last executing test programs: 1m15.728387268s ago: executing program 0 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000140)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) getpid() r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c290000000000"], 0x154}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r8 = socket$inet6(0xa, 0x6, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040), 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) r11 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x38}, 0x40048d5) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40000) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m4.198031599s ago: executing program 0 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000140)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) getpid() r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c290000000000"], 0x154}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r8 = socket$inet6(0xa, 0x6, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040), 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) r11 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x38}, 0x40048d5) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40000) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m3.291366331s ago: executing program 3 (id=2914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000140)={@any, 0x4, 0x7, 0x6, 0xf, 0x8a3a, "abb936a9702adaf680e4812fcfa5edfeeb297b74acc0f625dda869faaa98ce3a4feb253fb227f0401b2577d52bf0b34a118dd0661a18038d7d90f2f23eb311cb1eb39b4e7824f6e2bd769a01f6968e85e19d7e1937f0815c839e7f5213b1548bae9c255efadd8d75d09897b7ccc0ad23c3ac77d56b51643b7435ed098ab184d8"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="bb090b324ed211c1f83c9703f1103dee", 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 46.496032898s ago: executing program 0 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000140)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) getpid() r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c290000000000"], 0x154}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r8 = socket$inet6(0xa, 0x6, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040), 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) r11 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x38}, 0x40048d5) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40000) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 46.05980062s ago: executing program 3 (id=2914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000140)={@any, 0x4, 0x7, 0x6, 0xf, 0x8a3a, "abb936a9702adaf680e4812fcfa5edfeeb297b74acc0f625dda869faaa98ce3a4feb253fb227f0401b2577d52bf0b34a118dd0661a18038d7d90f2f23eb311cb1eb39b4e7824f6e2bd769a01f6968e85e19d7e1937f0815c839e7f5213b1548bae9c255efadd8d75d09897b7ccc0ad23c3ac77d56b51643b7435ed098ab184d8"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="bb090b324ed211c1f83c9703f1103dee", 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 35.051432361s ago: executing program 3 (id=2914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000140)={@any, 0x4, 0x7, 0x6, 0xf, 0x8a3a, "abb936a9702adaf680e4812fcfa5edfeeb297b74acc0f625dda869faaa98ce3a4feb253fb227f0401b2577d52bf0b34a118dd0661a18038d7d90f2f23eb311cb1eb39b4e7824f6e2bd769a01f6968e85e19d7e1937f0815c839e7f5213b1548bae9c255efadd8d75d09897b7ccc0ad23c3ac77d56b51643b7435ed098ab184d8"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="bb090b324ed211c1f83c9703f1103dee", 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 34.440188115s ago: executing program 0 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000140)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) getpid() r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c290000000000"], 0x154}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r8 = socket$inet6(0xa, 0x6, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040), 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) r11 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x38}, 0x40048d5) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40000) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 24.703327148s ago: executing program 3 (id=2914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000140)={@any, 0x4, 0x7, 0x6, 0xf, 0x8a3a, "abb936a9702adaf680e4812fcfa5edfeeb297b74acc0f625dda869faaa98ce3a4feb253fb227f0401b2577d52bf0b34a118dd0661a18038d7d90f2f23eb311cb1eb39b4e7824f6e2bd769a01f6968e85e19d7e1937f0815c839e7f5213b1548bae9c255efadd8d75d09897b7ccc0ad23c3ac77d56b51643b7435ed098ab184d8"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="bb090b324ed211c1f83c9703f1103dee", 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 21.762645362s ago: executing program 0 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000140)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) getpid() r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c290000000000"], 0x154}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r8 = socket$inet6(0xa, 0x6, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040), 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) r11 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x38}, 0x40048d5) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40000) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13.227365225s ago: executing program 3 (id=2914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000140)={@any, 0x4, 0x7, 0x6, 0xf, 0x8a3a, "abb936a9702adaf680e4812fcfa5edfeeb297b74acc0f625dda869faaa98ce3a4feb253fb227f0401b2577d52bf0b34a118dd0661a18038d7d90f2f23eb311cb1eb39b4e7824f6e2bd769a01f6968e85e19d7e1937f0815c839e7f5213b1548bae9c255efadd8d75d09897b7ccc0ad23c3ac77d56b51643b7435ed098ab184d8"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="bb090b324ed211c1f83c9703f1103dee", 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 11.637905253s ago: executing program 0 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000140)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) getpid() r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c290000000000"], 0x154}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r8 = socket$inet6(0xa, 0x6, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040), 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) r11 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x38}, 0x40048d5) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40000) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3.81246067s ago: executing program 1 (id=3358): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10001, 0x1, 0x1, 0x3, 0xc}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x2}, [@IFA_FLAGS={0x8, 0x8, 0x10}]}, 0x20}}, 0x0) r6 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private2, @in6}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000840)={0x348, 0x8, 0xa, 0x801, 0x0, 0x0, {}, [@nested={0x333, 0xf2, 0x0, 0x1, [@generic="499786c3e6300166a59b93125c7f02468e5c423de46fa16f288b5f401593520452eab8092bf2510f70a53bb92ccf485e203f7662a6e025907ff492d79534b576d1c00422752e9f3a56da08d60217f6796a95b5e2f2eb62dc09865f5a0725c236ee474c0148ceee9b60ada356b84b93f490fef3c114cd2539192eb0b05674f508733b6c4b0e68cb5b2ccc30fba320c0729e", @generic="75230e0ebb008081f3b9a015805e04704125bfec0b53929cb45b3806ca2b816b769facf9266acc1364a24d84a6b80a0809c3b5d0edcf37353a0b389d9d840f42aa96cb577c5f016c290f1438b5f13f46d6c4a8a9034ce2b28cad424a73399c5bfcd56424863d64beeb1548755163a627bd069d68d283d60392952c895a4ff31726b6fc01f5308e9603c061f78ce68a6094c8fd8e04d6105a86a1793c1f47f678b836c71ff1d711b7d56463d608efebe30b323b7a8fb4d62e7a10758bfd8bfec60f94fe124e58a0798fac4831840e05cd0812da38a5370a5185fee4fa19d05d06fdf1a6a8f78317b10a9aa116", @generic="1009b846131afa9aee8a06dc4f18c8b87201f8275e18aa31255f483006812c681a623d2efc75a87707f7c34559f73d1c78686edd7508958cb24e92838889c1624668d1cce0087de6ab53c69944b8fada20db9475ca21ef317609607560e25a0caa842137e540d33e467eba0789eed95a0bd6e3a0eeb0738f19afdf37f1d6ccc00361369c2c6a737289ba6987b491f98f8121af38d0a55100be2f4ffb67fecd2576abec8960b8e8f51f5db6083afe4dc8cac15744050b9fa1ef9042c00c10b367e94cabc7554c9139199695786383cafcc3546627880f13b4b9ac23a2be23834ee4f711fba4ade26bfdf891f3d68ec74be93caa8202", @typed={0x8, 0x11e, 0x0, 0x0, @u32}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x1ff}, @typed={0x8, 0xaa, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x59, 0x0, 0x0, @pid=r4}, @nested={0x1c, 0x57, 0x0, 0x1, [@nested={0x4, 0x117}, @typed={0x8, 0x5e, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x130}, @typed={0x8, 0x48, 0x0, 0x0, @uid=r6}]}, @nested={0x4, 0xb5}, @generic="1f4d7bca05679db4cb32787a3f2f1c348006963a8f86289bd2606968c8e50022942f2e278989a31b920f6221b32a0e786346c1aae1a821bcd41fc124a5d453db238770c20d0f3460edac698edf6e7375d2cb2c101277cbd5c18dbbc1565c7606d4ed2484a16dbfe873d2f73b1a3ade47bfd7eb9870701d1861"]}]}, 0x348}}, 0x0) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000005c0)="f92c6265", 0x4}], 0x1}, 0x24040045) 3.634392154s ago: executing program 2 (id=3361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5915ceb6b9", 0x5}], 0x1}, 0x20000011) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x23c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x70}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}]}, 0x38}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@loopback, @rand_addr=0x64010100, 0xff000000, 0x0, 'rose0\x00', 'vxcan1\x00', {}, {0xff}, 0x82, 0x0, 0x19}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@multicast1, @loopback, 0xffffff00, 0xffffff00, 'gre0\x00', 'team_slave_1\x00', {0xff}}, 0x287, 0x70, 0x180, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x0, {0x2000}}}, @common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'vlan0\x00', {}, 0x0, 0x3}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xff, 0x6, 0x5, 0x0, 0x0, "5058ab5c2ac2a8cf16bfaa5313d1bd11ab046ce872cac869bf4cc8360467a44dc9f51ef9cb3bd9fc8b74e8876b24b5e27f10934b02be8fb15d62f0f7b920e9a2"}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 3.523805688s ago: executing program 1 (id=3363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x69}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc041}, 0x8010) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x44, r3, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000884) 3.460150795s ago: executing program 1 (id=3364): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x2007, @loopback}, 0x1c) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000dd4f5a91000000009a376fbe42614a729803f9d97947c9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) 3.32228002s ago: executing program 2 (id=3365): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r5, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'sit0\x00'}) ioctl(r5, 0x9, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r5) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000", @ANYBLOB], 0x90}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x4010, 0x4) 2.981271133s ago: executing program 2 (id=3366): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, 0x0, &(0x7f00000004c0)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x0, 0x84) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x7}, 0x8) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x80000, 0x9, 0x300, 0x0, 0x55}, 0x9c) 2.450911572s ago: executing program 1 (id=3367): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x50) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89e0, 0x1000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x4, 0x80000001, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x1, 0x80000001, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000280)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x80001, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009"], 0x54}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaabaad13a38a186378cd6bb0a00250000200000000000119078000000000000000000004e20000c900900000000"], 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaa99c6aabbbbbbbbbbea10e8df87fdf89c1190780000000000000000e104c91c0c78ac30040000004e200008907800000000000000"], 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000c00)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e22, 0x2, @mcast2, 0x9}}]}, 0x210) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000003b0007010000000000000000037c0000040000000c000180"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0x401, 0x1c, &(0x7f0000000540)=""/28, 0x41100, 0x9a, '\x00', r4, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x10, 0x0, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[r0, r0, r0, 0xffffffffffffffff, r0, r0], &(0x7f00000007c0)=[{0x3, 0x5, 0xe, 0x5}, {0x3, 0x2, 0xc}, {0x4, 0x1, 0x1, 0xd}, {0x4, 0x5, 0x8, 0x7}, {0x3, 0x2, 0x2, 0x4}, {0x4, 0x4, 0x5, 0x1}, {0x0, 0x2, 0x9, 0x3}], 0x10, 0x2, @void, @value}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000580)=0x80, 0x2) 2.232044455s ago: executing program 4 (id=3369): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x86}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b53b8db8c768c50cc9000a40348e", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00"], 0x34}, 0x1, 0x0, 0x600}, 0x0) 2.148650701s ago: executing program 1 (id=3370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x85, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x3930) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100001e001f120000000000000000000000000000000000000000000000000000000010009d"], 0x58}}, 0x0) 2.101673103s ago: executing program 4 (id=3371): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x7}, {0x7, 0x800, 0x2000000000000, 0x13fffffffffffd}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1}}, 0xe8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getstats={0x1c, 0x5e, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4000) 2.003338946s ago: executing program 2 (id=3372): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000010000000850000002a0000ff95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000500)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(0x3) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1.735869796s ago: executing program 4 (id=3373): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x8, 0x1, {{0x5, 0x4, 0x3, 0x2d, 0x14, 0x66, 0x0, 0x64, 0x29, 0x0, @remote, @local}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000000100), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480042003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x8000) 1.706486825s ago: executing program 2 (id=3374): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xa0}}, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="4eaa00000000800071106000000000009500020000000000741a004be44406b7c7d96d2484c76ee597d28cadc95608fea0dc4be47524d8ffce6ea9f93765c35dd6cefe501dbac528544dc46ec873528c62f92cf29b3aebadddbbbf9870f0acb51fc0a13bc4389431a96db557810fc2407fa22cabf677637ca7e9eed3189fa6478e666b14f7081fc0bab5c1e011d06d855836f2ac5c15a6054bd232c3e32fa6c8fc259d6116d6321ea7b545c317bef13fbd1c4e43bb49fa98b3b2e8baaeab5b10f13ce846d175a3"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x9}, 0x8, 0x70, 0x9, 0xc, 0x1c, 'syz0\x00', "5d9b2ea705fd2083676bb16ce0eaf5ae89d992e18c48b74f8a0d4ec3371cc167", "f535efffacee715a2dc59b77f98da800", [{0x5, 0x3, {0x1, 0x1}}, {0xd3, 0xe, {0x0, 0x800}}, {0x4, 0x0, {0x0, 0x3}}, {0x0, 0xfff2, {0x2, 0x2}}, {0x8, 0x4, {0x0, 0x100}}, {0x8, 0x800, {0x0, 0xf}}, {0x8, 0x5, {0x0, 0x50000000}}, {0x3, 0xfffc, {0x0, 0x6}}, {0xb, 0xffce, {0x0, 0x81}}, {0x0, 0x8, {0x2}}, {0x9, 0x8, {0x2, 0x3}}, {0x3, 0x3, {0x2, 0x5aa}}, {0x4, 0xfef, {0x3, 0xf}}, {0x2869, 0x1ff, {0x0, 0x5}}, {0x9, 0x6, {0x3, 0xfffffffb}}, {0x4, 0x3, {0x0, 0x31f}}, {0x8, 0x9, {0x1, 0x8000}}, {0x4, 0x2, {0x2, 0xa}}, {0x2, 0xf2c, {0x1, 0xb}}, {0x8, 0x6, {0x2, 0x3}}, {0x1, 0x1, {0x2, 0x3c}}, {0x9, 0x8, {0x0, 0x2}}, {0x6, 0xe, {0x3, 0xd}}, {0x9, 0x7fff, {0x1, 0x1}}, {0x7, 0x2c, {0x2, 0x7}}, {0x6, 0x5, {0x3, 0x8}}, {0xfff8, 0x8, {0x2, 0xfffffffb}}, {0x1, 0x6, {0x2, 0x7771}}, {0xb, 0xfff2, {0x1, 0xc}}, {0x2, 0x6, {0x0, 0xffff7fff}}, {0x0, 0x5, {0x0, 0x9}}, {0xf9fb, 0xfc19, {0x2, 0x4}}, {0xfc, 0x0, {0x0, 0x81}}, {0x6ae4, 0x2, {0x3, 0x9}}, {0x1, 0x6, {0x1, 0x3ff}}, {0x9, 0x1, {0x3, 0x5}}, {0x3, 0x5, {0x1, 0x8}}, {0x3, 0x8, {0x2, 0x8}}, {0x8000, 0x1, {0x0, 0x4}}, {0x2, 0x5, {0x1, 0x95}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4048010}, 0x20004000) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) (async) write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a000000000000000000000000000000000001000000000000000000000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e23, 0x7f, @local, 0x3}, 0x1c) (async) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000180)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="187300000000000000000000010001008112800000008cbf8d629d07c700009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES16=r1, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="086443cdbdc9d90f41caf096f88a000a00", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r11) 1.592381396s ago: executing program 4 (id=3375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x69}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc041}, 0x8010) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x28, r3, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000884) 1.454105073s ago: executing program 4 (id=3376): socket$kcm(0x10, 0x2, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000002c0)={0x0, 0x2710}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6229}, [@IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf25730000000c00990002000000510000000500ee00260000000800ef0009000000"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20048150) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000040)=0xc, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000), 0x0) accept4(r6, 0x0, 0x0, 0x0) 1.443060592s ago: executing program 2 (id=3386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x80}, {0x2000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRES64=r4, @ANYBLOB="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", @ANYRES16=r0, @ANYRES32=r4], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffbffffe, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a8", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x36) 1.083717997s ago: executing program 1 (id=3377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x4, 0x21, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r2}, 0x38) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) r4 = socket$inet(0x2, 0x80001, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3, 0x4, 0x7]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@cpu={{0x28}, {0x8397}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b], 0x0, 0x0, 0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x0, 0x3}, {}, {}, {}, {0x6}]}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x10800, 0x0) write$tun(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="00006003aaaaaaaaaabb0180c200000e00118ef8b5beb5fa4fdffe042047085df953d0965124fbf7fc95114f130543fdaccec2340a205b4fc7fab4053cb1c34720449f118c0fd7ae8ca8e8fed850131c47a017ad5ddd8648d3da2eda45be5cfb4123ef36153e23e3f2f7854c5d972156eb05a5b5529ce51d346c8e01c2d68843bd13e54ade07503fd223977d0c0eafa801e3e9db4c837807018a994fe21d62a20efaf73c6d350d64d2f51a3cc04298b4ec1e346fa68b5054226178b4dc4871f2be08d93f47544023408ecad59827e91bb6e208981036b7c4f74065d1ffdd3c3fac51f3c3361ec00492bc0700141939b42c5fae4bf8a3ef0cb37bcc3e1cf263b6a66dc327f7eb25460e57679b6e37beec70b805062d3ce65728cf6856824f74219636d5dc9614af281b37bc0d6a62b068cd7567199a7669521d50ede29beff8fa5d297be077d4d6ba99108112d9b02237461a20214b39b097752efaff1c600d61dcbf61766288139d5e516d0085bbb430eee274b57e4c2dfc110112c6ea47c08e73265c09c1a36756f22c5c30beba794f7a3d080a97341c42a6d433ce7c66b7c443ce6f228fa741ba91c2e62e031f4c7e44f9b05475ce6407dab0854413bb1ca4ea12d1449c30ede965eee6e4f0471a25e6ad9354df5ee023cf760557ae977947660353603c8a20a050357f54b38eec187020a31f3f43843daa8a93ea21e6472bc90eb58c3b9ca9ce1df7707b4db6ea8d50dc58c5621ef46ab8839cc4ca09a261e7c1503c320fbc0f17a8b623b23e8150d9adea223a84da4ebb3e639ef104915d1677ce43ea1c88a118e8a31ec948450f0c05dd2030716c413894874d6ebc2bbf6665f4dc04b66746356824ff84b83f43be927d55c11783627c5c568d488d18ae84bf79c5da7a442992235125cc2e456c5d355b662a1cf32e51a63298e1810299941a4e941a6ee3a8ea8fd20c1e8f82fe655b7cccff16ef1495bf9d2bec601a8ea23330c69299b257ff60fce2db341207a98fc824e1824e2156f4f0a8bb798ad839cbf7715b309db34766f311655e3f7b2b4fdfa0e3b592212ae98562721631fb13675c11544ca85633c5c6532cb99a3349fe7d5c188cf0cb3095ab4dc3bfa9a895291b9f19a34235f8825835ecb3245844f0596072e9d3b34f7c79b600ef7d2da2cc702140fa896c0bc35c78b72ab8bdbdc4c3c6e7d928f397e526c0112cffeb7dcf2dd50b56b77a98a02ff6842da89b776c6b2118ea0d8f169ebea64ff9d9d579946f136970409f9a396ac0eff8f5e623ebd9133c44cc627a7f05ec14c428a396d816d23b00d78c3fd2b90c4804b948b4b43c9acdca0658d6e58eef6c2cf15fbec6d1de5512b34e6602c023e6a190097117e9ae12bf95c3581126e72a9bc3852e05998ac848d9404db224ae6234c8041541d58fa6777244877b3570781d2383499a726e48256f23e410178981bf9475f4c3bcd2e0b9538307b809da0f485e84461b431a8d057655ba167a9c95dee48f55287dfbfdfac712abfeda07cc65fb8a5c985095eb938924e9cfd12d45ed08ee4d45ecaf65c43833f69ead7d5eff5581cb7350ff6290a845ea08617377fbba4fc8d6948ff4ffc070fe3564faff278e905cc8a89d31d5f92538ccc270e5d049b38264b7a99844bffcddfdd85bc481560b5ef12fc330c5e5e54a1d9dcf345ad434a874f84644a8411021c61f27c873c420ada890405034103bc1fbe412a8ac6faff23c1b93f6d87530abbc8f08b0ff4f14c8eadcc32856e927e6a937f3156f0820bb896cc3a7bc772be77f4a063065ce5c1f64d6f0fd8a205dd35a885300fb1b88dec6677185383904e3813c04ea9c4d37a9258a4f6b921052e3049ae40e224f07140f3f249ddb27cc4aaabe35151fb61d5a4d9ad82b9bad0e799f1040650ce026da3b38344b7db4b30d6f32434376e91b56aa5740fc0d1b6bf8bdf2da37f9339f8049cf688b535cd8db9656253220a34f78e375ae333635b9f3576a50ad237fd381b5291b87048949a1b182c26062fdeb80f385f7a421b0cabf3a7590857d3e14d022b8169c59b87dcb70deaffb34465203d549039cfc22dab151bca454710e3c8c19caa92b5ec426da7fa1330c8181e9446150850437780f6a157d7f01a6e67300a1fe1908f5b963a6ec954bb73d129ff9d15ca7c47e49b6fda08b930be9ad82115bfea3ba03e2f742624af57ff15bda4eb0a5bc843986a006a4a423a67aa5be4e92d49c0f015668640aebc580d2a87d0dae99086d761c747f6f592169de24cc5f30dc414f9ee0358aae0f885d898f2ac14caa8159baa198c425f9b303d8ecdedf127d37fa5090232302970122967e7abac3635c6e02a916ee5533eb0416aff978f5df73a8fa49e0b7cd5e37b6a8addb6bd14b14ae1029721972dec7b068514b316ca3eabcdc55a7686db8d38fdbff0a8720211ba6459ea3862ce455aab5830e2897653d035d6d210f154bbccbe3026a0435b7fb7e2484fdf39cf086035535044dfb0ae9c9c333560c4370420058b245652f642edeeedb038144bbcaa68b71bb13f118a04f058f6a7d1dc85406d00a5b2ba19b4fd8cb3fa3f22775f2a1efa14d1769439b95fa69315c96ad5523f68f6ea92b56fcf3f8283d129bfd003489f36307797140c4e4a204f4ca768a86383b44303520dacb6ffcb38f1202108479116ef028be2fb993be851a002ae350500f96036962e8ca0aa27427bee6a623729d9289fae7003895cff3c1ad8b490bbb340a4613ce0a0f5609c280c80ec44396ce8817a406969262c436e24bb6223e9983a7f689ad9ff8d8474e655b48f0cdc37a7f545789ad6f021d7a39dc5216754e05fbf29d459874381660787a66f8df4bb683202d503e00076e25ae755f50e90141b6f7d3f3ae0a798df39082d3f5bf3f6c82671e460187976ba67460f3b7ffecdd75905df5b59d72e040bc3ac11dc6150c9675f64ac7ae9df21923935a817422d8e5ae67ee47d30d09d446d915aefc0969900fa7445ff2ac5ccf29a8e7b43e4729ec35632135bf0e9b9fa5805d817434bb4c9f2ed9dbdeae673f16da078201df535f1e96e543684033c529bf24d05ef60f5d29d70671ea2073077f13836779cbf0ab4022035577550a4e621bcff4273087933b23541da9ef8b93708f516b4dd3c190d4c1255f5034fb895cdbffb9fa2b7763ba73c1a7ef89fb6a50fd5c6b864b3d3442b8b3f8af18190cd06cc8562d25477ef1d111ee92bd19ce2ed7b11ca18d2721556b42ff4f297a87988d3d0fb83a4c73229bbdaf8b6021f661495662d0be4af3a3893aed46263af1d358b69e6c82fa050df59bf9120a94ef5508f68c00c98010cc2cf1c9eb329ae5b6131a5ed7a92626e1b950b80a06631617b61c1606ae4fcfc073d6234dceb0de14e5738d40b0023dde4d04713b4e7918bc6dd564527e90e7ed3b7eb2a61d5259668bcca871a22c6ac962317b3dd271905bd61447c6ee64b98880d4f96a135d85a27c13b8f06c2ff724b263c7391959fe18d8a5562d6275b7c95bfe208da5a31ba573a0d5e45f41b2b893f1def30fb9158a86bf4f0a0ac27bcc1c5c8bb292fd232937a380de24dec72f2ab8ec8d7e0cdaba5bb5d411612f8e91c0dc20459b7f99963c9cf5b270163ec55b01d562145f5cd24fb07ca93ce243fcd03bb588d2ae8651a93a23264b3e9e4b2d36a9f063a173ce256e2bec727eeda3538d0f32286b0c6abc01d6d7b74ca03e1c6af1d15a58495b1564035f18601ef9d4675b3298faf498eaacdb557331b6ed06755ebab874243f079c727a1e25939ad403a1e41c8e35527e8b9b795e1506dd38022c4f983775edc10d40cb4a88dbd2b8a9048847a6b86a70851051307e7360ccdfc7a6c6e2872d893152001958655a46e822d6d4b9fe7f755a198be8ae14e5a237dccff4e5b9f5adf6a1b438be60489ed6591f26d4e3d4ae561e451a67eb52d38e46ac25997d36ac9e1c4ccecf1ee9327f304197cc6ef58950dd0599f56bb2e6dd850fd12ff029e8a8eac87400eb00ebba52095e9dbc38d109aaa8219f9cb6bd782b3e843dff83ae15c06e647f8156fe25e6c1097072e0977c9b5133f070beb54220cc4cf699e41bd8a264fed8a10b811cba1a4be1f1d799251d3eac8c82bab784f2bc538f5b3eef4d7d9a9f67d44027f3bb85f4aa487cf5a609f47524338935cd15ac780ce43d490b8b65fa6fe132ce01ee5eea7eed890720e4eaf27169942270b40bec5dbe6f86878cbfa0ff3ee737ef2c9556a5f66ca1177202025637b35fb724704fed766c54daac981cd09c506355def9214e4b45c2566744e1a287c27a19142b91b630bae9f61d0ca9d3f06b27ccf85909ab3cf94a658f897cc6f4d14dfab94a9a96e5479be07d3f7a50bec6b0076b2bb3ecd564c9bd8d490a26b87ef1c9ad61c3732842f82113b46a9d6cb912492bbe3ca76636272ff3e54d2bafab0febb264cee42acd966c8efd81c181309ad587bc4ce58dd680108b127a3d9efd0d567fce7aa8b4408716cf5920ef8953f56d0cc56adae105781274c8d83eb20176d0e31f2767796eea21927b7362c8861645003d178576a03e1fe242b19aadfe9dc0d248b633d902ed0b7ffd4a116b3dfb7ea24d05e1f6a91c62dcfff057ec455c96aae50a7ae4fe081391902796f10bb6009b40ff8440f4f7f0530bad22add45290a47731963b0d520221b2cdbc753f6c7fa25bd24921a140fa474d8a1d34bc4aee73bf3b90d9c52b9c65a9e2e1213ab96fd08d0499155ba1b56c66ee8f3661fe8cd660106ce2825a6b72c5076a6e57554ae9d436a648d79916672d1c55ef3f4758f55057b9de13d5447bc1b56c15e12b402c4a313cd9b41e737127f3ec73680e20e558eb3d0f757e6bd9ff12653d89b75f60dd6c37e1864931bef0f9bda547cc20ac90026a5e8f1a3981d8485994b1275c92ec8f994811eb8672c56be3207dc837114c34b0699179e184e11b53a62f1a57db1e2aa80a72280a4a2c89cdcb22c1ee3af5dc601fe6f699fc7c66c4971438181b9e9052f6d9a4110806b55b1f27d8cbac134ce4c289ff83554d7a8e547cd540ee8ef51e20432d36ed1424365098af218a8fb991b9a728ccb9e84dc9046bac7783c96432fd7adc9e9e6800199480f1dee01f7b7a0669354e4d88368bdf9ab6dc86f7af5bb1a4d9c2af54688f2de87069767a8b676032cdb72211000cc1160c40b1fffc94b3287864cdf788a93d62dbe48ac6e0178475959cb3ec78b2b3246f7a4b9845c0a1d8330bb4e325cbe42e5365c123519579d9a75de6298d6577b890f7dfe83869a085be0d1fce03f705a39cdac160d0ba66de7d7a84f487ed13bb534ff35e31c186eaa205f3fe1fb950b385992655c7dee89188f7646a1c1221c190ceb4a5cfbd6698f96b62d5ba19c60ee51c3742060ac1e1fa368d7b687de1366cd909c399c28501a9e2c607e8288cf23ca889a5c2cf210d4fad3338258f744c16526e9070b03ad50904cca9403a0e6101565d8d444931058d6e2fc6fef1244a818d1ee0a3bb6ffe598959faaae45f312a5b53b78eea6903a7fa747c10ddcf996713c549c4ac08a02c1505ad2e35c90b057fffed8fd55adfc4dd0dafd8a9e3f7d2ab728f60f572252a0103a27bae13b1b045da5b052743fc43a5d1bc4e942239793c3af8c9996c13ef0f8b027f7da4bf10854837a2167c75c93aced43a18d831e3c824f39daa6f8551efa177e0fb5621db39a8de9c413705557c0405645c430812e577938ca96532c347e75d28c259ede13c5eb70f2e4d80d27b43aa2f4ecaee6b7709c7db4e1bac686dfcf85e89fbaa6d7e253e74"], 0x1016) r7 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 950.720092ms ago: executing program 3 (id=2914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000140)={@any, 0x4, 0x7, 0x6, 0xf, 0x8a3a, "abb936a9702adaf680e4812fcfa5edfeeb297b74acc0f625dda869faaa98ce3a4feb253fb227f0401b2577d52bf0b34a118dd0661a18038d7d90f2f23eb311cb1eb39b4e7824f6e2bd769a01f6968e85e19d7e1937f0815c839e7f5213b1548bae9c255efadd8d75d09897b7ccc0ad23c3ac77d56b51643b7435ed098ab184d8"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="bb090b324ed211c1f83c9703f1103dee", 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 0s ago: executing program 4 (id=3378): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@getlink={0x20, 0x12, 0x8, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x6a081}}, 0x20}}, 0x20048850) (async) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f0000000c00)="ee", 0x1}], 0x1, 0x1) (async) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) splice(r5, 0x0, r0, 0x0, 0x8000, 0x0) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, 0x0, 0x0) (async) listen(r6, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) connect$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x2}}, 0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@getroute={0x14, 0x1a, 0x22, 0x70bd25, 0x6, {}, [""]}, 0x14}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x3, 0x40000004, 0x0, 0xffffffffffffffff, 0x47, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRESOCT=r1, @ANYBLOB], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): e 2 family 0 port 6081 - 0 [ 381.818486][T14676] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.827363][T14676] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.834864][T14676] bridge_slave_0: entered allmulticast mode [ 381.842094][T14676] bridge_slave_0: entered promiscuous mode [ 381.850316][T14676] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.857698][T14676] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.865050][T14676] bridge_slave_1: entered allmulticast mode [ 381.872189][T14676] bridge_slave_1: entered promiscuous mode [ 381.891871][T14660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.921101][T14676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.932392][T14660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.973147][T14676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.071302][T14660] team0: Port device team_slave_0 added [ 382.083346][T14676] team0: Port device team_slave_0 added [ 382.100699][T14660] team0: Port device team_slave_1 added [ 382.109313][T14676] team0: Port device team_slave_1 added [ 382.117202][ T11] bridge_slave_1: left allmulticast mode [ 382.122988][ T11] bridge_slave_1: left promiscuous mode [ 382.129269][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.138725][ T11] bridge_slave_0: left allmulticast mode [ 382.144583][ T11] bridge_slave_0: left promiscuous mode [ 382.150916][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.245955][ T54] Bluetooth: hci1: command tx timeout [ 382.588401][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.624074][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.645615][ T54] Bluetooth: hci3: command tx timeout [ 382.678650][ T11] bond0 (unregistering): Released all slaves [ 382.881314][T14660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.897535][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.932542][T14660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.945784][T14676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.953430][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.985897][T14676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.001275][T14676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.008644][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.034953][T14676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.064895][T14660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.073137][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.144780][T14660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.217404][ T11] hsr_slave_0: left promiscuous mode [ 383.223550][ T11] hsr_slave_1: left promiscuous mode [ 383.230651][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.238218][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.246572][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.254094][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.280717][ T11] veth1_macvtap: left promiscuous mode [ 383.286677][ T11] veth0_macvtap: left promiscuous mode [ 383.292305][ T11] veth1_vlan: left promiscuous mode [ 383.297767][ T11] veth0_vlan: left promiscuous mode [ 383.953878][T14748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2938'. [ 383.979769][ T11] team0 (unregistering): Port device team_slave_1 removed [ 384.036445][ T11] team0 (unregistering): Port device team_slave_0 removed [ 384.330903][ T54] Bluetooth: hci1: command tx timeout [ 384.582057][T14748] ip6gre0: left promiscuous mode [ 384.595085][T14748] ip6gre0: left allmulticast mode [ 384.605725][T14748] syz_tun: left promiscuous mode [ 384.645161][T14748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.728509][T14660] hsr_slave_0: entered promiscuous mode [ 384.729549][ T54] Bluetooth: hci3: command tx timeout [ 384.755280][T14660] hsr_slave_1: entered promiscuous mode [ 384.780688][T14660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.790117][T14660] Cannot create hsr debugfs directory [ 384.808495][T14676] hsr_slave_0: entered promiscuous mode [ 384.822102][T14676] hsr_slave_1: entered promiscuous mode [ 384.829635][T14676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.839299][T14676] Cannot create hsr debugfs directory [ 385.443601][T14774] FAULT_INJECTION: forcing a failure. [ 385.443601][T14774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.460097][T14774] CPU: 0 UID: 0 PID: 14774 Comm: syz.1.2948 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 385.471016][T14774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.481098][T14774] Call Trace: [ 385.484394][T14774] [ 385.487339][T14774] dump_stack_lvl+0x241/0x360 [ 385.492047][T14774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.497265][T14774] ? __pfx__printk+0x10/0x10 [ 385.501879][T14774] ? __pfx_lock_release+0x10/0x10 [ 385.506946][T14774] should_fail_ex+0x3b0/0x4e0 [ 385.511649][T14774] _copy_from_iter+0x1e9/0x1c20 [ 385.516549][T14774] ? skb_set_owner_w+0x246/0x380 [ 385.521541][T14774] ? __pfx__copy_from_iter+0x10/0x10 [ 385.526843][T14774] ? __pfx__copy_from_iter+0x10/0x10 [ 385.532146][T14774] ? page_copy_sane+0x154/0x260 [ 385.537014][T14774] copy_page_from_iter+0x7a/0x100 [ 385.542060][T14774] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 385.547895][T14774] tun_get_user+0x193c/0x48a0 [ 385.552605][T14774] ? __lock_acquire+0x1397/0x2100 [ 385.557649][T14774] ? __pfx_tun_get_user+0x10/0x10 [ 385.562703][T14774] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 385.568197][T14774] ? tun_get+0x1e/0x2f0 [ 385.572373][T14774] ? __pfx_lock_release+0x10/0x10 [ 385.577457][T14774] ? tun_get+0x1e/0x2f0 [ 385.581634][T14774] ? tun_get+0x27d/0x2f0 [ 385.585901][T14774] tun_chr_write_iter+0x10d/0x1f0 [ 385.590959][T14774] vfs_write+0xaeb/0xd30 [ 385.595234][T14774] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 385.600801][T14774] ? __pfx_vfs_write+0x10/0x10 [ 385.605580][T14774] ? __fget_files+0x2a/0x410 [ 385.610278][T14774] ? __fget_files+0x2a/0x410 [ 385.614896][T14774] ksys_write+0x18f/0x2b0 [ 385.619240][T14774] ? __pfx_ksys_write+0x10/0x10 [ 385.624104][T14774] ? do_syscall_64+0x100/0x230 [ 385.628905][T14774] ? do_syscall_64+0xb6/0x230 [ 385.633601][T14774] do_syscall_64+0xf3/0x230 [ 385.638126][T14774] ? clear_bhb_loop+0x35/0x90 [ 385.642826][T14774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.648757][T14774] RIP: 0033:0x7f05901847df [ 385.653188][T14774] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 385.672814][T14774] RSP: 002b:00007f0590fe6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 385.681248][T14774] RAX: ffffffffffffffda RBX: 00007f0590375fa0 RCX: 00007f05901847df [ 385.689325][T14774] RDX: 000000000000fdef RSI: 0000000020000640 RDI: 00000000000000c8 [ 385.697316][T14774] RBP: 00007f0590fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 385.705305][T14774] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 385.713294][T14774] R13: 0000000000000000 R14: 00007f0590375fa0 R15: 00007ffd96918108 [ 385.721305][T14774] [ 385.895847][T14781] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2951'. [ 385.905070][T14781] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2951'. [ 385.914546][T14781] netlink: 'syz.1.2951': attribute type 6 has an invalid length. [ 385.938276][T14781] netlink: 'syz.1.2951': attribute type 5 has an invalid length. [ 385.946318][T14781] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2951'. [ 386.188432][ T11] team0: left allmulticast mode [ 386.193524][ T11] bridge0: port 2(team0) entered disabled state [ 386.202525][ T11] vlan2: left allmulticast mode [ 386.208256][ T11] : left allmulticast mode [ 386.213079][ T11] vlan2: left promiscuous mode [ 386.218010][ T11] : left promiscuous mode [ 386.222756][ T11] bridge0: port 1(vlan2) entered disabled state [ 386.405174][ T54] Bluetooth: hci1: command tx timeout [ 386.475736][ T11] dvmrp0 (unregistering): left allmulticast mode [ 386.815994][ T54] Bluetooth: hci3: command tx timeout [ 387.158435][ T11]  (unregistering): Released all slaves [ 387.250888][ T11] fþ²¹¥‰: left promiscuous mode [ 387.306361][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'. [ 387.415660][ T11] tipc: Disabling bearer [ 387.421727][ T11] tipc: Left network mode [ 387.726825][T14676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.772460][T14676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.792974][T14676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.818115][T14676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.995474][T14660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.033399][T14660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.067889][ T11] hsr_slave_0: left promiscuous mode [ 388.076629][ T11] hsr_slave_1: left promiscuous mode [ 388.114331][ T11] pimreg (unregistering): left allmulticast mode [ 388.490102][ T54] Bluetooth: hci1: command tx timeout [ 388.884950][ T54] Bluetooth: hci3: command tx timeout [ 389.061303][T14660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.131171][T14660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.307927][T14676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.318827][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'. [ 389.406830][T14676] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.480960][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.488241][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.517421][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.524546][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.629951][T14660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.670593][T14660] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.711341][ T11] IPVS: stop unused estimator thread 0... [ 389.722410][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.729629][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.806437][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 389.846423][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.853668][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.058759][T14841] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2971'. [ 390.115242][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 390.363959][T14676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.383794][T14660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.522422][T14676] veth0_vlan: entered promiscuous mode [ 390.525694][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 390.554651][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 390.576920][T14660] veth0_vlan: entered promiscuous mode [ 390.627324][T14660] veth1_vlan: entered promiscuous mode [ 390.647506][T14676] veth1_vlan: entered promiscuous mode [ 390.720080][T14676] veth0_macvtap: entered promiscuous mode [ 390.744100][T14676] veth1_macvtap: entered promiscuous mode [ 390.823574][T14660] veth0_macvtap: entered promiscuous mode [ 390.857202][T14676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.874289][T14660] veth1_macvtap: entered promiscuous mode [ 390.944234][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.964828][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.988376][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.015056][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.036297][T14676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.091428][T14676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.103146][T14676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.118377][T14676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.138039][T14676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.169342][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.188700][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.210117][T14660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.210357][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 391.249789][T14890] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2982'. [ 391.261486][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 391.274154][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.294917][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.308996][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.322420][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.337453][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.348307][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 391.350285][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.374664][T14660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.377322][T14886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2981'. [ 391.412756][T14886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.436373][T14660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.446952][T14660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.455924][T14660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.465095][T14660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.777452][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2987'. [ 391.800870][T14903] xt_policy: neither incoming nor outgoing policy selected [ 391.901653][T14901] tap0: tun_chr_ioctl cmd 1074025673 [ 391.911224][T14903] tap0: tun_chr_ioctl cmd 1074025677 [ 391.917540][T14903] tap0: linktype set to 805 [ 392.118651][T14919] FAULT_INJECTION: forcing a failure. [ 392.118651][T14919] name failslab, interval 1, probability 0, space 0, times 0 [ 392.131410][T14919] CPU: 0 UID: 0 PID: 14919 Comm: syz.1.2992 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 392.142561][T14919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 392.152643][T14919] Call Trace: [ 392.155935][T14919] [ 392.158880][T14919] dump_stack_lvl+0x241/0x360 [ 392.163592][T14919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.168819][T14919] ? __pfx__printk+0x10/0x10 [ 392.173432][T14919] ? __lock_acquire+0x1397/0x2100 [ 392.178485][T14919] should_fail_ex+0x3b0/0x4e0 [ 392.183192][T14919] should_failslab+0xac/0x100 [ 392.187889][T14919] ? skb_clone+0x20c/0x390 [ 392.192341][T14919] kmem_cache_alloc_noprof+0x70/0x380 [ 392.197740][T14919] skb_clone+0x20c/0x390 [ 392.202006][T14919] ip_rcv_core+0x142/0xd10 [ 392.206444][T14919] ? rcu_read_lock_bh_held+0x7e/0x120 [ 392.211835][T14919] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 392.217666][T14919] ip_rcv+0x4f/0x90 [ 392.221502][T14919] ? __pfx_ip_rcv+0x10/0x10 [ 392.226027][T14919] __netif_receive_skb_core+0x3be4/0x4690 [ 392.231788][T14919] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 392.237879][T14919] ? mark_lock+0x9a/0x360 [ 392.242250][T14919] __netif_receive_skb+0x12f/0x650 [ 392.247388][T14919] ? __pfx_lock_acquire+0x10/0x10 [ 392.252445][T14919] ? __pfx___netif_receive_skb+0x10/0x10 [ 392.258104][T14919] ? tun_rx_batched+0x160/0x8f0 [ 392.262975][T14919] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 392.268712][T14919] ? netif_receive_skb+0x131/0x890 [ 392.273865][T14919] ? netif_receive_skb+0x131/0x890 [ 392.279026][T14919] netif_receive_skb+0x1e8/0x890 [ 392.283993][T14919] ? tun_rx_batched+0x160/0x8f0 [ 392.288865][T14919] ? __pfx_netif_receive_skb+0x10/0x10 [ 392.294381][T14919] ? tun_rx_batched+0x160/0x8f0 [ 392.299255][T14919] tun_rx_batched+0x1b7/0x8f0 [ 392.303959][T14919] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.310308][T14919] ? __pfx_lock_acquire+0x10/0x10 [ 392.315356][T14919] ? __pfx_tun_rx_batched+0x10/0x10 [ 392.320603][T14919] tun_get_user+0x30cc/0x48a0 [ 392.325304][T14919] ? tun_get_user+0x2bba/0x48a0 [ 392.330192][T14919] ? __lock_acquire+0x1397/0x2100 [ 392.335243][T14919] ? __pfx_tun_get_user+0x10/0x10 [ 392.340309][T14919] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 392.345788][T14919] ? tun_get+0x1e/0x2f0 [ 392.349970][T14919] ? __pfx_lock_release+0x10/0x10 [ 392.355027][T14919] ? tun_get+0x1e/0x2f0 [ 392.359207][T14919] ? tun_get+0x27d/0x2f0 [ 392.363480][T14919] tun_chr_write_iter+0x10d/0x1f0 [ 392.368549][T14919] vfs_write+0xaeb/0xd30 [ 392.372821][T14919] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 392.378393][T14919] ? __pfx_vfs_write+0x10/0x10 [ 392.383180][T14919] ? __fget_files+0x2a/0x410 [ 392.387797][T14919] ? __fget_files+0x2a/0x410 [ 392.392414][T14919] ksys_write+0x18f/0x2b0 [ 392.396758][T14919] ? __pfx_ksys_write+0x10/0x10 [ 392.401624][T14919] ? do_syscall_64+0x100/0x230 [ 392.406407][T14919] ? do_syscall_64+0xb6/0x230 [ 392.411107][T14919] do_syscall_64+0xf3/0x230 [ 392.415636][T14919] ? clear_bhb_loop+0x35/0x90 [ 392.420340][T14919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.426259][T14919] RIP: 0033:0x7f05901847df [ 392.430862][T14919] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 392.450573][T14919] RSP: 002b:00007f0590fe6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 392.459003][T14919] RAX: ffffffffffffffda RBX: 00007f0590375fa0 RCX: 00007f05901847df [ 392.466987][T14919] RDX: 000000000000fdef RSI: 0000000020000640 RDI: 00000000000000c8 [ 392.474974][T14919] RBP: 00007f0590fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 392.482959][T14919] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 392.490943][T14919] R13: 0000000000000000 R14: 00007f0590375fa0 R15: 00007ffd96918108 [ 392.498956][T14919] [ 392.841652][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.892835][T14923] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 393.115619][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.438707][T14934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2995'. [ 393.487804][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 393.632791][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.673436][T14931] netlink: 'syz.2.2995': attribute type 66 has an invalid length. [ 393.822564][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.822709][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.841192][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.850061][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.863681][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.873463][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.882660][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.974007][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.981162][T14945] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 393.984185][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 394.031401][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2999'. [ 394.045339][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'. [ 394.060828][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 394.079596][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 394.105024][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 394.113532][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.175241][ T12] bridge_slave_1: left allmulticast mode [ 394.180961][ T12] bridge_slave_1: left promiscuous mode [ 394.189467][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.203825][ T12] bridge_slave_0: left allmulticast mode [ 394.210335][ T12] bridge_slave_0: left promiscuous mode [ 394.216232][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.402716][T14951] Cannot find del_set index 3 as target [ 394.871526][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.889056][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.900446][ T12] bond0 (unregistering): Released all slaves [ 394.930250][T14960] bpq0: entered allmulticast mode [ 395.180729][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3004'. [ 395.428877][T14937] chnl_net:caif_netlink_parms(): no params data found [ 395.659741][T14972] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 395.683696][T14973] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 395.714303][ T12] hsr_slave_0: left promiscuous mode [ 395.724984][ T12] hsr_slave_1: left promiscuous mode [ 395.737116][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.744600][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.789928][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.807053][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.852282][ T12] veth1_macvtap: left promiscuous mode [ 395.861624][ T12] veth0_macvtap: left promiscuous mode [ 395.872691][ T12] veth1_vlan: left promiscuous mode [ 395.885210][ T12] veth0_vlan: left promiscuous mode [ 395.928689][ T54] Bluetooth: hci1: command tx timeout [ 396.165737][ T54] Bluetooth: hci3: command tx timeout [ 396.501600][ T12] team0 (unregistering): Port device team_slave_1 removed [ 396.559883][ T12] team0 (unregistering): Port device team_slave_0 removed [ 397.083950][T14993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.098752][T15001] vlan0: entered promiscuous mode [ 397.103975][T15001] bond0: entered promiscuous mode [ 397.117369][T15001] bond0: left promiscuous mode [ 397.155786][T15003] __nla_validate_parse: 3 callbacks suppressed [ 397.155809][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3015'. [ 397.349773][T14937] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.358899][T14937] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.385262][T14937] bridge_slave_0: entered allmulticast mode [ 397.404508][T14937] bridge_slave_0: entered promiscuous mode [ 397.437839][T14937] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.456732][T14937] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.484981][T14937] bridge_slave_1: entered allmulticast mode [ 397.496184][T14937] bridge_slave_1: entered promiscuous mode [ 397.538210][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'. [ 397.625578][T14937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.639059][T14943] chnl_net:caif_netlink_parms(): no params data found [ 397.655588][T14937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.793457][T14937] team0: Port device team_slave_0 added [ 397.801976][T14937] team0: Port device team_slave_1 added [ 397.877977][T14937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.890556][T14937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.917510][T14937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.939513][T14937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.949309][T14937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.977749][T14937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.004821][ T54] Bluetooth: hci1: command tx timeout [ 398.011271][T14943] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.022266][T14943] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.032538][T14943] bridge_slave_0: entered allmulticast mode [ 398.043331][T14943] bridge_slave_0: entered promiscuous mode [ 398.147664][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.166511][T14943] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.173765][T14943] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.185772][T14943] bridge_slave_1: entered allmulticast mode [ 398.192659][T14943] bridge_slave_1: entered promiscuous mode [ 398.246443][ T54] Bluetooth: hci3: command tx timeout [ 398.253154][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.282173][T14937] hsr_slave_0: entered promiscuous mode [ 398.289601][T14937] hsr_slave_1: entered promiscuous mode [ 398.296144][T14937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.303765][T14937] Cannot create hsr debugfs directory [ 398.320347][T14943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.364461][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.381787][T14943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.444341][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.479598][T14943] team0: Port device team_slave_0 added [ 398.502507][T14943] team0: Port device team_slave_1 added [ 398.542833][T14943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.550028][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.576274][T14943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.598943][T14943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.606137][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.633065][T14943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.803575][T14943] hsr_slave_0: entered promiscuous mode [ 398.810384][T14943] hsr_slave_1: entered promiscuous mode [ 398.817118][T14943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.824918][T14943] Cannot create hsr debugfs directory [ 398.846248][ T12] bridge_slave_1: left allmulticast mode [ 398.851950][ T12] bridge_slave_1: left promiscuous mode [ 398.859265][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.868397][ T12] bridge_slave_0: left allmulticast mode [ 398.874138][ T12] bridge_slave_0: left promiscuous mode [ 398.880302][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.361072][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.373207][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.383223][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 399.395717][ T12] bond0 (unregistering): Released all slaves [ 399.411105][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 399.423581][T15053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3028'. [ 399.575637][T15053] ip6gre0: left promiscuous mode [ 399.580680][T15053] ip6gre0: left allmulticast mode [ 399.592949][T15053] syz_tun: left promiscuous mode [ 399.633066][T15053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.030933][ T12] hsr_slave_0: left promiscuous mode [ 400.067593][ T12] hsr_slave_1: left promiscuous mode [ 400.086762][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.095361][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.110636][ T54] Bluetooth: hci1: command tx timeout [ 400.110972][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.124020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.148101][ T12] veth1_macvtap: left promiscuous mode [ 400.153725][ T12] veth0_macvtap: left promiscuous mode [ 400.159667][ T12] veth1_vlan: left promiscuous mode [ 400.182656][ T12] veth0_vlan: left promiscuous mode [ 400.289076][T15061] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 400.301795][T15061] netlink: 'syz.2.3030': attribute type 3 has an invalid length. [ 400.320362][T15061] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3030'. [ 400.329741][T15061] NCSI netlink: No device for ifindex 0 [ 400.337500][ T54] Bluetooth: hci3: command tx timeout [ 400.919004][ T12] team0 (unregistering): Port device team_slave_1 removed [ 400.978394][ T12] team0 (unregistering): Port device team_slave_0 removed [ 401.814409][T14937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 401.839088][T14937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 401.913542][T14937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 401.964832][T14937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.144171][T14937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.165034][ T54] Bluetooth: hci1: command tx timeout [ 402.179932][T14937] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.208311][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.215502][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.258864][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.266177][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.354831][T14943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.368758][T14943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.391312][T14943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.405142][ T54] Bluetooth: hci3: command tx timeout [ 402.417360][T14943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.574990][T14943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.605696][T14943] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.620287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.627522][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.676056][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.683186][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.747973][T14937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.813178][T15107] tipc: Enabling of bearer rejected, already enabled [ 402.879338][T14937] veth0_vlan: entered promiscuous mode [ 402.891878][T14937] veth1_vlan: entered promiscuous mode [ 402.971606][T14937] veth0_macvtap: entered promiscuous mode [ 402.982432][T14937] veth1_macvtap: entered promiscuous mode [ 402.998757][T14937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.008697][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.019308][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.029317][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.039913][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.050934][T14937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.060915][T14937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.070140][T14937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.079239][T14937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.088456][T14937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.224022][T14943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.292291][T15119] xt_bpf: check failed: parse error [ 403.380985][T14943] veth0_vlan: entered promiscuous mode [ 403.470090][T14943] veth1_vlan: entered promiscuous mode [ 403.554582][T14943] veth0_macvtap: entered promiscuous mode [ 403.568021][T15127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3051'. [ 403.592126][T14943] veth1_macvtap: entered promiscuous mode [ 403.598595][T15127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3051'. [ 403.612853][T14943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.624015][T14943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.636212][T14943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.673553][T14943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.691305][T14943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.713098][T14943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.723921][T14943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.734580][T14943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.746094][T14943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.778471][T14943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.836840][T14943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.848096][T14943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.857525][T14943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.866880][T14943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.893477][T15138] vxlan1: entered promiscuous mode [ 403.903636][T15138] vxlan1: entered allmulticast mode [ 404.318514][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.893571][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.041205][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3058'. [ 405.608904][T15167] macsec1: entered allmulticast mode [ 405.616917][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.628662][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.637525][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.646999][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.657389][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 405.665008][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.718037][T15172] tipc: Enabling of bearer rejected, already enabled [ 405.869505][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.955453][T15180] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3065'. [ 405.968304][T15180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3065'. [ 405.992545][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.014185][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.018013][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.045018][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.078103][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.089874][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 406.097702][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 406.314381][ T11] bridge_slave_1: left allmulticast mode [ 406.321671][ T11] bridge_slave_1: left promiscuous mode [ 406.332085][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.348943][T15195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3069'. [ 406.351040][ T11] bridge_slave_0: left allmulticast mode [ 406.375432][T15195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3069'. [ 406.395182][ T11] bridge_slave_0: left promiscuous mode [ 406.401178][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.497061][T15202] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 407.139309][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.153917][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.164244][ T11] bond0 (unregistering): Released all slaves [ 407.193243][T15197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.204589][T15197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.214972][T15197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.516916][T15219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.593458][T15209] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3073'. [ 407.602279][T15224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.652016][T15219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.685142][ T5836] Bluetooth: hci1: command tx timeout [ 407.762103][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3076'. [ 407.773893][T15222] FAULT_INJECTION: forcing a failure. [ 407.773893][T15222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.787190][T15222] CPU: 0 UID: 0 PID: 15222 Comm: syz.1.3076 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 407.798005][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 407.808110][T15222] Call Trace: [ 407.811413][T15222] [ 407.814453][T15222] dump_stack_lvl+0x241/0x360 [ 407.819160][T15222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.824384][T15222] ? __pfx__printk+0x10/0x10 [ 407.829000][T15222] ? __pfx_lock_release+0x10/0x10 [ 407.834042][T15222] ? __lock_acquire+0x1397/0x2100 [ 407.839090][T15222] should_fail_ex+0x3b0/0x4e0 [ 407.843814][T15222] _copy_from_user+0x2f/0xc0 [ 407.848490][T15222] kstrtouint_from_user+0xc6/0x190 [ 407.853644][T15222] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 407.859409][T15222] ? __pfx_lock_acquire+0x10/0x10 [ 407.864484][T15222] proc_fail_nth_write+0xaa/0x2d0 [ 407.869534][T15222] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 407.875466][T15222] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 407.881141][T15222] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 407.886793][T15222] vfs_write+0x2a3/0xd30 [ 407.891063][T15222] ? __pfx_vfs_write+0x10/0x10 [ 407.895856][T15222] ? __fget_files+0x2a/0x410 [ 407.900485][T15222] ? __fget_files+0x395/0x410 [ 407.905196][T15222] ? __fget_files+0x2a/0x410 [ 407.909864][T15222] ksys_write+0x18f/0x2b0 [ 407.914222][T15222] ? __pfx_ksys_write+0x10/0x10 [ 407.919124][T15222] ? do_syscall_64+0x100/0x230 [ 407.923947][T15222] ? do_syscall_64+0xb6/0x230 [ 407.928710][T15222] do_syscall_64+0xf3/0x230 [ 407.933240][T15222] ? clear_bhb_loop+0x35/0x90 [ 407.937958][T15222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.943910][T15222] RIP: 0033:0x7f05901847df [ 407.948342][T15222] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 407.967999][T15222] RSP: 002b:00007f0590fe6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 407.976477][T15222] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05901847df [ 407.984479][T15222] RDX: 0000000000000001 RSI: 00007f0590fe60a0 RDI: 0000000000000010 [ 407.992465][T15222] RBP: 00007f0590fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.000454][T15222] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 408.008440][T15222] R13: 0000000000000000 R14: 00007f0590375fa0 R15: 00007ffd96918108 [ 408.016457][T15222] [ 408.137976][T15220] team0 (unregistering): Port device team_slave_0 removed [ 408.159302][T15220] team0 (unregistering): Port device team_slave_1 removed [ 408.168088][ T5836] Bluetooth: hci3: command tx timeout [ 408.183062][T15220] macvtap0: left allmulticast mode [ 408.188348][T15220] veth0_macvtap: left allmulticast mode [ 408.194035][T15220] macvtap0: left promiscuous mode [ 408.206286][T15220] team0 (unregistering): Port device vlan0 removed [ 408.262585][ T11] hsr_slave_0: left promiscuous mode [ 408.271003][ T11] hsr_slave_1: left promiscuous mode [ 408.279588][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.287387][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.295608][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.303081][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.323310][ T11] veth1_macvtap: left promiscuous mode [ 408.332364][ T11] veth0_macvtap: left promiscuous mode [ 408.338634][ T11] veth1_vlan: left promiscuous mode [ 408.343950][ T11] veth0_vlan: left promiscuous mode [ 408.451071][T15236] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 408.511761][T15237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3077'. [ 408.820276][ T11] team0 (unregistering): Port device team_slave_1 removed [ 408.869484][ T11] team0 (unregistering): Port device team_slave_0 removed [ 409.689234][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 409.723639][T15170] chnl_net:caif_netlink_parms(): no params data found [ 409.769799][ T5836] Bluetooth: hci1: command tx timeout [ 409.808431][T15181] chnl_net:caif_netlink_parms(): no params data found [ 410.025964][T15170] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.033198][T15170] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.040653][T15170] bridge_slave_0: entered allmulticast mode [ 410.048495][T15170] bridge_slave_0: entered promiscuous mode [ 410.065880][T15170] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.072991][T15170] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.095228][T15170] bridge_slave_1: entered allmulticast mode [ 410.102131][T15170] bridge_slave_1: entered promiscuous mode [ 410.121554][T15266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3083'. [ 410.131916][T15181] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.139256][T15181] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.146948][T15266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3083'. [ 410.155760][T15181] bridge_slave_0: entered allmulticast mode [ 410.171772][T15181] bridge_slave_0: entered promiscuous mode [ 410.229710][T15181] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.237301][T15181] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.244913][ T5836] Bluetooth: hci3: command tx timeout [ 410.252224][T15181] bridge_slave_1: entered allmulticast mode [ 410.260008][T15181] bridge_slave_1: entered promiscuous mode [ 410.272631][T15170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.323696][T15272] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3086'. [ 410.377827][T15170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.523909][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.583998][T15181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.602544][T15287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3090'. [ 410.613453][T15181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.649416][T15289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3091'. [ 410.660129][T15289] netlink: 724 bytes leftover after parsing attributes in process `syz.4.3091'. [ 410.669870][T15289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3091'. [ 410.680211][T15170] team0: Port device team_slave_0 added [ 410.733243][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.779573][T15170] team0: Port device team_slave_1 added [ 410.786642][T15277] ip6gre0: entered promiscuous mode [ 410.791920][T15277] ip6gre0: entered allmulticast mode [ 410.813963][T15181] team0: Port device team_slave_0 added [ 410.872627][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.879554][T15294] FAULT_INJECTION: forcing a failure. [ 410.879554][T15294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.899679][T15181] team0: Port device team_slave_1 added [ 410.906502][T15294] CPU: 1 UID: 0 PID: 15294 Comm: syz.4.3092 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 410.917370][T15294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.927450][T15294] Call Trace: [ 410.930748][T15294] [ 410.933700][T15294] dump_stack_lvl+0x241/0x360 [ 410.938402][T15294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.943621][T15294] ? __pfx__printk+0x10/0x10 [ 410.948267][T15294] should_fail_ex+0x3b0/0x4e0 [ 410.952972][T15294] _copy_from_user+0x2f/0xc0 [ 410.957582][T15294] sctp_setsockopt+0xcc/0x11c0 [ 410.962370][T15294] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 410.968282][T15294] do_sock_setsockopt+0x3af/0x720 [ 410.973337][T15294] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 410.978903][T15294] ? __fget_files+0x395/0x410 [ 410.983595][T15294] ? __fget_files+0x2a/0x410 [ 410.988206][T15294] __x64_sys_setsockopt+0x1ee/0x280 [ 410.993421][T15294] do_syscall_64+0xf3/0x230 [ 410.997941][T15294] ? clear_bhb_loop+0x35/0x90 [ 411.002633][T15294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.008540][T15294] RIP: 0033:0x7f4f6ad85d29 [ 411.012967][T15294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.032591][T15294] RSP: 002b:00007f4f6bbca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 411.041025][T15294] RAX: ffffffffffffffda RBX: 00007f4f6af75fa0 RCX: 00007f4f6ad85d29 [ 411.049010][T15294] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 411.056990][T15294] RBP: 00007f4f6bbca090 R08: 0000000000000008 R09: 0000000000000000 [ 411.064973][T15294] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 411.072958][T15294] R13: 0000000000000000 R14: 00007f4f6af75fa0 R15: 00007fffe414d3a8 [ 411.080954][T15294] [ 411.170204][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.200473][T15170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.208676][T15170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.241066][T15170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.265370][T15181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.272591][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.299967][T15181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.335838][T15170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.358446][T15170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.398469][T15170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.501454][T15181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.515137][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.544622][T15181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.704370][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'. [ 411.742555][T15170] hsr_slave_0: entered promiscuous mode [ 411.767914][T15170] hsr_slave_1: entered promiscuous mode [ 411.790044][T15170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.814885][T15170] Cannot create hsr debugfs directory [ 411.845267][ T5836] Bluetooth: hci1: command tx timeout [ 411.884330][T15181] hsr_slave_0: entered promiscuous mode [ 411.916317][T15181] hsr_slave_1: entered promiscuous mode [ 411.923446][T15181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.935701][T15181] Cannot create hsr debugfs directory [ 411.981336][T15312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3099'. [ 412.006587][T15313] tipc: Enabling of bearer rejected, already enabled [ 412.139277][ T11] bridge_slave_1: left allmulticast mode [ 412.150453][ T11] bridge_slave_1: left promiscuous mode [ 412.160675][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.191566][ T11] bridge_slave_0: left allmulticast mode [ 412.204954][ T11] bridge_slave_0: left promiscuous mode [ 412.210764][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.281238][T15326] netlink: 'syz.4.3103': attribute type 1 has an invalid length. [ 412.330137][ T5836] Bluetooth: hci3: command tx timeout [ 412.687605][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.705799][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.719226][ T11] bond0 (unregistering): Released all slaves [ 412.737721][T15319] tipc: Enabling of bearer rejected, failed to enable media [ 413.558081][ T11] hsr_slave_0: left promiscuous mode [ 413.566004][ T11] hsr_slave_1: left promiscuous mode [ 413.585426][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.592911][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.616259][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.623754][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.674108][ T11] veth1_macvtap: left promiscuous mode [ 413.684987][ T11] veth0_macvtap: left promiscuous mode [ 413.690794][ T11] veth1_vlan: left promiscuous mode [ 413.699232][ T11] veth0_vlan: left promiscuous mode [ 413.925257][ T5836] Bluetooth: hci1: command tx timeout [ 414.370515][ T11] team0 (unregistering): Port device team_slave_1 removed [ 414.410357][ T5836] Bluetooth: hci3: command tx timeout [ 414.429640][ T11] team0 (unregistering): Port device team_slave_0 removed [ 415.469641][T15365] __nla_validate_parse: 3 callbacks suppressed [ 415.469664][T15365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3115'. [ 415.502215][T15365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3115'. [ 415.836021][T15170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 415.879996][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3119'. [ 415.978044][T15170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 415.988784][T15170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.011208][T15378] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 416.295291][T15181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.319954][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 416.333341][T15181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 418.890958][T15170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.917235][T15181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 418.958483][T15181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.171446][T15170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.189710][T15170] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.207108][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.214268][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.234489][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.241711][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.304318][T15406] bridge0: port 4(vlan0) entered blocking state [ 419.313324][T15406] bridge0: port 4(vlan0) entered disabled state [ 419.328116][T15406] vlan0: entered allmulticast mode [ 419.332463][T15408] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3127'. [ 419.333282][T15406] veth0: entered allmulticast mode [ 419.349579][T15406] vlan0: entered promiscuous mode [ 419.358943][T15406] veth0: entered promiscuous mode [ 419.364486][T15406] bridge0: port 4(vlan0) entered blocking state [ 419.370941][T15406] bridge0: port 4(vlan0) entered forwarding state [ 419.405689][ T11] bridge0: port 4(vlan0) entered disabled state [ 419.439861][T15181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.533908][T15181] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.556821][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.564030][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.619729][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.626971][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.647726][T15413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3128'. [ 419.657698][T15413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3128'. [ 419.884313][T15170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.926920][T15425] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 419.965924][T15425] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 420.042267][T15430] netlink: 'syz.4.3132': attribute type 7 has an invalid length. [ 420.087842][T15170] veth0_vlan: entered promiscuous mode [ 420.120040][T15170] veth1_vlan: entered promiscuous mode [ 420.132021][T15181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.265556][T15170] veth0_macvtap: entered promiscuous mode [ 420.276057][T15181] veth0_vlan: entered promiscuous mode [ 420.290065][T15170] veth1_macvtap: entered promiscuous mode [ 420.307640][T15181] veth1_vlan: entered promiscuous mode [ 420.319419][ T11] infiniband syz1: set active [ 420.337745][T15434] veth0_to_team: entered promiscuous mode [ 420.358023][T15434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3133'. [ 420.379881][ T12] infiniband syz1: set down [ 420.401555][T15170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.412063][T15181] veth0_macvtap: entered promiscuous mode [ 420.433473][T15181] veth1_macvtap: entered promiscuous mode [ 420.445257][T15434] tap0: tun_chr_ioctl cmd 1074025677 [ 420.450910][T15434] tap0: linktype set to 0 [ 420.459324][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.470801][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.481809][T15170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.503215][T15170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.512645][T15170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.523985][T15170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.533594][T15170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.560095][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.593156][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.624174][T15181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.643681][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.657554][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.668193][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.679401][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.691025][T15181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.717259][T15181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.726739][T15181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.736655][T15181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.748535][T15181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.762667][T15439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3144'. [ 420.764093][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3134'. [ 421.078439][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 421.194036][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 421.423056][T15462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3143'. [ 421.769206][T15473] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3147'. [ 421.885798][T15476] : (slave syz_tun): Releasing backup interface [ 421.921664][T15476] team0: left allmulticast mode [ 421.930492][T15476] team_slave_0: left allmulticast mode [ 421.938079][T15476] team_slave_1: left allmulticast mode [ 421.944059][T15476] team0: left promiscuous mode [ 421.952788][T15476] team_slave_0: left promiscuous mode [ 421.958597][T15476] team_slave_1: left promiscuous mode [ 421.964403][T15476] bridge0: port 3(team0) entered disabled state [ 421.980451][T15476] bridge_slave_0: left allmulticast mode [ 421.990787][T15476] bridge_slave_0: left promiscuous mode [ 421.997164][T15476] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.018287][T15476] bridge_slave_1: left allmulticast mode [ 422.024015][T15476] bridge_slave_1: left promiscuous mode [ 422.058373][T15476] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.106495][T15476] : (slave bond_slave_0): Releasing backup interface [ 422.165575][T15476] : (slave bond_slave_1): Releasing backup interface [ 422.252397][T15476] team0: Port device team_slave_0 removed [ 422.295706][T15476] team0: Port device team_slave_1 removed [ 422.311663][T15476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.357982][T15476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.377446][T15476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.397474][T15476] vlan0: left allmulticast mode [ 422.402603][T15476] veth0: left allmulticast mode [ 422.408256][T15476] vlan0: left promiscuous mode [ 422.413270][T15476] veth0: left promiscuous mode [ 422.418631][T15476] bridge0: port 4(vlan0) entered disabled state [ 422.846153][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3153'. [ 422.936548][T15497] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 422.966053][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3155'. [ 423.019551][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 423.030507][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 423.034381][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.058566][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.070397][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 423.080728][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.091004][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.100095][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 423.101170][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.119836][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 423.128753][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 423.129005][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 423.151030][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.285395][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 423.430446][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.456432][T15511] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3158'. [ 423.602222][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.708407][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.969591][T15499] chnl_net:caif_netlink_parms(): no params data found [ 424.062182][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.088674][T15500] chnl_net:caif_netlink_parms(): no params data found [ 424.170704][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.192499][T15499] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.200223][T15499] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.207742][T15499] bridge_slave_0: entered allmulticast mode [ 424.214773][T15499] bridge_slave_0: entered promiscuous mode [ 424.253178][T15499] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.260571][T15499] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.268770][T15499] bridge_slave_1: entered allmulticast mode [ 424.277030][T15499] bridge_slave_1: entered promiscuous mode [ 424.307935][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.412951][T15500] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.422105][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.429714][T15500] bridge_slave_0: entered allmulticast mode [ 424.437538][T15500] bridge_slave_0: entered promiscuous mode [ 424.447394][T15500] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.454551][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.464827][T15500] bridge_slave_1: entered allmulticast mode [ 424.474601][T15500] bridge_slave_1: entered promiscuous mode [ 424.501947][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.517286][T15499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.530333][T15499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.543103][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3166'. [ 424.653355][T15499] team0: Port device team_slave_0 added [ 424.667651][T15500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.717954][T15500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.774332][T15499] team0: Port device team_slave_1 added [ 424.803471][T15561] openvswitch: netlink: IP tunnel dst address not specified [ 424.863270][T15564] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3170'. [ 424.940395][T15499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.966229][T15499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.993908][T15499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.999687][T15571] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 425.019993][T15500] team0: Port device team_slave_0 added [ 425.028895][T15500] team0: Port device team_slave_1 added [ 425.073522][T15499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.081260][T15499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.111470][T15499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.182262][T15500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.190295][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.218177][T15500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.271381][T15500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.286843][ T5836] Bluetooth: hci3: command tx timeout [ 425.286855][ T5142] Bluetooth: hci1: command tx timeout [ 425.287737][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.337316][T15500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.349668][ T12] bridge_slave_1: left allmulticast mode [ 425.366331][ T12] bridge_slave_1: left promiscuous mode [ 425.372252][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.416154][ T12] bridge_slave_0: left allmulticast mode [ 425.421886][ T12] bridge_slave_0: left promiscuous mode [ 425.434159][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.452297][ T12] bridge_slave_1: left allmulticast mode [ 425.464836][ T12] bridge_slave_1: left promiscuous mode [ 425.470745][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.491014][ T12] bridge_slave_0: left allmulticast mode [ 425.504974][ T12] bridge_slave_0: left promiscuous mode [ 425.510767][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.332628][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.343655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.355556][ T12] bond0 (unregistering): Released all slaves [ 426.491106][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.502256][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.512864][ T12] bond0 (unregistering): Released all slaves [ 426.567440][T15499] hsr_slave_0: entered promiscuous mode [ 426.574195][T15499] hsr_slave_1: entered promiscuous mode [ 426.603007][T15499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.612355][T15499] Cannot create hsr debugfs directory [ 426.721963][T15620] __nla_validate_parse: 93 callbacks suppressed [ 426.721985][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 426.800284][T15500] hsr_slave_0: entered promiscuous mode [ 426.811053][T15500] hsr_slave_1: entered promiscuous mode [ 426.837903][T15500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.855625][T15500] Cannot create hsr debugfs directory [ 426.962948][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'. [ 427.405225][ T5836] Bluetooth: hci1: command tx timeout [ 427.412323][ T5836] Bluetooth: hci3: command tx timeout [ 427.607236][ T12] hsr_slave_0: left promiscuous mode [ 427.616957][ T12] hsr_slave_1: left promiscuous mode [ 427.623765][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.631481][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.655741][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.663588][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.679089][ T12] hsr_slave_0: left promiscuous mode [ 427.687809][ T12] hsr_slave_1: left promiscuous mode [ 427.693747][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.702968][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.713576][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.721181][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.757573][ T12] veth1_macvtap: left promiscuous mode [ 427.763130][ T12] veth0_macvtap: left promiscuous mode [ 427.768967][ T12] veth1_vlan: left promiscuous mode [ 427.774475][ T12] veth0_vlan: left promiscuous mode [ 427.781984][ T12] veth1_macvtap: left promiscuous mode [ 427.787783][ T12] veth0_macvtap: left promiscuous mode [ 427.793612][ T12] veth1_vlan: left promiscuous mode [ 427.799172][ T12] veth0_vlan: left promiscuous mode [ 428.356204][ T12] team0 (unregistering): Port device team_slave_1 removed [ 428.407467][ T12] team0 (unregistering): Port device team_slave_0 removed [ 428.915113][T15644] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3195'. [ 428.984757][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3185'. [ 429.113621][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3186'. [ 429.363863][ T12] team0 (unregistering): Port device team_slave_1 removed [ 429.417054][ T12] team0 (unregistering): Port device team_slave_0 removed [ 429.451188][ T5142] Bluetooth: hci3: command tx timeout [ 429.452419][ T5836] Bluetooth: hci1: command tx timeout [ 430.372833][T15499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.392134][T15499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.430174][T15499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.440113][T15499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.682598][T15499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.731548][T15499] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.762972][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.770197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.800260][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.807470][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.942801][T15500] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.987728][T15500] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.026191][T15500] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.048921][T15500] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.195318][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3191'. [ 431.338273][T15500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.359562][T15499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.412458][T15500] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.432779][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.440014][ T517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.478667][ T517] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.485898][ T517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.525773][ T5142] Bluetooth: hci1: command tx timeout [ 431.535420][ T5142] Bluetooth: hci3: command tx timeout [ 431.549762][T15499] veth0_vlan: entered promiscuous mode [ 431.582566][T15499] veth1_vlan: entered promiscuous mode [ 431.609011][T15680] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3196'. [ 431.657553][T15499] veth0_macvtap: entered promiscuous mode [ 431.694888][T15499] veth1_macvtap: entered promiscuous mode [ 431.751929][T15499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.791673][T15499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.820259][T15499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.839370][T15499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.852897][T15499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.864114][T15499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.081852][T15500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.189734][T15500] veth0_vlan: entered promiscuous mode [ 432.204951][T15500] veth1_vlan: entered promiscuous mode [ 432.249376][T15500] veth0_macvtap: entered promiscuous mode [ 432.263885][T15500] veth1_macvtap: entered promiscuous mode [ 432.290689][T15500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.301522][T15500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.316256][T15500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.358655][T15500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.375175][T15500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.388648][T15500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.399147][T15700] xt_socket: unknown flags 0x8 [ 432.400334][T15500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.413403][T15500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.422782][T15500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.432122][T15500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.451917][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 432.845768][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'. [ 432.852460][T15713] No such timeout policy "syz0" [ 432.949651][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3206'. [ 432.959081][T15717] bridge_slave_1: left promiscuous mode [ 432.964894][T15717] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.974295][T15717] bridge_slave_0: left promiscuous mode [ 432.999944][T15717] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.375036][T15730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3210'. [ 433.392302][ T517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.394833][T15730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3210'. [ 434.185252][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.194071][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.204349][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.212698][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.223459][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 434.231035][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.409473][T15732] chnl_net:caif_netlink_parms(): no params data found [ 434.464629][ T517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.502046][T15732] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.509536][T15732] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.517055][T15732] bridge_slave_0: entered allmulticast mode [ 434.523815][T15732] bridge_slave_0: entered promiscuous mode [ 434.531732][T15732] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.538992][T15732] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.546442][T15732] bridge_slave_1: entered allmulticast mode [ 434.554179][T15732] bridge_slave_1: entered promiscuous mode [ 434.580668][T15732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.592078][T15732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.621019][T15732] team0: Port device team_slave_0 added [ 434.630146][T15732] team0: Port device team_slave_1 added [ 434.657263][T15732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.664246][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.690633][T15732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.720087][ T517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.737998][T15732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.745192][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.771522][T15732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.861066][ T517] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.959843][T15732] hsr_slave_0: entered promiscuous mode [ 435.031972][T15732] hsr_slave_1: entered promiscuous mode [ 435.066415][T15732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.074050][T15732] Cannot create hsr debugfs directory [ 435.166959][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'. [ 435.405518][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.416477][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.426276][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.436316][ T517] bridge_slave_1: left allmulticast mode [ 435.442554][ T517] bridge_slave_1: left promiscuous mode [ 435.451283][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.455629][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.474648][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 435.475784][ T517] bridge_slave_0: left allmulticast mode [ 435.482209][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.487554][ T517] bridge_slave_0: left promiscuous mode [ 435.500289][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.878284][ T517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.890544][ T517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.901267][ T517] bond0 (unregistering): Released all slaves [ 436.334998][ T5142] Bluetooth: hci1: command tx timeout [ 436.517971][ T517] hsr_slave_0: left promiscuous mode [ 436.538161][ T517] hsr_slave_1: left promiscuous mode [ 436.545233][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.552947][ T517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.562502][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.570794][ T517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.599852][ T517] veth1_macvtap: left promiscuous mode [ 436.605865][ T517] veth0_macvtap: left promiscuous mode [ 436.611679][ T517] veth1_vlan: left promiscuous mode [ 436.617366][ T517] veth0_vlan: left promiscuous mode [ 437.349126][ T517] team0 (unregistering): Port device team_slave_1 removed [ 437.401759][ T517] team0 (unregistering): Port device team_slave_0 removed [ 437.623252][ T5142] Bluetooth: hci3: command tx timeout [ 437.901037][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 438.037374][T15732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.060343][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'. [ 438.092521][T15732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.153914][T15761] chnl_net:caif_netlink_parms(): no params data found [ 438.182530][T15732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.227040][T15732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 438.413479][ T5142] Bluetooth: hci1: command tx timeout [ 438.473336][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'. [ 438.533996][T15761] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.551764][T15761] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.560694][T15761] bridge_slave_0: entered allmulticast mode [ 438.577169][T15761] bridge_slave_0: entered promiscuous mode [ 438.612729][T15761] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.620375][T15761] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.630019][T15761] bridge_slave_1: entered allmulticast mode [ 438.638972][T15761] bridge_slave_1: entered promiscuous mode [ 438.700058][T15761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.737743][T15761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.921903][ T517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.984406][T15761] team0: Port device team_slave_0 added [ 438.993248][T15761] team0: Port device team_slave_1 added [ 439.072734][ T517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.099047][T15761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.107020][T15761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.135272][T15761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.169920][T15848] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3239'. [ 439.181725][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3239'. [ 439.192666][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3239'. [ 439.196794][ T517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.202221][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3239'. [ 439.246915][T15761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.253932][T15761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.299457][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'. [ 439.327898][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'. [ 439.335773][T15761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.347996][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'. [ 439.395349][ T517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.443541][T15761] hsr_slave_0: entered promiscuous mode [ 439.452156][T15761] hsr_slave_1: entered promiscuous mode [ 439.463876][T15761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.471927][T15761] Cannot create hsr debugfs directory [ 439.502133][T15732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.629532][T15865] netlink: 'syz.1.3243': attribute type 2 has an invalid length. [ 439.686133][ T5142] Bluetooth: hci3: command 0x041b tx timeout [ 439.696016][T15732] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.767085][T15732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.777693][T15732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.796594][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.803758][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.814903][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.822070][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.031162][ T517] bridge_slave_1: left allmulticast mode [ 440.056616][ T517] bridge_slave_1: left promiscuous mode [ 440.080573][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.107647][ T517] bridge_slave_0: left allmulticast mode [ 440.124022][ T517] bridge_slave_0: left promiscuous mode [ 440.132631][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.343346][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.485582][ T5836] Bluetooth: hci1: command tx timeout [ 440.622589][ T517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.635953][ T517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.649852][ T517] bond0 (unregistering): Released all slaves [ 440.900802][T15732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.125591][T15732] veth0_vlan: entered promiscuous mode [ 441.149387][T15732] veth1_vlan: entered promiscuous mode [ 441.176551][ T517] hsr_slave_0: left promiscuous mode [ 441.182857][ T517] hsr_slave_1: left promiscuous mode [ 441.195599][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.203099][ T517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.216093][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.223590][ T517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.253005][ T517] veth1_macvtap: left promiscuous mode [ 441.258819][ T517] veth0_macvtap: left promiscuous mode [ 441.264503][ T517] veth1_vlan: left promiscuous mode [ 441.271195][ T517] veth0_vlan: left promiscuous mode [ 441.785301][ T5836] Bluetooth: hci3: command 0x041b tx timeout [ 441.886034][T15912] netlink: 'syz.1.3256': attribute type 5 has an invalid length. [ 441.894599][ T517] team0 (unregistering): Port device team_slave_1 removed [ 441.943781][ T517] team0 (unregistering): Port device team_slave_0 removed [ 442.476466][T15912] : entered promiscuous mode [ 442.567340][ T5836] Bluetooth: hci1: command tx timeout [ 442.680761][T15732] veth0_macvtap: entered promiscuous mode [ 442.694359][T15761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.746892][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 442.759802][T15732] veth1_macvtap: entered promiscuous mode [ 442.787358][T15761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.820980][T15761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.838536][T15761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.853261][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 442.869503][T15732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.930627][T15732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.948627][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 442.958013][T15732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.977120][T15732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.990907][T15732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.000310][T15732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.111590][T15761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.129477][T15761] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.143311][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.150473][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.254089][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.261294][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.387597][T15911] infiniband syz0: set active [ 443.393064][ T5839] vxcan1 speed is unknown, defaulting to 1000 [ 443.409484][T15911] infiniband syz0: added vxcan1 [ 443.421040][T15911] syz0: rxe_create_cq: returned err = -12 [ 443.427595][T15911] infiniband syz0: Couldn't create ib_mad CQ [ 443.433861][T15911] infiniband syz0: Couldn't open port 1 [ 443.539896][T15911] RDS/IB: syz0: added [ 443.544203][T15911] smc: adding ib device syz0 with port count 1 [ 443.550757][T15911] smc: ib device syz0 port 1 has pnetid [ 443.575355][T15931] __nla_validate_parse: 9 callbacks suppressed [ 443.575383][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 443.595824][ T5839] vxcan1 speed is unknown, defaulting to 1000 [ 443.603537][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 443.856223][ T5836] Bluetooth: hci3: command 0x041b tx timeout [ 443.881609][ T517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.921636][T15761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.930533][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 443.973972][T15935] ip6gre0: entered allmulticast mode [ 444.033148][T15761] veth0_vlan: entered promiscuous mode [ 444.083902][ T517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.180325][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 444.182145][T15761] veth1_vlan: entered promiscuous mode [ 444.220366][ T517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.281855][T15761] veth0_macvtap: entered promiscuous mode [ 444.318788][ T517] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.335324][T15761] veth1_macvtap: entered promiscuous mode [ 444.352287][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 444.358159][T15761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.388601][T15761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.422934][T15761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.472392][T15761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.497120][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 444.506780][T15761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.527998][T15761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.562317][T15761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.583810][T15761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.604143][T15761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.626161][T15761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.744876][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 444.758932][ T517] bridge_slave_1: left allmulticast mode [ 444.777513][ T517] bridge_slave_1: left promiscuous mode [ 444.795323][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.814340][ T517] bridge_slave_0: left allmulticast mode [ 444.829492][ T517] bridge_slave_0: left promiscuous mode [ 444.845411][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.012001][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.054893][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.067983][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.076237][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.084044][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 445.099534][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.432229][ T517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.443443][ T517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.454580][ T517] bond0 (unregistering): Released all slaves [ 445.477424][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 445.855538][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 445.908535][T15964] netlink: 'syz.2.3269': attribute type 10 has an invalid length. [ 445.917635][T15964] macvlan0: entered allmulticast mode [ 445.935767][T15964] veth1_vlan: entered allmulticast mode [ 445.947320][T15964] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 446.062252][T15956] vxcan1 speed is unknown, defaulting to 1000 [ 446.081392][T15968] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3271'. [ 446.100017][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3271'. [ 446.131168][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 446.235024][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 446.462054][T15956] chnl_net:caif_netlink_parms(): no params data found [ 446.508807][T15911] vxcan1 speed is unknown, defaulting to 1000 [ 446.665010][T15956] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.672283][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.692289][T15956] bridge_slave_0: entered allmulticast mode [ 446.713260][T15956] bridge_slave_0: entered promiscuous mode [ 446.739408][T15956] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.760539][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.783988][T15956] bridge_slave_1: entered allmulticast mode [ 446.827833][T15956] bridge_slave_1: entered promiscuous mode [ 446.915200][T15956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.932805][T15956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.003443][T15956] team0: Port device team_slave_0 added [ 447.026870][T15956] team0: Port device team_slave_1 added [ 447.091180][ T517] hsr_slave_0: left promiscuous mode [ 447.098680][ T517] hsr_slave_1: left promiscuous mode [ 447.105089][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.112550][ T517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.122777][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.130737][ T517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.150995][ T517] veth1_macvtap: left promiscuous mode [ 447.156861][ T517] veth0_macvtap: left promiscuous mode [ 447.162455][ T517] veth1_vlan: left promiscuous mode [ 447.167864][ T517] veth0_vlan: left promiscuous mode [ 447.205033][ T5836] Bluetooth: hci1: command tx timeout [ 447.534876][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 447.789356][T15999] netlink: 308 bytes leftover after parsing attributes in process `syz.1.3278'. [ 447.881973][T16002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.882448][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.913590][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 447.924348][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 447.926850][ T517] team0 (unregistering): Port device team_slave_1 removed [ 447.946461][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 447.971338][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 447.980730][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.025175][ T517] team0 (unregistering): Port device team_slave_0 removed [ 448.520909][T15956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.530103][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.556610][T15956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.601309][T15956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.625208][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.669518][T15956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.836454][T15956] hsr_slave_0: entered promiscuous mode [ 448.859102][T15956] hsr_slave_1: entered promiscuous mode [ 448.876993][T15956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.877486][T16014] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3283'. [ 448.884599][T15956] Cannot create hsr debugfs directory [ 448.905629][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3283'. [ 448.939645][T16003] vxcan1 speed is unknown, defaulting to 1000 [ 449.054200][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 449.068101][T16016] sit0: left allmulticast mode [ 449.115356][T16016] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3284'. [ 449.285762][ T5836] Bluetooth: hci1: command tx timeout [ 449.350419][ T517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.479636][ T517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.541461][ T517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.625255][T16031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.663385][ T517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.779026][T16003] chnl_net:caif_netlink_parms(): no params data found [ 449.855304][ T517] bridge_slave_1: left allmulticast mode [ 449.861087][ T517] bridge_slave_1: left promiscuous mode [ 449.870061][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.879525][ T517] bridge_slave_0: left allmulticast mode [ 449.885808][ T517] bridge_slave_0: left promiscuous mode [ 449.893272][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.092242][ T5836] Bluetooth: hci3: command tx timeout [ 450.395199][ T517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.408137][ T517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.426463][ T517] bond0 (unregistering): Released all slaves [ 450.511930][T16047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3290'. [ 450.620255][T15956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 450.667778][T15956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 450.787363][T15956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 450.809453][T15956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 450.824508][T16003] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.835022][T16003] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.852643][T16003] bridge_slave_0: entered allmulticast mode [ 450.863846][T16003] bridge_slave_0: entered promiscuous mode [ 450.886805][T16003] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.894144][T16003] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.901789][T16003] bridge_slave_1: entered allmulticast mode [ 450.909180][T16003] bridge_slave_1: entered promiscuous mode [ 451.104551][T16003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.144575][T16003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.183867][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3294'. [ 451.287881][T16003] team0: Port device team_slave_0 added [ 451.311007][T16003] team0: Port device team_slave_1 added [ 451.364963][ T5142] Bluetooth: hci1: command tx timeout [ 451.377421][ T517] hsr_slave_0: left promiscuous mode [ 451.393180][ T517] hsr_slave_1: left promiscuous mode [ 451.399556][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.414789][ T517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.425751][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.443497][ T517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.473562][ T517] veth1_macvtap: left promiscuous mode [ 451.479355][ T517] veth0_macvtap: left promiscuous mode [ 451.485082][ T517] veth1_vlan: left promiscuous mode [ 451.490542][ T517] veth0_vlan: left promiscuous mode [ 451.710519][T16082] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3296'. [ 451.723651][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'. [ 451.888907][T16087] set match dimension is over the limit! [ 452.166597][ T5142] Bluetooth: hci3: command tx timeout [ 452.285296][ T517] team0 (unregistering): Port device team_slave_1 removed [ 452.340465][ T517] team0 (unregistering): Port device team_slave_0 removed [ 452.862766][T16003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.870019][T16003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.896940][T16003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.002580][T16090] pim6reg: entered allmulticast mode [ 453.031075][T16091] pim6reg: left allmulticast mode [ 453.069330][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3300'. [ 453.078589][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3300'. [ 453.097737][T16003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.114938][T16003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.157640][T16003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.294098][T16003] hsr_slave_0: entered promiscuous mode [ 453.322155][T16003] hsr_slave_1: entered promiscuous mode [ 453.335797][T16003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.349250][T16003] Cannot create hsr debugfs directory [ 453.455236][ T5142] Bluetooth: hci1: command tx timeout [ 453.504573][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.588526][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.627686][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.634899][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.671653][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.678959][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.008694][T16003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.028279][T16003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.046595][T16003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.063447][T16003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.156689][T15956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.246858][ T5142] Bluetooth: hci3: command 0x040f tx timeout [ 454.288349][T16003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.298219][T15956] veth0_vlan: entered promiscuous mode [ 454.329184][T15956] veth1_vlan: entered promiscuous mode [ 454.361564][T16003] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.386496][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.393798][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.419730][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.426927][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.451471][T15956] veth0_macvtap: entered promiscuous mode [ 454.481395][T15956] veth1_macvtap: entered promiscuous mode [ 454.505966][T15956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.525861][T15956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.543627][T15956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.554411][T15956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.563447][T15956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.573428][T15956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.942529][T16003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.970789][T16146] __nla_validate_parse: 2 callbacks suppressed [ 454.970821][T16146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3313'. [ 455.018671][T16003] veth0_vlan: entered promiscuous mode [ 455.033228][T16003] veth1_vlan: entered promiscuous mode [ 455.079536][T16003] veth0_macvtap: entered promiscuous mode [ 455.090819][T16003] veth1_macvtap: entered promiscuous mode [ 455.112961][T16003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.128134][T16003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.147223][T16003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.166531][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 455.207206][T16003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.246247][T16003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.266092][T16003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.307063][T16003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.324853][T16003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.333636][T16003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.364872][T16003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.427397][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.641886][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.809252][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.049301][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.137362][T16155] netlink: 'syz.2.3316': attribute type 10 has an invalid length. [ 456.168087][T16155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3316'. [ 456.346684][ T5882] IPVS: starting estimator thread 0... [ 456.376477][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 456.389378][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 456.397688][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 456.406627][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 456.416669][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 456.424068][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.454876][T16163] IPVS: using max 21 ests per chain, 50400 per kthread [ 456.526864][ T35] bridge_slave_1: left allmulticast mode [ 456.532801][ T35] bridge_slave_1: left promiscuous mode [ 456.538967][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.558200][ T35] bridge_slave_0: left allmulticast mode [ 456.575108][ T35] bridge_slave_0: left promiscuous mode [ 456.580974][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.737801][T16170] netlink: 'syz.2.3319': attribute type 1 has an invalid length. [ 457.098650][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.110543][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.120988][ T35] bond0 (unregistering): Released all slaves [ 457.146097][T16159] vxcan1 speed is unknown, defaulting to 1000 [ 457.354753][T16165] vxcan1 speed is unknown, defaulting to 1000 [ 457.954844][ T35] hsr_slave_0: left promiscuous mode [ 457.962859][ T35] hsr_slave_1: left promiscuous mode [ 457.969254][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.978611][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.022833][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.056809][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.118513][ T35] veth1_macvtap: left promiscuous mode [ 458.130049][ T35] veth0_macvtap: left promiscuous mode [ 458.137008][ T35] veth1_vlan: left promiscuous mode [ 458.142744][ T35] veth0_vlan: left promiscuous mode [ 458.397543][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.409848][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.429632][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.440027][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.449991][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 458.462842][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.502286][ T5836] Bluetooth: hci1: command tx timeout [ 458.918253][ T35] team0 (unregistering): Port device team_slave_1 removed [ 458.968153][ T35] team0 (unregistering): Port device team_slave_0 removed [ 459.431311][T16165] chnl_net:caif_netlink_parms(): no params data found [ 459.625552][T16203] trusted_key: syz.4.3324 sent an empty control message without MSG_MORE. [ 459.666306][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3325'. [ 459.685886][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.693111][T16165] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.715484][T16165] bridge_slave_0: entered allmulticast mode [ 459.722646][T16165] bridge_slave_0: entered promiscuous mode [ 459.735721][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.742907][T16165] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.766449][T16165] bridge_slave_1: entered allmulticast mode [ 459.786200][T16165] bridge_slave_1: entered promiscuous mode [ 459.793064][T16190] vxcan1 speed is unknown, defaulting to 1000 [ 459.845539][T16165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.868582][T16165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.959765][T16165] team0: Port device team_slave_0 added [ 459.997014][T16165] team0: Port device team_slave_1 added [ 460.003085][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3327'. [ 460.065830][T16165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.076784][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.111306][T16165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.133188][T16165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.140355][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.167396][T16165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.281018][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.304449][T16165] hsr_slave_0: entered promiscuous mode [ 460.311159][T16165] hsr_slave_1: entered promiscuous mode [ 460.321222][T16165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.330151][T16165] Cannot create hsr debugfs directory [ 460.341766][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3329'. [ 460.388238][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.486832][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.564970][ T5840] Bluetooth: hci3: command tx timeout [ 460.571490][ T5836] Bluetooth: hci1: command 0x041b tx timeout [ 460.714175][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.862320][T16231] xt_CT: No such helper "syz0" [ 461.215422][T16190] chnl_net:caif_netlink_parms(): no params data found [ 461.328956][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'. [ 461.371613][ T35] bridge_slave_1: left allmulticast mode [ 461.382349][ T35] bridge_slave_1: left promiscuous mode [ 461.391901][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.391960][T16249] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3340'. [ 461.408948][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 461.427336][ T35] bridge_slave_0: left allmulticast mode [ 461.433092][ T35] bridge_slave_0: left promiscuous mode [ 461.445691][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.835047][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.846441][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.857092][ T35] bond0 (unregistering): Released all slaves [ 461.897535][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3339'. [ 462.026839][T16263] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3343'. [ 462.041571][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3343'. [ 462.106132][T16190] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.123536][T16190] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.137410][T16190] bridge_slave_0: entered allmulticast mode [ 462.152313][T16190] bridge_slave_0: entered promiscuous mode [ 462.167117][T16190] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.184806][T16190] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.192123][T16190] bridge_slave_1: entered allmulticast mode [ 462.204771][T16190] bridge_slave_1: entered promiscuous mode [ 462.371652][T16190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.417239][T16190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.559755][T16281] netlink: 'syz.1.3350': attribute type 1 has an invalid length. [ 462.645007][ T5142] Bluetooth: hci1: command 0x041b tx timeout [ 462.651135][ T5836] Bluetooth: hci3: command tx timeout [ 462.659196][T16190] team0: Port device team_slave_0 added [ 462.709535][ T35] hsr_slave_0: left promiscuous mode [ 462.736891][ T35] hsr_slave_1: left promiscuous mode [ 462.766474][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.774236][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.782618][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.790603][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.819362][ T35] veth1_macvtap: left promiscuous mode [ 462.825405][ T35] veth0_macvtap: left promiscuous mode [ 462.831198][ T35] veth1_vlan: left promiscuous mode [ 462.836850][ T35] veth0_vlan: left promiscuous mode [ 462.837723][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3351'. [ 462.853773][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3351'. [ 463.578579][ T35] team0 (unregistering): Port device team_slave_1 removed [ 463.630632][ T35] team0 (unregistering): Port device team_slave_0 removed [ 464.126359][T16190] team0: Port device team_slave_1 added [ 464.174476][T16165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 464.252121][T16190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.282846][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.375917][T16190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.398315][T16165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 464.421970][T16190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.451073][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.516884][T16190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.543881][T16165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 464.665003][T16319] netlink: 'syz.4.3359': attribute type 2 has an invalid length. [ 464.672898][T16319] netlink: 'syz.4.3359': attribute type 1 has an invalid length. [ 464.681022][T16165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 464.738981][ T5142] Bluetooth: hci1: command 0x041b tx timeout [ 464.744846][ T5836] Bluetooth: hci3: command tx timeout [ 464.788152][T16190] hsr_slave_0: entered promiscuous mode [ 464.812454][T16190] hsr_slave_1: entered promiscuous mode [ 464.822557][T16190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.830662][T16190] Cannot create hsr debugfs directory [ 464.842688][T16329] tipc: Enabling of bearer rejected, already enabled [ 465.210583][T16165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.253452][T16339] __nla_validate_parse: 2 callbacks suppressed [ 465.253476][T16339] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3365'. [ 465.261012][T16165] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.328867][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.336114][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.385732][T15611] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.392899][T15611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.551921][T16190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 465.572606][T16190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 465.599268][T16190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 465.621108][T16190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 465.760602][T16190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.783314][T16190] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.806756][T15611] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.813891][T15611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.880139][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.887410][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.956546][T16165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.029571][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 466.073177][T16165] veth0_vlan: entered promiscuous mode [ 466.116168][T16165] veth1_vlan: entered promiscuous mode [ 466.168719][T16165] veth0_macvtap: entered promiscuous mode [ 466.196864][T16165] veth1_macvtap: entered promiscuous mode [ 466.242216][T16165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.268894][T16165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.295340][T16165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.304111][T16165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.334878][T16165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.343649][T16165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.417664][T16190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.560299][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3372'. [ 466.572695][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3372'. [ 466.616322][T16190] veth0_vlan: entered promiscuous mode [ 466.650256][T16190] veth1_vlan: entered promiscuous mode [ 466.676766][T16377] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3373'. [ 466.698324][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3373'. [ 466.700288][T16190] veth0_macvtap: entered promiscuous mode [ 466.717383][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3373'. [ 466.737850][T16190] veth1_macvtap: entered promiscuous mode [ 466.761463][T16190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.779184][T16190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.799176][T16190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.806696][ T5142] Bluetooth: hci3: command tx timeout [ 466.824124][T16382] tipc: Enabling of bearer rejected, already enabled [ 466.836001][T16190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.846740][T16190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.869978][T16190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.913158][T16190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.935414][T16190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.959502][T16190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.971524][T16190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.058684][T16388] syzkaller0: entered promiscuous mode [ 467.064199][T16388] syzkaller0: entered allmulticast mode [ 468.734793][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.763375][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.782359][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.808496][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.826491][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 468.842187][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.890333][ T5142] Bluetooth: hci3: command 0x0405 tx timeout [ 469.139184][T15611] wlan1: Trigger new scan to find an IBSS to join [ 469.156082][T15611] ------------[ cut here ]------------ [ 469.161625][T15611] WARNING: CPU: 0 PID: 15611 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x6e4/0x770 [ 469.172355][T15611] Modules linked in: [ 469.176400][T15611] CPU: 0 UID: 0 PID: 15611 Comm: kworker/u8:9 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 469.187429][T15611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 469.197696][T15611] Workqueue: events_unbound cfg80211_wiphy_work [ 469.204033][T15611] RIP: 0010:ieee80211_request_ibss_scan+0x6e4/0x770 [ 469.210879][T15611] Code: e8 41 06 67 f6 eb 05 e8 3a 06 67 f6 b8 ea ff ff ff e9 41 fa ff ff e8 2b 06 67 f6 90 0f 0b 90 e9 01 fa ff ff e8 1d 06 67 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 6e 1a 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 469.230737][T15611] RSP: 0018:ffffc900039ff920 EFLAGS: 00010293 [ 469.236939][T15611] RAX: ffffffff8b386dc3 RBX: 0000000000000000 RCX: ffff88802fb3bc00 [ 469.245272][T15611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.253305][T15611] RBP: ffffc900039ffb60 R08: ffffffff8b386c1f R09: fffffbfff1cfa210 [ 469.261461][T15611] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000006 [ 469.269591][T15611] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888027248e80 [ 469.277719][T15611] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 469.286765][T15611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.293397][T15611] CR2: 00007fc9c34b7cad CR3: 0000000048f5c000 CR4: 00000000003526f0 [ 469.301518][T15611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.309631][T15611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.317732][T15611] Call Trace: [ 469.321052][T15611] [ 469.324017][T15611] ? __warn+0x165/0x4d0 [ 469.328342][T15611] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 469.334395][T15611] ? report_bug+0x2b3/0x500 [ 469.339038][T15611] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 469.345555][T15611] ? handle_bug+0x60/0x90 [ 469.349996][T15611] ? exc_invalid_op+0x1a/0x50 [ 469.354845][T15611] ? asm_exc_invalid_op+0x1a/0x20 [ 469.360214][T15611] ? ieee80211_request_ibss_scan+0x53f/0x770 [ 469.366703][T15611] ? ieee80211_request_ibss_scan+0x6e3/0x770 [ 469.372752][T15611] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 469.378895][T15611] ieee80211_ibss_work+0xe1b/0x14c0 [ 469.384168][T15611] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 469.390048][T15611] ? ieee80211_iface_work+0xe6b/0xf20 [ 469.395550][T15611] ? rcu_is_watching+0x15/0xb0 [ 469.400372][T15611] cfg80211_wiphy_work+0x2f0/0x490 [ 469.405657][T15611] ? process_scheduled_works+0x976/0x1840 [ 469.411428][T15611] process_scheduled_works+0xa66/0x1840 [ 469.417154][T15611] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.423206][T15611] ? assign_work+0x364/0x3d0 [ 469.427973][T15611] worker_thread+0x870/0xd30 [ 469.432634][T15611] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 469.438669][T15611] ? __kthread_parkme+0x169/0x1d0 [ 469.443758][T15611] ? __pfx_worker_thread+0x10/0x10 [ 469.449034][T15611] kthread+0x2f0/0x390 [ 469.453172][T15611] ? __pfx_worker_thread+0x10/0x10 [ 469.458434][T15611] ? __pfx_kthread+0x10/0x10 [ 469.463113][T15611] ret_from_fork+0x4b/0x80 [ 469.467658][T15611] ? __pfx_kthread+0x10/0x10 [ 469.472612][T15611] ret_from_fork_asm+0x1a/0x30 [ 469.477537][T15611] [ 469.480607][T15611] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 469.487928][T15611] CPU: 0 UID: 0 PID: 15611 Comm: kworker/u8:9 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 469.498902][T15611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 469.509001][T15611] Workqueue: events_unbound cfg80211_wiphy_work [ 469.515311][T15611] Call Trace: [ 469.518620][T15611] [ 469.521581][T15611] dump_stack_lvl+0x241/0x360 [ 469.526320][T15611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.531587][T15611] ? __pfx__printk+0x10/0x10 [ 469.536230][T15611] ? _printk+0xd5/0x120 [ 469.540440][T15611] ? __init_begin+0x41000/0x41000 [ 469.545509][T15611] ? vscnprintf+0x5d/0x90 [ 469.549903][T15611] panic+0x349/0x880 [ 469.553850][T15611] ? __warn+0x174/0x4d0 [ 469.558069][T15611] ? __pfx_panic+0x10/0x10 [ 469.562546][T15611] ? ret_from_fork_asm+0x1a/0x30 [ 469.567527][T15611] __warn+0x344/0x4d0 [ 469.571555][T15611] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 469.577591][T15611] report_bug+0x2b3/0x500 [ 469.582003][T15611] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 469.588030][T15611] handle_bug+0x60/0x90 [ 469.592226][T15611] exc_invalid_op+0x1a/0x50 [ 469.596748][T15611] asm_exc_invalid_op+0x1a/0x20 [ 469.601628][T15611] RIP: 0010:ieee80211_request_ibss_scan+0x6e4/0x770 [ 469.608302][T15611] Code: e8 41 06 67 f6 eb 05 e8 3a 06 67 f6 b8 ea ff ff ff e9 41 fa ff ff e8 2b 06 67 f6 90 0f 0b 90 e9 01 fa ff ff e8 1d 06 67 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 6e 1a 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 469.627939][T15611] RSP: 0018:ffffc900039ff920 EFLAGS: 00010293 [ 469.634031][T15611] RAX: ffffffff8b386dc3 RBX: 0000000000000000 RCX: ffff88802fb3bc00 [ 469.642045][T15611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.650030][T15611] RBP: ffffc900039ffb60 R08: ffffffff8b386c1f R09: fffffbfff1cfa210 [ 469.658045][T15611] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000006 [ 469.666028][T15611] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888027248e80 [ 469.674024][T15611] ? ieee80211_request_ibss_scan+0x53f/0x770 [ 469.680034][T15611] ? ieee80211_request_ibss_scan+0x6e3/0x770 [ 469.686059][T15611] ieee80211_ibss_work+0xe1b/0x14c0 [ 469.691292][T15611] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 469.696957][T15611] ? ieee80211_iface_work+0xe6b/0xf20 [ 469.702354][T15611] ? rcu_is_watching+0x15/0xb0 [ 469.707141][T15611] cfg80211_wiphy_work+0x2f0/0x490 [ 469.712277][T15611] ? process_scheduled_works+0x976/0x1840 [ 469.718012][T15611] process_scheduled_works+0xa66/0x1840 [ 469.723592][T15611] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.729608][T15611] ? assign_work+0x364/0x3d0 [ 469.734221][T15611] worker_thread+0x870/0xd30 [ 469.738834][T15611] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 469.744745][T15611] ? __kthread_parkme+0x169/0x1d0 [ 469.749788][T15611] ? __pfx_worker_thread+0x10/0x10 [ 469.754929][T15611] kthread+0x2f0/0x390 [ 469.759021][T15611] ? __pfx_worker_thread+0x10/0x10 [ 469.764146][T15611] ? __pfx_kthread+0x10/0x10 [ 469.768760][T15611] ret_from_fork+0x4b/0x80 [ 469.773192][T15611] ? __pfx_kthread+0x10/0x10 [ 469.777799][T15611] ret_from_fork_asm+0x1a/0x30 [ 469.782585][T15611] [ 469.785920][T15611] Kernel Offset: disabled [ 469.790338][T15611] Rebooting in 86400 seconds..