last executing test programs: 3.249256008s ago: executing program 4 (id=1426): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@bcast, @default, @null, @netrom, @null, @rose]}, &(0x7f0000000080)=0x48) shutdown(r0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0xff, @rand_addr=0x64010100, 0x4e20, 0x1, 'wrr\x00', 0xc, 0xfffffffd, 0x52}, 0x2c) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000200)=0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x40, @bearer=@l2={'ib', 0x3a, 'geneve0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xe97403388cc98933) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000380)="341d82c6f03e8b3ee259827a847636e896d7f6082d1ab581d28651e5cd64c2ff6eea41750484a5eb4bd0f44269f277fa0613b05572e6a7b0a30adb294163bb91c7cf50c40adf67f9aa038557c3163034c3664d6ddc63dfe708ce6f5c596a86b0a4a514eae16ab4c2f072a6f71e835b3cc6f66b0b8e8e17a60f32a9ace053215033b00f26bd11da98", &(0x7f0000000440)=""/186, &(0x7f0000000500)="6d4d5c845271bdf86dbbda0dd78d2d55fd6db8e172ab850253b4ea02d43fe05faa24ed8d2c51cc7920227dffa2354e130e5c749adf401b86ea62c22428bcda8147f63fd53d2d39342ad8ad3fa2897f828853a9059c6013c41f024789e543de6000b83fe51648dc66f63a1569b56582b77bee857d52a70d5404d412e0f87cb44b8be80ec0e0624e5914131ab3555f24b0c054263a34300cfec9422489c423b67d59032802e11a1e7231e5f064a33b8615fd5b6a", &(0x7f00000005c0), 0xae, r4, 0x3af27af8145c6c7e}, 0x38) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000680)=0x8, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000740)={r7, 0x800, 0x1}, 0x8) r8 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x40, 0x8, 0x6, 0x3, {{0x15, 0x4, 0x2, 0x7, 0x54, 0x68, 0x0, 0x4f, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0x27, 0xab, [@rand_addr=0x64010100, @broadcast, @remote, @local, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @broadcast]}, @generic={0x7, 0x8, "42c9591f2f2c"}, @timestamp={0x44, 0xc, 0xed, 0x0, 0x1, [0x1, 0x5]}, @noop, @noop, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000840)={'syztnl0\x00', r9, 0x8, 0x8, 0xf1c, 0x5, {{0x11, 0x4, 0x0, 0x5, 0x44, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x3e, 0x3, 0x4, [{@multicast2, 0x4}, {@private=0xa010101, 0x3}, {@multicast2, 0x46}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x7}, {@local}]}, @noop]}}}}}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000900)={@remote}, &(0x7f0000000940)=0x14) r10 = socket$inet(0x2, 0x800, 0x6) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000980)={r7, @in={{0x2, 0x4e20, @private=0xa010100}}}, 0x84) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = accept4$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14, 0x80000) getsockname$packet(r13, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b40)=0x14) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x82, 0x0) write$tun(r14, &(0x7f0000000bc0)={@val={0x0, 0x8100}, @val={0x3, 0x3, 0x9, 0x3, 0x3, 0x1f}, @ipv4=@igmp={{0x9, 0x4, 0x3, 0x6, 0x83, 0x64, 0x0, 0x9, 0x2, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x18, 0x3, 0xb, [{@empty, 0x6}]}, @end]}}, {0x13, 0xcc, 0x0, @rand_addr=0x64010100, "c8a96899591be635ac77424ced953821d959728256b18820e81120f1510cf243e67082f8ab9c05bff5db614ef811e9388c86747fda87b27a8bb53d943e06210de4a9f37c3af476dbf4216addc09b735e8294209f67eac3"}}}, 0x91) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000001ec0)=0x0) sendmsg$unix(r0, &(0x7f0000002040)={&(0x7f0000000c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000d00)="35e50a53123d9d2a9e080f31b03a676dfc0ce6901410e02409fb29aa1ef172221da223c57df008addb4d2728858c54ab45315db0cd6252130394458789cdd3c598f4bd9d3045103c4782f9efc5af81aeccbfa552bf209ca21f99e4c0fd4e266f5c5c22f42bcc06302ee17aac62fc6dfcbc4945c5ebde663e682c0214440b23ab12da76c8d9b3151f40779472357a9eaeb1452ed458643d23c033c6", 0x9b}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="211dae91d59eb6b060ca84fd7f15e6493f383f0d4299419875ee22dc34a5a2ec88460e7873acd2069b7ddf50410bc76581648296617d50c106d438894cf877d88278e86760e0c25035be522956343370189a15dd7ad781ef6034d8833edc5621b989e77810", 0x65}, {&(0x7f0000001e40)="b33c386ae4638de3e9d8a50e010db6121994ef3d7fe4eb9c9238109a77612095997b4db25569bead0df3ae73708b940017c0b0c3f5dd9d4ec22e2621dd3e7307", 0x40}], 0x4, &(0x7f0000001fc0)=[@rights={{0x2c, 0x1, 0x1, [r10, r5, r4, r8, r11, r4, r12]}}, @cred={{0x1c, 0x1, 0x2, {r15}}}], 0x50, 0x24040805}, 0x24040000) 2.764746506s ago: executing program 4 (id=1430): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket(0x11, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket(0x2c, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000080)=0x100000, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) close(r5) socket$xdp(0x2c, 0x3, 0x0) 2.672830701s ago: executing program 3 (id=1431): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x4, 0x7}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x9, 0x2}}]}}}]}, 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c0000040000001400018008001600000000000600060088480000080002"], 0x1034}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c0000040000001400018008001600000000000600060088480000080002"], 0x1034}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x6, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) unshare(0x400) bind$rose(0xffffffffffffffff, 0x0, 0x0) (async) bind$rose(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, &(0x7f0000001600), 0x0}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000140)=0x8) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r6, 0x20000005) (async) listen(r6, 0x20000005) socket$inet6(0xa, 0x6, 0x0) (async) r7 = socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x3, 0x7) (async) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xa4, 0x7ffffffff000}, 0x0, 0x0, 0x1, 0x9, 0x7, 0x75db}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xa4, 0x7ffffffff000}, 0x0, 0x0, 0x1, 0x9, 0x7, 0x75db}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) close(r7) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) 2.568227304s ago: executing program 2 (id=1432): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x3) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x14, 0x603, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendto$packet(r0, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb100000000000800400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 2.217907385s ago: executing program 2 (id=1435): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_newvlan={0x88, 0x70, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x97ec0ac96179228b}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xf}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0xc00) getsockopt(r0, 0xfb2, 0x0, &(0x7f0000000200)=""/78, &(0x7f0000000280)=0x4e) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000002c0)='veth1_vlan\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000340)=0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0x419ec000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x29, 0x40, 0x60, 0x5b2b, 0x50, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x700, 0x7, 0x1, 0x1}}) socketpair(0x5, 0x6, 0x1000, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000540)=""/6, &(0x7f0000000580)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x10, 0x4, 0xd9f4, 0x421632ae, 0x1, 0xffffffffffffffff, 0x3022, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x32, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f00000007c0)=""/130, 0x82, 0x0, &(0x7f0000000880)=""/133, 0x85}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r3, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0xb, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xab3}], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, &(0x7f0000000780), 0x41100, 0x70, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0x3, &(0x7f0000000b00)=[r9, 0x1, r10], &(0x7f0000000b40)=[{0x5, 0x4, 0xe}, {0x2, 0x5, 0xd, 0x4}, {0x0, 0x3, 0x2, 0x9}], 0x10, 0x28c, @void, @value}, 0x94) r12 = accept$packet(r5, &(0x7f0000000c40), &(0x7f0000000c80)=0x14) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000cc0)=@req={0x8, 0x91, 0x1, 0x8001}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000f80)={&(0x7f0000000d00)="9241e8e63225f4fa62647e4185d32d61ca5a78bd8dd3266d98994f1a74940738e4b25dab53e6a4cf9cd5bfa5cf1b155cbb64ac65f07f8018642042297efbc7954c64e4eda86d0099a6e7f44dbca7a0f208a5a26b02e0f2c42d31ee309a127d45a31305f110d578fa62cae4b160198be41a7bb62fb2ea10102dadf1d14fb46179ea6d13f89bcc2a8e", &(0x7f0000000dc0)=""/110, &(0x7f0000000e40)="2690e81d382341d4c53b48c73a722b39fc616a64505a18e0ae7f1d8d138cb33fc5409fd23baa257f4a68191db6702e63fc6b3a81084441e6791455785f5932", &(0x7f0000000e80)="6e4e2572a5c624802324ff81cd69b388d29c80fdc2b5fbe4a1260fb34e56b80cd63b101334bf8f39a605b12cc2cad9735c07b04ac481bd419d1d4986b738e5f1bf22d2c3ba392bf5f6035192b5e328f3f586598fa21dd33edeeaddf7d502be7c162fc06d77a8c82c34c78eedbd6ce6517b4ca9b19550d52f5ea81f9a343f03879244e6d6733b3c294f05d635ce030461cc869c1a702310877560335d3d988bb8c578c9b23ee99936ab4dc60cc7f7d26fd766ac1df390fc23f51a0aff91d210bec715ade7c9a1d1ec14f8c0ef6f3324af6a378540a4ce159f3b", 0xf0d, r7}, 0x38) connect$inet6(r4, &(0x7f0000000fc0)={0xa, 0x4e20, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) socketpair(0x11, 0x6, 0x8001, &(0x7f0000001000)) sendmmsg$inet6(r5, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="13d1b140509d16460c23f9e75a3b805242e3de06c785f08010cebcf65ab577df5050f66f8222d8aa97f56e13d4e02f596b411fd20ed2c64b49bfff5f004575e2e29ce06c2de3371977bf30f6890d7c0ea791edefee932933d216770dd6c3424fe2a4d8d93506cfb484af0f3c397b914e8ede20f2db113cf714ca72acc648678959844b82a70a9e5e4efb7112be3d6eb2890b36d0d3e2808db5920de7908d5146d8e6e00a49cbbb908850d6", 0xab}], 0x2, &(0x7f0000002140)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @rthdr={{0x58, 0x29, 0x39, {0x16, 0x8, 0x0, 0xc0, 0x0, [@local, @private0, @local, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x70}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000021c0)="d74abfdd2278e3ca912497f4ecaec0cab9843b43036cd5e59e1713786c4cd2040cebd9d75d86471bec719cf3cd7d0f8f61294d2e189c092c6c0614250e9d1893c4fbdc03af2c76d54816797324b9d1e27ca7f9311d7bf5ed3fb4662bb77a0e0bf7b37f3e71c24039bae512b64f1e63e2e2cd17f4c14ceb88b69ba2899262bc07562686572c0cb116011cadcdccb3198e9aca1158688bd6a26297cd46b811309ec0951b2b0940f0b45f681723f05ce12ae7a878a2908a7128eae8b58aec11262e006fb2e095", 0xc5}, {&(0x7f00000022c0)='\bI', 0x2}, {&(0x7f0000002300)="063e01b1f9337b8b758af77a9593e4c90a", 0x11}], 0x3, &(0x7f0000002380)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xb802}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x30}}, {{&(0x7f00000023c0)={0xa, 0x4e24, 0xb9, @local, 0x8}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000002400)="5138a65cd0edfee4f228d042d758c9ca33322708ac86b4204a4c0bfe5f74ed5a854c1784a152704d36de60950a8ccf2ce568a6117ab520fa7b6edca9a625023371f88eb9586d5026ae5cda82b6103edc1a1c787a35b7f603692abd6e5322286e289de6848e15a6ed33417bf9", 0x6c}, {&(0x7f0000002480)="ad9a75f6b6d0aec976b3930e6792d792f7abb083fdc512b4feea342d4ddd1d8cc2e4bd120783439269de9139937a40366d98d0aba227e76b9ce0e06829fdd08b39735fc71769653ec4c6c714a686c7a3e9e81bdf3f98681fcdbfed5fa073be21e5197f56a436535520a58ad269825a2a0fa789d1cc5f5a59f29bca15bd234f6ee7d9887e", 0x84}], 0x2, &(0x7f0000002580)=[@dstopts_2292={{0xa0, 0x29, 0x4, {0x0, 0x10, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @enc_lim, @generic={0x1, 0x5e, "2037e92234d7cad233190d93e9521b0ad9c0744c7aa642bba207c7f42a56921516a2ffda10adfd68bcb6a07ede3a2f9248610a9fa9d0ce3dd8d6c5b710f854870cf471553228706e3afdfb9adad000b1106529f681af88a46ec0da2907c6"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x81}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x26}, r2}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r3}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x5e, 0x6, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1d, 0x8, [0x6]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1a}}, @pad1, @jumbo={0xc2, 0x4, 0x4}]}}}, @flowinfo={{0x14}}, @hopopts={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xb5}]}}}, @dstopts={{0x1d0, 0x29, 0x37, {0x5985ccf7ad2ee30, 0x36, '\x00', [@generic={0x3, 0xfe, "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"}, @jumbo={0xc2, 0x4, 0x44c2}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x80}, @generic={0x9, 0x92, "5a42a0097b156bf8e2e0237465730cc5dc4cd7ee4f309a1d4f7008859349c870a267d119b9a731ecb87b4efc24caa5efdee2f103ed81dcc8a7da7172e1e29fb58fefd2d23b87596d66d856155f9e8679367cc855756e22c05032cefe164604f7835abea53e167f17dbe92e0a65845a879e9b6ac25f1f15a22940c091b6eeabb84def42a24389a7dc212653832226a8f77253"}, @generic={0x7, 0x3, "81eb82"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x348}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002900)="c68830bf02b7015d7067e135a890213f80fd6492275b54eb9276fc34bea4d86e86e209db25d970c6032ae3fc78c749eab18467bce09b23492acd4d22e2fd0e769b0ec015104c8f258df8cb97437b58cca9a0e79558b4332c64ad7d3917c9cc30f8d06cfc442e3ee21bc389b04f30351259d59af79d548178e4db67520b68f8fdc27132616b73c758", 0x88}, {&(0x7f00000029c0)="7f52dd5b2a16464ea6bc4159dff53e525ce5fde10506bbd1cd74153da57eac283ccfd2c6fe55188bfaf8721efc61371c31dc66aa", 0x34}, {&(0x7f0000002a00)="68ef93826ff622fc16014642e9562fa2fe2e06", 0x13}, {&(0x7f0000002a40)="138a4d7f555319", 0x7}], 0x4}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)="3d040cf4cc4ed1c539af10b0d04cb219aee31018c1e48848322f44be2f1fe1e0635bbb5663b673212709edd48a5979c0a2de743c6475d875c5eac30c100253de019599e20736d7e20826e7d0bbce240953c6a0bdc460a7e1144fb9267cf4360d9a0e4d7fa2216bd1e9c6a6a90012ed773b467e1e319add59f58fabffb3f019e22cf6508c5248923bec3d1b9d8c82382af43e2616792af69ddeb97b55e0a38008d8d6cc3f8687e52e1131e47b52472f3bdbb112260359c9af5886", 0xba}, {&(0x7f0000002b80)="a0bdb2b3a40cce37423dd8ec6b527de9e8d68ae9e09d503f837f70db4114c1106ddb1ce683706dfdf97eb454f9437131b7609b07023feb6cb969175ba3fe618fb6a9557bd8d1b97a2b6246560787a269efc2322c1fe6aba95c3da49875376a1e3725082f0d819691f761519ea79e677f8051afdf79a1bf4ee71031c666206dec6642a8ca0862cfc402104338250ad9af3a42136fb884449b55261a844cb08fadddf5", 0xa2}, {&(0x7f0000002c40)="ec49b436b31702704edd238075218fcc21c242b1f3b05ab04fd66802c9eed4abae6053d92bff98758c1092da4b6dcebf6c4cc010ec6aa9721f2578b25ba8f1f7690a13f1f23f878f3ee211c03ea35102a319616884f3a4ad40a5916393be6169a9ddbe47d5217c0126d741fb54f0df185189074f0b09", 0x76}], 0x3, &(0x7f0000002d00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x3c, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0xa2c7}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xe78, [0x7, 0x0, 0x5]}}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x18, {0x3, 0x4, 0x61, 0x3, [0x4, 0x7]}}, @enc_lim={0x4, 0x1, 0x81}]}}}], 0x80}}, {{&(0x7f0000002d80)={0xa, 0x4e20, 0x3, @local, 0x4}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002dc0)="f2e4f7afde93b04e19552a49fdc552c270f580177bac51936d1b5fc995fd81db5ff7a35b9c8ead2e3d7fe647462f7dfc0460d87d4b238579b5d31aba4784d930e1c36ccd49e712d62c4ff0e95c829d12e5b94d0367a1748297f3f5919143dbf39dbcae6e91b52d6abad3068f41b5bad647cdd8b19f82453bcd3a6eba4a5640b87fdace05df87db789ca0cab02701d9c85bde81e72fa4a4d2998af7", 0x9b}, {&(0x7f0000002e80)="c841b1580b53931c1d51f72c926efe8af85139b79a336109e45fa53673a89692bdbd02d706d9069589cd336eef4b311e8cedc5feaba7403f4e66523915ae9edaab414668eee075fc0b9167e90a46b7ae9e30403490c674fe41974622b204a8e7ecbeb7ae0ac3e5ece2722aac859d865897d544485fd080970ddbb160ac31d0a02f42", 0x82}], 0x2, &(0x7f0000002f80)=[@dstopts={{0xe8, 0x29, 0x37, {0x62, 0x19, '\x00', [@ra={0x5, 0x2, 0xd95}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x9, 0x8a, "8d753018ab15e6708715f33631d855f8280588ac3dc9a8b178424120f0b8e91549255bda6a641ed1d576de1ed93a4b695da5d362c4f72e7e941e0921bf43816eaf7ab340dbb4a39b393f3d3793b413c8ac40547b64b5bf04346a6649fb7b9d5a4903bc9d2f0f4337b421ace09cb88fdc099cd67b6b4de399db20e83b242050c1386f82e453d0a255eaf1"}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x8}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x3a, 0x12, 0x0, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast2, @private2, @local, @dev={0xfe, 0x80, '\x00', 0x31}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5b3164335944721e, 0x8, 0x2, 0xb8, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @mcast1]}}}, @flowinfo={{0x14}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0x4, 0x1a, '\x00', [@generic={0x9, 0xb9, "85db46f8a1ced510a4b2d93faae4087b0d3fc3fb4faf8c71e6b30909a7e405181ca65c1bdd9b24e6a8c859db7aca4838dba3e351a106ee3bf861c6160704938596c1db4a786d60cc13e2c8fefba8b595c6ae413d98384bc9dbb9ea08e9e249c6f5d767b6e486688ea81f1cb638875254267629f4a3fa1fc618f75d5cef716c0612f24bd1ba66c39d0c679d9de1296aa3677db39f053265af6810a2edf5c7d7896bca56b8a1048ccf2b6509ab63816b656a5d2cdbbd60f0b8a9"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x6, 0x3, [0x8, 0x3ff]}}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x1, 0x3, '\x00', [@generic={0xe5}, @jumbo={0xc2, 0x4, 0x29}, @enc_lim={0x4, 0x1, 0xf}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x338}}], 0x6, 0x81) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003780)={r11, 0xe0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000003480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003500)=[0x0, 0x0], 0x0, 0xce, &(0x7f0000003540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000035c0), &(0x7f0000003600), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000003640)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000003840)={'ip6_vti0\x00', &(0x7f00000037c0)={'ip6_vti0\x00', r13, 0x29, 0x1, 0x0, 0x8000, 0x5c, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast2, 0x0, 0x7, 0x101, 0x2}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003900)={r6, 0x58, &(0x7f0000003880)}, 0x10) r14 = openat$cgroup(r6, &(0x7f0000003940)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r14, &(0x7f0000003980)='memory.swap.high\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000039c0)={0x0, 0x8c, 0x0, 0x8, 0x9, 0x8000, 0x3ff, 0x6, {0x0, @in6={{0xa, 0x4e20, 0x2, @loopback, 0xc063}}, 0x8, 0x0, 0x0, 0x80000000, 0x3}}, &(0x7f0000003a80)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000003ac0)={r15}, 0x8) 2.163836631s ago: executing program 3 (id=1436): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000000000000100001302000000a982070104"], 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9a02, 0x0, 0x90, [0x0, 0x20001100], 0x10d, 0x0, &(0x7f0000001100)=[{}, {}, {}]}, 0x108) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0xf, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x14c8, 0xffffffff, 0x1130, 0x1200, 0x1130, 0xfeffffff, 0xffffffff, 0x13f8, 0x13f8, 0x13f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x2, './cgroup/syz1\x00'}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1528) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002c80)={0x0, 0xbb, "84db69aa86dec162faf8adbe00fbd2ad95224a6b85d98fe7d03fcf3bed2c58dad4cb64d38df343f87c3565abae278afaeef891da49ee16528495991b43ba0ca10d1383d72605cad17dafaf1724bb4ad9f2ab39964e5048b530c0e6ed3d4ae77ea5edd8213570d6a97b0e30418145c932b0b2a94d1dea96a356417257b3bb7f6ad4d222b957c92e51ded45e082c13e6566c00f402238dabf7e27b77de3773aca6cf48942faf6ff954f0596fe72e73c197680bd70e3d81d2aeed6dfd"}, &(0x7f0000002d80)=0xc3) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) sendmmsg$inet6(r4, &(0x7f0000001080)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xfffffe01, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}}], 0x1, 0x7ffffff7) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) (async, rerun: 64) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64) write$binfmt_elf64(r6, 0x0, 0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200), &(0x7f0000000380)=0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x5) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000002b00)={0x58, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xbcc1, 0x6}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3b0}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x0]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "cfb2"}]}, 0x58}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f0000002a00)=[{{&(0x7f0000001540)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffbff}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001580)="d5fbc81134abbfbf24eec8b52905c7d85f0d52efdcc111034d29d5e9e0a7214b870602ae0fe8491d346a62432269261f6c1ac7b065cf7030950a9f8206aecdf77da9471405460f6bb65eefcf99eceec2ef6ab3c27f319d629de33627bb9663e9669e60f2726612c32b3dd6a70c6345d2908887f75138c8ddcc75a4db7f8d6afccaa4d02099fcd18763e6172d9816259e", 0x90}, {&(0x7f0000001640)="7854b1438e04cdbb8aec70eeedc21e71f0d28a30bcc892f3e033e796047cf37db8fbc04010c8ade7972f6480aa2164b3b89d40658310efa4dda3a29c8bdaca710330ab3ec120658bf7cbd831", 0x4c}], 0x2, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r8}}}, @hopopts={{0x1a8, 0x29, 0x36, {0x87, 0x31, '\x00', [@enc_lim, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x400}, @pad1, @hao={0xc9, 0x10, @empty}, @generic={0x40, 0xb1, "461c29cd97f945e85e3162c3681db3cb434f535bfd970c86bf417d1f92bb0949b4dc56b2a02b4288f1b999f878292f9cc43010e0f171f056c51f2bc0a5bae138e9a8604d6e041c53fdae508413c18464fc1e89210df72991f6b032949118c9663d7a57caa553b4f0de2b568561d1c0a6b6c86330ac8c1e1da3cca74cdddc4f2bbdec85a967fa681181123dbd05f9884f5871002790673e1d9da3843478c19b47ae4e3ed682d864fc50bfecefcc059f767d"}, @generic={0x2, 0x47, "392d665e89cb95dd35761ff0abe45d4a27e13ab908c830639b9ef9e060e7e921748d52e465e57f274051265ee96e7ddcbb204f664c07e8c3bc549316ffa9da6de126bfc31cda3a"}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x3, 0x45, "aa1236f4a9b44b209c29ee598759b59d92334537f0dda800c7a04b62cf07222636734e4cde447ced8b5d5fea6677b96fc2fd40018eaa1620eda203753d809b080b68c70569"}, @hao={0xc9, 0x10, @loopback}]}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x3b, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0x26, 0xbe, "9b953338425e104610848e5c11b4be6a4ecefbf0714f94b011698be36149eebb01daf362e240c6b5ca1ddef7107abd944f58b94a204acc19d7df69516058450b92427e03c2e3be66eb7f6fd7d3535fc8e367ed8506f1a420cdcaa0169125245815f4b752cf77b957fca666f27adba025dc1ac16da09fccad571857f4a1a1f7b1ce5c258248e68fa18bf40ac39e4ef18dcb5ffdf309e893c38d2d57c3c23d6bfbd36c1d8b9b4d86c3de7e93e567146890f681ac48b1edff930c08c253dd20"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}], 0x318}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001a80)="7ca180821f235b90a2042440d21fcc86fd04e70019b5c6f44ca7c52367372e88543daf24e8c67319a0eb59e0224a7d5451a0b4da2c9b981dc478af5e2b6b4cfc2ccdbb429fdccc0ba5afc8376101764989ea3bbcc4d60f1c8b4afbe0434a142a87443ef439ec4f57c6", 0x69}, {&(0x7f0000001b00)="30fa4da2af42c825bc41942f1ea376448150cdece3ec22371ad8c76729ee251e5740e75cdfbe955552909d44e32e3eefc9ca8c9c034b414db84fc9f9a85f10eb4f0c3a5a1585a52839cba657302bbb39fe6e3fc9c45e9072303ab510e1509a3105e8223ac641105f4354f4b24ca38b12d95aea790dcfd006a124845992090ede0855e36106fa67d8e431e79d38420df6501078c1aa179fcafa328b6953c62c98a703e2dcc203fa361fb157a0c792e2cd4099bf17e9cd0b09274f2814402bec4210f2958e72bab56993abc4b31a2f966f000fec80ca8f204fe3380360222eb69ab49ba2051d7d8b1b34", 0xe9}, {&(0x7f0000001c00)="ec962e8b06", 0x5}, {&(0x7f0000001c40)="714886d1effd196e2cd25a7f6ea05bc9e9f1930cef295e9eeb76a9c574135c97916b44a3191f23d5f5d46d9422796148aa773b7af164f9113343c60587a9a13fa1eb50d7d3565281024919bd5fa19de0fccb2ea93b3d55bb9ec82cdb8c669e5f7f6e9b9ae08c9b1e10882762a0f0e91a6aea3bab339edb54dd8fa8b389fa8ac33277106d84c69ddb41ed2f801c9df9386b9b9a2f03952d6dec55963b36cb1720cc02cdd4f66fcc3523fb218c8a36788d293b0d207742e37868e7d3345afae1027893f46ac5ec7ed3ea8845decd4c2ab22cce1fca4278f96f66cba02b26c81e211524df233457a9725d740afe48dfb144541f44a8", 0xf4}, {&(0x7f0000001d40)="20d86fb41e53a3051ea69e00aa3f8fa26d0a10d701abd3d5eff95848a086b6f26516f2f5c1b69d28af0699167bd36343ff8a4457cb0ff168ae374545703eb23ce84da53398006f758d1566badb57bd709ec1fc7b2706fef22a2adca715ade372decbfe2a5d0773cc24243bbf68968a951c53f9b15dd6d9084da2479358db74bcbac186cca9b36dddcc078c225583fa06054303ad00f37056", 0x98}], 0x5, &(0x7f0000001e80)=[@flowinfo={{0x14, 0x29, 0xb, 0xbf}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x87, 0xa, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @local, @dev={0xfe, 0x80, '\x00', 0x25}, @private0]}}}], 0x98}}, {{&(0x7f0000001f40)={0xa, 0x4e20, 0xbbdb, @empty, 0x7}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001f80)="29251c7cfdc3541cf4", 0x9}, {&(0x7f0000001fc0)="6a5a0fc1a05c5bf4ea3eda547eece704075c22357fc821a0d41f5c96306affeddd189b6beabebc05626ff0afca3391023405b44b2b9a6abb02aa2697175d2f20b458dafb72323d589529a942125f16043fe834a274930ba081efed22c35c35f0888276f8f36473b1ad9713", 0x6b}, {&(0x7f0000002040)="b0267d98fd633cb516b747ae92f5288092fcbe267133719ab8e6ebac77ff4ab18f2e1aee2214b68744420613ba7c0c3a48090935a994b0f755d29ea0ba51a30dcb233d3c9ae88936c7b3562490d4882d9ff9d9cc4ce6d0a49b410c0b943abad6858942d510e3e46a272865e1dd3681315471b5a2d2a740671f54f777fe5b95e0b7a5f6b7bb32f031d21d2cd8561c33bee00fb0e0749729f627ea50f3332152", 0x9f}, {&(0x7f0000002100)="f7f591874fca9768156280becce6d3ba3961570337f85c160b990cda691bf244ccab64c51e178ddbd0a4e8e91e31fe312d5aced26d41bf49de3601cf0974d2391efd388b3fc65282005e3e4263eacecb22938b3ac01a310b4bc07f908fcd6c0cf233554ce8edbdbc51344d052c6891a5e734352613434e2c331a12d5f4b2c5eac7cd18dae1a8e0fe57295eb4e79756c2c71a5d97a2ccedfe1e5ed12a1bce36c43110349cbfdad4fce84b842c2f6e0bf58045af660dae71871bedae25f0dc265156afa6553473ec2f9ae88050f47b5d5132f543edb0eb", 0xd6}, {&(0x7f0000002200)="e9dce33bc4350271a9122811c22eecb8f59908dc9e60949e4160f62e75dfbb70aba6e5f300bc21f5f95199c4d06852f1f090fa1eb3f813f6f2bf91c43b8545a7708fd48495e9ed9256de8cab7c824f4ec954aba4e0918d6305632bfda014629dbe6bba7497a6a8daad63f7f78abdbd0d3353f6b1bee03d942ebed9e89abb", 0x7e}], 0x5, &(0x7f0000002300)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x2e, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0xe}, @ra={0x5, 0x2, 0x9123}, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3a, 0xa, 0x0, 0xfc, 0x0, [@private0, @loopback, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1, 0x4, 0x3, 0xd6, 0x0, [@loopback, @private1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}, @hopopts={{0x40, 0x29, 0x36, {0xc7, 0x5, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @ra={0x5, 0x2, 0x8}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @private2}, @pad1, @jumbo={0xc2, 0x4, 0x7}]}}}], 0x190}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000024c0)="413af3db9f7955a656894e458dee1f740eb04154a50f8f95d83225b50da47f03d0a040997fa4020428377f4800035ff8c79f3781c1caedd386f58953bc579780c2c4142a034937ef9920796eeea280c8dd87d829bb9e055df1787a2d085160a100d46643cf5be1c9bf2a35357ded5cb8b8306d9c0f62f35db0f29bf4f115bdefddb7e1013f405d857dbdc3a4bc306a5099d44883d78a6c6d9fb290a2c3c0d0ebb2013bc5ce61594571939eecacc563f34c5c2f6381b65448ff4e6cb7fe", 0xbd}, {&(0x7f0000002580)="7e19129f76ab209d41e2809f36999e7d44238e26700b39e35044959714952b8fac5dddd61fc62ef56f2f2cf5868ff235e2d30367e2d53adb7948a28d10e223b7896f60550187ecf024c9a61566c93c8c2dece1d9ce9f35769c4fdae8095e567166fe41", 0x63}, {&(0x7f0000002600)="07a28ccaf2b6794929c5aa4030151d158def977e160bf37d85ae4690f3e226a15c7b378c59b4515c6bfa1d8130ce9f9aefe0c94783716678603dd511daceda7a7e42f11f365315a30c9e61db862371194ab7f104f240385f", 0x58}, {&(0x7f0000002680)="5f871c979e1d3d813e90dbff9508de1a1e9bf93afdab2331193e25653a2fbb26f38671b6fb5de7b0407c1ab0e2c04512b36dabd9ccfef0f06d5070175932d3e158dcc3ead275128ea75794b8312977f77a2ce96b5641a92abf8b6dbb5a0058b4f20665cdf3e31e5b1927ac8700f0036bbe44a7d9a371a636c439256b7bbdf1921a39eb8566a37913948765ae7777f044fcb59d6ba9488ac05df390425df2726b2e6c10ec6099cb65de2ffc266970cccfec298b0c1695418b93a096b265ad13ec2ee7411bf61c2c7ffc7d35ffbd4eff7593b5dd6e8127e4c056c4ad112219ac35115dcf47", 0xe4}, {&(0x7f0000002780)="69178c115f85ec6fee17657fdd6a10577517d544f795a6dc3ea27405c8741e72ef704cf343975770011be148e68572a4330a924d329716cba32f499e4272ec4543ab872cc7e5", 0x46}, {&(0x7f0000002800)="ff1d4210bc594f5f2a6e846c1084c11a78f73d07bb96bd1a25a2cd5d7312ea034ef5ec26dd2f2604299c49a97620062ed87c6b29c9dbbe67ee64489d26aa992cfc75", 0x42}, {&(0x7f0000002880)="6082d1ebbbeb6d57eba205a684130932e9e339d4b1e6ebce6e094dc17ebba2d9afa2c77f4c8502a3daf609579b2c498c468a6d41fd292ae0db36", 0x3a}], 0x7, &(0x7f0000002940)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2f, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x100}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hopopts={{0x30, 0x29, 0x36, {0x3b, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x4, [0x4]}}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x5}]}}}], 0xa0}}], 0x4, 0x4004040) 1.938072222s ago: executing program 3 (id=1439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000000080), 0x1c) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x40c6, 0x4) sendmmsg$inet6(r6, &(0x7f0000007dc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x4040000) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x87c5) (async) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x304}, '\x00\x00\x00\x00 \x00i\t', "c680c7fc63e600", "9f0f0130", "eaa0f45b390a090a"}, 0x28) shutdown(r5, 0x1) sendmmsg$inet6(r5, &(0x7f000000ca00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) recvfrom$inet6(r5, 0x0, 0xffffffffffffff32, 0x40010043, 0x0, 0x0) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bbf8c07", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304, 0x34}, "a9b5c6deba0eb9bc", "a8b47cf5e2a5fe99e3d1e3b179fa23c4", "b68c138e", "cba837614597f417"}, 0x28) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b3700000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="b6009900000000000000000010001d800400008008000d8004000280"], 0x38}}, 0x0) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000003940), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000003980)={0x58, r7, 0x11, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x2, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x157}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.729604954s ago: executing program 2 (id=1441): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket(0x2b, 0x5, 0x1) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x9}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf672}, @NFULA_CFG_MODE={0xa, 0x2, {0x7fff}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x1e}, 0x1}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000017c0)={0x1, 'vlan0\x00'}) 1.614936353s ago: executing program 3 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="1220010000010000580012800b000100697036746e6c00004800028014001400ff02000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="080001001df4132584", @ANYRESOCT=r0, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES32=0x0], 0x80}}, 0x90) 1.61418014s ago: executing program 4 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000700000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x1c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x24048000}, 0x20011) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[], 0x90}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x3, 0x0, 0xfffffff7}}]}]}}}]}, 0x68}}, 0x20000020) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r12}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "d5a8912254e1b8d6"}, 0x10}, 0x2}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018", @ANYRES64=r2, @ANYRESDEC=r12, @ANYRES16=r12, @ANYRESDEC=r6, @ANYRES64=r3], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) 1.364214987s ago: executing program 2 (id=1446): syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x40) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600053582c137153e37080c188002ac0f000300", 0x33fe0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0x2e, "9e8c5b652e4d566109abf94f662fc720c4b1ac8054f8a1f12ef5a7c49756c94f6a01c251718c918335d7beac3669"}, &(0x7f0000000300)=0x52) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2000000, 0x1, 0x0, &(0x7f00000002c0)="fe", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$bt_hci(r5, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000000)="11") bind$bt_hci(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7d4, @loopback, 0x27628cc4}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e22, 0x0, @local, 0x2}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x5}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x74) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) 1.363538424s ago: executing program 0 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x24000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400090000000000ffdbdf2506020000"], 0x14}, 0x1, 0x200000000000000, 0x0, 0x4000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x10, 0x0, 0x20, 0x0, 0x0, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x40}}, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x2042, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x86\xdd'}]}]}, 0x24}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @random="e6266756da16", @broadcast}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, [0x0, 0x200000]}}) 1.125914482s ago: executing program 0 (id=1449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000060000000000000000000850000001700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) 1.07606854s ago: executing program 2 (id=1450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000240)=[{r1, 0xe25c9a466c376ee7}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x6, 0x1, 0x801}, 0x14}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)={0x84, 0x2, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x47b}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8}]}]}, 0x84}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000740)={0x1, 0xfff, 0x8001, 0xf1, 0x5, 0x4, 0x100, 0xfffffffb}, 0x20) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r6, r7, 0x0, 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000580)) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r9, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000780), 0x8, 0x9a, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xad, &(0x7f0000000300)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r10}, 0x10) 1.071943309s ago: executing program 1 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB="3cddfff1", @ANYRES16=r0, @ANYRES16=r1], 0x3c}, 0x1, 0x2}, 0x0) 995.680512ms ago: executing program 0 (id=1452): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xb4c1, @remote, 0x1}, 0x1c) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 973.960338ms ago: executing program 2 (id=1453): setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) unshare(0x28000600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) shutdown(r5, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000003c0), 0x12) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r12, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00240002800800010010"], 0x54}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000200)="67fa942c45f311a14c709f7b04c3eeec8542f36849fc", 0x16}, {&(0x7f0000000240)="469295cb3f08a29bd880e88110e7677d0190977b345516858d72e7f46a2e76747726d4795f103c9f2bde45154504098def1efbcdf785fed9567d95e90241dd48c2f47db2cc00302c907614fde7f4df5b4ed448143bbd4ea37db6f974f339f3775a4d518e761964ea25a1545f1322c45f084f3649722daf3d2ec7808bdf995394ebcaeaf57a972da4a93cfe7a4491aabf2363786af87011520423292380adbe4ce8df9a79f33612655accc149e2b3cd493c6f3830cf", 0xb5}, {&(0x7f00000003c0)="d46ceffb36a14b87c25f5caebe337225eb49b31f38e108725b9f339ca004983d72ab21c77e4b7dd854c9bc602afc07629d80ee80ab097c12c1998c8942a0bbfefc8f598260a58753f19dcb578cc9b38e387dd4896b5fa789434f49eaae689afc87bbdb20acbae5b9ae5ea0966b9770475464d5cb24b1e351da2b7b09f79c468ac11570476dbcff6bce0bc53130efffdbf302171e2d2dcabfd8ac4a025d0bfab622cbfeae560bb73ae14025dfe58fdc8e9374671063d8006249e0894b81232602a0f6b44e733fc7ba6e39bc347fb466d3", 0xd0}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="0cf9527dccb7d86a07b3b97d8dbd507f09fedaca9ffdb1493d97479ee65eda448b1a033b53ecd2e77f05858494a76b8252ed2dda9d4c799ada74e1cd010d64eb7246226786d6c740d61a8452d92da8dd3de42665069d41ed62b9987a052ae7b71f308d3522213055f0f8f736fbddb210b38fca8cdfe14853750eb671a8adec4af24d50b843bc6e4b2bcaf25d78ff63211a69f4e440c4945d6c543291dd045d369087cc93bdbeefeef88920036e6a92a9147630d717374beb480b4284973024b3d719976ac1752b0f7b75a16a0d00d07870bb09e061fb0cd5a19c51d3abacbfa3e5b77377e6", 0xe5}], 0x5, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0xded}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @multicast2}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x2a, 0x3, 0xe, [{@private=0xa010102, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4f}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x20000000}, {@local, 0x100}, {@loopback, 0x4}]}, @lsrr={0x83, 0x27, 0xe, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @remote, @rand_addr=0x64010102, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}], 0xd0}}], 0x1, 0x1) 832.738091ms ago: executing program 1 (id=1454): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x40800) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r3, 0x301}, 0x14}, 0x1, 0x3000000}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0), 0x4) (async) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x1}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="aa2347b806", 0x5}, {&(0x7f0000000140)="3ad5d0ff87512b3437b29f4a53911f361e33f93e52d05f649031ff95156c52f6506fad3eb7a9772f40bc438f88e35392813a02124a5734c55778d80ee4bb94801203f100c8dcec5a98a314060b77b04a354aa7862fc173981f31fbe8d1a87200a5ae4e", 0x63}, {&(0x7f00000001c0)="2b0cdba6bddcee51e151868d70595766e44e7e7e81ffa3dab473e54b6b2bc4e580cc479ec07c592c69f89b307e8ecffcd9e3343691ae529805e814969de9dc692da9534077b29d269481c17747db878719a9e938634e92cbe5092205095246095d416071d71851252ea8c6bb3c69c7b88204375f507b98e60cecf27d633aeeb831db0f265ed1ac19e93c14", 0x8b}], 0x3, &(0x7f0000000500)="9348c5d5e5f0afb8ed40281cadaf168aa7a767cfb72661ae231c8d6e7aa851894cabd3394a033f095b10956001978aa4c6ac5fdbbebca7cd298ccc55781e4ad6e41db1037e38594a90529acc477506ac645cc31d0e21deb7ac1897749ee1b170feb8f161be9fe4a68be2b6b713b32ba6370ad3a10a3ed5fa80f7d0059e8c4442e26259e3700716e8a1b77956367f7bbc0b77e0113da84763d46d965d315bb5c8d4e89133cf9cdb5500988bffe0244c66e1d573832e0a3a78962557988fbaa06e44b82970dd75b3c03dc8cf47217af238bc", 0xd1, 0x40}, 0x0) (async) socket(0x29, 0x2, 0x80000000) 826.175544ms ago: executing program 0 (id=1455): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00060000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)=@getchain={0x54, 0x66, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff3}, {0x2, 0x5}, {0xb, 0x10}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40045}, 0x2000c040) (async) r1 = socket(0x11, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2fa8920e", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c001600ffffffff00000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x1654, 0x2c, 0x0, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x3, 0x2}, {0xffe0, 0xfff3}, {0xa, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x156}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_route={{0xa}, {0x1604, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x85}, @TCA_ROUTE4_ACT={0x11a4, 0x6, [@m_nat={0x107c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xb2, 0x7, 0x810, 0x7}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5ba9, 0x5, 0x5, 0x2, 0x2}, @multicast1, @local}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x124, 0xb, 0x0, 0x0, {{0x7}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xf5a}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x3e, 0x6, {0xd, 'filter\x00', 0xf9, 0x8, "619efdf6410c0866779056c5da5d11243f92db61"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0x37, 0x6, "231f1f8267c5877a263eb00e744d96491b7a0a980294f02147834c5027ebe7fae50ffd595e41cc88f0b920214c69e42fa739dc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x8984a11794ba30c4}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_POLICE={0x42c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x750, 0x5, 0x0, 0x6, 0x5, 0x6, 0x7, 0xde5, 0x5, 0x6, 0xfffffff9, 0x0, 0xe, 0xce86, 0x0, 0x0, 0x4, 0xfffffffe, 0x2, 0x2a, 0x6, 0xfffffffc, 0x8, 0x3, 0x2, 0x4, 0x8, 0x4, 0x4, 0x4, 0x8, 0x2, 0x200, 0xeb, 0x6, 0x7ff, 0x4, 0xfffffff7, 0x8, 0xa149, 0x3, 0xe2, 0x7, 0x6, 0x0, 0x7, 0x400, 0x2, 0x7, 0x100, 0x7, 0x101, 0x200, 0x1, 0x6, 0x7, 0x7157, 0x101, 0x80, 0x9, 0x8, 0xd7, 0x4, 0x3, 0x10000, 0x1, 0x4, 0x5, 0x7fff, 0x9, 0x4, 0xd, 0x8000000, 0x3, 0x4, 0x8, 0xf, 0x2, 0xffff, 0x2040, 0x7fffffff, 0xa7, 0x9, 0x7, 0x7b, 0x6, 0x800, 0x82, 0x1, 0x8, 0x4c, 0x8, 0x7, 0xfffffffc, 0x1000, 0x3, 0x8, 0x6, 0x8, 0x7f, 0x3, 0xe453, 0x5, 0x2, 0x3, 0x5, 0x0, 0x81, 0xd, 0xfff, 0x0, 0x1, 0x5, 0x40, 0x8, 0x4, 0x7e, 0x4, 0xfffffffe, 0x1000000, 0x3, 0xbcf2, 0x607, 0x1, 0x7fff, 0x7, 0x3, 0x5, 0x3, 0x5, 0x0, 0x0, 0x5, 0x2, 0x6, 0x10000, 0x5, 0x80000000, 0x0, 0x5, 0x1, 0x10001, 0xd, 0x0, 0x4, 0x9, 0x1ff, 0x1, 0x486, 0x4, 0xf, 0x10001, 0x6, 0x8, 0x4, 0x5, 0x0, 0x7, 0x6, 0x9, 0x8, 0x2, 0x5, 0x6, 0xfffffffe, 0x7, 0x415a, 0x8, 0x3, 0xfffffff9, 0x10000, 0x7c96, 0x45, 0x2b, 0x8, 0x8000, 0x2, 0x3, 0x5, 0xfffffffe, 0x8, 0x390e, 0x9, 0x1, 0x685, 0x0, 0xaed5, 0x6, 0x0, 0x1, 0xff, 0x9, 0x9, 0x9, 0x4, 0xffff0000, 0x7f, 0x4, 0x4d, 0x5, 0x0, 0x30, 0xfff, 0x6, 0x2, 0x7f, 0x3, 0x4, 0x4, 0x0, 0x0, 0x4, 0x1, 0xff, 0x7fffffff, 0xe, 0x6, 0x8, 0xcec6, 0x0, 0x9, 0x0, 0x80000000, 0x10, 0x5, 0x3, 0x80000001, 0x400, 0xd03b, 0x6, 0x80, 0x1, 0x4, 0x1, 0x7fffffff, 0x1, 0xc94a, 0xb, 0x8, 0xff, 0x8, 0x400000, 0x4, 0x93c, 0x7, 0x100, 0x3, 0x1, 0x7, 0x7, 0x2, 0x3, 0x2, 0x6, 0x94e4, 0xd41e99bb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x40}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfffd, 0x9}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x66}]}}, @TCA_CHAIN={0x8, 0xb, 0xc57}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1654}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="1200000005000000080000000800000000000000", @ANYRES32, @ANYBLOB="0600000000000000000000000000000000000000f1a22784af8ad31b4195ea6505e58b9701f2c5b4b959f21ab2e9bc1486fdc433e03238b40e64a4b56ff911465060a934bd5d26a86938b9919bd7db0792a20b14b9d0fc0c10f99d774f4bf06e1e598cf08ab1e06bdc1a78233417c8200568dded21ea34d56d5ab458c29f8c149ea774ebbdf202f15f3e119aa3f59fdb789ceefd24f8b074f26755c9185be1a52f983b534240e072f3dbc3f7996a8f338c1716102e68b2c49ae1738e5b11ed824d18cfcd7703ef80b1c6ab39646c94ba32c72c6521c981920438c55a194e96d65362731617b292e58635a9a6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000002000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r10, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 766.445574ms ago: executing program 1 (id=1456): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_devices(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(r4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r1, 0x0, r8, 0x0, 0x4ffe2, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0) 707.111128ms ago: executing program 0 (id=1457): socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) r3 = socket(0x15, 0x5, 0x0) bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xb}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b00)=@newlink={0x44, 0x10, 0x437, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x74593}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty}}}], 0x20}}], 0x1, 0x80) connect$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@loopback, @remote, 0x1, "20000bcbeff8d9bd659759ec3cae8f21f3ae4ba2aec6f6aa71879f4e6f3bc4e3", 0x7d, 0x2, 0x4, 0x5}, 0x3c) 657.532047ms ago: executing program 3 (id=1458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000098709500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000007c0)=@newnexthop={0x28, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f00000001c0)={0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r9}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f0000000200)={0x10000010}) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 572.221873ms ago: executing program 4 (id=1459): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x48, &(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x90) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000200)=""/224, 0xe0}], 0x4, 0x2c, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @remote, 0x10001}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188009ac0f000300", 0x33fe0}], 0x1}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) 563.311168ms ago: executing program 1 (id=1460): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2b4, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x170, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "fe69ca0c642a6489267ba024790e92e92b224180e00d7f09411421"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff94}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbcf5}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0xd5, 0x3, "40a2dc314bf8a96d0c1449337e852b5af512e14e1e4450643484daacb0730076b6ab3f73fb101c60c090197a21a4e25de6630f9378aa6e5f93a7203c29cad4c9b3187a6c56344969e9c6c81427f719f6f33f479cecb61a63a1ad427da07bf6a9d13db7d53cba7fb00d24c5a869137cfcb42764b1b543800f22cc1570d2367b92a658627ac81318ba84dc66089c8bdc9d7683cdfc00da37f18e73eeb37bcedaebc0f6b4672d1ca37ad9140c1d9da8e25d7aa4e86063b7741b92171dd7ce8b81c254f26b850ff503e5e36edc5dfe94f0266c"}, @TIPC_NLA_NODE_ID={0x34, 0x3, "edbbb868aff36663b3ea069fcf4d2696da39caf0669c77cfd1f7b17b4f0c404796ad9aed9389678318804c3cade8b9fb"}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf1b4290c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbf1a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xda}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x0, 0x8, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) gettid() (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = gettid() sendmsg$netlink(r4, &(0x7f0000007780)={0x0, 0x0, &(0x7f0000006f40)=[{&(0x7f00000008c0)={0x10}, 0x10}], 0x1, &(0x7f0000007680)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x10}}], 0x30}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x31, 0x300, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7c}, [@typed={0x8, 0x12c, 0x0, 0x0, @pid=r5}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x801) 512.484774ms ago: executing program 0 (id=1461): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000008"], 0x24d8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 352.154527ms ago: executing program 4 (id=1462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a320000000009000100"], 0x78}}, 0x0) (async, rerun: 32) writev(r0, &(0x7f0000000040), 0x2) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) (async, rerun: 32) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x4) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) socket$packet(0x11, 0x0, 0x300) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) (async, rerun: 64) socket(0x40000000015, 0x5, 0x0) (rerun: 64) close(0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000050000000500000003000085010c0000050000000100000009000000050000000000000001800000020000000100000000100000000000000100000d0000000003000000020000000e00000000000008c34300200000612e00"], 0x0, 0x6d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x2}}, 0x1c}}, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000009229569345cd9b475d42035ff2b1162f776b2be3ee447a472464f3"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080)=0xe3f, 0x4) (async) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff}, 0x1e) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000100), 0x4) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[], 0x1d8}}, 0x20040084) (async, rerun: 32) socket$phonet_pipe(0x23, 0x5, 0x2) 350.167416ms ago: executing program 1 (id=1463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="000000f2321c6f00000000000e00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000680)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f00000006c0)={{r4}, r5, 0x18, @unused=[0x8, 0x1, 0x6, 0xfffffffffffffff7], @subvolid=0x4d}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001c40)={{r2}, r5, 0x7, @inherit={0x50, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000001ad8c88dff0600000000000000010000000000000021f40000000000000900000000000000feffffffffffffff0300"/80]}, @subvolid=0x8002}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x50, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x35917}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x2}}]}]}, 0x44}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff07) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8d, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x18}]}, 0x18}}, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x103a, &(0x7f0000002d00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff0e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1000, 0x4e20, 0x1018, 0x0, @wg=@data={0x4, 0x5, 0x3, "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"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaab23f8838df59caf6756aaeaaaa9a004500002400000700000090780000000000000000f1bec7567300b14e200010907802000000000000"], 0x0) 170.846124ms ago: executing program 3 (id=1464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffdc0700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 115.89232ms ago: executing program 1 (id=1465): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000ac0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000002010000000000000000edffffff0000fdb7d421391742ae080003400000000008001a4000000000180006801400038006000200fffd00000600010000040000"], 0x44}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r7, 0x20000005) r8 = socket$inet6(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) epoll_create1(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x0) r9 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$inet6(r9, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) close(r8) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r3, @ANYRESOCT, @ANYBLOB="536a5c319e1ebd496545a26131fe9cfa42bd01f08aa3cfd1bcd14514a5ab6453f76a24ed5943ff63c724c634086e71f0527d0aa68fda5c4247a795893b55e2bff7a6442b30bd872291f3f79eae911fa293b561cf938c89bf4f6d7d6f84e67a698d6643548ff2715ca6d8296a7517db96cc29a9b979"], 0x0) recvmmsg(r4, &(0x7f0000003240), 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 0s ago: executing program 4 (id=1466): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=@raw=[@printk={@llu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}, @exit], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=0x4d, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x1a, 0x0}, 0x12060) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x0, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bba, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x3c, 0xa1ca2524ed8fb647, 0x0, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0xa0}}, 0x0) kernel console output (not intermixed with test programs): : 0 UID: 0 PID: 6528 Comm: syz.0.362 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 123.501168][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 123.511263][ T6528] Call Trace: [ 123.514568][ T6528] [ 123.517525][ T6528] dump_stack_lvl+0x241/0x360 [ 123.522267][ T6528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.527577][ T6528] ? __pfx__printk+0x10/0x10 [ 123.532203][ T6528] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 123.538220][ T6528] ? __pfx___might_resched+0x10/0x10 [ 123.543553][ T6528] should_fail_ex+0x3b0/0x4e0 [ 123.548275][ T6528] should_failslab+0xac/0x100 [ 123.552996][ T6528] ? __alloc_skb+0x1c3/0x440 [ 123.557622][ T6528] kmem_cache_alloc_node_noprof+0x71/0x320 [ 123.563470][ T6528] __alloc_skb+0x1c3/0x440 [ 123.567927][ T6528] ? __pfx___alloc_skb+0x10/0x10 [ 123.572902][ T6528] ? __mutex_trylock_common+0x183/0x2e0 [ 123.578496][ T6528] netlink_dump+0x2cd/0xd80 [ 123.583042][ T6528] ? trace_contention_end+0x3c/0x120 [ 123.588361][ T6528] ? __pfx_netlink_dump+0x10/0x10 [ 123.593440][ T6528] ? __pfx_lock_acquire+0x10/0x10 [ 123.598509][ T6528] __netlink_dump_start+0x5a2/0x790 [ 123.603750][ T6528] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 123.609163][ T6528] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 123.614146][ T6528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.619646][ T6528] ? __pfx_rtnl_dumpit+0x10/0x10 [ 123.624626][ T6528] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 123.630043][ T6528] ? ref_tracker_free+0x643/0x7e0 [ 123.635134][ T6528] netlink_rcv_skb+0x1e3/0x430 [ 123.639935][ T6528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.645434][ T6528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.650865][ T6528] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.656274][ T6528] netlink_unicast+0x7f6/0x990 [ 123.661077][ T6528] ? __pfx_netlink_unicast+0x10/0x10 [ 123.666392][ T6528] ? __virt_addr_valid+0x183/0x530 [ 123.671537][ T6528] ? __check_object_size+0x49c/0x900 [ 123.676858][ T6528] ? bpf_lsm_netlink_send+0x9/0x10 [ 123.682009][ T6528] netlink_sendmsg+0x8e4/0xcb0 [ 123.686821][ T6528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.692191][ T6528] ? __import_iovec+0x536/0x820 [ 123.697074][ T6528] ? aa_sock_msg_perm+0x91/0x160 [ 123.702068][ T6528] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 123.707391][ T6528] ? security_socket_sendmsg+0x87/0xb0 [ 123.712929][ T6528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.718245][ T6528] __sock_sendmsg+0x221/0x270 [ 123.722956][ T6528] ____sys_sendmsg+0x525/0x7d0 [ 123.727768][ T6528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.733103][ T6528] __sys_sendmsg+0x2b0/0x3a0 [ 123.737741][ T6528] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.742884][ T6528] ? vfs_write+0x7c4/0xc90 [ 123.747366][ T6528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.753915][ T6528] ? do_syscall_64+0x100/0x230 [ 123.758741][ T6528] ? do_syscall_64+0xb6/0x230 [ 123.763569][ T6528] do_syscall_64+0xf3/0x230 [ 123.768109][ T6528] ? clear_bhb_loop+0x35/0x90 [ 123.772905][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.778853][ T6528] RIP: 0033:0x7f439517def9 [ 123.783303][ T6528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.803068][ T6528] RSP: 002b:00007f4396002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.811522][ T6528] RAX: ffffffffffffffda RBX: 00007f4395335f80 RCX: 00007f439517def9 [ 123.819619][ T6528] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 123.827631][ T6528] RBP: 00007f4396002090 R08: 0000000000000000 R09: 0000000000000000 [ 123.835625][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.843709][ T6528] R13: 0000000000000000 R14: 00007f4395335f80 R15: 00007ffd100b5d08 [ 123.851751][ T6528] [ 123.904792][ T5256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.914835][ T5256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.922540][ T5256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.118779][ T6533] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 124.137025][ T6535] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 124.288452][ T6540] __nla_validate_parse: 3 callbacks suppressed [ 124.288475][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 124.735180][ T6524] chnl_net:caif_netlink_parms(): no params data found [ 125.150537][ T6570] netlink: 64 bytes leftover after parsing attributes in process `syz.2.372'. [ 125.188918][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.208559][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.217346][ T6524] bridge_slave_0: entered allmulticast mode [ 125.225641][ T6524] bridge_slave_0: entered promiscuous mode [ 125.387978][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.410484][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.417859][ T6524] bridge_slave_1: entered allmulticast mode [ 125.449254][ T6524] bridge_slave_1: entered promiscuous mode [ 125.675245][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.772612][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.987468][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 126.023995][ T6524] team0: Port device team_slave_0 added [ 126.050584][ T5256] Bluetooth: hci5: command tx timeout [ 126.106444][ T6524] team0: Port device team_slave_1 added [ 126.149963][ T6584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.375'. [ 126.205898][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.219665][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.246264][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.262265][ T6594] netlink: 'syz.4.376': attribute type 29 has an invalid length. [ 126.286057][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.294912][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.324726][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.337962][ T6594] netlink: 500 bytes leftover after parsing attributes in process `syz.4.376'. [ 126.347690][ T6594] unsupported nla_type 40 [ 126.353405][ T6593] netlink: 'syz.4.376': attribute type 29 has an invalid length. [ 126.450872][ T6524] hsr_slave_0: entered promiscuous mode [ 126.457675][ T6524] hsr_slave_1: entered promiscuous mode [ 126.466378][ T6524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.475762][ T6524] Cannot create hsr debugfs directory [ 126.621344][ T6596] xt_TCPMSS: Only works on TCP SYN packets [ 126.715212][ T6596] bond0: entered promiscuous mode [ 126.764087][ T6596] bond_slave_0: entered promiscuous mode [ 126.778814][ T6596] bond_slave_1: entered promiscuous mode [ 126.853468][ T6597] tipc: Bearer : already 2 bearers with priority 10 [ 126.871689][ T6597] tipc: Bearer : trying with adjusted priority [ 126.911107][ T6597] tipc: Enabled bearer , priority 9 [ 127.101316][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.380'. [ 127.111541][ T6607] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 127.261718][ T6613] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 127.298657][ T6613] x_tables: ip_tables: osf match: only valid for protocol 6 [ 127.394311][ T6524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.576865][ T6524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.799339][ T6524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.963714][ T6524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.070682][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 128.132384][ T5256] Bluetooth: hci5: command tx timeout [ 128.174515][ T6655] Cannot find add_set index 0 as target [ 128.474064][ T6664] bridge0: entered promiscuous mode [ 128.494052][ T6664] bridge0: left promiscuous mode [ 128.549491][ T6667] raw_sendmsg: syz.4.400 forgot to set AF_INET. Fix it! [ 128.590311][ T6524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.629178][ T6524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.662563][ T6524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.695222][ T6524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 128.746081][ T6674] pimreg: entered allmulticast mode [ 128.757204][ T6674] pimreg: left allmulticast mode [ 129.035395][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.103752][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.133325][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 129.142884][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.150080][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.198125][ T6684] netlink: 6 bytes leftover after parsing attributes in process `syz.0.406'. [ 129.229380][ T6684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.286048][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.293427][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.326622][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 129.569520][ T6702] team_slave_0: entered promiscuous mode [ 129.575736][ T6702] team_slave_1: entered promiscuous mode [ 129.648326][ T6706] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.411'. [ 129.650381][ T6702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.719675][ T6702] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 129.776361][ T6709] team0: left allmulticast mode [ 129.809194][ T6709] team_slave_0: left allmulticast mode [ 129.815280][ T6709] team_slave_1: left allmulticast mode [ 129.829017][ T6709] bridge0: port 3(team0) entered disabled state [ 129.879113][ T6709] bridge_slave_0: left allmulticast mode [ 129.907121][ T6709] bridge_slave_0: left promiscuous mode [ 129.926885][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.955763][ T6709] bridge_slave_1: left allmulticast mode [ 129.970466][ T6709] bridge_slave_1: left promiscuous mode [ 129.985160][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.004317][ T6709] bond0: (slave bond_slave_0): Releasing backup interface [ 130.035249][ T6709] bond0: (slave bond_slave_1): Releasing backup interface [ 130.093587][ T6709] team_slave_0: left promiscuous mode [ 130.191299][ T6709] team0: Port device team_slave_0 removed [ 130.209150][ T6709] team_slave_1: left promiscuous mode [ 130.210628][ T5256] Bluetooth: hci5: command tx timeout [ 130.248509][ T6709] team0: Port device team_slave_1 removed [ 130.262765][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.277676][ T6709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.303601][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.324842][ T6709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.369845][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.377783][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.419567][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.413'. [ 130.430144][ T6721] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 130.447039][ T6721] netlink: 'syz.3.414': attribute type 4 has an invalid length. [ 130.458898][ T6721] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.414'. [ 130.498305][ T6723] bridge_slave_1: left allmulticast mode [ 130.517856][ T6723] bridge_slave_1: left promiscuous mode [ 130.532380][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.567990][ T6723] bridge_slave_0: left allmulticast mode [ 130.574133][ T6723] bridge_slave_0: left promiscuous mode [ 130.585429][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.687771][ T6737] netlink: 'syz.2.417': attribute type 2 has an invalid length. [ 130.884874][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.031363][ T6743] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 131.159254][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 131.185593][ T6750] dummy0: entered promiscuous mode [ 131.196814][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 131.208642][ T6753] dummy0: left promiscuous mode [ 131.375568][ T6524] veth0_vlan: entered promiscuous mode [ 131.424655][ T6524] veth1_vlan: entered promiscuous mode [ 131.432326][ T6760] netlink: 32 bytes leftover after parsing attributes in process `syz.2.425'. [ 131.565981][ T6767] netlink: 104 bytes leftover after parsing attributes in process `syz.4.427'. [ 131.624673][ T6524] veth0_macvtap: entered promiscuous mode [ 131.653232][ T6524] veth1_macvtap: entered promiscuous mode [ 131.741287][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.760245][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.770139][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.817209][ T6771] xt_CT: No such helper "syz0" [ 131.820296][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.850318][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.880744][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.912352][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.988799][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.014330][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.028120][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.047072][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.055801][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 132.057915][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.071422][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'. [ 132.084692][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.108140][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.260923][ T6785] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 132.269171][ T6785] netlink: 'syz.4.430': attribute type 2 has an invalid length. [ 132.276137][ T6524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.290439][ T5256] Bluetooth: hci5: command tx timeout [ 132.308487][ T6524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.338680][ T6524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.369749][ T6524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.603382][ T6804] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 132.752761][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.780293][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.900567][ T2510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.945836][ T2510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.122933][ T6824] netlink: 'syz.0.443': attribute type 2 has an invalid length. [ 133.224249][ T6831] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 133.269140][ T6831] netlink: 'syz.3.445': attribute type 10 has an invalid length. [ 133.391185][ T6828] netlink: 'syz.3.445': attribute type 10 has an invalid length. [ 133.428358][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.436102][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.458582][ T6828] team0: Device netdevsim0 failed to register rx_handler [ 133.602879][ T6837] netlink: 'syz.1.353': attribute type 10 has an invalid length. [ 133.619566][ T6837] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.750533][ T6849] netlink: 'syz.0.449': attribute type 29 has an invalid length. [ 134.029174][ T6858] Cannot find add_set index 0 as target [ 134.627057][ T6897] __nla_validate_parse: 9 callbacks suppressed [ 134.627080][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.464'. [ 134.750012][ T6889] syzkaller0: entered promiscuous mode [ 134.756408][ T6889] syzkaller0: entered allmulticast mode [ 134.787994][ T6893] team0: entered promiscuous mode [ 134.802215][ T6893] team_slave_0: entered promiscuous mode [ 134.820658][ T6893] team_slave_1: entered promiscuous mode [ 135.312694][ T6922] netlink: 'syz.0.471': attribute type 3 has an invalid length. [ 135.370410][ T6922] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 135.398640][ T6922] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.471'. [ 135.494444][ T6924] can: request_module (can-proto-0) failed. [ 137.533934][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 137.579125][ T6893] team0: left promiscuous mode [ 137.590139][ T6893] team_slave_0: left promiscuous mode [ 137.608268][ T6893] team_slave_1: left promiscuous mode [ 137.722549][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 137.990422][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 138.763415][ T6955] syz_tun: entered promiscuous mode [ 138.811816][ T6955] batadv_slave_0: entered promiscuous mode [ 138.822644][ T6956] netlink: 'syz.4.480': attribute type 6 has an invalid length. [ 138.846633][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.854500][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.880633][ T6965] bridge0: entered promiscuous mode [ 138.895835][ T6965] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 138.953680][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 138.979594][ T6969] netlink: 48 bytes leftover after parsing attributes in process `syz.1.484'. [ 139.417212][ T6989] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 139.463584][ T6998] netlink: 76 bytes leftover after parsing attributes in process `syz.4.494'. [ 139.624595][ T7004] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 139.645240][ T7004] netlink: 9380 bytes leftover after parsing attributes in process `syz.2.495'. [ 139.665623][ T7004] netlink: 11 bytes leftover after parsing attributes in process `syz.2.495'. [ 139.683583][ T7007] netlink: 'syz.2.495': attribute type 3 has an invalid length. [ 140.166773][ T7011] netlink: 76 bytes leftover after parsing attributes in process `syz.3.497'. [ 142.216337][ T7011] ÊüðÿG: entered promiscuous mode [ 142.746542][ T7045] netlink: 80 bytes leftover after parsing attributes in process `syz.1.504'. [ 142.858532][ T7056] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 142.907294][ T7056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.009520][ T7056] vlan3: entered promiscuous mode [ 143.030710][ T7056] bond2: entered promiscuous mode [ 143.036131][ T7056] vlan3: entered allmulticast mode [ 143.061587][ T7056] bond2: entered allmulticast mode [ 143.113056][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 143.410102][ T7079] netlink: 'syz.4.513': attribute type 10 has an invalid length. [ 143.447933][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.488726][ T7079] bond0: (slave team0): Enslaving as an active interface with an up link [ 143.516255][ T7078] netlink: 'syz.4.513': attribute type 10 has an invalid length. [ 143.550668][ T7087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.516'. [ 143.643883][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 143.733078][ T7094] hsr0: entered promiscuous mode [ 143.738925][ T7094] macsec1: entered allmulticast mode [ 143.745634][ T7094] hsr0: entered allmulticast mode [ 143.750913][ T7094] hsr_slave_0: entered allmulticast mode [ 143.756809][ T7094] hsr_slave_1: entered allmulticast mode [ 143.772406][ T7094] hsr0: left allmulticast mode [ 143.782970][ T7094] hsr_slave_0: left allmulticast mode [ 143.789157][ T7094] hsr_slave_1: left allmulticast mode [ 144.062653][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 144.073453][ T7105] No such timeout policy "syz1" [ 144.093149][ T7109] netlink: 5 bytes leftover after parsing attributes in process `syz.1.524'. [ 144.267283][ T7111] netlink: 'syz.3.522': attribute type 10 has an invalid length. [ 144.283577][ T7111] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.522'. [ 144.482036][ T7120] syzkaller1: entered promiscuous mode [ 144.500392][ T7120] syzkaller1: entered allmulticast mode [ 144.596488][ T7123] netlink: 'syz.4.528': attribute type 10 has an invalid length. [ 144.608359][ T7123] team0: entered promiscuous mode [ 144.620629][ T7123] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.628813][ T7123] bond0: (slave team0): Releasing backup interface [ 144.648144][ T7123] bridge0: port 1(team0) entered blocking state [ 144.655077][ T7123] bridge0: port 1(team0) entered disabled state [ 144.662267][ T7123] team0: entered allmulticast mode [ 144.702075][ T7128] ɶƣ0GC¦: entered promiscuous mode [ 144.907270][ T7134] netlink: 'syz.4.532': attribute type 5 has an invalid length. [ 144.925366][ T7134] __nla_validate_parse: 4 callbacks suppressed [ 144.925391][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 144.964175][ T7140] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 145.248136][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 145.417498][ T7152] netlink: 'syz.1.538': attribute type 33 has an invalid length. [ 145.429885][ T7152] netlink: 248 bytes leftover after parsing attributes in process `syz.1.538'. [ 145.554301][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 145.726349][ T7164] netlink: 52 bytes leftover after parsing attributes in process `syz.3.543'. [ 145.755548][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 145.833748][ T7166] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 145.850792][ T7166] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 145.859315][ T7166] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 145.895735][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 145.909352][ T7173] dccp_close: ABORT with 2 bytes unread [ 146.146704][ T7184] netlink: 'syz.4.550': attribute type 30 has an invalid length. [ 146.426560][ T7198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.553'. [ 146.677754][ T7207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.556'. [ 146.896378][ T7219] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.560'. [ 146.936868][ T7219] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 148.129310][ T7277] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 148.137776][ T7277] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 148.379402][ T7288] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 148.407180][ T7288] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 148.593082][ T7295] tipc: Bearer : already 2 bearers with priority 10 [ 148.609226][ T7295] tipc: Bearer : trying with adjusted priority [ 148.629610][ T7295] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 148.686410][ T7296] vlan4: entered promiscuous mode [ 148.713739][ T7296] vlan4: entered allmulticast mode [ 148.739727][ T7295] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 148.741214][ T7296] vlan0: entered allmulticast mode [ 148.768070][ T7296] veth0_vlan: entered allmulticast mode [ 148.797689][ T7296] vlan0: entered promiscuous mode [ 148.855310][ T7296] team0: Port device vlan4 added [ 149.321418][ T7320] x_tables: duplicate underflow at hook 1 [ 151.824416][ T7342] __nla_validate_parse: 72 callbacks suppressed [ 151.824443][ T7342] netlink: 224 bytes leftover after parsing attributes in process `syz.4.595'. [ 151.872400][ T7342] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 151.935207][ T7344] netlink: 'syz.0.596': attribute type 11 has an invalid length. [ 151.973579][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 152.146997][ T7367] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 152.187493][ T7367] netlink: 612 bytes leftover after parsing attributes in process `syz.3.597'. [ 152.333873][ T7372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.577620][ T7378] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 152.601645][ T7378] netlink: 'syz.4.602': attribute type 2 has an invalid length. [ 152.956102][ T7350] Driver unsupported XDP return value 0 on prog (id 353) dev N/A, expect packet loss! [ 152.973311][ T7393] netlink: 'syz.2.606': attribute type 2 has an invalid length. [ 155.219738][ T7361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.598'. [ 156.032997][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 156.103443][ T7437] netlink: 732 bytes leftover after parsing attributes in process `syz.2.620'. [ 156.154425][ T7437] netlink: 732 bytes leftover after parsing attributes in process `syz.2.620'. [ 156.218020][ T7443] xt_SECMARK: invalid mode: 0 [ 156.342255][ T7446] bridge0: port 3(gretap0) entered blocking state [ 156.362886][ T7446] bridge0: port 3(gretap0) entered disabled state [ 156.379776][ T7446] gretap0: entered allmulticast mode [ 156.412041][ T7446] gretap0: entered promiscuous mode [ 156.431550][ T7446] bridge0: port 3(gretap0) entered blocking state [ 156.438264][ T7446] bridge0: port 3(gretap0) entered forwarding state [ 156.480541][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 156.555872][ T7447] gretap0: left allmulticast mode [ 156.601656][ T7447] gretap0: left promiscuous mode [ 156.607001][ T7447] bridge0: port 3(gretap0) entered disabled state [ 156.964246][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'. [ 157.207826][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.631'. [ 157.237782][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 157.309178][ T7478] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 157.317961][ T7478] netlink: 9388 bytes leftover after parsing attributes in process `syz.0.632'. [ 157.539795][ T7487] ip6t_srh: unknown srh invflags 4000 [ 157.962303][ T7506] team0: Device gtp0 is of different type [ 158.539739][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 158.601648][ T7535] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.619150][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 158.636987][ T7535] netlink: 1 bytes leftover after parsing attributes in process `syz.3.648'. [ 158.739385][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 158.919036][ T7542] syz_tun (unregistering): left promiscuous mode [ 158.960426][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 159.378361][ T7572] SET target dimension over the limit! [ 159.421859][ T7568] netlink: 'syz.0.658': attribute type 13 has an invalid length. [ 159.483847][ T7568] veth0_macvtap: left promiscuous mode [ 159.502132][ T7568] macvtap0: entered allmulticast mode [ 159.522219][ T7568] macvtap0: refused to change device tx_queue_len [ 159.625684][ T7573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.819039][ T7589] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 159.861629][ T7589] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.870897][ T7591] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 159.976183][ T7597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.667'. [ 160.346685][ T7621] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.610501][ T7627] netlink: 'syz.1.676': attribute type 22 has an invalid length. [ 160.733660][ T7632] x_tables: duplicate underflow at hook 4 [ 160.767453][ T7636] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 160.792493][ T7639] netlink: 'syz.2.678': attribute type 1 has an invalid length. [ 160.827436][ T7636] xfrm1: entered promiscuous mode [ 161.238097][ T7654] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 161.252097][ T7654] bridge0: entered promiscuous mode [ 161.401118][ T7660] netlink: 'syz.4.685': attribute type 1 has an invalid length. [ 161.742598][ T7667] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 161.839343][ T7667] netlink: 'syz.3.687': attribute type 4 has an invalid length. [ 161.864113][ T7667] netlink: 'syz.3.687': attribute type 2 has an invalid length. [ 162.285113][ T7687] syzkaller0: entered promiscuous mode [ 162.308693][ T7687] syzkaller0: entered allmulticast mode [ 162.770520][ T5256] Bluetooth: hci0: command tx timeout [ 165.127297][ T7703] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (248) [ 165.140328][ T7707] netlink: 'syz.2.698': attribute type 11 has an invalid length. [ 165.171816][ T7707] netlink: 'syz.2.698': attribute type 5 has an invalid length. [ 165.727042][ T7745] __nla_validate_parse: 4 callbacks suppressed [ 165.727066][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 165.822796][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 165.884491][ T7748] geneve1: entered promiscuous mode [ 165.912888][ T7748] batadv_slave_0: entered promiscuous mode [ 165.938821][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 165.972209][ T7748] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 166.001222][ T7748] Cannot create hsr debugfs directory [ 166.057817][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.711'. [ 166.116364][ T7756] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 166.176414][ T7768] netlink: 'syz.3.715': attribute type 8 has an invalid length. [ 166.210555][ T7768] netlink: 244 bytes leftover after parsing attributes in process `syz.3.715'. [ 169.453055][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.731'. [ 169.658525][ T7840] netlink: 52 bytes leftover after parsing attributes in process `syz.2.732'. [ 169.763585][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 169.823281][ T7849] netlink: 'syz.4.734': attribute type 12 has an invalid length. [ 169.951160][ T7858] IPv4: Oversized IP packet from 172.20.20.24 [ 169.960718][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 169.967581][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 170.227556][ T7868] ipt_rpfilter: unknown options [ 170.541576][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 170.847738][ T7899] netlink: 36 bytes leftover after parsing attributes in process `syz.4.752'. [ 170.889034][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.752'. [ 170.921516][ T7899] netlink: 36 bytes leftover after parsing attributes in process `syz.4.752'. [ 170.949884][ T7899] netlink: 36 bytes leftover after parsing attributes in process `syz.4.752'. [ 171.044370][ T7907] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 171.051433][ T7907] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 171.094531][ T7907] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 171.101100][ T7907] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 171.313150][ T7916] netlink: 64 bytes leftover after parsing attributes in process `syz.0.758'. [ 171.375690][ T7918] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 171.387595][ T7918] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.760'. [ 171.397116][ T7918] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 172.138128][ T7947] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.767'. [ 172.448575][ T7961] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 172.470587][ T7961] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.770'. [ 172.501930][ T7961] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 172.904755][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'. [ 172.914596][ T7968] netlink: 'syz.3.773': attribute type 7 has an invalid length. [ 172.927410][ T7968] netlink: 'syz.3.773': attribute type 8 has an invalid length. [ 172.937599][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 172.993397][ T7980] pim6reg: entered allmulticast mode [ 173.011183][ T7974] pim6reg: left allmulticast mode [ 173.078225][ T7985] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 173.079603][ T7986] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 173.268391][ T7990] 8021q: adding VLAN 0 to HW filter on device team1 [ 173.313989][ T8005] bridge0: left promiscuous mode [ 173.896846][ T8033] vlan2: entered promiscuous mode [ 173.914767][ T8033] veth1_to_batadv: entered promiscuous mode [ 174.680019][ T8067] bond0: entered promiscuous mode [ 175.242807][ T8098] IPv6: Can't replace route, no match found [ 175.738264][ T8121] bond0: entered promiscuous mode [ 175.745172][ T8121] bond_slave_0: entered promiscuous mode [ 175.764168][ T8121] bond_slave_1: entered promiscuous mode [ 175.770079][ T8121] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 175.811639][ T8121] macvlan2: entered promiscuous mode [ 175.829174][ T8121] team0: entered promiscuous mode [ 175.936631][ T8121] bond0: left promiscuous mode [ 175.950526][ T8121] bond_slave_0: left promiscuous mode [ 175.957376][ T8121] bond_slave_1: left promiscuous mode [ 175.981372][ T8121] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 176.012264][ T8121] macvlan2: left promiscuous mode [ 176.017386][ T8121] team0: left promiscuous mode [ 177.177021][ T8148] __nla_validate_parse: 12 callbacks suppressed [ 177.177049][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 177.362436][ T8150] Cannot find add_set index 0 as target [ 177.576008][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 177.796652][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.828'. [ 177.838327][ T8177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 178.021424][ T8182] syzkaller0: entered promiscuous mode [ 178.026999][ T8182] syzkaller0: entered allmulticast mode [ 179.727468][ T8212] x_tables: duplicate underflow at hook 1 [ 179.896943][ T8216] Cannot find del_set index 4 as target [ 180.923636][ T8195] netlink: 116 bytes leftover after parsing attributes in process `syz.4.836'. [ 180.939325][ T8195] team0: left allmulticast mode [ 180.945908][ T8195] bridge0: port 1(team0) entered disabled state [ 181.052044][ T8220] netlink: 340 bytes leftover after parsing attributes in process `syz.2.843'. [ 181.124692][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 181.163340][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 181.237548][ T8229] netlink: 27 bytes leftover after parsing attributes in process `syz.4.847'. [ 181.265019][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.847'. [ 181.309103][ T8229] netlink: 'syz.4.847': attribute type 3 has an invalid length. [ 181.894483][ T8271] Bluetooth: MGMT ver 1.23 [ 182.105390][ T8286] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 182.135158][ T8286] netlink: 'syz.3.865': attribute type 2 has an invalid length. [ 182.155359][ T8286] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 182.346228][ T8299] __nla_validate_parse: 3 callbacks suppressed [ 182.346250][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 182.374780][ T8302] netlink: 'syz.3.871': attribute type 10 has an invalid length. [ 182.403162][ T8302] bridge0: port 1(ip6gretap0) entered blocking state [ 182.411927][ T8302] bridge0: port 1(ip6gretap0) entered disabled state [ 182.419045][ T8302] ip6gretap0: entered allmulticast mode [ 182.436810][ T8302] ip6gretap0: left allmulticast mode [ 182.578910][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 182.905701][ T8322] syz.3.876 (8322) used greatest stack depth: 18560 bytes left [ 182.952633][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 182.968865][ T8333] netlink: 'syz.4.878': attribute type 14 has an invalid length. [ 183.016124][ T8333] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.025683][ T8333] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.034661][ T8333] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.043567][ T8333] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.062627][ T8333] vxlan0: entered promiscuous mode [ 183.923144][ T8386] netlink: 'syz.3.894': attribute type 4 has an invalid length. [ 184.055230][ T8395] team_slave_0: entered promiscuous mode [ 184.061062][ T8395] team_slave_1: entered promiscuous mode [ 184.072551][ T8395] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.084696][ T8395] macvlan2: entered promiscuous mode [ 184.090103][ T8395] team0: entered promiscuous mode [ 184.096724][ T8395] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 184.419832][ T8403] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 184.572771][ T8411] netlink: 80 bytes leftover after parsing attributes in process `syz.0.900'. [ 184.855630][ T8421] netlink: 'syz.2.903': attribute type 10 has an invalid length. [ 184.856379][ T8424] xt_bpf: check failed: parse error [ 184.890669][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.903'. [ 184.912417][ T8426] xt_bpf: check failed: parse error [ 184.994918][ T8428] xt_hashlimit: size too large, truncated to 1048576 [ 185.013777][ T8431] hsr0: entered promiscuous mode [ 185.081416][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 185.097615][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.906'. [ 185.282304][ T8440] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 185.283342][ T8440] Cannot find add_set index 0 as target [ 185.610288][ T8445] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 185.619259][ T8445] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 186.189416][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 186.444737][ T8475] netlink: 204 bytes leftover after parsing attributes in process `syz.4.921'. [ 186.460025][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 187.391890][ T8510] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 187.409690][ T8510] __nla_validate_parse: 1 callbacks suppressed [ 187.409712][ T8510] netlink: 224 bytes leftover after parsing attributes in process `syz.1.933'. [ 187.435278][ T8510] netlink: 'syz.1.933': attribute type 8 has an invalid length. [ 187.764348][ T8528] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 187.788866][ T8523] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 188.004815][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 188.071900][ T8539] pim6reg1: entered promiscuous mode [ 188.088033][ T8539] pim6reg1: entered allmulticast mode [ 188.111970][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 188.121402][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 188.206012][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 188.226735][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 188.263444][ T8550] netlink: 472 bytes leftover after parsing attributes in process `syz.3.945'. [ 188.277720][ T8550] netlink: 80 bytes leftover after parsing attributes in process `syz.3.945'. [ 188.289921][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 188.300549][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 188.325895][ T8554] x_tables: duplicate underflow at hook 3 [ 188.689713][ T8573] Bluetooth: hci3: invalid len left 7, exp >= 132 [ 189.029725][ T8588] netlink: 'syz.3.955': attribute type 2 has an invalid length. [ 189.098062][ T8590] netlink: zone id is out of range [ 189.109427][ T8590] netlink: zone id is out of range [ 189.130457][ T8590] netlink: zone id is out of range [ 189.150504][ T8590] netlink: zone id is out of range [ 189.171096][ T8590] netlink: zone id is out of range [ 189.176503][ T8590] netlink: zone id is out of range [ 189.190368][ T8590] netlink: zone id is out of range [ 189.203467][ T8590] netlink: zone id is out of range [ 189.214605][ T8590] netlink: zone id is out of range [ 189.556483][ T8608] ipt_ECN: cannot use operation on non-tcp rule [ 189.791098][ T8618] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 189.841700][ T8619] Unsupported ieee802154 address type: 0 [ 189.879157][ T8619] net_ratelimit: 112 callbacks suppressed [ 189.879182][ T8619] openvswitch: netlink: Unknown key attributes 1 [ 192.933306][ T8650] __nla_validate_parse: 68 callbacks suppressed [ 192.933335][ T8650] netlink: 96 bytes leftover after parsing attributes in process `syz.2.975'. [ 194.902461][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.908897][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.467188][ T8673] netlink: 'syz.0.983': attribute type 3 has an invalid length. [ 198.490815][ T8673] netlink: 'syz.0.983': attribute type 3 has an invalid length. [ 198.529412][ T8682] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.982'. [ 199.719662][ T8736] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.995'. [ 201.691407][ T8725] tipc: Started in network mode [ 201.696528][ T8725] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 201.705768][ T8725] tipc: Enabling of bearer rejected, failed to enable media [ 201.834701][ T8741] netlink: 'syz.1.996': attribute type 33 has an invalid length. [ 201.850319][ T8741] netlink: 152 bytes leftover after parsing attributes in process `syz.1.996'. [ 201.940616][ T8741] syz_tun: entered promiscuous mode [ 201.983240][ T8741] vlan0: entered promiscuous mode [ 202.013395][ T8741] syz_tun: left promiscuous mode [ 202.059638][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 202.065080][ T5250] Bluetooth: hci1: command 0x0406 tx timeout [ 202.065968][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 202.076694][ T5251] Bluetooth: hci2: command 0x0406 tx timeout [ 202.264676][ T8759] pimreg: entered allmulticast mode [ 202.287516][ T8758] pimreg: left allmulticast mode [ 202.338141][ T8767] netlink: 4156 bytes leftover after parsing attributes in process `syz.2.1004'. [ 202.465943][ T8763] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1004'. [ 202.484839][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 202.557711][ T8772] netlink: 'syz.1.1006': attribute type 4 has an invalid length. [ 202.587178][ T8772] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 202.693814][ T8774] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1006'. [ 203.011251][ T8787] netlink: 'syz.2.1008': attribute type 7 has an invalid length. [ 203.027256][ T8787] netlink: 'syz.2.1008': attribute type 39 has an invalid length. [ 203.186730][ T8793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1010'. [ 203.361756][ T8804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1013'. [ 203.609865][ T8811] vlan5: entered promiscuous mode [ 203.625618][ T8811] veth0_to_bridge: entered promiscuous mode [ 203.655964][ T8811] vlan5: entered allmulticast mode [ 203.686891][ T8811] veth0_to_bridge: entered allmulticast mode [ 203.710021][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1019'. [ 203.740702][ T8811] veth0_to_bridge: left allmulticast mode [ 203.748208][ T8811] veth0_to_bridge: left promiscuous mode [ 203.912364][ T8831] team0: entered promiscuous mode [ 203.917706][ T8831] team_slave_0: entered promiscuous mode [ 203.928142][ T8831] team_slave_1: entered promiscuous mode [ 203.941262][ T8831] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.982251][ T8831] team0: left promiscuous mode [ 204.002313][ T8831] team_slave_0: left promiscuous mode [ 204.007957][ T8831] team_slave_1: left promiscuous mode [ 204.046072][ T8842] syz.0.1025[8842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.046262][ T8842] syz.0.1025[8842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.259365][ T8846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1027'. [ 204.302054][ T8846] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1027'. [ 204.499381][ T8857] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1031'. [ 204.529770][ T8865] netlink: 'syz.2.1032': attribute type 10 has an invalid length. [ 204.554952][ T8865] team_slave_0: left promiscuous mode [ 204.567014][ T8865] team_slave_1: left promiscuous mode [ 204.589818][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1029'. [ 204.611749][ T8865] batman_adv: batadv0: Adding interface: team0 [ 204.623620][ T8868] nbd: must specify at least one socket [ 204.647408][ T8865] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.692869][ T8865] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 204.712846][ T8869] netlink: 'syz.2.1032': attribute type 10 has an invalid length. [ 204.725541][ T8869] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1032'. [ 204.737823][ T8869] team_slave_0: entered promiscuous mode [ 204.743746][ T8869] team_slave_1: entered promiscuous mode [ 204.749727][ T8869] team0: entered promiscuous mode [ 204.763993][ T8869] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.775221][ T8869] batman_adv: batadv0: Interface activated: team0 [ 204.782146][ T8869] batman_adv: batadv0: Interface deactivated: team0 [ 204.792321][ T8869] batman_adv: batadv0: Removing interface: team0 [ 204.803564][ T8869] bridge0: port 3(team0) entered blocking state [ 204.810361][ T8869] bridge0: port 3(team0) entered disabled state [ 204.817029][ T8869] team0: entered allmulticast mode [ 204.823693][ T8869] team_slave_0: entered allmulticast mode [ 204.829826][ T8869] team_slave_1: entered allmulticast mode [ 204.842418][ T8869] team0: left allmulticast mode [ 204.847462][ T8869] team_slave_0: left allmulticast mode [ 204.853410][ T8869] team_slave_1: left allmulticast mode [ 204.868893][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 204.892806][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 205.081543][ T8887] pimreg: entered allmulticast mode [ 205.225239][ T8879] pimreg: left allmulticast mode [ 205.367698][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 205.507918][ T8910] netlink: 'syz.4.1046': attribute type 7 has an invalid length. [ 205.624276][ T8919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1050'. [ 205.689129][ T8926] netlink: 'syz.1.1051': attribute type 7 has an invalid length. [ 205.936469][ T8934] pim6reg1: entered allmulticast mode [ 206.006162][ T8948] FAULT_INJECTION: forcing a failure. [ 206.006162][ T8948] name failslab, interval 1, probability 0, space 0, times 0 [ 206.048523][ T8948] CPU: 1 UID: 0 PID: 8948 Comm: syz.4.1057 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 206.059303][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.069412][ T8948] Call Trace: [ 206.072745][ T8948] [ 206.075722][ T8948] dump_stack_lvl+0x241/0x360 [ 206.080460][ T8948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.085707][ T8948] ? __pfx__printk+0x10/0x10 [ 206.090327][ T8948] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 206.096337][ T8948] ? __pfx___might_resched+0x10/0x10 [ 206.101664][ T8948] should_fail_ex+0x3b0/0x4e0 [ 206.106382][ T8948] should_failslab+0xac/0x100 [ 206.111092][ T8948] ? __alloc_skb+0x1c3/0x440 [ 206.115709][ T8948] kmem_cache_alloc_node_noprof+0x71/0x320 [ 206.121588][ T8948] __alloc_skb+0x1c3/0x440 [ 206.126044][ T8948] ? __pfx___alloc_skb+0x10/0x10 [ 206.131045][ T8948] ? __lock_acquire+0x137a/0x2040 [ 206.136146][ T8948] alloc_skb_with_frags+0xc3/0x820 [ 206.141300][ T8948] ? __virt_addr_valid+0x183/0x530 [ 206.146442][ T8948] sock_alloc_send_pskb+0x91a/0xa60 [ 206.151688][ T8948] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 206.157445][ T8948] ? __virt_addr_valid+0x183/0x530 [ 206.162581][ T8948] ? __virt_addr_valid+0x183/0x530 [ 206.167712][ T8948] ? __virt_addr_valid+0x45f/0x530 [ 206.172877][ T8948] ? __check_object_size+0x49c/0x900 [ 206.178201][ T8948] bt_skb_sendmsg+0xf1/0x720 [ 206.182819][ T8948] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 206.188050][ T8948] rfcomm_sock_sendmsg+0x2a2/0x440 [ 206.193221][ T8948] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 206.198895][ T8948] __sock_sendmsg+0x221/0x270 [ 206.203608][ T8948] sock_sendmsg+0x134/0x200 [ 206.208138][ T8948] ? __pfx_sock_sendmsg+0x10/0x10 [ 206.213242][ T8948] ? iov_iter_bvec+0x4e/0x180 [ 206.217949][ T8948] splice_to_socket+0xa13/0x10b0 [ 206.222923][ T8948] ? __pfx_lock_release+0x10/0x10 [ 206.228017][ T8948] ? __pfx_splice_to_socket+0x10/0x10 [ 206.233451][ T8948] ? __lock_acquire+0x137a/0x2040 [ 206.238533][ T8948] ? bpf_lsm_file_permission+0x9/0x10 [ 206.243935][ T8948] ? security_file_permission+0x7f/0xa0 [ 206.249526][ T8948] ? rw_verify_area+0x1d2/0x6b0 [ 206.254438][ T8948] ? __pfx_splice_to_socket+0x10/0x10 [ 206.259830][ T8948] do_splice+0xd77/0x1900 [ 206.264189][ T8948] ? __pfx_lock_release+0x10/0x10 [ 206.269237][ T8948] ? vfs_write+0x7c4/0xc90 [ 206.273709][ T8948] ? __mutex_unlock_slowpath+0x21d/0x750 [ 206.279384][ T8948] ? pipe_clear_nowait+0x196/0x220 [ 206.284524][ T8948] ? __pfx_do_splice+0x10/0x10 [ 206.289321][ T8948] __se_sys_splice+0x331/0x4a0 [ 206.294153][ T8948] ? __pfx___se_sys_splice+0x10/0x10 [ 206.299471][ T8948] ? do_syscall_64+0x100/0x230 [ 206.304271][ T8948] ? __x64_sys_splice+0x21/0xf0 [ 206.309240][ T8948] do_syscall_64+0xf3/0x230 [ 206.313783][ T8948] ? clear_bhb_loop+0x35/0x90 [ 206.318490][ T8948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.324422][ T8948] RIP: 0033:0x7fb80337def9 [ 206.328895][ T8948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.348567][ T8948] RSP: 002b:00007fb8040a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 206.357098][ T8948] RAX: ffffffffffffffda RBX: 00007fb803536058 RCX: 00007fb80337def9 [ 206.365099][ T8948] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 206.373124][ T8948] RBP: 00007fb8040a2090 R08: 000000000004ffea R09: 0000000000000008 [ 206.381117][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.389121][ T8948] R13: 0000000000000001 R14: 00007fb803536058 R15: 00007ffcc5106998 [ 206.397136][ T8948] [ 206.489179][ T8949] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 206.656284][ T8962] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 207.215362][ T8976] x_tables: unsorted underflow at hook 1 [ 207.507484][ T9002] xt_CT: No such helper "snmp" [ 207.525096][ T9000] team2: Mode changed to "random" [ 207.587646][ T9000] team2: Mode changed to "loadbalance" [ 208.063637][ T9034] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 208.110112][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 208.189312][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.241150][ T9032] syz_tun: entered promiscuous mode [ 208.307354][ T9032] syz_tun: left promiscuous mode [ 208.395712][ T9043] IPVS: persistence engine module ip_vs_pe_@ not found [ 208.451435][ T9048] netlink: 'syz.2.1082': attribute type 4 has an invalid length. [ 208.483163][ T9053] netlink: 'syz.2.1082': attribute type 4 has an invalid length. [ 208.528524][ T9057] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20016 - 0 [ 208.569096][ T9057] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20016 - 0 [ 208.580507][ T9057] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20016 - 0 [ 208.608021][ T9057] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20016 - 0 [ 208.983463][ T9075] sctp: [Deprecated]: syz.1.1088 (pid 9075) Use of int in max_burst socket option deprecated. [ 208.983463][ T9075] Use struct sctp_assoc_value instead [ 209.252344][ T9070] tipc: Enabling of bearer rejected, failed to enable media [ 209.279046][ T9086] __nla_validate_parse: 11 callbacks suppressed [ 209.279072][ T9086] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1093'. [ 209.323819][ T9084] bond0: entered promiscuous mode [ 209.356359][ T9091] sctp: [Deprecated]: syz.3.1095 (pid 9091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.356359][ T9091] Use struct sctp_sack_info instead [ 209.632226][ T9104] netlink: 6204 bytes leftover after parsing attributes in process `syz.3.1098'. [ 209.692268][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1098'. [ 209.702088][ T9110] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1099'. [ 209.725122][ T9111] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1096'. [ 209.755445][ T9104] netlink: 6204 bytes leftover after parsing attributes in process `syz.3.1098'. [ 209.843810][ T9118] FAULT_INJECTION: forcing a failure. [ 209.843810][ T9118] name failslab, interval 1, probability 0, space 0, times 0 [ 209.886675][ T9118] CPU: 0 UID: 0 PID: 9118 Comm: syz.4.1100 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 209.897628][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 209.907816][ T9118] Call Trace: [ 209.911137][ T9118] [ 209.914109][ T9118] dump_stack_lvl+0x241/0x360 [ 209.918852][ T9118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.924109][ T9118] ? __pfx__printk+0x10/0x10 [ 209.928854][ T9118] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 209.934899][ T9118] ? __pfx___might_resched+0x10/0x10 [ 209.940248][ T9118] should_fail_ex+0x3b0/0x4e0 [ 209.944997][ T9118] should_failslab+0xac/0x100 [ 209.949738][ T9118] ? __alloc_skb+0x1c3/0x440 [ 209.954393][ T9118] kmem_cache_alloc_node_noprof+0x71/0x320 [ 209.960262][ T9118] __alloc_skb+0x1c3/0x440 [ 209.964754][ T9118] ? __pfx___alloc_skb+0x10/0x10 [ 209.969831][ T9118] ? __lock_acquire+0x137a/0x2040 [ 209.974931][ T9118] alloc_skb_with_frags+0xc3/0x820 [ 209.980112][ T9118] ? __virt_addr_valid+0x183/0x530 [ 209.985287][ T9118] sock_alloc_send_pskb+0x91a/0xa60 [ 209.990578][ T9118] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 209.993243][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 209.996342][ T9118] ? __virt_addr_valid+0x183/0x530 [ 210.010519][ T9118] ? __virt_addr_valid+0x183/0x530 [ 210.015659][ T9118] ? __virt_addr_valid+0x45f/0x530 [ 210.020890][ T9118] ? __check_object_size+0x49c/0x900 [ 210.026231][ T9118] bt_skb_sendmsg+0xf1/0x720 [ 210.030860][ T9118] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 210.036180][ T9118] rfcomm_sock_sendmsg+0x2a2/0x440 [ 210.041337][ T9118] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 210.047031][ T9118] __sock_sendmsg+0x221/0x270 [ 210.051763][ T9118] sock_sendmsg+0x134/0x200 [ 210.056300][ T9118] ? __pfx_sock_sendmsg+0x10/0x10 [ 210.061369][ T9118] ? iov_iter_bvec+0x4e/0x180 [ 210.066077][ T9118] splice_to_socket+0xa13/0x10b0 [ 210.071041][ T9118] ? __pfx_lock_release+0x10/0x10 [ 210.076121][ T9118] ? __pfx_splice_to_socket+0x10/0x10 [ 210.081540][ T9118] ? __lock_acquire+0x137a/0x2040 [ 210.086622][ T9118] ? bpf_lsm_file_permission+0x9/0x10 [ 210.092029][ T9118] ? security_file_permission+0x7f/0xa0 [ 210.097617][ T9118] ? rw_verify_area+0x1d2/0x6b0 [ 210.102501][ T9118] ? __pfx_splice_to_socket+0x10/0x10 [ 210.107899][ T9118] do_splice+0xd77/0x1900 [ 210.112258][ T9118] ? __pfx_lock_release+0x10/0x10 [ 210.117323][ T9118] ? vfs_write+0x7c4/0xc90 [ 210.121769][ T9118] ? __mutex_unlock_slowpath+0x21d/0x750 [ 210.127438][ T9118] ? pipe_clear_nowait+0x196/0x220 [ 210.132579][ T9118] ? __pfx_do_splice+0x10/0x10 [ 210.137376][ T9118] __se_sys_splice+0x331/0x4a0 [ 210.142191][ T9118] ? __pfx___se_sys_splice+0x10/0x10 [ 210.147505][ T9118] ? do_syscall_64+0x100/0x230 [ 210.152310][ T9118] ? __x64_sys_splice+0x21/0xf0 [ 210.157189][ T9118] do_syscall_64+0xf3/0x230 [ 210.161753][ T9118] ? clear_bhb_loop+0x35/0x90 [ 210.166458][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.172387][ T9118] RIP: 0033:0x7fb80337def9 [ 210.176826][ T9118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.196456][ T9118] RSP: 002b:00007fb8040a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 210.204895][ T9118] RAX: ffffffffffffffda RBX: 00007fb803536058 RCX: 00007fb80337def9 [ 210.212888][ T9118] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 210.220894][ T9118] RBP: 00007fb8040a2090 R08: 000000000004ffea R09: 0000000000000008 [ 210.228909][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.236910][ T9118] R13: 0000000000000001 R14: 00007fb803536058 R15: 00007ffcc5106998 [ 210.244941][ T9118] [ 210.794530][ T9147] pimreg: entered allmulticast mode [ 210.905744][ T9159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1109'. [ 210.915842][ T9159] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 210.937215][ T9159] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1109'. [ 210.978035][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1109'. [ 211.260509][ T9174] 8021q: VLANs not supported on lo [ 212.270776][ T9227] macvlan3: entered promiscuous mode [ 212.300505][ T9227] macvlan3: entered allmulticast mode [ 212.323198][ T9229] pim6reg1: entered promiscuous mode [ 212.328672][ T9229] pim6reg1: entered allmulticast mode [ 212.405355][ T9227] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 212.446997][ T9227] batman_adv: batadv0: Adding interface: ip6gretap2 [ 212.471550][ T9227] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.520662][ T9227] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 212.562220][ T9233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.586054][ T9233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.601052][ T9233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.611980][ T9233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.620766][ T9233] batman_adv: batadv0: Removing interface: ip6gretap2 [ 212.987376][ T9262] bridge3: entered promiscuous mode [ 213.000781][ T9262] bridge3: entered allmulticast mode [ 213.018916][ T9262] team0: Port device bridge3 added [ 213.122714][ T5247] Bluetooth: hci5: link tx timeout [ 213.128414][ T5247] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.139248][ T5245] Bluetooth: hci5: link tx timeout [ 213.144693][ T5245] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.156752][ T9262] bridge0: port 1(ip6gretap0) entered blocking state [ 213.193397][ T9262] bridge0: port 1(ip6gretap0) entered disabled state [ 213.218420][ T9262] ip6gretap0: entered allmulticast mode [ 213.252197][ T9262] ip6gretap0: entered promiscuous mode [ 213.271673][ T9262] bridge0: port 1(ip6gretap0) entered blocking state [ 213.278604][ T9262] bridge0: port 1(ip6gretap0) entered forwarding state [ 213.712119][ T9284] bond1 (unregistering): Released all slaves [ 213.841293][ T9292] pim6reg527: entered allmulticast mode [ 213.849005][ T9303] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 214.041945][ T9314] ip6tnl1: entered promiscuous mode [ 214.048600][ T9314] ip6tnl1: entered allmulticast mode [ 214.208248][ T9322] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 214.700787][ T9330] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 214.751461][ T9331] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 214.841712][ T9338] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 215.170558][ T5245] Bluetooth: hci5: command 0x0405 tx timeout [ 215.183326][ T9352] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 215.535154][ T9359] __nla_validate_parse: 6 callbacks suppressed [ 215.535175][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 237.784461][ T9373] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1163'. [ 240.769835][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1166'. [ 240.980235][ T9382] tipc: Can't bind to reserved service type 0 [ 242.121550][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.140725][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.149724][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.158228][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.196158][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 242.203909][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.289588][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.300405][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.316020][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.334027][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.349540][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.357178][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.434061][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.443853][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.465713][ T4625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.478351][ T5256] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.500688][ T5256] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.502883][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.510379][ T5256] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.517770][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 242.528214][ T5256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.530591][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.552431][ T5256] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.561034][ T5250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.562661][ T5256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.577059][ T5256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.586322][ T5256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 242.594226][ T5256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.603465][ T5256] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 242.611477][ T5250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.793880][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.970429][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.114721][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.205123][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.677736][ T9396] chnl_net:caif_netlink_parms(): no params data found [ 243.738033][ T52] ip6gretap0: left allmulticast mode [ 243.745331][ T52] ip6gretap0: left promiscuous mode [ 243.752938][ T52] bridge0: port 1(ip6gretap0) entered disabled state [ 243.884965][ T52] bond2: left allmulticast mode [ 243.889906][ T52] bond2: left promiscuous mode [ 244.167239][ T52] geneve1 (unregistering): left promiscuous mode [ 244.290721][ T5250] Bluetooth: hci2: command tx timeout [ 244.331898][ T52] team0: Port device bridge3 removed [ 244.451341][ T5250] Bluetooth: hci0: command tx timeout [ 244.522605][ T52] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 244.533381][ T52] bond0 (unregistering): Released all slaves [ 244.549850][ T52] bond1 (unregistering): Released all slaves [ 244.691621][ T5250] Bluetooth: hci5: command tx timeout [ 244.706918][ T5250] Bluetooth: hci1: command tx timeout [ 244.707045][ T5256] Bluetooth: hci4: command tx timeout [ 244.754943][ T52] bond2 (unregistering): Released all slaves [ 244.767978][ T52] bond3 (unregistering): Released all slaves [ 244.902268][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 244.976614][ T52] ɶƣ0GC¦: left promiscuous mode [ 245.039446][ T9389] chnl_net:caif_netlink_parms(): no params data found [ 245.059622][ T9391] chnl_net:caif_netlink_parms(): no params data found [ 245.121085][ T9394] chnl_net:caif_netlink_parms(): no params data found [ 245.309919][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.317324][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.324825][ T9396] bridge_slave_0: entered allmulticast mode [ 245.332617][ T9396] bridge_slave_0: entered promiscuous mode [ 245.341381][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.348630][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.356736][ T9396] bridge_slave_1: entered allmulticast mode [ 245.364456][ T9396] bridge_slave_1: entered promiscuous mode [ 245.523893][ T52] mac80211_hwsim hwsim5 wlan1 (unregistering): left allmulticast mode [ 245.595924][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.603334][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.610867][ T9397] bridge_slave_0: entered allmulticast mode [ 245.623436][ T9397] bridge_slave_0: entered promiscuous mode [ 245.632610][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.639857][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.647859][ T9397] bridge_slave_1: entered allmulticast mode [ 245.655729][ T9397] bridge_slave_1: entered promiscuous mode [ 245.667356][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.680835][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.844134][ T9396] team0: Port device team_slave_0 added [ 245.954500][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.969715][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.989528][ T9389] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.997277][ T9389] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.005300][ T9389] bridge_slave_0: entered allmulticast mode [ 246.013293][ T9389] bridge_slave_0: entered promiscuous mode [ 246.022508][ T9389] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.029686][ T9389] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.037795][ T9389] bridge_slave_1: entered allmulticast mode [ 246.045569][ T9389] bridge_slave_1: entered promiscuous mode [ 246.058652][ T9396] team0: Port device team_slave_1 added [ 246.065240][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.084885][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.092589][ T9391] bridge_slave_0: entered allmulticast mode [ 246.099834][ T9391] bridge_slave_0: entered promiscuous mode [ 246.108350][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.115866][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.123574][ T9394] bridge_slave_0: entered allmulticast mode [ 246.135003][ T9394] bridge_slave_0: entered promiscuous mode [ 246.228960][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.236555][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.244079][ T9391] bridge_slave_1: entered allmulticast mode [ 246.252130][ T9391] bridge_slave_1: entered promiscuous mode [ 246.259982][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.267772][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.277345][ T9394] bridge_slave_1: entered allmulticast mode [ 246.289073][ T9394] bridge_slave_1: entered promiscuous mode [ 246.298393][ T52] batadv_slave_0: left promiscuous mode [ 246.313027][ T52] hsr_slave_0: left promiscuous mode [ 246.319541][ T52] hsr_slave_1: left promiscuous mode [ 246.340352][ T52] vlan0: left allmulticast mode [ 246.345293][ T52] veth0_vlan: left allmulticast mode [ 246.351520][ T52] vlan0: left promiscuous mode [ 246.357026][ T52] veth1_macvtap: left promiscuous mode [ 246.363527][ T52] veth1_vlan: left promiscuous mode [ 246.368926][ T52] veth0_vlan: left promiscuous mode [ 246.382123][ T5256] Bluetooth: hci2: command tx timeout [ 246.539239][ T5256] Bluetooth: hci0: command tx timeout [ 246.557915][ T52] pimreg (unregistering): left allmulticast mode [ 246.770700][ T5256] Bluetooth: hci4: command tx timeout [ 246.776219][ T5256] Bluetooth: hci1: command tx timeout [ 246.788330][ T5250] Bluetooth: hci5: command tx timeout [ 246.796394][ T52] team0 (unregistering): Port device vlan4 removed [ 247.889326][ T9397] team0: Port device team_slave_0 added [ 247.899750][ T9397] team0: Port device team_slave_1 added [ 247.909372][ T9389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.947824][ T9389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.090529][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.097720][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.124312][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.182674][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.235536][ T9389] team0: Port device team_slave_0 added [ 248.251079][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.258115][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.285269][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.313434][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.326872][ T9394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.349465][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.356833][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.395293][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.417837][ T9389] team0: Port device team_slave_1 added [ 248.450894][ T5250] Bluetooth: hci2: command tx timeout [ 248.466129][ T9394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.502214][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.509221][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.536755][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.566290][ T9389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.573449][ T9389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.599647][ T9389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.610562][ T5250] Bluetooth: hci0: command tx timeout [ 248.662832][ T9391] team0: Port device team_slave_0 added [ 248.676748][ T9389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.684646][ T9389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.711404][ T9389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.741951][ T9394] team0: Port device team_slave_0 added [ 248.784082][ T9391] team0: Port device team_slave_1 added [ 248.828686][ T9394] team0: Port device team_slave_1 added [ 248.852242][ T5250] Bluetooth: hci5: command tx timeout [ 248.852273][ T5245] Bluetooth: hci4: command tx timeout [ 248.862732][ T9396] hsr_slave_0: entered promiscuous mode [ 248.863233][ T5256] Bluetooth: hci1: command tx timeout [ 248.876861][ T9396] hsr_slave_1: entered promiscuous mode [ 248.931793][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.938995][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.965602][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.985188][ T9397] hsr_slave_0: entered promiscuous mode [ 248.998062][ T9397] hsr_slave_1: entered promiscuous mode [ 249.006743][ T9397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.014890][ T9397] Cannot create hsr debugfs directory [ 249.113733][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.122028][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.148268][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.206921][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.224443][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.253982][ T9394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.267914][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.275103][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.301374][ T9394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.357094][ T9389] hsr_slave_0: entered promiscuous mode [ 249.365018][ T9389] hsr_slave_1: entered promiscuous mode [ 249.371620][ T9389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.379203][ T9389] Cannot create hsr debugfs directory [ 249.478738][ T9391] hsr_slave_0: entered promiscuous mode [ 249.486400][ T9391] hsr_slave_1: entered promiscuous mode [ 249.493459][ T9391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.501299][ T9391] Cannot create hsr debugfs directory [ 249.743469][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.755681][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.795260][ T9394] hsr_slave_0: entered promiscuous mode [ 249.802213][ T9394] hsr_slave_1: entered promiscuous mode [ 249.808917][ T9394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.817736][ T9394] Cannot create hsr debugfs directory [ 249.847548][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.858557][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.968420][ T9397] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.034790][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.045534][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.145610][ T9397] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.211475][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.233181][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.325986][ T9397] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.442939][ T9397] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.531521][ T5256] Bluetooth: hci2: command tx timeout [ 250.690675][ T5245] Bluetooth: hci0: command tx timeout [ 250.723901][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.811143][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.825231][ T9397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.836478][ T9397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.881870][ T9397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.895467][ T9397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.931239][ T5245] Bluetooth: hci1: command tx timeout [ 250.939981][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.950487][ T5245] Bluetooth: hci4: command tx timeout [ 250.950542][ T5245] Bluetooth: hci5: command tx timeout [ 251.047649][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.193280][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.294276][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.305232][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20016 - 0 [ 251.333641][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.359839][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.367091][ T7837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.406480][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.417249][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20016 - 0 [ 251.438328][ T7837] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.445547][ T7837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.569898][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.580995][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20016 - 0 [ 251.706181][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.717226][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20016 - 0 [ 251.797761][ T9396] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.823383][ T9396] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.845379][ T9396] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.879643][ T9396] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.028104][ T52] bridge_slave_1: left allmulticast mode [ 252.034415][ T52] bridge_slave_1: left promiscuous mode [ 252.046098][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.056476][ T52] bridge_slave_0: left allmulticast mode [ 252.062767][ T52] bridge_slave_0: left promiscuous mode [ 252.068604][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.089639][ T52] bridge_slave_1: left allmulticast mode [ 252.095629][ T52] bridge_slave_1: left promiscuous mode [ 252.102033][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.115599][ T52] bridge_slave_0: left allmulticast mode [ 252.122006][ T52] bridge_slave_0: left promiscuous mode [ 252.127875][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.669541][ T52] bond0 (unregistering): Released all slaves [ 253.839539][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.854602][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.866581][ T52] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 253.885159][ T52] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 253.898371][ T52] bond0 (unregistering): Released all slaves [ 254.086879][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.099053][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.113158][ T52] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 254.124726][ T52] bond0 (unregistering): Released all slaves [ 254.144575][ T9397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.398122][ T52] tipc: Disabling bearer [ 254.410323][ T52] tipc: Left network mode [ 254.469286][ T52] tipc: Left network mode [ 254.514177][ T52] IPVS: stopping backup sync thread 9034 ... [ 254.572050][ T9397] veth0_vlan: entered promiscuous mode [ 254.629025][ T9397] veth1_vlan: entered promiscuous mode [ 254.759627][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.824167][ T9397] veth0_macvtap: entered promiscuous mode [ 254.863017][ T9397] veth1_macvtap: entered promiscuous mode [ 254.915067][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.933270][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.945565][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.957032][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.968473][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.979322][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.990478][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.002788][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.016254][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.023513][ T7837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.066847][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.080884][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.091629][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.102631][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.114618][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.184909][ T7837] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.192219][ T7837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.207777][ T9397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.218281][ T9397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.227252][ T9397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.236070][ T9397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.368673][ T9389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.379874][ T9389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.396969][ T9389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.462979][ T9389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.735249][ T52] hsr_slave_0: left promiscuous mode [ 255.751823][ T52] hsr_slave_1: left promiscuous mode [ 255.779905][ T52] hsr_slave_0: left promiscuous mode [ 255.786685][ T52] hsr_slave_1: left promiscuous mode [ 255.817165][ T52] hsr_slave_0: left promiscuous mode [ 255.832705][ T52] hsr_slave_1: left promiscuous mode [ 255.839281][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.847765][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.857006][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.864953][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.913084][ T52] veth1_to_batadv: left promiscuous mode [ 255.919131][ T52] veth1_macvtap: left promiscuous mode [ 255.925185][ T52] veth0_macvtap: left promiscuous mode [ 255.931106][ T52] veth1_vlan: left promiscuous mode [ 255.936456][ T52] veth0_vlan: left promiscuous mode [ 255.943346][ T52] veth1_macvtap: left promiscuous mode [ 255.955202][ T52] veth1_macvtap: left promiscuous mode [ 255.961234][ T52] veth0_macvtap: left promiscuous mode [ 255.966944][ T52] veth1_vlan: left promiscuous mode [ 255.973055][ T52] veth0_vlan: left promiscuous mode [ 256.294922][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.301569][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.393367][ T52] pim6reg527 (unregistering): left allmulticast mode [ 256.483803][ T52] pimreg (unregistering): left allmulticast mode [ 258.085288][ T52] team_slave_1 (unregistering): left promiscuous mode [ 258.099138][ T52] team0 (unregistering): Port device team_slave_1 removed [ 258.159086][ T52] team_slave_0 (unregistering): left promiscuous mode [ 258.167814][ T52] team0 (unregistering): Port device team_slave_0 removed [ 259.128577][ T52] team0 (unregistering): Port device team_slave_1 removed [ 259.189795][ T52] team0 (unregistering): Port device team_slave_0 removed [ 259.816361][ T9391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.902408][ T9391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.929226][ T9244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.954678][ T9391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.961162][ T9244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.986236][ T9391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.082297][ T9396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.111789][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.119790][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.131911][ T9394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.182832][ T9394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.200820][ T9394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.248031][ T9394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.405144][ T9389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.463227][ T9445] team0: entered promiscuous mode [ 260.468442][ T9445] team_slave_0: entered promiscuous mode [ 260.484252][ T9445] team_slave_1: entered promiscuous mode [ 260.530604][ T9389] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.597318][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.604698][ T9245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.634364][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.641665][ T9245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.682134][ T9444] team0: left promiscuous mode [ 260.686987][ T9444] team_slave_0: left promiscuous mode [ 260.697098][ T9444] team_slave_1: left promiscuous mode [ 260.856885][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.092342][ T9391] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.107372][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.114660][ T9245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.213289][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.225248][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.232648][ T9245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.472303][ T9396] veth0_vlan: entered promiscuous mode [ 261.526743][ T9394] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.568403][ T9396] veth1_vlan: entered promiscuous mode [ 261.633783][ T3989] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.641093][ T3989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.736270][ T9389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.760912][ T3989] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.768241][ T3989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.894561][ T9396] veth0_macvtap: entered promiscuous mode [ 261.957108][ T9396] veth1_macvtap: entered promiscuous mode [ 262.045526][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.100732][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.129335][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.155534][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.170770][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.181999][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.194353][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.238416][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.254418][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.264770][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.275578][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.286533][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.297440][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.311839][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.329260][ T9389] veth0_vlan: entered promiscuous mode [ 262.378643][ T9389] veth1_vlan: entered promiscuous mode [ 262.425049][ T9391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.443598][ T9396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.465588][ T9396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.479839][ T9396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.497488][ T9396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.597289][ T9394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.708153][ T9389] veth0_macvtap: entered promiscuous mode [ 262.721661][ T9389] veth1_macvtap: entered promiscuous mode [ 262.900080][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.914438][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.925282][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.938124][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.948942][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.959736][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.971430][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.982126][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.995433][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.055060][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.077996][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.088142][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.100533][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.112257][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.122903][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.135261][ T9389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.147185][ T9389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.159312][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.179879][ T9391] veth0_vlan: entered promiscuous mode [ 263.216467][ T9389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.228079][ T9389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.237069][ T9389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.248231][ T9389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.262174][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.279424][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.298393][ T9466] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 263.320029][ T9466] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 263.340898][ T9391] veth1_vlan: entered promiscuous mode [ 263.373917][ T9394] veth0_vlan: entered promiscuous mode [ 263.382580][ T9467] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 263.465400][ T9394] veth1_vlan: entered promiscuous mode [ 263.492564][ T9245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.500629][ T9469] ipt_ECN: cannot use operation on non-tcp rule [ 263.509688][ T9245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.618042][ T9391] veth0_macvtap: entered promiscuous mode [ 263.684924][ T9391] veth1_macvtap: entered promiscuous mode [ 263.756023][ T9394] veth0_macvtap: entered promiscuous mode [ 263.758933][ T9476] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 263.778742][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.794853][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.806619][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.820353][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.830682][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.841895][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.853236][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.864234][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.874233][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.886367][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.902159][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.916308][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.924912][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.938221][ T9394] veth1_macvtap: entered promiscuous mode [ 263.950767][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1171'. [ 263.968987][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.983339][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.994537][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.005145][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.015059][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.025605][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.037883][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.048414][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.060450][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.072367][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.084056][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.137970][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.158703][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.165061][ T9391] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.176407][ T9391] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.185424][ T9391] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.199328][ T9391] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.259911][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.272073][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.297503][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.308187][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.318156][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.328767][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.338679][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.350514][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.360557][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.372270][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.382209][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.392794][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.407539][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.485976][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.520170][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.530044][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.543473][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.558451][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.571722][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.584280][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.595065][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.609745][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.622553][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.632707][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.643287][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.660418][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.719146][ T9394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.743951][ T9394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.753656][ T9394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.762757][ T9394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.826653][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.865686][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.903090][ T9485] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1177'. [ 265.046669][ T9244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.060279][ T9244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.116309][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.140977][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.223751][ T2562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.245853][ T2562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.433514][ T9496] netlink: 'syz.2.1169': attribute type 39 has an invalid length. [ 265.624578][ T9500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1181'. [ 266.192196][ T9520] bridge_slave_0: left allmulticast mode [ 266.212638][ T9520] bridge_slave_0: left promiscuous mode [ 266.218523][ T9520] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.389232][ T9520] bridge_slave_1: left allmulticast mode [ 266.420744][ T9520] bridge_slave_1: left promiscuous mode [ 266.433363][ T9520] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.579573][ T9520] bond0: (slave bond_slave_0): Releasing backup interface [ 266.678858][ T9520] bond0: (slave bond_slave_1): Releasing backup interface [ 266.954404][ T9520] team0: Port device team_slave_0 removed [ 267.044086][ T9520] team0: Port device team_slave_1 removed [ 267.075871][ T9520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.129290][ T9520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.152533][ T9520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.189806][ T9520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.369777][ T9518] batman_adv: batadv0: Adding interface: dummy0 [ 267.388364][ T9518] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.427190][ T9518] batman_adv: batadv0: Interface activated: dummy0 [ 267.455177][ T9524] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 267.490380][ T9524] macvtap1: entered promiscuous mode [ 267.497283][ T9524] macvtap1: entered allmulticast mode [ 267.520654][ T9524] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 267.537060][ T9524] mac80211_hwsim hwsim21 wlan0: left allmulticast mode [ 267.545285][ T9524] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 267.609238][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 267.638010][ T9526] batadv0: mtu less than device minimum [ 267.658089][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.671710][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.684352][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.697069][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.709869][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.722690][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.735483][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.748269][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.761283][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.827053][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1185'. [ 268.184308][ T9558] netlink: 'syz.2.1193': attribute type 21 has an invalid length. [ 268.200518][ T9558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1193'. [ 268.209769][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1193'. [ 268.848706][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1198'. [ 268.918236][ T9582] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1200'. [ 269.121201][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 269.235198][ T9595] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1206'. [ 269.406728][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 269.445590][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.471545][ T9601] dummy0: entered promiscuous mode [ 269.503034][ T9601] dummy0: left promiscuous mode [ 269.755095][ T9615] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 269.776165][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 269.977781][ T9623] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1218'. [ 270.011216][ T9621] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1218'. [ 270.293512][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'. [ 270.321053][ T9640] netlink: 'syz.4.1225': attribute type 13 has an invalid length. [ 270.339525][ T9636] sctp: [Deprecated]: syz.3.1221 (pid 9636) Use of int in max_burst socket option deprecated. [ 270.339525][ T9636] Use struct sctp_assoc_value instead [ 270.563981][ T9656] netlink: 'syz.1.1227': attribute type 4 has an invalid length. [ 270.932030][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'. [ 271.114747][ T9678] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1234'. [ 271.141327][ T9684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'. [ 271.434421][ T9704] netlink: 'syz.4.1241': attribute type 12 has an invalid length. [ 271.451982][ T9704] netlink: 'syz.4.1241': attribute type 29 has an invalid length. [ 271.484508][ T9704] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1241'. [ 271.586950][ T9707] bond_slave_0: entered promiscuous mode [ 271.593331][ T9707] bond_slave_1: entered promiscuous mode [ 271.617272][ T9707] macvtap1: entered promiscuous mode [ 271.626664][ T9707] bond0: entered promiscuous mode [ 271.635206][ T9707] macvtap1: entered allmulticast mode [ 271.641264][ T9707] bond0: entered allmulticast mode [ 271.646854][ T9707] bond_slave_0: entered allmulticast mode [ 271.662589][ T9707] bond_slave_1: entered allmulticast mode [ 271.682844][ T9707] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 272.054688][ T9730] Bluetooth: MGMT ver 1.23 [ 272.487816][ T9743] nft_compat: unsupported protocol 0 [ 274.366614][ T9774] __nla_validate_parse: 4 callbacks suppressed [ 274.366638][ T9774] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1262'. [ 274.384969][ T9774] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1262'. [ 275.073896][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 275.354864][ T9804] Cannot find set identified by id 0 to match [ 275.528817][ C0] net_ratelimit: 12 callbacks suppressed [ 275.528845][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 275.576033][ T9806] can: request_module (can-proto-0) failed. [ 275.587954][ T9806] netlink: 'syz.4.1272': attribute type 10 has an invalid length. [ 275.682915][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.711628][ T9806] team0: Port device batadv0 added [ 275.906021][ T9816] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 276.101860][ T9824] netlink: 'syz.1.1277': attribute type 9 has an invalid length. [ 276.120336][ T9822] netlink: 'syz.4.1276': attribute type 3 has an invalid length. [ 276.126405][ T9824] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1277'. [ 276.128203][ T9822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1276'. [ 276.177010][ T9827] netlink: 'syz.4.1276': attribute type 3 has an invalid length. [ 276.237029][ T9828] netlink: 'syz.1.1277': attribute type 9 has an invalid length. [ 276.255910][ T9828] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1277'. [ 276.908515][ T9844] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1281'. [ 277.485749][ T9863] ax25_connect(): syz.0.1286 uses autobind, please contact jreuter@yaina.de [ 277.785866][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 278.176056][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 278.190403][ T9895] FAULT_INJECTION: forcing a failure. [ 278.190403][ T9895] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 278.221406][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.247898][ T9895] CPU: 0 UID: 0 PID: 9895 Comm: syz.2.1294 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 278.258667][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 278.268874][ T9895] Call Trace: [ 278.272189][ T9895] [ 278.275140][ T9895] dump_stack_lvl+0x241/0x360 [ 278.279865][ T9895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.285098][ T9895] ? __pfx__printk+0x10/0x10 [ 278.289727][ T9895] ? snprintf+0xda/0x120 [ 278.294177][ T9895] should_fail_ex+0x3b0/0x4e0 [ 278.298901][ T9895] _copy_to_user+0x2f/0xb0 [ 278.303441][ T9895] simple_read_from_buffer+0xca/0x150 [ 278.308889][ T9895] proc_fail_nth_read+0x1ec/0x260 [ 278.313974][ T9895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.319557][ T9895] ? rw_verify_area+0x520/0x6b0 [ 278.324439][ T9895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.330015][ T9895] vfs_read+0x204/0xbc0 [ 278.334210][ T9895] ? __pfx_vfs_read+0x10/0x10 [ 278.338917][ T9895] ? do_sys_openat2+0x17a/0x1d0 [ 278.343805][ T9895] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.349056][ T9895] ksys_read+0x1a0/0x2c0 [ 278.353332][ T9895] ? __pfx_ksys_read+0x10/0x10 [ 278.358150][ T9895] ? do_syscall_64+0x100/0x230 [ 278.362947][ T9895] ? do_syscall_64+0xb6/0x230 [ 278.367658][ T9895] do_syscall_64+0xf3/0x230 [ 278.372230][ T9895] ? clear_bhb_loop+0x35/0x90 [ 278.376938][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.382882][ T9895] RIP: 0033:0x7fd77117c93c [ 278.387323][ T9895] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 278.406957][ T9895] RSP: 002b:00007fd770bff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.415429][ T9895] RAX: ffffffffffffffda RBX: 00007fd771335f80 RCX: 00007fd77117c93c [ 278.423463][ T9895] RDX: 000000000000000f RSI: 00007fd770bff0a0 RDI: 0000000000000004 [ 278.431559][ T9895] RBP: 00007fd770bff090 R08: 0000000000000000 R09: 0000000000000000 [ 278.439568][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.447565][ T9895] R13: 0000000000000000 R14: 00007fd771335f80 R15: 00007ffd3bcc16f8 [ 278.455582][ T9895] [ 278.505908][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'. [ 278.601783][ T9900] bridge0: port 3(vlan2) entered blocking state [ 278.608250][ T9900] bridge0: port 3(vlan2) entered disabled state [ 278.660818][ T9900] vlan2: entered allmulticast mode [ 278.678999][ T9900] vlan2: left allmulticast mode [ 279.247231][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 279.579236][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'. [ 282.093547][ T9948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.110712][ T9956] unknown channel width for channel at 907000KHz? [ 282.319303][ T9970] gretap0: mtu less than device minimum [ 282.490536][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 282.806304][ T9998] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1325'. [ 282.848600][ T9998] ÊüðÿG: entered promiscuous mode [ 283.214836][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 283.348841][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 283.431818][T10016] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1331'. [ 283.464678][ T5256] block nbd1: Receive control failed (result -107) [ 283.495070][ T25] IPVS: starting estimator thread 0... [ 283.514963][ T9998] netlink: 'syz.4.1325': attribute type 10 has an invalid length. [ 283.520276][T10008] nbd1: detected capacity change from 0 to 256 [ 283.528971][T10023] netlink: 'syz.2.1331': attribute type 9 has an invalid length. [ 283.559703][ T9998] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.563783][T10023] netlink: 'syz.2.1331': attribute type 7 has an invalid length. [ 283.579074][T10023] netlink: 'syz.2.1331': attribute type 8 has an invalid length. [ 283.588978][T10018] tipc: Started in network mode [ 283.611108][T10022] IPVS: using max 15 ests per chain, 36000 per kthread [ 283.618275][T10018] tipc: Node identity ac1414aa, cluster identity 4711 [ 283.666536][T10018] tipc: Enabled bearer , priority 10 [ 284.064376][T10032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.324962][T10048] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 284.344845][T10039] IPVS: Scheduler module ip_vs_sip not found [ 284.386040][T10042] IPVS: length: 8 != 729791320 [ 284.742361][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1346'. [ 284.780531][ T5241] tipc: Node number set to 2886997162 [ 284.782743][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1346'. [ 284.843115][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 284.927056][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 284.969741][T10080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1348'. [ 285.039425][T10092] IPv6: sit1: Disabled Multicast RS [ 285.349740][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.386358][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.393765][T10104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.500743][T10104] tap0: tun_chr_ioctl cmd 1074025677 [ 285.507052][T10104] tap0: linktype set to 821 [ 285.541331][T10112] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 285.589990][T10112] bond1: (slave gretap1): making interface the new active one [ 285.608372][T10112] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 286.653852][T10140] tipc: Invalid UDP bearer configuration [ 286.653916][T10140] tipc: Enabling of bearer rejected, failed to enable media [ 286.848869][T10149] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1366'. [ 287.667995][T10191] netlink: 'syz.4.1383': attribute type 5 has an invalid length. [ 287.765965][T10191] IPVS: Scheduler module ip_vs_sip not found [ 287.971062][T10204] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 287.987084][T10205] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1387'. [ 288.007410][T10205] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1387'. [ 288.028513][T10204] netlink: 'syz.4.1387': attribute type 10 has an invalid length. [ 288.103328][T10204] bond0: (slave netdevsim0): Releasing backup interface [ 288.145069][T10204] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 288.165067][T10204] team0: Failed to send options change via netlink (err -105) [ 288.175275][T10204] team0: Port device netdevsim0 added [ 288.191396][T10205] netlink: 'syz.4.1387': attribute type 10 has an invalid length. [ 288.252070][T10218] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1390'. [ 288.434457][T10218] ipvlan2: entered promiscuous mode [ 288.759724][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1398'. [ 289.438903][T10263] ip6t_srh: unknown srh match flags 5294 [ 289.466132][T10263] sctp: [Deprecated]: syz.3.1405 (pid 10263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.466132][T10263] Use struct sctp_sack_info instead [ 289.512443][T10263] sctp: [Deprecated]: syz.3.1405 (pid 10263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.512443][T10263] Use struct sctp_sack_info instead [ 289.554059][T10263] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 289.664922][T10288] veth0_to_batadv: entered promiscuous mode [ 289.708962][T10288] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 290.053026][T10304] __nla_validate_parse: 1 callbacks suppressed [ 290.053053][T10304] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1418'. [ 290.126563][T10308] Cannot find add_set index 0 as target [ 290.147018][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1420'. [ 290.259585][T10313] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.269139][T10313] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.278235][T10313] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.287937][T10313] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.456558][T10315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.458611][T10323] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 290.539658][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 290.569616][T10328] netlink: 'syz.0.1424': attribute type 10 has an invalid length. [ 290.579261][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 290.597803][T10328] syz_tun: entered promiscuous mode [ 290.628476][T10332] IPVS: set_ctl: invalid protocol: 255 100.1.1.0:20000 [ 290.692619][T10328] syz_tun: entered allmulticast mode [ 290.718886][T10328] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 291.249021][T10352] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1431'. [ 291.266094][T10353] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1431'. [ 291.279610][T10355] netlink: 'syz.1.1433': attribute type 1 has an invalid length. [ 291.286271][T10352] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 291.312764][T10353] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 291.320207][T10355] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.1433'. [ 291.366423][T10355] netlink: 'syz.1.1433': attribute type 2 has an invalid length. [ 291.385667][T10355] netlink: 'syz.1.1433': attribute type 1 has an invalid length. [ 291.769523][T10381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1438'. [ 292.055273][T10398] netlink: 'syz.0.1440': attribute type 4 has an invalid length. [ 292.440722][T10415] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1446'. [ 292.541951][T10417] openvswitch: netlink: Missing key (keys=40, expected=100) [ 292.903018][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1453'. [ 292.955812][T10435] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 293.146149][T10445] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 293.214007][T10447] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 293.242037][T10450] netlink: 'syz.3.1458': attribute type 11 has an invalid length. [ 293.467839][T10460] wg1: entered promiscuous mode [ 294.801672][ T7832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.891758][ T7832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.969816][ T7832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.040806][ T7832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.180919][ T5245] Bluetooth: hci0: command 0x0c20 tx timeout [ 295.188150][ T5256] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 295.232425][T10454] ================================================================== [ 295.240555][T10454] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 295.249031][T10454] Read of size 8 at addr ffff8880628ed858 by task syz.0.1461/10454 [ 295.256949][T10454] [ 295.259296][T10454] CPU: 1 UID: 0 PID: 10454 Comm: syz.0.1461 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 295.270176][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 295.280259][T10454] Call Trace: [ 295.283663][T10454] [ 295.286617][T10454] dump_stack_lvl+0x241/0x360 [ 295.291418][T10454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.296653][T10454] ? __pfx__printk+0x10/0x10 [ 295.301274][T10454] ? _printk+0xd5/0x120 [ 295.305477][T10454] ? __virt_addr_valid+0x183/0x530 [ 295.310627][T10454] ? __virt_addr_valid+0x183/0x530 [ 295.315774][T10454] print_report+0x169/0x550 [ 295.320398][T10454] ? __virt_addr_valid+0x183/0x530 [ 295.325531][T10454] ? __virt_addr_valid+0x183/0x530 [ 295.330697][T10454] ? __virt_addr_valid+0x45f/0x530 [ 295.335972][T10454] ? __phys_addr+0xba/0x170 [ 295.340597][T10454] ? skb_queue_purge_reason+0xb9/0x500 [ 295.346118][T10454] kasan_report+0x143/0x180 [ 295.350664][T10454] ? skb_queue_purge_reason+0xb9/0x500 [ 295.356163][T10454] skb_queue_purge_reason+0xb9/0x500 [ 295.361475][T10454] ? trace_contention_end+0x3c/0x120 [ 295.366787][T10454] ? __mutex_lock+0x2ef/0xd70 [ 295.371498][T10454] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 295.377446][T10454] ? drain_workqueue+0x2d3/0x3a0 [ 295.382413][T10454] ? hci_conn_hash_flush+0x1da/0x240 [ 295.387814][T10454] vhci_flush+0x44/0x50 [ 295.392009][T10454] ? __pfx_vhci_flush+0x10/0x10 [ 295.396882][T10454] hci_dev_reset+0x42a/0x5d0 [ 295.401505][T10454] sock_do_ioctl+0x158/0x460 [ 295.406119][T10454] ? __pfx_sock_do_ioctl+0x10/0x10 [ 295.411304][T10454] sock_ioctl+0x629/0x8e0 [ 295.415690][T10454] ? __pfx_sock_ioctl+0x10/0x10 [ 295.420588][T10454] ? __fget_files+0x29/0x470 [ 295.425222][T10454] ? __fget_files+0x3f6/0x470 [ 295.429925][T10454] ? __fget_files+0x29/0x470 [ 295.434554][T10454] ? bpf_lsm_file_ioctl+0x9/0x10 [ 295.439532][T10454] ? security_file_ioctl+0x87/0xb0 [ 295.444676][T10454] ? __pfx_sock_ioctl+0x10/0x10 [ 295.449617][T10454] __se_sys_ioctl+0xfc/0x170 [ 295.454237][T10454] do_syscall_64+0xf3/0x230 [ 295.458813][T10454] ? clear_bhb_loop+0x35/0x90 [ 295.463604][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.469589][T10454] RIP: 0033:0x7f5fef77def9 [ 295.475038][T10454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.495215][T10454] RSP: 002b:00007f5ff0620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.503670][T10454] RAX: ffffffffffffffda RBX: 00007f5fef935f80 RCX: 00007f5fef77def9 [ 295.511697][T10454] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000005 [ 295.519718][T10454] RBP: 00007f5fef7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 295.527716][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.535712][T10454] R13: 0000000000000000 R14: 00007f5fef935f80 R15: 00007fff78c5bef8 [ 295.543733][T10454] [ 295.546770][T10454] [ 295.549137][T10454] Allocated by task 9391: [ 295.553484][T10454] kasan_save_track+0x3f/0x80 [ 295.558278][T10454] __kasan_kmalloc+0x98/0xb0 [ 295.562980][T10454] __kmalloc_cache_noprof+0x19c/0x2c0 [ 295.568385][T10454] vhci_open+0x57/0x370 [ 295.572569][T10454] misc_open+0x313/0x390 [ 295.576849][T10454] chrdev_open+0x5b0/0x630 [ 295.581739][T10454] do_dentry_open+0x970/0x1440 [ 295.586594][T10454] vfs_open+0x3e/0x330 [ 295.590784][T10454] path_openat+0x2b3e/0x3470 [ 295.595451][T10454] do_filp_open+0x235/0x490 [ 295.600158][T10454] do_sys_openat2+0x13e/0x1d0 [ 295.605120][T10454] __x64_sys_openat+0x247/0x2a0 [ 295.610071][T10454] do_syscall_64+0xf3/0x230 [ 295.614623][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.620574][T10454] [ 295.623158][T10454] Freed by task 9391: [ 295.627178][T10454] kasan_save_track+0x3f/0x80 [ 295.631896][T10454] kasan_save_free_info+0x40/0x50 [ 295.637286][T10454] poison_slab_object+0xe0/0x150 [ 295.642299][T10454] __kasan_slab_free+0x37/0x60 [ 295.647096][T10454] kfree+0x149/0x360 [ 295.651012][T10454] vhci_release+0xbf/0xd0 [ 295.655367][T10454] __fput+0x24a/0x8a0 [ 295.659478][T10454] task_work_run+0x24f/0x310 [ 295.664210][T10454] do_exit+0xa2f/0x27f0 [ 295.668385][T10454] do_group_exit+0x207/0x2c0 [ 295.672995][T10454] __x64_sys_exit_group+0x3f/0x40 [ 295.678044][T10454] x64_sys_call+0x2634/0x2640 [ 295.682748][T10454] do_syscall_64+0xf3/0x230 [ 295.687273][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.693198][T10454] [ 295.695533][T10454] The buggy address belongs to the object at ffff8880628ed800 [ 295.695533][T10454] which belongs to the cache kmalloc-1k of size 1024 [ 295.709611][T10454] The buggy address is located 88 bytes inside of [ 295.709611][T10454] freed 1024-byte region [ffff8880628ed800, ffff8880628edc00) [ 295.723725][T10454] [ 295.726068][T10454] The buggy address belongs to the physical page: [ 295.732515][T10454] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x628e8 [ 295.741384][T10454] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 295.750266][T10454] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 295.759001][T10454] page_type: 0xfdffffff(slab) [ 295.763960][T10454] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 295.773788][T10454] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 295.782492][T10454] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 295.791576][T10454] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 295.801186][T10454] head: 00fff00000000003 ffffea00018a3a01 ffffffffffffffff 0000000000000000 [ 295.810314][T10454] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 295.818998][T10454] page dumped because: kasan: bad access detected [ 295.825448][T10454] page_owner tracks the page as allocated [ 295.831182][T10454] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 2562, tgid 2562 (kworker/u8:8), ts 105370944623, free_ts 105201309866 [ 295.853886][T10454] post_alloc_hook+0x1f3/0x230 [ 295.858723][T10454] get_page_from_freelist+0x2e4c/0x2f10 [ 295.864299][T10454] __alloc_pages_noprof+0x256/0x6c0 [ 295.869785][T10454] alloc_slab_page+0x5f/0x120 [ 295.874527][T10454] allocate_slab+0x5a/0x2f0 [ 295.879146][T10454] ___slab_alloc+0xcd1/0x14b0 [ 295.883874][T10454] __slab_alloc+0x58/0xa0 [ 295.888760][T10454] __kmalloc_noprof+0x25a/0x400 [ 295.893667][T10454] ieee802_11_parse_elems_full+0xdb/0x2880 [ 295.899509][T10454] ieee80211_ibss_rx_queued_mgmt+0x4c8/0x2d70 [ 295.905647][T10454] ieee80211_iface_work+0x8a5/0xf20 [ 295.910877][T10454] cfg80211_wiphy_work+0x2db/0x490 [ 295.916101][T10454] process_scheduled_works+0xa2c/0x1830 [ 295.921759][T10454] worker_thread+0x86d/0xd10 [ 295.926573][T10454] kthread+0x2f0/0x390 [ 295.930720][T10454] ret_from_fork+0x4b/0x80 [ 295.935255][T10454] page last free pid 5236 tgid 5236 stack trace: [ 295.941717][T10454] free_unref_page+0xd22/0xea0 [ 295.946526][T10454] __put_partials+0xeb/0x130 [ 295.951233][T10454] put_cpu_partial+0x17c/0x250 [ 295.956045][T10454] __slab_free+0x2ea/0x3d0 [ 295.961124][T10454] qlist_free_all+0x9e/0x140 [ 295.965914][T10454] kasan_quarantine_reduce+0x14f/0x170 [ 295.971605][T10454] __kasan_slab_alloc+0x23/0x80 [ 295.976500][T10454] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 295.982553][T10454] dup_task_struct+0x57/0x8c0 [ 295.987290][T10454] copy_process+0x5d1/0x3dc0 [ 295.992100][T10454] kernel_clone+0x226/0x8f0 [ 295.996652][T10454] __x64_sys_clone+0x258/0x2a0 [ 296.001664][T10454] do_syscall_64+0xf3/0x230 [ 296.006260][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.012539][T10454] [ 296.015106][T10454] Memory state around the buggy address: [ 296.021105][T10454] ffff8880628ed700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.029233][T10454] ffff8880628ed780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.038722][T10454] >ffff8880628ed800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.047770][T10454] ^ [ 296.055268][T10454] ffff8880628ed880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.063385][T10454] ffff8880628ed900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.071667][T10454] ================================================================== [ 296.146819][T10454] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 296.154156][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.0.1461 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 296.167607][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 296.177705][T10454] Call Trace: [ 296.181183][T10454] [ 296.184134][T10454] dump_stack_lvl+0x241/0x360 [ 296.188861][T10454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.194095][T10454] ? __pfx__printk+0x10/0x10 [ 296.198813][T10454] ? preempt_schedule+0xe1/0xf0 [ 296.204226][T10454] ? vscnprintf+0x5d/0x90 [ 296.208600][T10454] panic+0x349/0x860 [ 296.212827][T10454] ? check_panic_on_warn+0x21/0xb0 [ 296.217996][T10454] ? __pfx_panic+0x10/0x10 [ 296.222465][T10454] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 296.228488][T10454] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 296.235128][T10454] ? print_report+0x502/0x550 [ 296.239938][T10454] check_panic_on_warn+0x86/0xb0 [ 296.244903][T10454] ? skb_queue_purge_reason+0xb9/0x500 [ 296.250394][T10454] end_report+0x77/0x160 [ 296.254691][T10454] kasan_report+0x154/0x180 [ 296.259254][T10454] ? skb_queue_purge_reason+0xb9/0x500 [ 296.264803][T10454] skb_queue_purge_reason+0xb9/0x500 [ 296.271053][T10454] ? trace_contention_end+0x3c/0x120 [ 296.276461][T10454] ? __mutex_lock+0x2ef/0xd70 [ 296.281539][T10454] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 296.287564][T10454] ? drain_workqueue+0x2d3/0x3a0 [ 296.292543][T10454] ? hci_conn_hash_flush+0x1da/0x240 [ 296.297872][T10454] vhci_flush+0x44/0x50 [ 296.302190][T10454] ? __pfx_vhci_flush+0x10/0x10 [ 296.307265][T10454] hci_dev_reset+0x42a/0x5d0 [ 296.312009][T10454] sock_do_ioctl+0x158/0x460 [ 296.316866][T10454] ? __pfx_sock_do_ioctl+0x10/0x10 [ 296.322470][T10454] sock_ioctl+0x629/0x8e0 [ 296.326945][T10454] ? __pfx_sock_ioctl+0x10/0x10 [ 296.331841][T10454] ? __fget_files+0x29/0x470 [ 296.336521][T10454] ? __fget_files+0x3f6/0x470 [ 296.341678][T10454] ? __fget_files+0x29/0x470 [ 296.346479][T10454] ? bpf_lsm_file_ioctl+0x9/0x10 [ 296.351460][T10454] ? security_file_ioctl+0x87/0xb0 [ 296.356608][T10454] ? __pfx_sock_ioctl+0x10/0x10 [ 296.361508][T10454] __se_sys_ioctl+0xfc/0x170 [ 296.366130][T10454] do_syscall_64+0xf3/0x230 [ 296.370679][T10454] ? clear_bhb_loop+0x35/0x90 [ 296.375377][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.381392][T10454] RIP: 0033:0x7f5fef77def9 [ 296.385834][T10454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.407030][T10454] RSP: 002b:00007f5ff0620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.415773][T10454] RAX: ffffffffffffffda RBX: 00007f5fef935f80 RCX: 00007f5fef77def9 [ 296.423967][T10454] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000005 [ 296.432331][T10454] RBP: 00007f5fef7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 296.440712][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.449578][T10454] R13: 0000000000000000 R14: 00007f5fef935f80 R15: 00007fff78c5bef8 [ 296.458113][T10454] [ 296.461455][T10454] Kernel Offset: disabled [ 296.465827][T10454] Rebooting in 86400 seconds..