.042642][ T3575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.115442][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.132273][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.206866][T11049] bond0: (slave team0): Releasing backup interface [ 224.212005][T11051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.225752][T11049] bridge_slave_0: left allmulticast mode [ 224.231455][T11049] bridge_slave_0: left promiscuous mode [ 224.245631][T11049] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.259487][T11049] bridge_slave_1: left allmulticast mode [ 224.268810][T11049] bridge_slave_1: left promiscuous mode [ 224.292034][T11049] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.358375][T11049] bond0: (slave bond_slave_0): Releasing backup interface [ 224.421989][T11049] bond0: (slave bond_slave_1): Releasing backup interface [ 224.448994][T11049] team0: Port device team_slave_0 removed [ 224.474262][T11049] team0: Port device team_slave_1 removed [ 224.481613][T11049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.510386][T11049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.541759][T11049] team0: Port device macvlan1 removed [ 224.571735][T11052] team0: Mode changed to "loadbalance" [ 224.607366][T11067] netlink: 'syz.4.1466': attribute type 2 has an invalid length. [ 224.821607][T11079] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 224.987066][T11087] openvswitch: netlink: IP tunnel dst address not specified [ 225.003066][T11082] tipc: Disabling bearer [ 225.460254][ T3575] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.498160][T11100] netlink: 'syz.3.1477': attribute type 3 has an invalid length. [ 226.165615][T11111] __nla_validate_parse: 16 callbacks suppressed [ 226.165636][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 226.187744][T11110] unsupported nla_type 40 [ 226.291962][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 226.402341][T11122] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1483'. [ 226.473295][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.502734][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.512040][T11123] openvswitch: netlink: IP tunnel dst address not specified [ 226.524788][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.566083][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.566910][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 226.584539][ T3575] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.616654][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.646127][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.687784][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 226.792508][ T3575] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.859846][T11138] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1488'. [ 226.920498][ T3575] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.982267][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 227.025941][T11147] macsec1: entered promiscuous mode [ 227.039159][T11147] batadv0: entered promiscuous mode [ 227.051438][T11147] macsec1: entered allmulticast mode [ 227.070161][T11149] vlan0: entered promiscuous mode [ 227.075585][T11149] hsr_slave_1: entered promiscuous mode [ 227.081289][T11149] vlan0: entered allmulticast mode [ 227.086669][T11149] hsr_slave_1: entered allmulticast mode [ 227.297683][T11147] syzkaller1: entered promiscuous mode [ 227.314569][T11147] syzkaller1: entered allmulticast mode [ 227.338902][ T3575] bridge_slave_1: left allmulticast mode [ 227.354179][ T3575] bridge_slave_1: left promiscuous mode [ 227.376996][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.400468][ T3575] bridge_slave_0: left allmulticast mode [ 227.406337][ T3575] bridge_slave_0: left promiscuous mode [ 227.412036][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.788178][ T3575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.799849][ T3575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.812640][ T3575] bond0 (unregistering): Released all slaves [ 227.903398][T11124] chnl_net:caif_netlink_parms(): no params data found [ 227.911752][T11160] delete_channel: no stack [ 228.436575][T11180] netlink: 'syz.3.1499': attribute type 1 has an invalid length. [ 228.444731][T11180] netlink: 'syz.3.1499': attribute type 2 has an invalid length. [ 228.567336][T11192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1501'. [ 228.634083][ T3575] hsr_slave_0: left promiscuous mode [ 228.655965][ T3575] hsr_slave_1: left promiscuous mode [ 228.670551][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.685557][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.694144][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.699124][T11200] openvswitch: netlink: IP tunnel dst address not specified [ 228.701709][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.721571][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 228.733957][ T5841] Bluetooth: hci2: command tx timeout [ 228.750275][ T3575] veth1_macvtap: left promiscuous mode [ 228.756096][ T3575] veth0_macvtap: left promiscuous mode [ 228.761861][ T3575] veth1_vlan: left promiscuous mode [ 228.768124][ T3575] veth0_vlan: left promiscuous mode [ 229.187508][ T3575] team0 (unregistering): Port device team_slave_1 removed [ 229.225439][ T3575] team0 (unregistering): Port device team_slave_0 removed [ 229.704110][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.712351][T11124] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.720885][T11124] bridge_slave_0: entered allmulticast mode [ 229.728276][T11124] bridge_slave_0: entered promiscuous mode [ 229.794822][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.814015][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.829305][T11124] bridge_slave_1: entered allmulticast mode [ 229.846534][T11124] bridge_slave_1: entered promiscuous mode [ 229.959021][T11124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.989508][T11124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.136715][T11219] netlink: 'syz.1.1508': attribute type 10 has an invalid length. [ 230.153301][T11124] team0: Port device team_slave_0 added [ 230.182340][T11124] team0: Port device team_slave_1 added [ 230.237888][T11124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.253971][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.282524][T11124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.305499][T11124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.313042][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.345475][T11124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.524869][T11124] hsr_slave_0: entered promiscuous mode [ 230.573228][T11124] hsr_slave_1: entered promiscuous mode [ 230.587457][T11227] netlink: 'syz.1.1511': attribute type 4 has an invalid length. [ 230.698013][T11233] ipvlan0: entered promiscuous mode [ 230.704206][T11233] bridge0: port 1(ipvlan0) entered blocking state [ 230.710924][T11233] bridge0: port 1(ipvlan0) entered disabled state [ 230.718189][T11233] ipvlan0: entered allmulticast mode [ 230.726567][T11233] ipvlan0: left allmulticast mode [ 230.741595][T11237] openvswitch: netlink: IP tunnel dst address not specified [ 230.752579][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 230.776400][T11234] bridge_slave_0: left allmulticast mode [ 230.782096][T11234] bridge_slave_0: left promiscuous mode [ 230.788162][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.798858][T11234] bridge_slave_1: left allmulticast mode [ 230.805688][ T5841] Bluetooth: hci2: command tx timeout [ 230.812977][T11234] bridge_slave_1: left promiscuous mode [ 230.822122][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.833425][T11234] bond0: (slave bond_slave_0): Releasing backup interface [ 230.848579][T11234] bond0: (slave bond_slave_1): Releasing backup interface [ 230.878569][T11234] team0: Port device team_slave_0 removed [ 230.891817][T11234] team0: Port device team_slave_1 removed [ 230.898803][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.906550][T11234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.922865][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.931274][T11234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.948589][T11234] macvlan1: left allmulticast mode [ 230.954387][T11234] veth1_vlan: left allmulticast mode [ 230.959941][T11234] bridge0: port 3(macvlan1) entered disabled state [ 230.975790][T11234] bond1: (slave bridge2): Releasing active interface [ 231.271605][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 231.651447][T11273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1524'. [ 231.925108][T11280] netlink: 'syz.3.1527': attribute type 1 has an invalid length. [ 231.939761][T11280] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1527'. [ 232.055434][T11124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.121329][T11284] openvswitch: netlink: IP tunnel dst address not specified [ 232.133058][T11124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.156963][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1529'. [ 232.176374][T11124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.186216][T11124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.218617][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'. [ 232.334265][T11124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.369379][T11124] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.401819][T11291] smc: net device wg0 applied user defined pnetid SYZ0 [ 232.414205][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.419883][T11291] netlink: 'syz.1.1532': attribute type 39 has an invalid length. [ 232.421436][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.459715][T11293] SET target dimension over the limit! [ 232.504975][T11291] smc: removing net device wg0 with user defined pnetid SYZ0 [ 232.541158][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.548318][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.683328][T11305] pim6reg: left allmulticast mode [ 232.693748][T11305] bridge0: left allmulticast mode [ 232.892568][ T5841] Bluetooth: hci2: command tx timeout [ 233.093439][T11124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.186853][T11329] syz.1.1542[11329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.186989][T11329] syz.1.1542[11329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.206436][T11329] syz.1.1542[11329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.220528][T11124] veth0_vlan: entered promiscuous mode [ 233.240030][T11331] openvswitch: netlink: IP tunnel dst address not specified [ 233.267530][T11124] veth1_vlan: entered promiscuous mode [ 233.269038][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1543'. [ 233.376301][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 233.389259][T11124] veth0_macvtap: entered promiscuous mode [ 233.399611][T11124] veth1_macvtap: entered promiscuous mode [ 233.418726][T11124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.429929][T11124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.443420][T11124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.452569][T11124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.461670][T11124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.470831][T11124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.590842][ T3575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.609512][ T3575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.650739][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.660229][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.033946][T11347] syzkaller0: entered promiscuous mode [ 234.039448][T11347] syzkaller0: entered allmulticast mode [ 234.060108][T11350] bond0: (slave batadv_slave_0): Releasing backup interface [ 234.074402][T11350] batadv_slave_0: left allmulticast mode [ 234.083146][T11354] macsec0: entered promiscuous mode [ 234.102090][T11347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1547'. [ 234.112233][T11354] veth1_macvtap: left promiscuous mode [ 234.160285][T11354] macsec0 (unregistering): left promiscuous mode [ 234.274604][T11359] netlink: 'syz.4.1550': attribute type 10 has an invalid length. [ 235.865751][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.883878][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.900728][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.917119][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.939241][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.946964][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.947523][T11359] bridge0: left allmulticast mode [ 236.990338][T11359] bridge0: entered allmulticast mode [ 236.996115][T11359] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 237.074604][T11391] openvswitch: netlink: IP tunnel dst address not specified [ 237.085958][ T7930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.108345][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 237.194058][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 237.260814][ T7930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.348238][T11399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1557'. [ 237.430703][T11399] tun0: tun_chr_ioctl cmd 1074812117 [ 237.539844][T11387] chnl_net:caif_netlink_parms(): no params data found [ 237.675367][T11415] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 237.812574][T11387] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.828437][T11387] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.846301][T11387] bridge_slave_0: entered allmulticast mode [ 237.859094][T11387] bridge_slave_0: entered promiscuous mode [ 237.876515][T11387] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.893399][T11387] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.917740][T11387] bridge_slave_1: entered allmulticast mode [ 237.934670][T11387] bridge_slave_1: entered promiscuous mode [ 238.014254][ T5842] Bluetooth: hci2: command tx timeout [ 238.096511][ T7930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.184574][T11387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.244441][ T7930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.280483][T11387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.349892][T11387] team0: Port device team_slave_0 added [ 238.360711][T11387] team0: Port device team_slave_1 added [ 238.407968][T11387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.415933][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.442805][T11387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.474562][T11387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.481666][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.509222][T11387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.590096][T11387] hsr_slave_0: entered promiscuous mode [ 238.596979][T11387] hsr_slave_1: entered promiscuous mode [ 238.606158][T11387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.614072][T11387] Cannot create hsr debugfs directory [ 238.701089][ T7930] bridge_slave_1: left allmulticast mode [ 238.707787][ T7930] bridge_slave_1: left promiscuous mode [ 238.713615][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.722613][ T7930] bridge_slave_0: left allmulticast mode [ 238.728998][ T7930] bridge_slave_0: left promiscuous mode [ 238.734962][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.264615][ T7930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.290582][T11447] openvswitch: netlink: IP tunnel dst address not specified [ 239.302854][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'. [ 239.315824][ T7930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.341130][ T7930] bond0 (unregistering): Released all slaves [ 239.536337][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 239.785955][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 239.939184][ T7930] hsr_slave_0: left promiscuous mode [ 239.956017][ T7930] hsr_slave_1: left promiscuous mode [ 240.003177][ T7930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.020540][ T7930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.042007][ T7930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.059900][ T7930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.083916][ T5842] Bluetooth: hci2: command tx timeout [ 240.097047][ T7930] veth1_macvtap: left promiscuous mode [ 240.102952][ T7930] veth0_macvtap: left promiscuous mode [ 240.108861][ T7930] veth1_vlan: left promiscuous mode [ 240.114400][ T7930] veth0_vlan: left promiscuous mode [ 240.680399][ T7930] team0 (unregistering): Port device team_slave_1 removed [ 240.732638][ T7930] team0 (unregistering): Port device team_slave_0 removed [ 241.309944][T11470] (unnamed net_device) (uninitialized): option lacp_active: invalid value (3) [ 241.323238][T11489] bridge0: mtu less than device minimum [ 241.344052][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1585'. [ 241.373956][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1585'. [ 241.470380][T11511] netlink: 'syz.4.1588': attribute type 3 has an invalid length. [ 241.515029][T11511] xt_l2tp: missing protocol rule (udp|l2tpip) [ 241.744829][T11387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.804473][T11524] openvswitch: netlink: IP tunnel dst address not specified [ 241.839514][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 241.843163][T11387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.913093][T11387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.931101][T11387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.999509][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 242.161364][T11387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.168984][ T5842] Bluetooth: hci2: command tx timeout [ 242.240908][T11387] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.299051][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.306282][ T7930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.352722][T11549] __nla_validate_parse: 1 callbacks suppressed [ 242.352743][T11549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1597'. [ 242.356156][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.369207][T11549] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1597'. [ 242.375128][ T7960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.419611][T11549] netlink: 'syz.4.1597': attribute type 5 has an invalid length. [ 242.436589][T11549] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1597'. [ 242.450583][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1597'. [ 242.880386][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 242.899691][T11387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.943193][T11387] veth0_vlan: entered promiscuous mode [ 242.954404][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 242.976737][T11387] veth1_vlan: entered promiscuous mode [ 243.046662][T11387] veth0_macvtap: entered promiscuous mode [ 243.066133][T11387] veth1_macvtap: entered promiscuous mode [ 243.086796][T11387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.098397][T11387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.108639][T11387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.117750][T11387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.127154][T11387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.136184][T11387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.260174][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 243.346659][T11566] gtp0: entered promiscuous mode [ 243.360905][T11566] gtp0: entered allmulticast mode [ 243.383091][T11579] vlan3: entered promiscuous mode [ 243.438460][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.446871][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.512456][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.534241][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.536446][T11590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1608'. [ 243.562017][T11566] syz.4.1601 (11566) used greatest stack depth: 18096 bytes left [ 243.722850][T11592] openvswitch: netlink: IP tunnel dst address not specified [ 243.748580][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 243.834515][T11594] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 243.870749][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 244.247700][T11610] ipt_REJECT: TCP_RESET invalid for non-tcp [ 244.658794][T11623] IPVS: length: 60 != 8 [ 244.787194][T11630] openvswitch: netlink: IP tunnel dst address not specified [ 244.872377][T11633] x_tables: duplicate underflow at hook 2 [ 245.102330][ T3017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.155830][ T3017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.231207][T11667] netlink: 'syz.4.1632': attribute type 3 has an invalid length. [ 246.439140][ T3017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.596340][ T3017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.608626][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.639886][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.671081][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.702913][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.711118][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.719902][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.758687][T11681] openvswitch: netlink: IP tunnel dst address not specified [ 246.820079][ T3017] bridge_slave_1: left allmulticast mode [ 246.827338][ T3017] bridge_slave_1: left promiscuous mode [ 246.833169][ T3017] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.844366][ T3017] bridge_slave_0: left allmulticast mode [ 246.850107][ T3017] bridge_slave_0: left promiscuous mode [ 246.856215][ T3017] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.596563][ T3017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.609456][ T3017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.621855][ T3017] bond0 (unregistering): Released all slaves [ 247.956063][T11701] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 247.964603][T11701] __nla_validate_parse: 9 callbacks suppressed [ 247.964622][T11701] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1641'. [ 247.984361][T11707] xt_limit: Overflow, try lower: 262144/524288 [ 248.147697][T11714] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.297487][T11720] sctp: [Deprecated]: syz.2.1645 (pid 11720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.297487][T11720] Use struct sctp_sack_info instead [ 248.325034][T11714] batadv_slave_1: entered promiscuous mode [ 248.341217][T11715] batadv_slave_1: left promiscuous mode [ 248.389691][ T3017] hsr_slave_0: left promiscuous mode [ 248.429061][ T3017] hsr_slave_1: left promiscuous mode [ 248.444364][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.451894][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.504473][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.511941][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.562720][ T3017] veth1_macvtap: left promiscuous mode [ 248.569068][ T3017] veth0_macvtap: left promiscuous mode [ 248.574878][ T3017] veth1_vlan: left promiscuous mode [ 248.582223][ T3017] veth0_vlan: left promiscuous mode [ 248.634184][T11732] FAULT_INJECTION: forcing a failure. [ 248.634184][T11732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.670203][T11732] CPU: 0 UID: 0 PID: 11732 Comm: syz.2.1646 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 248.681047][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.691145][T11732] Call Trace: [ 248.694462][T11732] [ 248.697427][T11732] dump_stack_lvl+0x241/0x360 [ 248.702158][T11732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.707406][T11732] ? __pfx__printk+0x10/0x10 [ 248.712057][T11732] ? snprintf+0xda/0x120 [ 248.716353][T11732] should_fail_ex+0x3b0/0x4e0 [ 248.721081][T11732] _copy_to_user+0x31/0xb0 [ 248.725550][T11732] simple_read_from_buffer+0xca/0x150 [ 248.730972][T11732] proc_fail_nth_read+0x1e9/0x250 [ 248.736050][T11732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.741654][T11732] ? rw_verify_area+0x55e/0x6f0 [ 248.746553][T11732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.752147][T11732] vfs_read+0x1fc/0xb70 [ 248.756346][T11732] ? __pfx___mutex_lock+0x10/0x10 [ 248.761444][T11732] ? __pfx_vfs_read+0x10/0x10 [ 248.766202][T11732] ? __fget_files+0x2a/0x410 [ 248.767689][T11738] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 248.770814][T11732] ? __fget_files+0x395/0x410 [ 248.783249][T11732] ? __fget_files+0x2a/0x410 [ 248.787857][T11732] ksys_read+0x18f/0x2b0 [ 248.792118][T11732] ? __pfx_ksys_read+0x10/0x10 [ 248.796895][T11732] ? do_syscall_64+0x100/0x230 [ 248.801687][T11732] ? do_syscall_64+0xb6/0x230 [ 248.806372][T11732] do_syscall_64+0xf3/0x230 [ 248.810880][T11732] ? clear_bhb_loop+0x35/0x90 [ 248.815565][T11732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.821461][T11732] RIP: 0033:0x7f437397e92c [ 248.825905][T11732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.845553][T11732] RSP: 002b:00007f43717d5050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.853996][T11732] RAX: ffffffffffffffda RBX: 00007f4373b46160 RCX: 00007f437397e92c [ 248.861982][T11732] RDX: 000000000000000f RSI: 00007f43717d50b0 RDI: 0000000000000006 [ 248.869960][T11732] RBP: 00007f43717d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 248.877962][T11732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.885941][T11732] R13: 0000000000000001 R14: 00007f4373b46160 R15: 00007fffd9dd0dd8 [ 248.893939][T11732] [ 248.899878][T11738] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1648'. [ 248.910976][ T5842] Bluetooth: hci2: command tx timeout [ 248.928978][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 249.270802][ T3017] team0 (unregistering): Port device team_slave_1 removed [ 249.312729][ T3017] team0 (unregistering): Port device team_slave_0 removed [ 249.819391][T11678] chnl_net:caif_netlink_parms(): no params data found [ 249.912574][T11743] openvswitch: netlink: IP tunnel dst address not specified [ 249.939434][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 250.014404][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 250.060156][T11752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1652'. [ 250.201279][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.254109][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.261413][T11678] bridge_slave_0: entered allmulticast mode [ 250.263231][T11759] x_tables: duplicate underflow at hook 3 [ 250.295072][T11678] bridge_slave_0: entered promiscuous mode [ 250.320567][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.348135][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1656'. [ 250.349808][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.375144][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1655'. [ 250.390667][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 250.409988][T11678] bridge_slave_1: entered allmulticast mode [ 250.420017][T11678] bridge_slave_1: entered promiscuous mode [ 250.678272][T11678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.710639][T11678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.748382][T11785] netlink: 'syz.2.1660': attribute type 4 has an invalid length. [ 250.761382][T11785] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1660'. [ 250.838795][T11678] team0: Port device team_slave_0 added [ 250.917199][T11678] team0: Port device team_slave_1 added [ 250.964551][ T5842] Bluetooth: hci2: command tx timeout [ 250.994325][T11678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.994510][T11802] openvswitch: netlink: IP tunnel dst address not specified [ 251.012826][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.039364][T11678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.052454][T11678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.059831][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.118401][T11678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.259025][T11678] hsr_slave_0: entered promiscuous mode [ 251.276161][T11678] hsr_slave_1: entered promiscuous mode [ 251.793092][T11828] netlink: 'syz.1.1675': attribute type 8 has an invalid length. [ 252.084010][T11842] openvswitch: netlink: IP tunnel dst address not specified [ 252.121824][T11678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.150225][T11678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.160101][T11678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.169812][T11678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.270362][T11844] veth5: entered promiscuous mode [ 252.337007][T11678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.376623][T11678] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.429717][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.436923][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.503615][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.510771][ T7929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.044265][ T5842] Bluetooth: hci2: command tx timeout [ 253.088899][T11678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.115140][T11885] ipvlan0: entered promiscuous mode [ 253.120672][T11885] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 253.129115][T11885] team0: Device ipvlan0 is already an upper device of the team interface [ 253.256128][T11678] veth0_vlan: entered promiscuous mode [ 253.283036][T11678] veth1_vlan: entered promiscuous mode [ 253.351010][T11678] veth0_macvtap: entered promiscuous mode [ 253.372680][T11678] veth1_macvtap: entered promiscuous mode [ 253.427341][T11897] __nla_validate_parse: 8 callbacks suppressed [ 253.427363][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'. [ 253.448326][T11678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.473711][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 253.481459][T11678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.493808][T11897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1691'. [ 253.517083][T11905] netlink: 'syz.2.1693': attribute type 2 has an invalid length. [ 253.545930][T11905] netlink: 'syz.2.1693': attribute type 9 has an invalid length. [ 253.554736][T11905] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1693'. [ 253.555892][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1691'. [ 253.584079][T11678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.598344][ T5842] block nbd0: Receive control failed (result -107) [ 253.613822][T11678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.633759][T11678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.647920][T11678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.704722][T11897] nbd0: detected capacity change from 0 to 256 [ 253.880358][ T7960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.895732][ T7960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.951813][ T7930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.952864][T11919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.969767][ T7930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.291370][T11940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1700'. [ 254.449505][T11945] netlink: 'syz.2.1701': attribute type 9 has an invalid length. [ 254.466284][T11945] netlink: 'syz.2.1701': attribute type 7 has an invalid length. [ 254.479639][T11945] netlink: 'syz.2.1701': attribute type 8 has an invalid length. [ 254.654938][T11956] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1705'. [ 254.699998][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 254.794054][T11963] ebtables: ebtables: counters copy to user failed while replacing table [ 254.872799][T11963] xt_CT: No such helper "pptp" [ 254.903303][T11973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1708'. [ 255.111540][T11981] openvswitch: netlink: IP tunnel dst address not specified [ 255.392488][ T7930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.458587][T11993] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 255.492668][ T7929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.501857][ T7929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.166509][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.352548][ T7930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.529238][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.539196][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.547155][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.555703][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.563310][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.570924][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.580913][ T7930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.654711][T12016] netlink: 'syz.2.1722': attribute type 11 has an invalid length. [ 256.662822][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 256.776035][T12017] No such timeout policy "syz0" [ 256.897231][ T7930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.388167][ T7930] bridge_slave_1: left allmulticast mode [ 257.408225][ T7930] bridge_slave_1: left promiscuous mode [ 257.444200][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.486628][T12039] openvswitch: netlink: IP tunnel dst address not specified [ 257.497006][ T7930] bridge_slave_0: left allmulticast mode [ 257.507134][ T7930] bridge_slave_0: left promiscuous mode [ 257.512893][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.027986][ T7930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.042858][ T7930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.056111][ T7930] bond0 (unregistering): Released all slaves [ 258.093173][T12008] chnl_net:caif_netlink_parms(): no params data found [ 258.306182][T12055] netlink: 'syz.4.1732': attribute type 3 has an invalid length. [ 258.406651][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 258.607816][T12008] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.620581][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.638852][T12008] bridge_slave_0: entered allmulticast mode [ 258.646117][ T5841] Bluetooth: hci2: command tx timeout [ 258.661678][T12008] bridge_slave_0: entered promiscuous mode [ 258.693740][ T7930] hsr_slave_0: left promiscuous mode [ 258.702663][ T7930] hsr_slave_1: left promiscuous mode [ 258.720657][ T7930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.739954][ T7930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.748125][ T7930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.773598][ T7930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.831185][ T7930] veth1_macvtap: left promiscuous mode [ 258.843578][ T7930] veth0_macvtap: left promiscuous mode [ 258.849209][ T7930] veth1_vlan: left promiscuous mode [ 258.863613][ T7930] veth0_vlan: left promiscuous mode [ 259.562773][ T7930] team0 (unregistering): Port device team_slave_1 removed [ 259.598778][T12110] __nla_validate_parse: 2 callbacks suppressed [ 259.598800][T12110] netlink: 484 bytes leftover after parsing attributes in process `syz.2.1745'. [ 259.701265][ T7930] team0 (unregistering): Port device team_slave_0 removed [ 260.191284][T12008] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.198712][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.206346][T12008] bridge_slave_1: entered allmulticast mode [ 260.213249][T12008] bridge_slave_1: entered promiscuous mode [ 260.295625][T12008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.326278][T12008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.408954][T12008] team0: Port device team_slave_0 added [ 260.512472][T12008] team0: Port device team_slave_1 added [ 260.560621][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1748'. [ 260.580798][T12122] openvswitch: netlink: Message has 1275 unknown bytes. [ 260.599376][T12122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.615857][T12008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.623333][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.673593][T12008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.715001][T12126] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 260.727220][ T5841] Bluetooth: hci2: command tx timeout [ 260.748449][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1751'. [ 260.774341][T12008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.781552][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.811056][T12008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.960975][T12008] hsr_slave_0: entered promiscuous mode [ 260.993246][T12008] hsr_slave_1: entered promiscuous mode [ 261.245971][T12150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1756'. [ 261.261169][T12150] macvtap0: entered promiscuous mode [ 261.269696][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'. [ 261.358900][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 261.702537][T12167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1761'. [ 261.746956][T12008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.780848][T12008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.799663][T12008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.812168][T12008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.963145][T12008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.998586][T12008] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.044994][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.052162][ T7928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.062929][T12144] macvtap0: left promiscuous mode [ 262.081745][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.089005][ T7928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.374638][T12186] netlink: 'syz.4.1766': attribute type 2 has an invalid length. [ 262.383671][T12186] netlink: 'syz.4.1766': attribute type 9 has an invalid length. [ 262.411226][T12186] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1766'. [ 262.433371][T12198] netlink: 'syz.2.1768': attribute type 10 has an invalid length. [ 262.480883][T12206] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 262.542756][T12008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.619374][T12211] netlink: 'syz.2.1770': attribute type 8 has an invalid length. [ 262.680591][T12008] veth0_vlan: entered promiscuous mode [ 262.694869][T12008] veth1_vlan: entered promiscuous mode [ 262.720184][T12008] veth0_macvtap: entered promiscuous mode [ 262.729273][T12008] veth1_macvtap: entered promiscuous mode [ 262.745886][T12008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.757475][T12008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.780949][T12008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.789951][T12008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.798838][T12008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.808298][ T5841] Bluetooth: hci2: command tx timeout [ 262.813735][T12008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.037429][T12226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1776'. [ 263.098293][ T7929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.117034][ T7929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.160655][T12224] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1775'. [ 263.204658][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.223747][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.363069][T12211] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 263.488656][T12236] Cannot find add_set index 16384 as target [ 264.723711][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 264.734958][T12297] __nla_validate_parse: 3 callbacks suppressed [ 264.734977][T12297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1796'. [ 264.768323][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1797'. [ 264.857353][ T7959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.787069][T12307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1798'. [ 266.135317][ T7959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.164371][T12321] netlink: zone id is out of range [ 266.172892][T12321] netlink: zone id is out of range [ 266.179641][T12321] netlink: zone id is out of range [ 266.185196][T12321] netlink: zone id is out of range [ 266.192391][T12321] netlink: set zone limit has 8 unknown bytes [ 266.228302][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.239107][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.250272][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.258593][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.269974][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.278076][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.373074][ T7959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.456882][T12334] tap0: tun_chr_ioctl cmd 2147767506 [ 266.509750][ T7959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.792717][ T7959] bridge_slave_1: left allmulticast mode [ 266.798717][ T7959] bridge_slave_1: left promiscuous mode [ 266.804669][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.829106][ T7959] bridge_slave_0: left allmulticast mode [ 266.835091][ T7959] bridge_slave_0: left promiscuous mode [ 266.840852][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.294148][ T7959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.305936][ T7959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.316987][ T7959] bond0 (unregistering): Released all slaves [ 267.349728][T12324] chnl_net:caif_netlink_parms(): no params data found [ 267.753389][T12374] ------------[ cut here ]------------ [ 267.760245][T12374] WARNING: CPU: 1 PID: 12374 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 267.773910][T12374] Modules linked in: [ 267.778295][T12374] CPU: 1 UID: 0 PID: 12374 Comm: syz.2.1818 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 267.789790][T12374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.800433][T12374] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 267.807811][T12374] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 16 5e 87 fa eb 05 e8 0f 5e 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 267.827654][T12374] RSP: 0018:ffffc9000478f6b0 EFLAGS: 00010287 [ 267.833866][T12374] RAX: ffffffff87181411 RBX: 0000000000000000 RCX: 0000000000080000 [ 267.841862][T12374] RDX: ffffc9000d1f9000 RSI: 0000000000004909 RDI: 000000000000490a [ 267.850450][T12374] RBP: 0000000000000000 R08: ffffffff8718121d R09: 1ffffffff2033ce6 [ 267.858845][T12374] R10: dffffc0000000000 R11: ffffffff87178260 R12: ffff88807c0eae32 [ 267.866928][T12374] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88802758b0a0 [ 267.875011][T12374] FS: 00007f43746be6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 267.884049][T12374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.890855][T12374] CR2: 00007f43739659e0 CR3: 0000000076b56000 CR4: 00000000003526f0 [ 267.898931][T12374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 267.907026][T12374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 267.915256][T12374] Call Trace: [ 267.918568][T12374] [ 267.921533][T12374] ? __warn+0x165/0x4d0 [ 267.925951][T12374] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 267.932070][T12374] ? report_bug+0x2b3/0x500 [ 267.936714][T12374] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 267.942833][T12374] ? handle_bug+0x60/0x90 [ 267.947313][T12374] ? exc_invalid_op+0x1a/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 267.952022][T12374] ? asm_exc_invalid_op+0x1a/0x20 [ 267.957188][T12374] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 267.963752][T12374] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 267.969769][T12374] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 267.976011][T12374] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 267.982122][T12374] ? mac80211_hwsim_add_interface+0x86/0x320 [ 267.988239][T12374] mac80211_hwsim_add_interface+0x9a/0x320 [ 267.994349][T12374] drv_add_interface+0x2f8/0x8e0 [ 267.999336][T12374] ieee80211_do_open+0x73d/0x2420 [ 268.004564][T12374] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 268.011039][T12374] ieee80211_open+0x192/0x200 [ 268.015909][T12374] __dev_open+0x2d3/0x450 [ 268.020289][T12374] ? __pfx___dev_open+0x10/0x10 [ 268.025277][T12374] ? dev_set_rx_mode+0xb8/0x2e0 [ 268.030162][T12374] __dev_change_flags+0x1e2/0x6f0 [ 268.035347][T12374] ? __pfx___mutex_lock+0x10/0x10 [ 268.040406][T12374] ? __pfx___dev_change_flags+0x10/0x10 [ 268.046087][T12374] ? apparmor_capable+0x13b/0x1b0 [ 268.051158][T12374] dev_change_flags+0x8b/0x1a0 [ 268.056078][T12374] devinet_ioctl+0xcce/0x1ac0 [ 268.060822][T12374] inet_ioctl+0x3d7/0x4f0 [ 268.065318][T12374] ? __pfx_inet_ioctl+0x10/0x10 [ 268.070213][T12374] ? tomoyo_path_number_perm+0x679/0x860 [ 268.076041][T12374] ? __lock_acquire+0x1397/0x2100 [ 268.081114][T12374] ? tomoyo_path_number_perm+0x206/0x860 [ 268.087212][T12374] sock_do_ioctl+0x158/0x460 [ 268.091854][T12374] ? __pfx_sock_do_ioctl+0x10/0x10 [ 268.097381][T12374] sock_ioctl+0x626/0x8e0 [ 268.101770][T12374] ? __pfx_sock_ioctl+0x10/0x10 [ 268.106830][T12374] ? __fget_files+0x2a/0x410 [ 268.111471][T12374] ? __fget_files+0x2a/0x410 [ 268.116222][T12374] ? __pfx_sock_ioctl+0x10/0x10 [ 268.121121][T12374] __se_sys_ioctl+0xf5/0x170 [ 268.125892][T12374] do_syscall_64+0xf3/0x230 [ 268.130438][T12374] ? clear_bhb_loop+0x35/0x90 [ 268.135258][T12374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.141189][T12374] RIP: 0033:0x7f437397fb1b [ 268.145738][T12374] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 268.165831][T12374] RSP: 002b:00007f43746bce80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.174512][T12374] RAX: ffffffffffffffda RBX: 00007f43746bcfa0 RCX: 00007f437397fb1b [ 268.182513][T12374] RDX: 00007f43746bcf00 RSI: 0000000000008914 RDI: 000000000000000d [ 268.190643][T12374] RBP: 000000000000000d R08: 0000000000000000 R09: 0000000000000000 [ 268.198979][T12374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 268.207106][T12374] R13: 0000000000000048 R14: 00007f43746bcfc0 R15: 00007f43746bcf00 [ 268.215207][T12374] [ 268.218258][T12374] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 268.225575][T12374] CPU: 1 UID: 0 PID: 12374 Comm: syz.2.1818 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 268.236392][T12374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.246459][T12374] Call Trace: [ 268.249749][T12374] [ 268.252697][T12374] dump_stack_lvl+0x241/0x360 [ 268.257402][T12374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.262613][T12374] ? __pfx__printk+0x10/0x10 [ 268.267213][T12374] ? vscnprintf+0x5d/0x90 [ 268.271548][T12374] panic+0x349/0x880 [ 268.275452][T12374] ? __warn+0x174/0x4d0 [ 268.279621][T12374] ? __pfx_panic+0x10/0x10 [ 268.284068][T12374] __warn+0x344/0x4d0 [ 268.288062][T12374] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 268.294151][T12374] report_bug+0x2b3/0x500 [ 268.298502][T12374] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 268.304591][T12374] handle_bug+0x60/0x90 [ 268.308768][T12374] exc_invalid_op+0x1a/0x50 [ 268.313315][T12374] asm_exc_invalid_op+0x1a/0x20 [ 268.318187][T12374] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 268.324888][T12374] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 16 5e 87 fa eb 05 e8 0f 5e 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 268.344514][T12374] RSP: 0018:ffffc9000478f6b0 EFLAGS: 00010287 [ 268.350603][T12374] RAX: ffffffff87181411 RBX: 0000000000000000 RCX: 0000000000080000 [ 268.358585][T12374] RDX: ffffc9000d1f9000 RSI: 0000000000004909 RDI: 000000000000490a [ 268.366570][T12374] RBP: 0000000000000000 R08: ffffffff8718121d R09: 1ffffffff2033ce6 [ 268.374551][T12374] R10: dffffc0000000000 R11: ffffffff87178260 R12: ffff88807c0eae32 [ 268.382532][T12374] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88802758b0a0 [ 268.390519][T12374] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 268.396971][T12374] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 268.402959][T12374] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 268.409036][T12374] ? mac80211_hwsim_add_interface+0x86/0x320 [ 268.415035][T12374] mac80211_hwsim_add_interface+0x9a/0x320 [ 268.420878][T12374] drv_add_interface+0x2f8/0x8e0 [ 268.425850][T12374] ieee80211_do_open+0x73d/0x2420 [ 268.430904][T12374] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 268.437346][T12374] ieee80211_open+0x192/0x200 [ 268.442068][T12374] __dev_open+0x2d3/0x450 [ 268.446443][T12374] ? __pfx___dev_open+0x10/0x10 [ 268.451316][T12374] ? dev_set_rx_mode+0xb8/0x2e0 [ 268.456177][T12374] __dev_change_flags+0x1e2/0x6f0 [ 268.461211][T12374] ? __pfx___mutex_lock+0x10/0x10 [ 268.466242][T12374] ? __pfx___dev_change_flags+0x10/0x10 [ 268.471818][T12374] ? apparmor_capable+0x13b/0x1b0 [ 268.476857][T12374] dev_change_flags+0x8b/0x1a0 [ 268.481638][T12374] devinet_ioctl+0xcce/0x1ac0 [ 268.486342][T12374] inet_ioctl+0x3d7/0x4f0 [ 268.490705][T12374] ? __pfx_inet_ioctl+0x10/0x10 [ 268.495573][T12374] ? tomoyo_path_number_perm+0x679/0x860 [ 268.501252][T12374] ? __lock_acquire+0x1397/0x2100 [ 268.506298][T12374] ? tomoyo_path_number_perm+0x206/0x860 [ 268.511953][T12374] sock_do_ioctl+0x158/0x460 [ 268.516563][T12374] ? __pfx_sock_do_ioctl+0x10/0x10 [ 268.521700][T12374] sock_ioctl+0x626/0x8e0 [ 268.526048][T12374] ? __pfx_sock_ioctl+0x10/0x10 [ 268.530912][T12374] ? __fget_files+0x2a/0x410 [ 268.535512][T12374] ? __fget_files+0x2a/0x410 [ 268.540111][T12374] ? __pfx_sock_ioctl+0x10/0x10 [ 268.544973][T12374] __se_sys_ioctl+0xf5/0x170 [ 268.549575][T12374] do_syscall_64+0xf3/0x230 [ 268.554083][T12374] ? clear_bhb_loop+0x35/0x90 [ 268.558774][T12374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.564664][T12374] RIP: 0033:0x7f437397fb1b [ 268.569079][T12374] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 268.588699][T12374] RSP: 002b:00007f43746bce80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.597133][T12374] RAX: ffffffffffffffda RBX: 00007f43746bcfa0 RCX: 00007f437397fb1b [ 268.605112][T12374] RDX: 00007f43746bcf00 RSI: 0000000000008914 RDI: 000000000000000d [ 268.613087][T12374] RBP: 000000000000000d R08: 0000000000000000 R09: 0000000000000000 [ 268.621057][T12374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 268.629054][T12374] R13: 0000000000000048 R14: 00007f43746bcfc0 R15: 00007f43746bcf00 [ 268.637068][T12374] [ 268.640437][T12374] Kernel Offset: disabled [ 268.644846][T12374] Rebooting in 86400 seconds..