Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. 2023/12/19 18:06:05 fuzzer started 2023/12/19 18:06:05 dialing manager at 10.128.0.169:30009 [ 69.644536][ T5063] cgroup: Unknown subsys name 'net' [ 69.768512][ T5063] cgroup: Unknown subsys name 'rlimit' 2023/12/19 18:06:09 syscalls: 202 2023/12/19 18:06:09 code coverage: enabled 2023/12/19 18:06:09 comparison tracing: enabled 2023/12/19 18:06:09 extra coverage: enabled 2023/12/19 18:06:09 delay kcov mmap: enabled 2023/12/19 18:06:09 setuid sandbox: enabled 2023/12/19 18:06:09 namespace sandbox: enabled 2023/12/19 18:06:09 Android sandbox: /sys/fs/selinux/policy does not exist 2023/12/19 18:06:09 fault injection: enabled 2023/12/19 18:06:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/12/19 18:06:09 net packet injection: enabled 2023/12/19 18:06:09 net device setup: enabled 2023/12/19 18:06:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/12/19 18:06:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/12/19 18:06:09 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/12/19 18:06:09 USB emulation: enabled 2023/12/19 18:06:09 hci packet injection: enabled 2023/12/19 18:06:09 wifi device emulation: enabled 2023/12/19 18:06:09 802.15.4 emulation: enabled 2023/12/19 18:06:09 swap file: enabled 2023/12/19 18:06:09 fetching corpus: 0, signal 0/0 (executing program) [ 71.351793][ T5063] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.701968][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.709614][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 2023/12/19 18:06:11 starting 6 fuzzer processes 18:06:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x81, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x28}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x40}}, 0x4040) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4f}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x48d0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x0, 0xfffffffd, 0xfffffff8, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x68, 0x6e, 0x3, 0x38, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x7, 0xb8, [@private=0xa010102]}]}}}}}) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xc60000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000082}, 0x4) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x34}}, 0x20000840) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, 0x0, 0x10, 0x9, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x17800000, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x48001) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000a00)={'sit0\x00', &(0x7f00000009c0)={@mcast1, @private=0xa010102, 0x11, 0x7}}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a80), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0xe0dec4313816d63d}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0xc050) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r9, 0xb20, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40004) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048001}, 0x40015) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xad0, '\x00', r6, 0xffffffffffffffff, 0x2, 0x1}, 0x48) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f00)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000f40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0x0, 0x80000000, 0x800}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000fc0)=[r3, r1], &(0x7f0000001000)=[{0x2, 0x1, 0xb}, {0x1, 0x1, 0x8, 0xa}, {0x3, 0x3, 0x6, 0x6}], 0x10, 0x1}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r10}, &(0x7f0000000e40), &(0x7f0000001100)=r11}, 0x20) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x34, r8, 0x100, 0x70bd27, 0x8, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r12, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'pimreg0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4980) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x7, [@struct={0xa, 0x1, 0x0, 0x4, 0x1, 0xff, [{0xe, 0x5, 0xbd87}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x5}, @datasec={0x9, 0x2, 0x0, 0xf, 0x1, [{0x5, 0xffffffff, 0xc85}, {0x1, 0x8, 0x1}], '\''}, @struct={0x7, 0x2, 0x0, 0x4, 0x0, 0xbc29, [{0xa, 0x1, 0x3a73}, {0xb, 0x4, 0x1}]}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x0, 0x4a7}]}, @const={0x10}, @const={0x2, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x61, 0x5f, 0x9b66645ca267d961, 0x2e, 0x5f]}}, &(0x7f0000001540)=""/184, 0xd7, 0xb8, 0x7, 0x2}, 0x20) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x401, 0x0, r4, 0xe688, '\x00', r6, r1, 0x2, 0x1, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x4, &(0x7f00000013c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9da5}], &(0x7f0000001400)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x40, '\x00', r6, 0x0, r13, 0x8, &(0x7f0000001640)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001680)={0x2, 0xf, 0x2, 0x8000}, 0x10, 0x2f707, r4, 0xa, &(0x7f0000001740)=[r14], &(0x7f0000001780)=[{0x3, 0x3, 0x10, 0x1}, {0x1, 0x3, 0x4, 0x4}, {0x2, 0x4, 0xb, 0x1}, {0x1, 0x5, 0x4, 0x2}, {0x4, 0x5, 0xc, 0x3}, {0x0, 0x5, 0x1, 0x4}, {0x1, 0x3, 0x5, 0x4}, {0x2, 0x1, 0x9, 0xb}, {0x4, 0x4, 0x2, 0x2}, {0x1, 0x3, 0x9, 0xc}], 0x10, 0x7}, 0x90) 18:06:11 executing program 0: r0 = socket(0x21, 0xa, 0x100) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x3f}, 0x5, 0x5, 0x40, 0x18, 0xd, 'syz1\x00', "5114d58f464905eb768cc7a5f489064e4e6aba7b77a6241095297151cae12159", "5ff9a52c127cb0dd1a92ace5b9f8bb9bcf92517d79703dc8d520d8a8a4549cd5", [{0x78b, 0x0, {0x0, 0x40}}, {0xa33f, 0x5, {0x0, 0x200}}, {0x401, 0x4f3f, {0x3, 0x2}}, {0x7, 0xd82, {0x0, 0x290}}, {0x0, 0x5, {0x0, 0x2}}, {0x400, 0x7, {0x0, 0x3f}}, {0x7ff, 0xfff, {0x0, 0x34}}, {0x800, 0x1, {0x2, 0xd8}}, {0xedd7, 0xfff7, {0x1, 0xfffffffa}}, {0x1, 0xffff, {0x2, 0xae2f}}, {0x401, 0xf5, {0x2, 0x1000}}, {0x9, 0x4bfd, {0x0, 0x5}}, {0x9, 0xffe1, {0x1, 0x7}}, {0x0, 0x9, {0x2, 0x91}}, {0x80, 0x4, {0x3, 0x1}}, {0x4, 0xffff, {0x1, 0x51}}, {0xffff, 0x0, {0x1, 0x2}}, {0x6, 0x4, {0x3, 0xfff}}, {0x9, 0x2, {0x0, 0x6}}, {0x8, 0xfff9, {0x0, 0xffff}}, {0x200, 0x8, {0x0, 0x100}}, {0x3ff, 0x8, {0x2, 0xfffffffc}}, {0x101, 0x7f, {0x2, 0x7}}, {0x8669, 0x1}, {0x8000, 0x0, {0x2, 0x1}}, {0x1, 0x9, {0x3, 0x2}}, {0xd44, 0xe, {0x2, 0xa9d}}, {0x80, 0x9, {0x0, 0x6db7}}, {0xf4a3, 0xfffd, {0x2, 0x1}}, {0x9, 0x1ff, {0x3, 0x5}}, {0x200, 0x0, {0x0, 0x2}}, {0x61, 0x6, {0x3, 0x4}}, {0x6, 0x9, {0x1, 0x8}}, {0xf000, 0x3, {0x460e318849ba42fa, 0x8001}}, {0x90f7, 0x0, {0x2, 0x2}}, {0x8, 0x80, {0x2, 0x20}}, {0x7fff, 0x4, {0x3, 0x20000000}}, {0x0, 0xa03, {0x1, 0x41}}, {0x0, 0x9, {0x2, 0x8}}, {0x101, 0x6, {0x2, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48810}, 0x20000081) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x12c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x22}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x20}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x80, 0x1, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8, 0x8000, 0x6]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x2049, 0x7, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @remote, {[@end]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'pim6reg\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x2f, 0x20, 0x7f, 0x3, 0x0, @loopback, @local, 0x10, 0x10, 0x0, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000c00)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000c40)={'gre0\x00', 0x0, 0x20, 0x10, 0x53, 0x5, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x64, 0x0, 0x40, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x13, 0x5f, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100]}, @rr={0x7, 0xb, 0xc7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d80)={'ip_vti0\x00', &(0x7f0000000d00)={'sit0\x00', 0x0, 0x7800, 0x38, 0x4, 0x3, {{0xd, 0x4, 0x0, 0x32, 0x34, 0x64, 0x0, 0x3f, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0xa2, 0x0, 0x5, [0x7ff]}, @rr={0x7, 0x13, 0x1b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @broadcast]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001280)={&(0x7f0000000a00), 0xc, &(0x7f0000001240)={&(0x7f0000000dc0)={0x450, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4ab26658}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x677f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff4e7}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r11, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc75}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x1000) r12 = socket$netlink(0x10, 0x3, 0xb) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x4008010) r13 = accept4$bt_l2cap(r0, &(0x7f0000001500)={0x1f, 0x0, @fixed}, &(0x7f0000001540)=0xe, 0x800) getsockopt$bt_BT_RCVMTU(r13, 0x112, 0xd, &(0x7f0000001580)=0x100, &(0x7f00000015c0)=0x2) sendmsg$IPSET_CMD_TYPE(r12, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}]}, 0x1c}}, 0x20000081) r14 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000017c0)={'syztnl2\x00', &(0x7f0000001740)={'syztnl2\x00', r8, 0x4, 0x20, 0x9, 0x7, 0x10, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x20, 0x5}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r14, &(0x7f0000001900)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0xc0, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6b}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xc0}}, 0x20000001) pipe(&(0x7f0000001a40)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_tracing={0x1a, 0x6, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0xf, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x6}, @func]}, &(0x7f0000001980)='GPL\x00', 0x200, 0x7b, &(0x7f00000019c0)=""/123, 0x41100, 0x2, '\x00', 0x0, 0x1c, r16, 0x8, &(0x7f0000001a80)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001ac0)={0x4, 0x8, 0x6, 0x8000}, 0x10, 0xf9ce, 0xffffffffffffffff, 0x0, &(0x7f0000001b00)=[0x1], 0x0, 0x10, 0x4}, 0x90) 18:06:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3ff}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4005}, 0x84) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xb}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x39}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000005) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8000, 0x8010, 0xffffffff, 0x1000, {{0x2c, 0x4, 0x1, 0x9, 0xb0, 0x65, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x28, 0x30, 0x0, 0x8, [0x8, 0x5, 0xc901, 0x3, 0x7, 0xaf56, 0x8, 0x4, 0x668202b5]}, @end, @end, @end, @timestamp_addr={0x44, 0x34, 0xc7, 0x1, 0x0, [{@broadcast, 0x90}, {@broadcast, 0x20}, {@local, 0x8}, {@private=0xa010101, 0x2}, {@remote, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}]}, @timestamp={0x44, 0x8, 0xdb, 0x0, 0x1, [0xffff7fff]}, @timestamp={0x44, 0x20, 0x49, 0x0, 0x5, [0x7f, 0xee, 0x8000, 0x7, 0xcec3, 0x8, 0x5]}, @noop, @cipso={0x86, 0x12, 0x0, [{0x7, 0xc, "c53e2eb5ae4e7ac541b2"}]}, @end]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048080}, 0x40000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc840) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x78, 0x2, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xdff}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc000) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x16}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4048090) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000050) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4040) pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x9001}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x2c040010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x98, 0x0, 0x501, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x98}}, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000013c0)=0x40, &(0x7f0000001400)=0x2) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, 0xd, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9ecb}}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001580)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'syztnl0\x00', r1, 0x10, 0x7, 0x100, 0xa5, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x64, 0x0, 0x3f, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@noop, @timestamp={0x44, 0x8, 0xc9, 0x0, 0xd, [0xba]}, @timestamp={0x44, 0x18, 0xdb, 0x0, 0x2, [0x7, 0x0, 0x5, 0x1, 0x0]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001780)={'ip_vti0\x00', &(0x7f0000001680)={'syztnl1\x00', r1, 0x8000, 0x8000, 0x7ff, 0x8, {{0x35, 0x4, 0x3, 0x37, 0xd4, 0x64, 0x0, 0x1f, 0x4, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x0, [{@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x44, 0xe8, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x10000}, {@rand_addr=0x64010100, 0x55}, {@broadcast, 0x1}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x7}, {@private=0xa010102, 0x1}, {@multicast1, 0x8001}, {@local, 0x6}]}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x5, "cade76"}, {0x1, 0x9, "3c2068623264ee"}, {0x2, 0x2}, {0x0, 0xb, "db908e696adf11bdb6"}, {0x7, 0xa, "4975e18f641e2241"}, {0x0, 0x10, "afd143368134c47e8b7b1fd07998"}]}, @timestamp_addr={0x44, 0x2c, 0x44, 0x1, 0x0, [{@loopback, 0xfff}, {@empty, 0x34f}, {@rand_addr=0x64010100, 0xffffffff}, {@empty, 0x64a}, {@rand_addr=0xea, 0x24000000}]}, @lsrr={0x83, 0x7, 0x5, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000023c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002380)={&(0x7f0000001ac0)={0x8b8, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x3f, 0x1, 0x2}]}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb22}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r9}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8ad0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xaf31, 0x0, 0x4, 0xfff}, {0x5, 0x9, 0x9, 0x3}, {0x1000, 0xdc, 0x4}]}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x75e}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x57}}, {0x8}}}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x5) 18:06:11 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = socket(0x25, 0x6, 0x1f) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x44800) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x0, 0x80, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x66, 0x0, 0xf9, 0x4, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xbc, 0x3, 0x1, [{@empty, 0x400}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x40, 0x5, 0x6, {{0xc, 0x4, 0x2, 0x35, 0x30, 0x68, 0x0, 0xf0, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0x8d, [@remote, @empty, @local, @local, @remote, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x80, 0x7800, 0x800, 0x5, {{0xc, 0x4, 0x0, 0x28, 0x30, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0x9, [0x4, 0x5, 0x4c48, 0x7, 0x8, 0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x700, 0x8711, 0x4, 0x3, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @remote, {[@rr={0x7, 0xb, 0x28, [@dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102]}, @end, @lsrr={0x83, 0x7, 0x19, [@multicast1]}, @ssrr={0x89, 0x13, 0x9d, [@dev={0xac, 0x14, 0x14, 0x2e}, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0x76, [@remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xb30b81b507b709d3}, 0xc, &(0x7f0000000d00)={&(0x7f0000000640)={0x690, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3a24, 0x30, 0x65, 0x10001}, {0x5, 0x3}]}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8f3b, 0x6, 0x7, 0x80000001}, {0x2, 0x85, 0x3e}, {0x5, 0x1f, 0x20, 0x91f9}, {0xaa1, 0x2, 0x3f, 0x1}, {0x8001, 0x3, 0x39, 0x9}, {0xfbff, 0x1, 0x7, 0x8001}, {0xe82d, 0x0, 0x3, 0x4}, {0x0, 0x1, 0xff, 0x401}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x781d}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xeb}}, {0x8, 0x7, 0x3f}}}]}}]}, 0x690}, 0x1, 0x0, 0x0, 0x80}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r12, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4880}, 0x8804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ec0)={'virt_wifi0\x00'}) pipe(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f0000000f80)='syzkaller\x00', 0x5, 0x7e, &(0x7f0000000fc0)=""/126, 0x40f00, 0x64, '\x00', r11, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x29847, 0xffffffffffffffff, 0x2, &(0x7f00000010c0)=[r13, 0xffffffffffffffff], &(0x7f0000001100)=[{0x3, 0x1, 0x8, 0x5}, {0x3, 0x1, 0x9}], 0x10, 0x7de0}, 0x90) r15 = socket(0x28, 0x800, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001200)={'syztnl2\x00', r11, 0xff4f, 0x80, 0x4, 0x0, {{0x2a, 0x4, 0x0, 0x3, 0xa8, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0x9e, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x7a, 0x3, 0x4, [{@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010101, 0x4}, {@loopback}, {@private=0xa010100, 0x7fffffff}, {@empty, 0x7}, {@local, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @timestamp_prespec={0x44, 0x3c, 0xe9, 0x3, 0x1, [{@empty, 0x7}, {@loopback, 0x81}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@empty, 0x1ff}]}, @ssrr={0x89, 0x13, 0x8c, [@multicast1, @multicast1, @local, @private=0xa010100]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000001340)={'wlan1\x00'}) pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r16, 0x89f2, &(0x7f0000001440)={'ip_vti0\x00', &(0x7f00000013c0)={'gre0\x00', r6, 0x8001, 0x40, 0x1ff, 0x10001, {{0x14, 0x4, 0x2, 0x8, 0x50, 0x65, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, {[@timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x5, [{@loopback, 0x2}]}, @timestamp={0x44, 0x10, 0x9a, 0x0, 0x7, [0x5, 0xfa5, 0x36]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x29, [@broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x51, [@private=0xa010101]}]}}}}}) r17 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r15, 0x89f4, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000001480)={@remote, 0x1, 0x0, 0x30, 0x0, [{@dev}, {@dev}, {@broadcast}]}}) sendmsg$L2TP_CMD_SESSION_DELETE(r17, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 18:06:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1000, 0xffff, 0x3ff, 0x1102, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0xf}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x41) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x1, 0x80, 0x2, 0x4, {{0x1c, 0x4, 0x2, 0x2, 0x70, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp={0x44, 0x1c, 0x29, 0x0, 0xa, [0x7, 0x8000, 0x9, 0x81, 0x8, 0xd7]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0xd, "c697d08f8bbf31c0113cad"}, {0x2, 0x9, "c93fb5484c3b54"}, {0x1, 0xe, "d2da0700107dd334ef531d8c"}, {0x1, 0x8, "49398ba3eb29"}, {0x5, 0xc, "6d8a25c814cfc9f9a408"}]}]}}}}}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x48041}, 0x4044884) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip_vti0\x00', r5, 0x20, 0xf847, 0x4, 0x2, {{0x13, 0x4, 0x1, 0x28, 0x4c, 0x67, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, {[@lsrr={0x83, 0xb, 0xc5, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1]}, @rr={0x7, 0x23, 0x2e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x3, '3'}, @timestamp_addr={0x44, 0x4, 0xa1, 0x1, 0x6}]}}}}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, r2, 0x2, 0x3, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r6}, &(0x7f0000000640), &(0x7f0000000680)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@restrict={0xa, 0x0, 0x0, 0xb, 0x4}, @union={0x2, 0x6, 0x0, 0x5, 0x1, 0xffffffff, [{0x7, 0x3, 0x63b}, {0xe, 0x4, 0xfffffffa}, {0x10, 0x1, 0xf23}, {0xf, 0x3, 0x1}, {0xd, 0x2, 0x8}, {0x0, 0x3, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000840)=""/110, 0x7b, 0x6e, 0x0, 0x9}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xfff, '\x00', r5, r8, 0x0, 0x3, 0x5}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xffffffe1}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x31}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20040000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000ac0)={'erspan0\x00', r5, 0x8, 0x7, 0x8, 0x1f, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x64, 0x0, 0xff, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, 0xd, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004840) pipe(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000e40)={'ip_vti0\x00', &(0x7f0000000dc0)={'ip_vti0\x00', r9, 0x8, 0x7800, 0x7ff, 0x2, {{0xc, 0x4, 0x2, 0x12, 0x30, 0x68, 0x0, 0x40, 0x2, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xaa, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x8}, {@local, 0x5bd}, {@remote, 0x1}]}]}}}}}) sendmsg$nl_route_sched(r10, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)=@newqdisc={0x58, 0x24, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x3, 0x9}, {0xf, 0xe}, {0xfff2, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}, @qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xaf}}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x12, 0x6, 0x5, 0x8, 0x1400, 0x1, 0x7, '\x00', r12, r2, 0x5, 0x0, 0x1}, 0x48) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x94, 0x1, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4b89000}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0xc044040) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000000) ioctl$IMCTRLREQ(r10, 0x80044945, &(0x7f00000012c0)={0x4004, 0x7ff, 0x0, 0x4}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0xa, 0x80000001, 0xb21, 0x3, 0x904, r6, 0x200, '\x00', r11, r8, 0x10001, 0x0, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x17, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@call={0x85, 0x0, 0x0, 0x8c}, @map_idx={0x18, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, @call={0x85, 0x0, 0x0, 0x2c}, @exit, @jmp={0x5, 0x0, 0x6, 0x4, 0x9, 0x1, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001440)='GPL\x00', 0x401, 0x99, &(0x7f0000001480)=""/153, 0x40f00, 0x41, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000001540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001580)={0x2, 0x6, 0x400, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000015c0)=[r0, 0xffffffffffffffff], &(0x7f0000001600)=[{0x2, 0x1, 0xd, 0x2}, {0x4, 0x5, 0xc, 0x6}, {0x5, 0x2, 0x4}, {0x4, 0x4, 0xe, 0x2}], 0x10, 0x401}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)=@newqdisc={0x16c, 0x24, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0xfff3, 0xc}, {0x6, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xe86}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x2, 0x400, 0x1, 0x5, 0x0, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x17, 0x7, 0x7f, 0x6, 0x0, 0x8, 0xc26, 0xa}}, {0x18, 0x2, [0x8, 0x1ff, 0x8, 0x0, 0x7, 0x101, 0x1d87, 0x8001, 0x20, 0x23ce]}}, {{0x1c, 0x1, {0x3, 0x71, 0x7, 0x8000, 0x2, 0x401, 0x61a, 0x3}}, {0xa, 0x2, [0x8001, 0x313, 0x1000]}}, {{0x1c, 0x1, {0xd3, 0x1, 0x4, 0xfffff4bd, 0x2, 0x1f, 0x40, 0x1}}, {0x6, 0x2, [0xdf35]}}]}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x7fff, 0x7fff, 0x0, 0xea, 0xfffffc00, 0x5}}, {0xe, 0x2, [0x4, 0xe3e1, 0x7, 0x0, 0x1]}}, {{0x1c, 0x1, {0x7f, 0x0, 0x3, 0x7, 0x2, 0x1, 0x197, 0x7}}, {0x12, 0x2, [0x1, 0x280, 0xed, 0x5, 0x1, 0x7, 0xffff]}}, {{0x1c, 0x1, {0x1, 0x80, 0x2d, 0x7, 0x0, 0x8, 0x3, 0x4}}, {0xc, 0x2, [0xffff, 0x7fff, 0x20, 0xe]}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 18:06:11 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x80, 0x8, 0x2, 0x200, {{0x1a, 0x4, 0x3, 0x9, 0x68, 0x65, 0x0, 0x3f, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x13}, {[@ssrr={0x89, 0x1f, 0x4f, [@broadcast, @broadcast, @local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x8, 0x8, 0x1, 0x10001, 0x1]}, @timestamp_prespec={0x44, 0x1c, 0x31, 0x3, 0x0, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff2b5c}, {@private=0xa010101, 0x1}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', r0, 0x80, 0x10, 0x2, 0x0, {{0x13, 0x4, 0x1, 0x2a, 0x4c, 0x66, 0x0, 0x80, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x1f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @local]}, @timestamp={0x44, 0x20, 0xbb, 0x0, 0x8, [0x80000001, 0x1, 0x81, 0x9, 0xffffff8e, 0x80000001, 0x7]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x10008004) r1 = socket(0x1e, 0x4, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4010) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000003c0)=""/152, &(0x7f0000000480)=0x98) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20080044) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000845) r2 = socket$netlink(0x10, 0x3, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r3, 0x129, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x1e}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x40}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048800}, 0x40040) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r4, 0x7d0802de0981da63, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x4, 0x800, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", ""]}, 0x38}}, 0x20000000) bind$bt_l2cap(r1, &(0x7f00000009c0)={0x1f, 0x9, @none, 0x6}, 0xe) sendmsg$AUDIT_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, 0x3e9, 0x1, 0x70bd28, 0x25dfdbfe, {0x20, 0x1, 0x0, 0x0, 0x101, 0xfff, 0x0, 0x10001, 0x0, 0x4, 0x4}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x20004000) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008080}, 0x24000044) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket(0x3, 0x80805, 0xb7f) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x5, 0x6, 0x407, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0x4000005) r6 = socket$netlink(0x10, 0x3, 0x12) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r5) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4a}}}}, ["", "", "", "", ""]}, 0x28}}, 0x20000005) bind$bt_sco(r5, &(0x7f0000000f80), 0x8) bind$bt_sco(r5, &(0x7f0000000fc0), 0x8) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000001100)={&(0x7f0000001000), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x54, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008891) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xb0, 0x0, 0x600, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x415bcd1bfd271487}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000100}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4b08331f, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) [ 73.486811][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.495432][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.508988][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.520059][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.527904][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.538169][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.578083][ T5081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.588331][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.596565][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.604781][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.614133][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.622364][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.627271][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.630212][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.638061][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.651111][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.659791][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.665015][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.680321][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.688225][ T5090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.690266][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.696117][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.703359][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.716550][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.761526][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.773779][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.795747][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.804242][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.812997][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.829555][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.889618][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.897752][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.910643][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.931301][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.939351][ T50] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.946778][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.482762][ T5083] chnl_net:caif_netlink_parms(): no params data found [ 74.517524][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 74.855927][ T5084] chnl_net:caif_netlink_parms(): no params data found [ 74.928626][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.936784][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.944771][ T5083] bridge_slave_0: entered allmulticast mode [ 74.951817][ T5083] bridge_slave_0: entered promiscuous mode [ 74.961151][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.968312][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.975890][ T5083] bridge_slave_1: entered allmulticast mode [ 74.983145][ T5083] bridge_slave_1: entered promiscuous mode [ 75.014660][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.021899][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.029400][ T5077] bridge_slave_0: entered allmulticast mode [ 75.036393][ T5077] bridge_slave_0: entered promiscuous mode [ 75.044090][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 75.088449][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 75.155511][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.162771][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.172727][ T5077] bridge_slave_1: entered allmulticast mode [ 75.180032][ T5077] bridge_slave_1: entered promiscuous mode [ 75.225607][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.241059][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.301806][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 75.382622][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.395565][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.460926][ T5083] team0: Port device team_slave_0 added [ 75.470472][ T5083] team0: Port device team_slave_1 added [ 75.550602][ T5077] team0: Port device team_slave_0 added [ 75.593440][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.600743][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.607857][ T5084] bridge_slave_0: entered allmulticast mode [ 75.615738][ T5084] bridge_slave_0: entered promiscuous mode [ 75.622907][ T5087] Bluetooth: hci0: command 0x0409 tx timeout [ 75.646430][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.653642][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.662276][ T5082] bridge_slave_0: entered allmulticast mode [ 75.669601][ T5082] bridge_slave_0: entered promiscuous mode [ 75.687601][ T5077] team0: Port device team_slave_1 added [ 75.709568][ T5087] Bluetooth: hci1: command 0x0409 tx timeout [ 75.723684][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.730943][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.738072][ T5084] bridge_slave_1: entered allmulticast mode [ 75.745947][ T5084] bridge_slave_1: entered promiscuous mode [ 75.768035][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.775382][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.782523][ T5087] Bluetooth: hci2: command 0x0409 tx timeout [ 75.790165][ T5082] bridge_slave_1: entered allmulticast mode [ 75.797833][ T5082] bridge_slave_1: entered promiscuous mode [ 75.858876][ T5087] Bluetooth: hci3: command 0x0409 tx timeout [ 75.865174][ T5087] Bluetooth: hci4: command 0x0409 tx timeout [ 75.874171][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.884989][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.892603][ T5094] bridge_slave_0: entered allmulticast mode [ 75.900264][ T5094] bridge_slave_0: entered promiscuous mode [ 75.909429][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.916389][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.942784][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.991290][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.019209][ T5087] Bluetooth: hci5: command 0x0409 tx timeout [ 76.033474][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.040830][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.066794][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.078969][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.086214][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.093753][ T5094] bridge_slave_1: entered allmulticast mode [ 76.101772][ T5094] bridge_slave_1: entered promiscuous mode [ 76.126780][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.133775][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.159779][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.183900][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.198067][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.210563][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.246772][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.254007][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.262931][ T5097] bridge_slave_0: entered allmulticast mode [ 76.271122][ T5097] bridge_slave_0: entered promiscuous mode [ 76.279751][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.286703][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.312829][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.353213][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.401184][ T5082] team0: Port device team_slave_0 added [ 76.407519][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.418626][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.426155][ T5097] bridge_slave_1: entered allmulticast mode [ 76.434477][ T5097] bridge_slave_1: entered promiscuous mode [ 76.477660][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.545035][ T5084] team0: Port device team_slave_0 added [ 76.553714][ T5082] team0: Port device team_slave_1 added [ 76.597994][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.641683][ T5083] hsr_slave_0: entered promiscuous mode [ 76.648072][ T5083] hsr_slave_1: entered promiscuous mode [ 76.663099][ T5084] team0: Port device team_slave_1 added [ 76.697969][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.705366][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.731711][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.750527][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.784390][ T5077] hsr_slave_0: entered promiscuous mode [ 76.791382][ T5077] hsr_slave_1: entered promiscuous mode [ 76.797567][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.805471][ T5077] Cannot create hsr debugfs directory [ 76.815818][ T5094] team0: Port device team_slave_0 added [ 76.826542][ T5094] team0: Port device team_slave_1 added [ 76.865279][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.875914][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.902766][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.934765][ T5097] team0: Port device team_slave_0 added [ 76.978512][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.986297][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.013016][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.025888][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.033085][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.059229][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.073135][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.080193][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.106605][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.152238][ T5097] team0: Port device team_slave_1 added [ 77.181483][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.188479][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.214857][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.432225][ T5084] hsr_slave_0: entered promiscuous mode [ 77.439545][ T5084] hsr_slave_1: entered promiscuous mode [ 77.445778][ T5084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.453497][ T5084] Cannot create hsr debugfs directory [ 77.490693][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.497664][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.523924][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.544911][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.551906][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.577841][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.596248][ T5094] hsr_slave_0: entered promiscuous mode [ 77.602780][ T5094] hsr_slave_1: entered promiscuous mode [ 77.609084][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.616669][ T5094] Cannot create hsr debugfs directory [ 77.631155][ T5082] hsr_slave_0: entered promiscuous mode [ 77.637516][ T5082] hsr_slave_1: entered promiscuous mode [ 77.643958][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.651784][ T5082] Cannot create hsr debugfs directory [ 77.699131][ T5087] Bluetooth: hci0: command 0x041b tx timeout [ 77.788887][ T5087] Bluetooth: hci1: command 0x041b tx timeout [ 77.859230][ T5087] Bluetooth: hci2: command 0x041b tx timeout [ 77.918624][ T5097] hsr_slave_0: entered promiscuous mode [ 77.925131][ T5097] hsr_slave_1: entered promiscuous mode [ 77.931954][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.939664][ T5087] Bluetooth: hci4: command 0x041b tx timeout [ 77.945690][ T5097] Cannot create hsr debugfs directory [ 77.950847][ T5087] Bluetooth: hci3: command 0x041b tx timeout [ 78.099500][ T5087] Bluetooth: hci5: command 0x041b tx timeout [ 78.363513][ T5083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.376299][ T5083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.389894][ T5083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.428395][ T5083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.610765][ T5077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.636765][ T5077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.647847][ T5077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.692763][ T5077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.780028][ T5094] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.795733][ T5094] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.848505][ T5094] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.862950][ T5094] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.048396][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.057911][ T5084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.072874][ T5084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.097828][ T5084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.108210][ T5084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.199539][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.259623][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.266982][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.344023][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.351389][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.384927][ T5097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.420981][ T5097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.475614][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.485815][ T5097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.545849][ T5082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.558434][ T5082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.575582][ T5097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.609845][ T5082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.621019][ T5082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.736418][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.786099][ T5087] Bluetooth: hci0: command 0x040f tx timeout [ 79.826113][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.836506][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.843666][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.860201][ T5087] Bluetooth: hci1: command 0x040f tx timeout [ 79.932905][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.940154][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.947751][ T5087] Bluetooth: hci2: command 0x040f tx timeout [ 80.019631][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 80.025759][ T5087] Bluetooth: hci4: command 0x040f tx timeout [ 80.037599][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.132436][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.146611][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.164833][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.172028][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.181618][ T5087] Bluetooth: hci5: command 0x040f tx timeout [ 80.196321][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.203548][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.237930][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.405483][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.484242][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.554940][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.594363][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.625214][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.632463][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.726146][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.734062][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.747354][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.754568][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.772448][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.779649][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.813570][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.887740][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.895002][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.956544][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.982056][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.989285][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.152145][ T5083] veth0_vlan: entered promiscuous mode [ 81.281541][ T5083] veth1_vlan: entered promiscuous mode [ 81.471716][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.562965][ T5083] veth0_macvtap: entered promiscuous mode [ 81.601194][ T5077] veth0_vlan: entered promiscuous mode [ 81.703862][ T5077] veth1_vlan: entered promiscuous mode [ 81.722878][ T5083] veth1_macvtap: entered promiscuous mode [ 81.821674][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.840493][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.860138][ T5087] Bluetooth: hci0: command 0x0419 tx timeout [ 81.888063][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.935447][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.950781][ T5087] Bluetooth: hci1: command 0x0419 tx timeout [ 81.977452][ T5083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.995807][ T5083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.005523][ T5083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.021763][ T5083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.039033][ T5087] Bluetooth: hci2: command 0x0419 tx timeout [ 82.094236][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.102051][ T5087] Bluetooth: hci4: command 0x0419 tx timeout [ 82.108076][ T5087] Bluetooth: hci3: command 0x0419 tx timeout [ 82.214401][ T5077] veth0_macvtap: entered promiscuous mode [ 82.260301][ T5087] Bluetooth: hci5: command 0x0419 tx timeout [ 82.300916][ T5077] veth1_macvtap: entered promiscuous mode [ 82.327462][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.338564][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.355399][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.451060][ T5084] veth0_vlan: entered promiscuous mode [ 82.491211][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.504447][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.517047][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.561742][ T5097] veth0_vlan: entered promiscuous mode [ 82.578349][ T5084] veth1_vlan: entered promiscuous mode [ 82.607923][ T5094] veth0_vlan: entered promiscuous mode [ 82.680030][ T5142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.688501][ T5142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.727744][ T5094] veth1_vlan: entered promiscuous mode [ 82.753817][ T5077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.763871][ T5077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.773695][ T5077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.783090][ T5077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.821737][ T5082] veth0_vlan: entered promiscuous mode [ 82.854179][ T5097] veth1_vlan: entered promiscuous mode [ 82.957640][ T3840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.959724][ T5082] veth1_vlan: entered promiscuous mode [ 82.966286][ T3840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.079974][ T5084] veth0_macvtap: entered promiscuous mode [ 83.121213][ T5097] veth0_macvtap: entered promiscuous mode [ 83.147196][ T5097] veth1_macvtap: entered promiscuous mode [ 83.175056][ T5084] veth1_macvtap: entered promiscuous mode [ 83.217896][ T5082] veth0_macvtap: entered promiscuous mode [ 83.313294][ T5082] veth1_macvtap: entered promiscuous mode [ 83.323054][ T5094] veth0_macvtap: entered promiscuous mode [ 83.386189][ T3840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.395155][ T5094] veth1_macvtap: entered promiscuous mode [ 83.410260][ T3840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.427904][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.446152][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.456768][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.467937][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.482331][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.506066][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.541009][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.559536][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.588559][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.620829][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.638503][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.662719][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.733179][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.746635][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.757746][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.769566][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.784585][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.815995][ T5084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.825602][ T5084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.835497][ T5084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.845544][ T5084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.866166][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.877032][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.889144][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.900948][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.911450][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.922268][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.932313][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.944081][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.955741][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.968375][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.980264][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.994371][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.005033][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.015242][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.027892][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.037963][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.050268][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.060440][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.072887][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.086674][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.095918][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.097506][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.120625][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.122345][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.138192][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.149411][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.165570][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 18:06:22 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = socket(0x25, 0x6, 0x1f) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x44800) (async) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8) (async, rerun: 32) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async, rerun: 32) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x0, 0x80, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x66, 0x0, 0xf9, 0x4, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xbc, 0x3, 0x1, [{@empty, 0x400}]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x40, 0x5, 0x6, {{0xc, 0x4, 0x2, 0x35, 0x30, 0x68, 0x0, 0xf0, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0x8d, [@remote, @empty, @local, @local, @remote, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x80, 0x7800, 0x800, 0x5, {{0xc, 0x4, 0x0, 0x28, 0x30, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0x9, [0x4, 0x5, 0x4c48, 0x7, 0x8, 0x2]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x700, 0x8711, 0x4, 0x3, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @remote, {[@rr={0x7, 0xb, 0x28, [@dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102]}, @end, @lsrr={0x83, 0x7, 0x19, [@multicast1]}, @ssrr={0x89, 0x13, 0x9d, [@dev={0xac, 0x14, 0x14, 0x2e}, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0x76, [@remote]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xb30b81b507b709d3}, 0xc, &(0x7f0000000d00)={&(0x7f0000000640)={0x690, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3a24, 0x30, 0x65, 0x10001}, {0x5, 0x3}]}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8f3b, 0x6, 0x7, 0x80000001}, {0x2, 0x85, 0x3e}, {0x5, 0x1f, 0x20, 0x91f9}, {0xaa1, 0x2, 0x3f, 0x1}, {0x8001, 0x3, 0x39, 0x9}, {0xfbff, 0x1, 0x7, 0x8001}, {0xe82d, 0x0, 0x3, 0x4}, {0x0, 0x1, 0xff, 0x401}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x781d}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xeb}}, {0x8, 0x7, 0x3f}}}]}}]}, 0x690}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r12, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4880}, 0x8804) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ec0)={'virt_wifi0\x00'}) pipe(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f0000000f80)='syzkaller\x00', 0x5, 0x7e, &(0x7f0000000fc0)=""/126, 0x40f00, 0x64, '\x00', r11, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x29847, 0xffffffffffffffff, 0x2, &(0x7f00000010c0)=[r13, 0xffffffffffffffff], &(0x7f0000001100)=[{0x3, 0x1, 0x8, 0x5}, {0x3, 0x1, 0x9}], 0x10, 0x7de0}, 0x90) r15 = socket(0x28, 0x800, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001200)={'syztnl2\x00', r11, 0xff4f, 0x80, 0x4, 0x0, {{0x2a, 0x4, 0x0, 0x3, 0xa8, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0x9e, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x7a, 0x3, 0x4, [{@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010101, 0x4}, {@loopback}, {@private=0xa010100, 0x7fffffff}, {@empty, 0x7}, {@local, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @timestamp_prespec={0x44, 0x3c, 0xe9, 0x3, 0x1, [{@empty, 0x7}, {@loopback, 0x81}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@empty, 0x1ff}]}, @ssrr={0x89, 0x13, 0x8c, [@multicast1, @multicast1, @local, @private=0xa010100]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000001340)={'wlan1\x00'}) (async) pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r16, 0x89f2, &(0x7f0000001440)={'ip_vti0\x00', &(0x7f00000013c0)={'gre0\x00', r6, 0x8001, 0x40, 0x1ff, 0x10001, {{0x14, 0x4, 0x2, 0x8, 0x50, 0x65, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, {[@timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x5, [{@loopback, 0x2}]}, @timestamp={0x44, 0x10, 0x9a, 0x0, 0x7, [0x5, 0xfa5, 0x36]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x29, [@broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x51, [@private=0xa010101]}]}}}}}) (async, rerun: 32) r17 = socket$netlink(0x10, 0x3, 0xe) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r15, 0x89f4, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000001480)={@remote, 0x1, 0x0, 0x30, 0x0, [{@dev}, {@dev}, {@broadcast}]}}) sendmsg$L2TP_CMD_SESSION_DELETE(r17, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) [ 84.209006][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.247847][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 18:06:22 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket(0x25, 0x6, 0x1f) (async) r3 = socket(0x25, 0x6, 0x1f) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x44800) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x0, 0x80, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x66, 0x0, 0xf9, 0x4, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xbc, 0x3, 0x1, [{@empty, 0x400}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x40, 0x5, 0x6, {{0xc, 0x4, 0x2, 0x35, 0x30, 0x68, 0x0, 0xf0, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0x8d, [@remote, @empty, @local, @local, @remote, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x80, 0x7800, 0x800, 0x5, {{0xc, 0x4, 0x0, 0x28, 0x30, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0x9, [0x4, 0x5, 0x4c48, 0x7, 0x8, 0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x700, 0x8711, 0x4, 0x3, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @remote, {[@rr={0x7, 0xb, 0x28, [@dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102]}, @end, @lsrr={0x83, 0x7, 0x19, [@multicast1]}, @ssrr={0x89, 0x13, 0x9d, [@dev={0xac, 0x14, 0x14, 0x2e}, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0x76, [@remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xb30b81b507b709d3}, 0xc, &(0x7f0000000d00)={&(0x7f0000000640)={0x690, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3a24, 0x30, 0x65, 0x10001}, {0x5, 0x3}]}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8f3b, 0x6, 0x7, 0x80000001}, {0x2, 0x85, 0x3e}, {0x5, 0x1f, 0x20, 0x91f9}, {0xaa1, 0x2, 0x3f, 0x1}, {0x8001, 0x3, 0x39, 0x9}, {0xfbff, 0x1, 0x7, 0x8001}, {0xe82d, 0x0, 0x3, 0x4}, {0x0, 0x1, 0xff, 0x401}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x781d}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xeb}}, {0x8, 0x7, 0x3f}}}]}}]}, 0x690}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xb30b81b507b709d3}, 0xc, &(0x7f0000000d00)={&(0x7f0000000640)={0x690, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3a24, 0x30, 0x65, 0x10001}, {0x5, 0x3}]}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8f3b, 0x6, 0x7, 0x80000001}, {0x2, 0x85, 0x3e}, {0x5, 0x1f, 0x20, 0x91f9}, {0xaa1, 0x2, 0x3f, 0x1}, {0x8001, 0x3, 0x39, 0x9}, {0xfbff, 0x1, 0x7, 0x8001}, {0xe82d, 0x0, 0x3, 0x4}, {0x0, 0x1, 0xff, 0x401}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x781d}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xeb}}, {0x8, 0x7, 0x3f}}}]}}]}, 0x690}, 0x1, 0x0, 0x0, 0x80}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r12, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4880}, 0x8804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ec0)={'virt_wifi0\x00'}) pipe(&(0x7f0000001080)) (async) pipe(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f0000000f80)='syzkaller\x00', 0x5, 0x7e, &(0x7f0000000fc0)=""/126, 0x40f00, 0x64, '\x00', r11, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x29847, 0xffffffffffffffff, 0x2, &(0x7f00000010c0)=[r13, 0xffffffffffffffff], &(0x7f0000001100)=[{0x3, 0x1, 0x8, 0x5}, {0x3, 0x1, 0x9}], 0x10, 0x7de0}, 0x90) socket(0x28, 0x800, 0x9) (async) r15 = socket(0x28, 0x800, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001200)={'syztnl2\x00', r11, 0xff4f, 0x80, 0x4, 0x0, {{0x2a, 0x4, 0x0, 0x3, 0xa8, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0x9e, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x7a, 0x3, 0x4, [{@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010101, 0x4}, {@loopback}, {@private=0xa010100, 0x7fffffff}, {@empty, 0x7}, {@local, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @timestamp_prespec={0x44, 0x3c, 0xe9, 0x3, 0x1, [{@empty, 0x7}, {@loopback, 0x81}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@empty, 0x1ff}]}, @ssrr={0x89, 0x13, 0x8c, [@multicast1, @multicast1, @local, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001200)={'syztnl2\x00', r11, 0xff4f, 0x80, 0x4, 0x0, {{0x2a, 0x4, 0x0, 0x3, 0xa8, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0x9e, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x7a, 0x3, 0x4, [{@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010101, 0x4}, {@loopback}, {@private=0xa010100, 0x7fffffff}, {@empty, 0x7}, {@local, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @timestamp_prespec={0x44, 0x3c, 0xe9, 0x3, 0x1, [{@empty, 0x7}, {@loopback, 0x81}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@empty, 0x1ff}]}, @ssrr={0x89, 0x13, 0x8c, [@multicast1, @multicast1, @local, @private=0xa010100]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000001340)={'wlan1\x00'}) pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r16, 0x89f2, &(0x7f0000001440)={'ip_vti0\x00', &(0x7f00000013c0)={'gre0\x00', r6, 0x8001, 0x40, 0x1ff, 0x10001, {{0x14, 0x4, 0x2, 0x8, 0x50, 0x65, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, {[@timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x5, [{@loopback, 0x2}]}, @timestamp={0x44, 0x10, 0x9a, 0x0, 0x7, [0x5, 0xfa5, 0x36]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x29, [@broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x51, [@private=0xa010101]}]}}}}}) socket$netlink(0x10, 0x3, 0xe) (async) r17 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r15, 0x89f4, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000001480)={@remote, 0x1, 0x0, 0x30, 0x0, [{@dev}, {@dev}, {@broadcast}]}}) sendmsg$L2TP_CMD_SESSION_DELETE(r17, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) [ 84.293441][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.308485][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.343025][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.381561][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.391550][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.402173][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.412123][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.424222][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.436522][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.454204][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.489056][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.519069][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.559028][ T5207] ================================================================== [ 84.567124][ T5207] BUG: KASAN: slab-use-after-free in __sco_sock_close+0x2bc/0x690 [ 84.574977][ T5207] Write of size 4 at addr ffff88807c9f2010 by task syz-executor.4/5207 [ 84.583226][ T5207] [ 84.585551][ T5207] CPU: 0 PID: 5207 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-01502-gf7dd48ea76be #0 [ 84.595880][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 84.605918][ T5207] Call Trace: [ 84.609185][ T5207] [ 84.612113][ T5207] dump_stack_lvl+0xd9/0x1b0 [ 84.616712][ T5207] print_report+0xc4/0x620 [ 84.621119][ T5207] ? __virt_addr_valid+0x5e/0x2d0 [ 84.626132][ T5207] ? __phys_addr+0xc6/0x140 [ 84.630628][ T5207] kasan_report+0xda/0x110 [ 84.635037][ T5207] ? __sco_sock_close+0x2bc/0x690 [ 84.640080][ T5207] ? __sco_sock_close+0x2bc/0x690 [ 84.645097][ T5207] ? __sock_release+0x260/0x260 [ 84.649938][ T5207] kasan_check_range+0xef/0x190 [ 84.654784][ T5207] __sco_sock_close+0x2bc/0x690 [ 84.659639][ T5207] sco_sock_release+0x6f/0x2c0 [ 84.664397][ T5207] __sock_release+0xae/0x260 [ 84.668987][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.668983][ T5207] sock_close+0x1c/0x20 [ 84.669011][ T5207] __fput+0x270/0xbb0 [ 84.678903][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.682927][ T5207] task_work_run+0x14d/0x240 [ 84.686881][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.697259][ T5207] ? task_work_cancel+0x30/0x30 [ 84.697285][ T5207] do_exit+0xa92/0x2ae0 [ 84.720625][ T5207] ? get_signal+0x935/0x2790 [ 84.725221][ T5207] ? mm_update_next_owner+0x840/0x840 [ 84.730584][ T5207] ? do_raw_spin_lock+0x12e/0x2b0 [ 84.735691][ T5207] ? spin_bug+0x1d0/0x1d0 [ 84.740014][ T5207] do_group_exit+0xd4/0x2a0 [ 84.744513][ T5207] get_signal+0x23be/0x2790 [ 84.749012][ T5207] ? vfs_fileattr_set+0xbf0/0xbf0 [ 84.754030][ T5207] ? exit_signals+0x960/0x960 [ 84.758801][ T5207] arch_do_signal_or_restart+0x90/0x7f0 [ 84.764351][ T5207] ? get_sigframe_size+0x20/0x20 [ 84.769301][ T5207] exit_to_user_mode_prepare+0x121/0x240 [ 84.774945][ T5207] syscall_exit_to_user_mode+0x1e/0x60 [ 84.780403][ T5207] do_syscall_64+0x4d/0x110 [ 84.784906][ T5207] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 84.790795][ T5207] RIP: 0033:0x7fe340c7cbe9 [ 84.795202][ T5207] Code: Unable to access opcode bytes at 0x7fe340c7cbbf. [ 84.802214][ T5207] RSP: 002b:00007fe341a1b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.810626][ T5207] RAX: ffffffffffffffed RBX: 00007fe340d9bf80 RCX: 00007fe340c7cbe9 [ 84.818587][ T5207] RDX: 0000000020000280 RSI: 0000000000008933 RDI: 0000000000000004 [ 84.826550][ T5207] RBP: 00007fe340cc847a R08: 0000000000000000 R09: 0000000000000000 [ 84.834512][ T5207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.842473][ T5207] R13: 000000000000000b R14: 00007fe340d9bf80 R15: 00007ffddd09a148 [ 84.850444][ T5207] [ 84.853454][ T5207] [ 84.855764][ T5207] Allocated by task 5207: [ 84.860074][ T5207] kasan_save_stack+0x33/0x50 [ 84.864752][ T5207] kasan_set_track+0x25/0x30 [ 84.869347][ T5207] __kasan_kmalloc+0xa2/0xb0 [ 84.873933][ T5207] hci_conn_add+0xb9/0x1610 [ 84.878443][ T5207] hci_conn_add_unset+0x6d/0xf0 [ 84.883311][ T5207] hci_connect_sco+0x3a0/0xf80 [ 84.888079][ T5207] sco_sock_connect+0x2c7/0xa80 [ 84.892941][ T5207] __sys_connect_file+0x15b/0x1a0 [ 84.897969][ T5207] __sys_connect+0x145/0x170 [ 84.902561][ T5207] __x64_sys_connect+0x72/0xb0 [ 84.907323][ T5207] do_syscall_64+0x40/0x110 [ 84.911840][ T5207] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 84.917726][ T5207] [ 84.920044][ T5207] Freed by task 50: [ 84.923839][ T5207] kasan_save_stack+0x33/0x50 [ 84.928513][ T5207] kasan_set_track+0x25/0x30 [ 84.933099][ T5207] kasan_save_free_info+0x2b/0x40 [ 84.938117][ T5207] ____kasan_slab_free+0x15b/0x1b0 [ 84.943238][ T5207] slab_free_freelist_hook+0x114/0x1e0 [ 84.948701][ T5207] __kmem_cache_free+0xc0/0x180 [ 84.953554][ T5207] device_release+0xa1/0x240 [ 84.958155][ T5207] kobject_put+0x1d0/0x440 [ 84.962567][ T5207] put_device+0x1f/0x30 [ 84.966717][ T5207] hci_conn_del_sysfs+0x151/0x180 [ 84.971740][ T5207] hci_conn_del+0x584/0xe10 [ 84.976243][ T5207] hci_abort_conn_sync+0x758/0xb50 [ 84.981349][ T5207] abort_conn_sync+0x187/0x390 [ 84.986118][ T5207] hci_cmd_sync_work+0x1a4/0x410 [ 84.991043][ T5207] process_one_work+0x886/0x15d0 [ 84.996065][ T5207] worker_thread+0x8b9/0x1290 [ 85.000735][ T5207] kthread+0x2c6/0x3a0 [ 85.004796][ T5207] ret_from_fork+0x45/0x80 [ 85.009208][ T5207] ret_from_fork_asm+0x11/0x20 [ 85.013968][ T5207] [ 85.016276][ T5207] The buggy address belongs to the object at ffff88807c9f2000 [ 85.016276][ T5207] which belongs to the cache kmalloc-4k of size 4096 [ 85.030326][ T5207] The buggy address is located 16 bytes inside of [ 85.030326][ T5207] freed 4096-byte region [ffff88807c9f2000, ffff88807c9f3000) [ 85.044377][ T5207] [ 85.046693][ T5207] The buggy address belongs to the physical page: [ 85.053090][ T5207] page:ffffea0001f27c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c9f0 [ 85.063231][ T5207] head:ffffea0001f27c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.072239][ T5207] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 85.080206][ T5207] page_type: 0xffffffff() [ 85.084545][ T5207] raw: 00fff00000000840 ffff888013042140 dead000000000122 0000000000000000 [ 85.093121][ T5207] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 85.101688][ T5207] page dumped because: kasan: bad access detected [ 85.108080][ T5207] page_owner tracks the page as allocated [ 85.113779][ T5207] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5207, tgid 5206 (syz-executor.4), ts 84445588130, free_ts 84363674057 [ 85.136697][ T5207] post_alloc_hook+0x2d0/0x350 [ 85.141469][ T5207] get_page_from_freelist+0xa28/0x3730 [ 85.146915][ T5207] __alloc_pages+0x22e/0x2420 [ 85.151590][ T5207] alloc_pages_mpol+0x258/0x5f0 [ 85.156437][ T5207] new_slab+0x283/0x3c0 [ 85.160587][ T5207] ___slab_alloc+0x979/0x1500 [ 85.165259][ T5207] __slab_alloc.constprop.0+0x56/0xa0 [ 85.170640][ T5207] __kmem_cache_alloc_node+0x131/0x310 [ 85.176107][ T5207] kmalloc_trace+0x25/0x60 [ 85.180868][ T5207] hci_conn_add+0xb9/0x1610 [ 85.185368][ T5207] hci_conn_add_unset+0x6d/0xf0 [ 85.190219][ T5207] hci_connect_acl+0x435/0x700 [ 85.194996][ T5207] hci_connect_sco+0x4f/0xf80 [ 85.199711][ T5207] sco_sock_connect+0x2c7/0xa80 [ 85.204572][ T5207] __sys_connect_file+0x15b/0x1a0 [ 85.209599][ T5207] __sys_connect+0x145/0x170 [ 85.214188][ T5207] page last free stack trace: [ 85.218849][ T5207] free_unref_page_prepare+0x53c/0xb80 [ 85.224328][ T5207] free_unref_page+0x33/0x3b0 [ 85.229015][ T5207] qlist_free_all+0x6a/0x170 [ 85.233611][ T5207] kasan_quarantine_reduce+0x18e/0x1d0 [ 85.239062][ T5207] __kasan_slab_alloc+0x65/0x90 [ 85.243900][ T5207] kmem_cache_alloc+0x15d/0x2f0 [ 85.248753][ T5207] getname_flags.part.0+0x50/0x4e0 [ 85.253868][ T5207] getname_flags+0x9c/0xf0 [ 85.258322][ T5207] __x64_sys_symlinkat+0x7b/0xc0 [ 85.263260][ T5207] do_syscall_64+0x40/0x110 [ 85.267761][ T5207] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 85.273651][ T5207] [ 85.275960][ T5207] Memory state around the buggy address: [ 85.281577][ T5207] ffff88807c9f1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.289637][ T5207] ffff88807c9f1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.297685][ T5207] >ffff88807c9f2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.305730][ T5207] ^ [ 85.310307][ T5207] ffff88807c9f2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.318356][ T5207] ffff88807c9f2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.326406][ T5207] ================================================================== [ 85.341632][ T5207] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.348854][ T5207] CPU: 0 PID: 5207 Comm: syz-executor.4 Not tainted 6.7.0-rc5-syzkaller-01502-gf7dd48ea76be #0 [ 85.359181][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 85.369242][ T5207] Call Trace: [ 85.372517][ T5207] [ 85.375452][ T5207] dump_stack_lvl+0xd9/0x1b0 [ 85.380050][ T5207] panic+0x6dc/0x790 [ 85.383944][ T5207] ? mark_held_locks+0x9f/0xe0 [ 85.388902][ T5207] ? panic_smp_self_stop+0xa0/0xa0 [ 85.394021][ T5207] ? irqentry_exit+0x3b/0x80 [ 85.398618][ T5207] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.403829][ T5207] ? check_panic_on_warn+0x1f/0xb0 [ 85.408950][ T5207] check_panic_on_warn+0xab/0xb0 [ 85.413895][ T5207] end_report+0x108/0x150 [ 85.418219][ T5207] kasan_report+0xea/0x110 [ 85.422629][ T5207] ? __sco_sock_close+0x2bc/0x690 [ 85.427656][ T5207] ? __sco_sock_close+0x2bc/0x690 [ 85.432684][ T5207] ? __sock_release+0x260/0x260 [ 85.437532][ T5207] kasan_check_range+0xef/0x190 [ 85.442379][ T5207] __sco_sock_close+0x2bc/0x690 [ 85.447232][ T5207] sco_sock_release+0x6f/0x2c0 [ 85.452002][ T5207] __sock_release+0xae/0x260 [ 85.456590][ T5207] sock_close+0x1c/0x20 [ 85.460748][ T5207] __fput+0x270/0xbb0 [ 85.464733][ T5207] task_work_run+0x14d/0x240 [ 85.469319][ T5207] ? task_work_cancel+0x30/0x30 [ 85.474177][ T5207] do_exit+0xa92/0x2ae0 [ 85.478345][ T5207] ? get_signal+0x935/0x2790 [ 85.482953][ T5207] ? mm_update_next_owner+0x840/0x840 [ 85.488408][ T5207] ? do_raw_spin_lock+0x12e/0x2b0 [ 85.493431][ T5207] ? spin_bug+0x1d0/0x1d0 [ 85.497762][ T5207] do_group_exit+0xd4/0x2a0 [ 85.502270][ T5207] get_signal+0x23be/0x2790 [ 85.506784][ T5207] ? vfs_fileattr_set+0xbf0/0xbf0 [ 85.511808][ T5207] ? exit_signals+0x960/0x960 [ 85.516485][ T5207] arch_do_signal_or_restart+0x90/0x7f0 [ 85.522050][ T5207] ? get_sigframe_size+0x20/0x20 [ 85.527001][ T5207] exit_to_user_mode_prepare+0x121/0x240 [ 85.532653][ T5207] syscall_exit_to_user_mode+0x1e/0x60 [ 85.538126][ T5207] do_syscall_64+0x4d/0x110 [ 85.542649][ T5207] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 85.548607][ T5207] RIP: 0033:0x7fe340c7cbe9 [ 85.553019][ T5207] Code: Unable to access opcode bytes at 0x7fe340c7cbbf. [ 85.560028][ T5207] RSP: 002b:00007fe341a1b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.568436][ T5207] RAX: ffffffffffffffed RBX: 00007fe340d9bf80 RCX: 00007fe340c7cbe9 [ 85.576487][ T5207] RDX: 0000000020000280 RSI: 0000000000008933 RDI: 0000000000000004 [ 85.584448][ T5207] RBP: 00007fe340cc847a R08: 0000000000000000 R09: 0000000000000000 [ 85.592426][ T5207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.600397][ T5207] R13: 000000000000000b R14: 00007fe340d9bf80 R15: 00007ffddd09a148 [ 85.608383][ T5207] [ 85.611611][ T5207] Kernel Offset: disabled [ 85.615923][ T5207] Rebooting in 86400 seconds..