last executing test programs: 11.941974125s ago: executing program 3 (id=607): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x8d) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x13, 0x0, 0xffffffffffffff7a) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)={0x2, 'sit0\x00', {0xc7}, 0xff}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) r5 = socket(0x22, 0x2, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x6, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) (async) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r3) (async) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x68, 0x0, 0xa20, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x101]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24040045}, 0x4000001) (async) listen(r6, 0x80) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000140), 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r8) (async) shutdown(0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x41528979, 0x80, 0x6, 0xfffffff9}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x24041804}, 0x1) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 11.674419397s ago: executing program 3 (id=612): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, 0x0, 0x0) accept4$nfc_llcp(r5, &(0x7f0000000540), &(0x7f0000000280)=0x60, 0x80800) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000002c0)=0xffff, 0x4) sendto$inet6(r2, &(0x7f0000000100)="8f", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2={0xff, 0x5}}}) r8 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r4, 0x9, 0x1000}, &(0x7f0000000200)=0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000500), &(0x7f0000000180)=@tcp6=r1}, 0x20) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000140)=@udp=r9}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/24}, 0x20) 10.69558404s ago: executing program 3 (id=626): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x18, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) 10.588469743s ago: executing program 3 (id=628): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x3fc00}], 0x2, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) write$cgroup_type(r0, &(0x7f0000000000), 0x182200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b80)=ANY=[], 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040), 0x4) sendmsg$DEVLINK_CMD_GET(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), 0x0}, 0x20) socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x1, 0xc, 0x73c, 0x74a}, &(0x7f00000000c0)=0x20) sendmsg$sock(r7, &(0x7f0000001340)={&(0x7f0000000240)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000002c0)}, {&(0x7f00000012c0)="0dca62b806d88deb510cc7443a12b93ffda164341f5d9543bd", 0x19}], 0x2}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="a0010000100001000000000000000000000000000000000000000000008e8f000001000000000000000000082eb07f0000000000000000000000040000000000670507335df3417d1344e80d56dfcfb830332583b65b9e6c7c9641e9a5529a94a9ef82c90645ee776c8cb0c1800f7c0dbc7853b396fef4dbdd6a5110450d56ed7740af196ca248cdd6f00cbefdbff4604248ef35275ca7dd9211e52bfa18ede4e3fcad095d71c11c22448f8875851090cf8d2d803a437b912454eb9c4bbc300dd8eef13e60196c6898ff40e5a7a4f89f0eca0f7fe7e07392c21b3a9e0000000000000072b2944df7b7719ec8cbfa000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/344], 0x1a0}}, 0x0) 10.164566096s ago: executing program 3 (id=636): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(r0, 0x10d, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r2, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) syz_emit_ethernet(0x5e, 0x0, &(0x7f0000000500)={0x0, 0x0, [0x0, 0x7fe]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000001) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xfffffe85, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x68}}, 0x0) 9.189370192s ago: executing program 3 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1814f50173a7ea", @ANYRES16, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd106425563d80bd0d0d703f37ca153f601ae899a53f6715a0080034b0c94cce69945205480a55c22fe394ac000000000000000000040000000000437d57defb79ea6a58b83eeed729a2f95e6a1fc3857fb51b324be00000000000000090867f7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf350709e282a4f2bf59f46e20465eae865dbfd533b1cb2d540d0490cd5248715c74b6bd0248a9a0b413bbdfb5351defc6e34a961f3593920411e112c9df23a29c072d3460eb37beb5bbc04600c64acad9a04ffe62875177b51d2f0c6d7194c26789d2bec2d0846831455b8fcd03beaeca2c1335d8a49a92f9d2bef5f485c4fff4cf710b7d00000000000000009d47d564a838bdf8901a719431a9b0ef918ec0ec79037cb61df16379e3bf2a8100000007e8512e21080315e62559e8dd67dae85177d899d9e078f80585837f0e943b8820b19c75d243a78d8c2093c59cbc4c55f1578cff737502ea2d8d0b9dc946dcb38692dcc8db84834cc7726429cb20603b5338184f9856eeaec437fc3446b6c5ffe5db28aa802e37d3c4f259d616307d8aa46ca094049c0ddc1caaed5485b4ff030000182620bcba2316f9e6df0c8647f6ff0000000000000000386096e4a4ff86042f0b42027ff933d2dfe2d5baffacc9dc2411302a185ea454af5839be28b7d040c1fe1ce0fd63fa7f32b8ab6cd6a8b8bf1b693e4ffeca635d84c376b03a58677dd9f8c2a6fa126c7dad3f9e939c92d63ab1cf2fbea26a60b951914aba5c0696cc64e66b9b0f2c4444f8c391c0d9b647a3be4885a055ce3879a91fb62ca97e6526286c14c80b6dc981c5ae6ebf0778ea01a3a44e01ab79bcddbb83266a1ce1a1dea83ebb89d07b4d05aa09ad2904040e7784e96cd66b04204d47b1c66d5a84e7c3de1d1062fd8a23d1b402003c177e76dbca599691164ade323ad4a17abe99975cba748bc2379eed5a83dc94947eb18976db6ca6d35bfb65a3d8b5129d5263b66dbae6c2baa9bbec017646569fa99537aa453f3e6b2acebeddb6c32a87455f351efcd8385100f33d6b0c3195e229bd30260941825ba884d7db07e1212033409e62d7154cc68a7ee910e393470cdb781817f85373a647fd1b626035b666f224a66c0e47e15c6b836b324318507501a0f4b2cc9153167fd839a483615cbc2ad1a7d1528f01bf91b950a9bcd7d06491e1a355e476365f653d2d94ba898ab8d64d70bdb364ef3adb5ba1e4d9d5002da76ccec5d5184e912aaf5a945ae062e670fafb8cf0afee51c851546bb38c5ef303000000000000002ecdc2b82059750f019a418e3e8d20b6bf768a7db1f8472713452553149a4634418de7eda7b2e682271c6e62f5dfaabba46560dfa410e1f334a5f60791b275368469ddc42f7712bff1689f2ffbf5268cc0572e23afd4c402b154ae94c1f65d7d4a79272945287c79b4b70183d2cde66c7225106a064a1800d777372b2b43326821d5c1c78fda699c7484f3e5fc8bbce6fb3039569646b0de22c431d90c12d48e314d8a5ef4db14a110da070000002c4f7bd7f36f814ed92197fe3eb0843c2681c609231825b8a27ba301142cec8a6fd85965f83ff4dd40296e5fb5678d93d0daee45c43bdb9bde9c1d1c988b909fdf78cfda5da3dc28792b10fb8f3f22ece745c074f86f471489337a9a8d9ad7f310aa50c983b490f561bc420289b6aa0fc3f43f8a4548aa9c723ce466287760f919afbb94b0410ff06071de3aa1c199f407347af666713096a422fbc70671ac08f9256ab0079c101a724136352af2895899effda7bcd127ba98521eb4b04b2a821935ee3b216190e21fb059f9519c4804283d2ce09977842ff7309ad2c4d8f0420dfc8cdb1b37ad52985a88ca4cdc1e37715362a59f7c9c7df793d69f974399859e622ec3a1bab735a1aa489fe50619fe399eddaf92f67755cb54824685444a58731ee166ae65412709b853a5df7ce44220fc188c00291843d66e69da3744f39f5f6113fbe390b22cdbefb90ca2a51b1ff21f384e7bf076825aadaf02da77eeefb8875d630b7575e661b90eb6cd98674c92f179b2675b1f6c86712846ddae87bb3a3887b56292356270e85888c25a1c8ae958906ef6b71e1b800107da1c5608fe05d2f4265a5300000000000000007c737c911c049ae7dc9d77edecaf9685c53ac264e9f02ffcf0318af80c99ea2020b1e1f47cfdd6097c49b5f4bb92bb9133df719f35d4bf730784f1caa8e4e16f4eeb535c059a700d57e4d6c83c4a35a6ef44f135657d3d41856235253326d937125b6f23af7eb95bac231b84c6935a3a6d24d18f7e379db2fd5e76d5ad0d5b4a6c155e8759eb0e7b39ef433861158bd496ecafb3d1c50294e43d5895df1a2de536f5d85e0a000049277bc09533ceead6812fdfb5ef59b15069ea0df6a3eee0484c848fe4e6e7461ffc3917e4e07d250d9459ebea5fd4e26fc04eb38e70597fcb693cb2f7506f5f50b9f73a25bb83b6c71240e5d725ff567d9745a3ba5462524648a93360fb2b9feb1401e30996e1e7d14bb8db59880cde130af0a6a0e6152a6e3a8a684cabf379d4aa33c896bca694ce0180000000000000041caca10fe3ce74f1b8156d8155a4e11d2f35674dff1aa5e749deffffffffb946192820d223f4f0a1a7a2be83872662477884d65af42bcac801d0c667fba32e16ead8f076eed944d5998bca285c25349c6f26485902316c156eee9dcaa64f8a889abb1a890b23c7de6b2b0a6128545efc3ee8e60ea8eafa617ec3f0bfb1e23c4f75bc2a649a886bf4d5378c58259fddea066f1d70df9633af91752bf41a0d4d0929c34472a6f7110de1420800000000000000ca07ba65ce67dd46909ed693d71a5de47fe26a4eb2f4d514029b11f3f0c3ccb2403db497a55d23c25003ba864cdaf6e732f74e11d1a58e89f60267e60d79f467b181d636c9300420b30760bf861195eeb74275e9c4ed71f0e9fda02bdbf8aaa3e23a6d22dd423541b6acdd386a686bc8b128f724567d4c4908391b979a1c7102f5be7ed9db7a36ecfc3b9e0ab0eedde34700000000bec5fbefb008005888ce01eb816f2873e4c59facc7be45b2ab04b1456da413e3f7cf345d6fed0bff0800f8c3018bd0ea78ed54c8b684c797390bf5cad492bff0d97e553e42aba229446354cb4f5825915eccc911e7deee66873c20ffd06e63c27b8a12d757210a43870a0ef4ba3bad01c492d792c1535aeff946f3415912b5abbff35d1cd17c842175357a4bc758b4a943e06a7569fa1e1e4e017e43e8e47914d1000000000000000000000000000cd6b36d72dbc0d8000000c95d5ccace09e52960dbdf13b62f586b47ade41458b77834a573687780117829310ece7950fabcb63c63e18b207cbe936ee9a9a37879d42c66c2a72dfef46013ada19eb8d7e9f35267d0b72d591d0c2f92e2e667eed068310056ec5682b4c2bd946e657f2d9bce51da84f1e3b7d073265f352481b81703e0ecb59f70daf545215151b2b01b2bba1545de5d785ce281000000000000000000000000000000af9637ac06897446708dda1bd7b91be06c3f66def98618eb55bd5652d2ae6036402d69db587e87d04b6e4b1c86328adfcc7a22d77e8db6b1024f6bf7aec85a7f4241fb6b326acae3d9a4f4a0e8b723c43aae4f909f40d7167d1afde58812163d292666cf967e16c25889683658fdc86c820246d4009b3c4e8db0fe57735fb577b9f8e9d5fd9843615ec7c7affa29c04a7e8ea439d4938710039a55da15142ed876e581b4760b3483367fd96f0531ea7f3c6bb4193a76ea6b805b45a74365c15f41b8b542f21a83cae1aff4a858d551b95a2ba77fc8a1109f11e7b18d6f825587bb986e13ff37f111329feb2a09ebc54f1ee1ccd056ff9ec0ff0ce1c1ec5bfab4119a452eef335c0fe2b6bfcd635ef5979352de3801bdba7c145cdfb3ab07b45f13b8f45772c9f9c8285bbe14605879e4ddd78bfb6aa3444b7b3ef1713c58d3d348ea764370002f393e10ec3cf3ef1ab0aa1cab9596fe467c7288893172cd97691a0f1d68ca0449f05902fb7f46f7d0e0d36a68abb3f075358cdb701eac9c3f7f19ab13a83314309861dfaa256ccb4400ffc2568b900be14d9e06b138daf2b41c38abba3b1b2de2f3a660af382b7bc0c1318c5cbdec02646f3e28d8eef763aac4a7fd39c15950764734b8d641e4d642e44c4e6b83d1c3dda34d7cda18c652a5d8d9b406d4df8554e2a5611023766c53e9b478d374112165480e887c923ff0a33551d8f270481230ef34d9168806d43278c977b77148371bd02ee1bcfd278a579be8cc6dc58f6e1f8ee7118ae792c30d4f76546a630f7859fd315513722a1b871d311dc28f40d15b7c631b81e58a6bf8891875fe21e8ebcf2925c2fb2b32dc8a0b1b5c7f806ba81a31b1eec700225a14ff8dc83b484ab80849558a0ffc1ab62b2a4545dbfee4d93ed5de4ffe4469ed88df341dc69ab8b1da80bc47cd127c9e1378020cf5d362819e42350f293dd305b4801932d9e07fc647628a8a84958319874295b3cab523b2f43704845d5785c6b3025fadd8442ab42ebfc3bc45efcf24396f1c2ce50ba96430f8feaa1f8bcd8635a4ce00209a8ebabfdf6f1b5129c0e2a40ba4d1b5e3d6249ee8fa5d2d77351b6fba38756dea4e35c8573eda42eac89b4c50b85346b5ede0ff4dca6a70b38177eb5cb8b8437bb533f6ea1de29e1f1fda88e3afe92482af05ed713dd00aa6a5f8381b5d421909462ac33dee4095afcc67a926e50d2cbe1507195b73f624349b132e7b6b339f9a41fad97f3b70e5808eb177c9e7cb154554644e960f29c5d56fd83d8530a6afc8924dcf01e4ef07e7d16bcef404af5ee3b7767dfbd45f0eee2b583d0159b45cca60a930f37d995b02701d2991761cab642165ed3e52961b7c612991c11028bd1d45ea3106018692facfa14996d3d26d5642566c2f592f67975ce3840131275ce29ed116b6f6eeae34aeae334250e7ae4e25e98cc63b4104fdc79ac676a3c11fd6e9a67dc134802d41c4b01a47e3ad5b6ecd6f4a05bf55c1756535374b7bc9e010966a1415a1e50b2fcb20f3d972d9d7a9f0baf841be4f514eb35c9edaac4b3ca7bfab8a53945d035019cf3321c9144961780413dbb21b89c01fe020bcbaa7fe6b4697b196cf7ac3aa014c48259f5b22b45b2ae023d6052644fa51fc0671d6c4e012607a2df05b6f444903ab3251bdd8d2c98adf9f77de7edbc9631b0e7283a5ce1130d99ae5697ce3ea41e3ba5394883c9899384208cba558d69afdc574cbf05a45ed56d07a41f75c55603561f0e8d54670a53e4b8162729bc34ab66babf31d2e86af5a72553ec045466678427ca42eb49b58c5e58980b73451029b88118d730cce2a48b5d6b9caa2c8fb7178ff90196bd1091568a70d1b7ac47585f6180767a2534401aaf0cda644a4c978b972e0bf7b156aa5d80aa1c3d70c0bcd25ab61122349dd78bc28c3e169adea7ac95e09b6a160204ac772f810193cecf495a9836e082b60626316c02dba83abb792422079947b0d887b87f4cd6bd7c82b00000000000000008207fc649dab3ec0be72d68e61c19c1943664bf9088981b19ebbd3f212a471c6b01d28c1f5a0e5d9e0b762f7cebc056ae8fdeb4448ecb291b08684de1ff1c209448223e3979469b18ea13d5d88532f5a45ae4a86d21bde29b472d65e77d5412dae907ffaca95182316d15dbf12b7d77dcf2154376ab3900ba7d8f026e8a566372cdae696cdec4baa7efcbfc3d250638ee391aa3ab3cdd0a3fc42b674e1943bd0a3e1d103fe00b8788dc5b8ba1602bbfd7ca2bf58c60790eddb10cfca9938e2cafce2"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f00000001c0)={0x7, 'hsr0\x00', {0x3}, 0xcad7}) setsockopt$inet_opts(r4, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000000)="0f", 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 2.272859449s ago: executing program 1 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b703000000000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) r6 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r6, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/53, 0x35}}], 0x1, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000005ecb0043bad6842836729651eefc2bad76765449ec1159898c4edfd4652e54c54d3b4ceaf95b1c6b87153d641da4d5152333196216e71d2d7d2bdbceedb55cd7a5be1a9d11762691b5089594d2d15e0d155fade9bf1f6ca502528ab6", @ANYRES16=r8, @ANYBLOB="000429bd7000fddbdf250a0000001c000680060005004e20000008000300ac1e010108000300ac1414aa08000200080000000800020008000000"], 0x40}, 0x1, 0x0, 0x0, 0x8008101}, 0x20000081) 2.090335761s ago: executing program 4 (id=716): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', '', [{0x20, '#! '}, {0x20, '#! '}, {}, {0x20, '#! '}, {0x20, '@$\'%'}, {0x20, 'NLBL_CIPSOv4\x00'}]}, 0x24) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r1, 0x0, 0xfffffecc) r4 = socket(0x0, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000007400000006000000040040000000000e0600000000000000000000000001000d00000000000000000000000204000000000000000000000903000000000000006100"], 0x0, 0x52}, 0x20) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000500)={0x0, 0x401, 0x5}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000900)={r5, 0x4, 0xfa, 0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc050}, 0x44001) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet(0x2, 0x4000000805, 0x0) listen(r9, 0x7) (async) sendmmsg(r9, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18}}], 0x2, 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.755806826s ago: executing program 4 (id=717): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00@\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x19, 0x1, "000000000400000126000400"}]}}}}}}, 0x0) 1.588673727s ago: executing program 4 (id=718): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000080)=@framed={{}, [@map_idx]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000401000000000000000008040000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r2, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000001140)=[{}], 0x8, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0xec, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x108) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) read(r5, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE(0x14, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0xd, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x945b}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x4278ec39fb66da7e, 0x5, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}]}, &(0x7f0000001400)='syzkaller\x00', 0x81, 0xaf, &(0x7f0000001500)=""/175, 0x40f00, 0x44, '\x00', 0x0, 0xa, r7, 0x8, &(0x7f0000001440)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0x5, 0x1, 0x5}, 0x10, 0x0, r7, 0x7, &(0x7f00000015c0)=[r8], &(0x7f0000001600)=[{0x0, 0x4, 0x9, 0xc}, {0x1, 0x5, 0xf, 0x7}, {0x5, 0x2, 0x2, 0xc}, {0x5, 0x2, 0x3}, {0x4, 0x4, 0x1, 0x3}, {0x5, 0x2, 0xc, 0x6}, {0x2, 0x1400000, 0x2, 0x4}], 0x10, 0x75}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) syz_genetlink_get_family_id$gtp(&(0x7f00000014c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000000)={0x90000001}) epoll_pwait(r9, &(0x7f0000001840)=[{}], 0x1, 0x0, 0x0, 0x0) 1.492049281s ago: executing program 0 (id=719): socket$inet6(0xa, 0x6, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x120, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x8c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x120}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000200000483a002001000000000000"], 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) sendto$netrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x50}, 0x1, 0x7}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000240)=0x1000, &(0x7f0000000280)=0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x5, 0x4, 0x1, 0x2b, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x40, 0x1}}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001439) close(r5) socket$nl_rdma(0x10, 0x3, 0x14) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xc2) 1.456174818s ago: executing program 2 (id=720): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000dc0)='lp\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b5", 0xb8}, {&(0x7f0000000180)="316f825a3d29f96a2093a91701", 0xd}], 0x2}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.262888302s ago: executing program 2 (id=721): r0 = socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfe, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x88d0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f0314f90408faac470002000000010000000000080008000dc013000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) 1.234071763s ago: executing program 1 (id=722): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x4, 0x0, 0x20001f00) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, '802.15.4 MAC\x00'}, {0x20, '802.15.4 MAC\x00'}, {0x20, '802.15.4 MAC\x00'}, {0x20, 'nfc\x00'}], 0xa, "fbda1c909d76eebf8249483c7d25dcdb9add3668b1a5582d3dcca2cb32683a7c4c2adfd07beffcd2eaeb938bf2160b8404fcfe73d972d50a92c7b46531c2914a99c862bbdce933b58c59903a24e5cfc6f99d46031db80d2176a678e2bb7b33effb4d65be"}, 0x9f) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r5) 1.038382413s ago: executing program 2 (id=723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="2e003300d0000000ffffffffffff080211000000505050505050000000"], 0x4c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="65d8f5dc7448d308cfae26a429e3d63dd98faf22c71a587e9dec9e1b004372268116eac0262df146d0c31f55b5c808729ef9ee7167c4455f90bd0a147a0adf50ce425e2ce8e22958197067aa28cf1590e951bac0f29432c40560386de21be92517b09287df90c5fd124fc9c56f1c17380b10c431fe3c1cca663a330a74fe3d6764e52e9af8a35717dd8970ddf34dd6f7363ef205c8d82661", @ANYRES16=r6, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x21) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) epoll_create1(0x0) socket$packet(0x11, 0x0, 0x300) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000014006b05c84e21000af32c6e021e75f802000000400002007a17d30360bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd7004cb6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000900)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf2502000000050059000900000008006200ce000000080040040300000005005900070059000100000008000a098006000008006a000100000008006900ff7f00000400d100089f6a0004000000a5aed5102322b6af226686d2d2559583962911fa072716b7f640809b43701f60df454126a66b6fc67ed202081d3955c120c22316a86315df7377f60c21b8576f33e78af72194da8cf640ad97b37e011eb402742b51f0a8d4fde8d99e02f7b208d4b21d1f2a2bc0d784ac3afc1483c364938a87e507110df2ed83457334c4e8bb011b1ceb05"], 0x60}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500000000000072000000000000000000", 0x39}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000400000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4055) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xff4cf0c167917a4d}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@delqdisc={0x4c, 0x25, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe}, {0x0, 0xffff}, {0x10, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffff61}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003540)=ANY=[@ANYBLOB="4400000010000304fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964001400028006000900000000000600140000000000000000"], 0x44}, 0x1, 0xba01}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r11, &(0x7f00000000c0)="3f043608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001d0000022abd7000fddbdf2502000000", @ANYRES32=r12, @ANYBLOB="40ed010314001cb10394170000ff240c000009000023beeca89a5b22de2c02000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x840) 1.033002275s ago: executing program 1 (id=724): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000100)}, 0x20) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.012466781s ago: executing program 0 (id=725): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000dc0)='lp\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b5", 0xb8}, {&(0x7f0000000180)="316f825a3d29f96a2093a91701", 0xd}], 0x2}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 868.148851ms ago: executing program 1 (id=726): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 707.607912ms ago: executing program 0 (id=727): syz_emit_ethernet(0x98, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00@\x00', 0x62, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}]}}}}}}, 0x0) 634.828664ms ago: executing program 0 (id=728): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 607.817704ms ago: executing program 4 (id=729): r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xbb}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000000000000000", @ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000002600)=@bloom_filter={0x1e, 0x8, 0xd094, 0x752e, 0x8, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0xb}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000026c0)={r2, 0x0, 0x1d, 0x6}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002780)={0x1b, 0x0, 0x0, 0x9d8, 0x0, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002800)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xcc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xb, 0x24, &(0x7f0000000340)=@raw=[@tail_call, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @printk={@lli}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @func], &(0x7f00000001c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000025c0)={0x4, 0xf, 0x0, 0xffff}, 0x10, 0x0, r2, 0x4, 0x0, &(0x7f00000028c0)=[{0x0, 0x1, 0x9, 0xa}, {0x3, 0x3, 0x3, 0x6}, {0x0, 0x0, 0xd}, {0x5, 0x4, 0x8, 0x5}], 0x10, 0x91e5}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x131, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x39}, 0x14}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) unshare(0x20000400) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r5, &(0x7f0000000400), 0x0}, 0x20) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000980)="000000c8320100"/16, 0x10) accept4(r6, 0x0, 0x0, 0x0) 527.238001ms ago: executing program 1 (id=730): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000d70500000800000085000000690000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x54}}, 0x4080000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x0, 0x4, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000480)='objagg_destroy\x00', r1}, 0x10) r3 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x12, r3, 0x2316000) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000009000000000600150004000000140016800400088000010000000000cb651addb64a0fc9"], 0x38}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x48400) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000380)="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") r8 = accept(r4, 0x0, &(0x7f00000001c0)) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000100)=""/178, 0xb2, 0x12000, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x663e, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r3, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000000c0), 0x12) 430.845579ms ago: executing program 0 (id=731): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300eb990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00300000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) 383.604015ms ago: executing program 2 (id=732): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 376.264913ms ago: executing program 4 (id=733): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x4, 0x0, 0x20001f00) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, '802.15.4 MAC\x00'}, {0x20, '802.15.4 MAC\x00'}, {0x20, '802.15.4 MAC\x00'}, {0x20, 'nfc\x00'}], 0xa, "fbda1c909d76eebf8249483c7d25dcdb9add3668b1a5582d3dcca2cb32683a7c4c2adfd07beffcd2eaeb938bf2160b8404fcfe73d972d50a92c7b46531c2914a99c862bbdce933b58c59903a24e5cfc6f99d46031db80d2176a678e2bb7b33effb4d65be"}, 0x9f) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r5) 233.457067ms ago: executing program 1 (id=734): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x0, 0x0, &(0x7f0000000080)=0x1b00) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x70bd26, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x40}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300eb990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00300000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r10, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x5, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100009d0a0000008d439744000008000300", @ANYRES32=r12, @ANYBLOB="140004006e696376663000000000000000000000080005"], 0x38}}, 0x0) 173.485712ms ago: executing program 2 (id=735): syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @random="2ac7fd5d244d", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3f0ae7", 0x10, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x1}], {0x0, 0x0, 0x8}}}}}}, 0x0) 118.395443ms ago: executing program 0 (id=736): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(r0, 0x10d, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r2, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) syz_emit_ethernet(0x5e, 0x0, &(0x7f0000000500)={0x0, 0x0, [0x0, 0x7fe]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000001) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xfffffe85, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x68}}, 0x0) 15.299144ms ago: executing program 2 (id=737): syz_emit_ethernet(0x98, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00@\x00', 0x62, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}]}}}}}}, 0x0) 0s ago: executing program 4 (id=738): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1800000076000907000000000000000007020200f80b708d22834f7eb535f9e7e948396df783e8f33d5032321abd84386a5ed2f15058c4f6b9b769b50ad8faa70fb30bd4e232f5a120c86b32ba3d5d4e3aa40500000068ec7c3cf73e3dd0637fc849fe5f73cc9f6e390f9e8734001b51c91b21b0b0cba43193f74f9a76898024f1af413e3e402654bcadcf9af83f52793b06a90253da45d6b5b896faf0eced83ba0eccddeea38958df88eb", @ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x20, r10, 0x1, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="300029bd7000fedbdf255300000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x104, r6, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0xffffff9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x104}}, 0x0) getsockopt$rose(r3, 0x104, 0x6, 0x0, &(0x7f00000002c0)) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0x8, 0x7, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$AUDIT_TTY_GET(r14, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x3f8, 0x400, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x814}, 0x810) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0xd0, 0x90a, 0x1c0, 0x238, 0x238, 0x1c0, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'dvmrp0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 67.688174][ T5081] cgroup: Unknown subsys name 'net' [ 67.830858][ T5081] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.526313][ T5081] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.296300][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.307359][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.318347][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.326299][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.336689][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.337423][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.345130][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.352620][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.359133][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.366920][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.372413][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.379763][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.389449][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.393544][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.430182][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.437585][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.445180][ T4489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.458405][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.465882][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.468804][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.480969][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.481422][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.495310][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.496132][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.513747][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.521172][ T5102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.526909][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.535445][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.545442][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.569295][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.090372][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 71.192890][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 71.292824][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 71.353071][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 71.434004][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 71.492100][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.499963][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.507941][ T5090] bridge_slave_0: entered allmulticast mode [ 71.515649][ T5090] bridge_slave_0: entered promiscuous mode [ 71.563359][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.570985][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.578220][ T5090] bridge_slave_1: entered allmulticast mode [ 71.586160][ T5090] bridge_slave_1: entered promiscuous mode [ 71.623712][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.631092][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.638380][ T5091] bridge_slave_0: entered allmulticast mode [ 71.646199][ T5091] bridge_slave_0: entered promiscuous mode [ 71.693431][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.701366][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.708610][ T5096] bridge_slave_0: entered allmulticast mode [ 71.716392][ T5096] bridge_slave_0: entered promiscuous mode [ 71.724344][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.733838][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.734568][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.741171][ T5091] bridge_slave_1: entered allmulticast mode [ 71.750406][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.755020][ T5091] bridge_slave_1: entered promiscuous mode [ 71.808676][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.819007][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.826526][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.834028][ T5096] bridge_slave_1: entered allmulticast mode [ 71.841973][ T5096] bridge_slave_1: entered promiscuous mode [ 71.864547][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.894687][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.932212][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.026070][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.053226][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.061772][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.069034][ T5100] bridge_slave_0: entered allmulticast mode [ 72.076648][ T5100] bridge_slave_0: entered promiscuous mode [ 72.085907][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.093465][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.101120][ T5104] bridge_slave_0: entered allmulticast mode [ 72.108230][ T5104] bridge_slave_0: entered promiscuous mode [ 72.120436][ T5090] team0: Port device team_slave_0 added [ 72.127814][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.135364][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.142818][ T5104] bridge_slave_1: entered allmulticast mode [ 72.150295][ T5104] bridge_slave_1: entered promiscuous mode [ 72.159451][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.172650][ T5091] team0: Port device team_slave_0 added [ 72.180287][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.187507][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.194870][ T5100] bridge_slave_1: entered allmulticast mode [ 72.202325][ T5100] bridge_slave_1: entered promiscuous mode [ 72.225434][ T5090] team0: Port device team_slave_1 added [ 72.270146][ T5091] team0: Port device team_slave_1 added [ 72.324653][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.332347][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.359368][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.399671][ T5096] team0: Port device team_slave_0 added [ 72.408519][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.421483][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.431888][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.438990][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.450315][ T5105] Bluetooth: hci1: command tx timeout [ 72.465592][ T5102] Bluetooth: hci0: command tx timeout [ 72.471139][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.491345][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.514750][ T5096] team0: Port device team_slave_1 added [ 72.556357][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.566911][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.573960][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.600459][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.611253][ T5102] Bluetooth: hci4: command tx timeout [ 72.615581][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.623824][ T5102] Bluetooth: hci3: command tx timeout [ 72.623904][ T5105] Bluetooth: hci2: command tx timeout [ 72.629956][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.661194][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.702470][ T5100] team0: Port device team_slave_0 added [ 72.738964][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.746269][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.772855][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.805055][ T5100] team0: Port device team_slave_1 added [ 72.829030][ T5104] team0: Port device team_slave_0 added [ 72.838948][ T5104] team0: Port device team_slave_1 added [ 72.849603][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.856597][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.887304][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.960215][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.967212][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.994047][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.012687][ T5090] hsr_slave_0: entered promiscuous mode [ 73.020235][ T5090] hsr_slave_1: entered promiscuous mode [ 73.028316][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.035549][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.061812][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.099862][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.106937][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.133380][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.159673][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.166856][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.193125][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.244124][ T5091] hsr_slave_0: entered promiscuous mode [ 73.251759][ T5091] hsr_slave_1: entered promiscuous mode [ 73.258078][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.266120][ T5091] Cannot create hsr debugfs directory [ 73.308819][ T5096] hsr_slave_0: entered promiscuous mode [ 73.319667][ T5096] hsr_slave_1: entered promiscuous mode [ 73.325903][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.333677][ T5096] Cannot create hsr debugfs directory [ 73.411732][ T5100] hsr_slave_0: entered promiscuous mode [ 73.419678][ T5100] hsr_slave_1: entered promiscuous mode [ 73.425932][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.434016][ T5100] Cannot create hsr debugfs directory [ 73.549533][ T5104] hsr_slave_0: entered promiscuous mode [ 73.556208][ T5104] hsr_slave_1: entered promiscuous mode [ 73.562715][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.570892][ T5104] Cannot create hsr debugfs directory [ 73.984186][ T5090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.039711][ T5090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.051015][ T5090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.063080][ T5090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.142091][ T5096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.158681][ T5096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.183361][ T5096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.210253][ T5096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.268947][ T5091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.301713][ T5091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.330531][ T5091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.343298][ T5091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.461900][ T5100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.474932][ T5100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.485621][ T5100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.519710][ T5100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.530875][ T5105] Bluetooth: hci1: command tx timeout [ 74.539325][ T5105] Bluetooth: hci0: command tx timeout [ 74.668398][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.682220][ T5104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.690232][ T5105] Bluetooth: hci2: command tx timeout [ 74.690253][ T5102] Bluetooth: hci3: command tx timeout [ 74.695655][ T5105] Bluetooth: hci4: command tx timeout [ 74.711812][ T5104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.748586][ T5104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.772894][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.792653][ T5104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.818807][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.860709][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.868321][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.915615][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.934855][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.942054][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.984448][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.991660][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.007651][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.014819][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.115970][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.213584][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.246024][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.320351][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.327567][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.355858][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.384566][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.391849][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.451729][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.458991][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.508736][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.516019][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.568280][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.653117][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.676001][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.694201][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.724445][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.732334][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.745201][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.752470][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.871237][ T5104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.883812][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.032077][ T5090] veth0_vlan: entered promiscuous mode [ 76.086777][ T5090] veth1_vlan: entered promiscuous mode [ 76.112503][ T5096] veth0_vlan: entered promiscuous mode [ 76.125985][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.169143][ T5096] veth1_vlan: entered promiscuous mode [ 76.322295][ T5090] veth0_macvtap: entered promiscuous mode [ 76.355215][ T5091] veth0_vlan: entered promiscuous mode [ 76.368006][ T5090] veth1_macvtap: entered promiscuous mode [ 76.407337][ T5091] veth1_vlan: entered promiscuous mode [ 76.421625][ T5096] veth0_macvtap: entered promiscuous mode [ 76.433644][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.447838][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.472319][ T5096] veth1_macvtap: entered promiscuous mode [ 76.484274][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.507553][ T5090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.517076][ T5090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.526177][ T5090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.535200][ T5090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.583754][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.595458][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.608474][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.619986][ T5105] Bluetooth: hci0: command tx timeout [ 76.621143][ T5102] Bluetooth: hci1: command tx timeout [ 76.631137][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.701907][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.716806][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.731234][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.758226][ T5091] veth0_macvtap: entered promiscuous mode [ 76.769484][ T5102] Bluetooth: hci3: command tx timeout [ 76.770006][ T5105] Bluetooth: hci2: command tx timeout [ 76.774902][ T5097] Bluetooth: hci4: command tx timeout [ 76.797624][ T5096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.806868][ T5096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.816824][ T5096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.826506][ T5096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.847580][ T5091] veth1_macvtap: entered promiscuous mode [ 77.050228][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.061622][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.072850][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.084439][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.096912][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.112938][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.123711][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.127025][ T5100] veth0_vlan: entered promiscuous mode [ 77.167983][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.179585][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.190459][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.201394][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.214095][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.254044][ T5100] veth1_vlan: entered promiscuous mode [ 77.277956][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.286668][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.304382][ T5091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.315016][ T5091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.324463][ T5091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.334005][ T5091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.349845][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.373005][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.393617][ T5100] veth0_macvtap: entered promiscuous mode [ 77.454578][ T5100] veth1_macvtap: entered promiscuous mode [ 77.543366][ T5104] veth0_vlan: entered promiscuous mode [ 77.562763][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.584583][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.611297][ T5104] veth1_vlan: entered promiscuous mode [ 77.628907][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.655679][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.684243][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.695728][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.705795][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.716453][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.728150][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.823398][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.849326][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.870613][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.886795][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.898739][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.913335][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.938279][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.000563][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.008445][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.008657][ T5100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.038394][ T5100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.069456][ T5100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.100054][ T5100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.117490][ T5104] veth0_macvtap: entered promiscuous mode [ 78.168902][ T5104] veth1_macvtap: entered promiscuous mode [ 78.179335][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 78.222624][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.238425][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.241853][ T5190] Zero length message leads to an empty skb [ 78.357702][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.403202][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.416191][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.427455][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.437880][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.448879][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.467020][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.497007][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.508872][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.557341][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.576997][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.600136][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.625373][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.660836][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.686370][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.697608][ T5097] Bluetooth: hci0: command tx timeout [ 78.703600][ T5097] Bluetooth: hci1: command tx timeout [ 78.721505][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.730995][ T5203] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.733264][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.753668][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.764342][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.777808][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.795107][ T5206] netlink: 'syz.3.11': attribute type 2 has an invalid length. [ 78.818444][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 78.851116][ T5097] Bluetooth: hci2: command tx timeout [ 78.859900][ T5097] Bluetooth: hci4: command tx timeout [ 78.865345][ T5097] Bluetooth: hci3: command tx timeout [ 78.875108][ T5104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.889691][ T5104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.898544][ T5104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.907627][ T5104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.925382][ T5209] tunl0: entered promiscuous mode [ 78.951149][ T5209] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 78.958766][ T5209] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11'. [ 78.969847][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 78.988273][ T5206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11'. [ 79.046471][ T5202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 79.084911][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.139894][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.410979][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.418864][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.472504][ T5222] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15'. [ 79.514063][ T5221] Illegal XDP return value 4068587721 on prog (id 6) dev N/A, expect packet loss! [ 79.564695][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.578534][ T5226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 79.608177][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.627018][ T5226] sctp: [Deprecated]: syz.1.2 (pid 5226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.627018][ T5226] Use struct sctp_sack_info instead [ 80.078027][ T5249] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.169801][ T5251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 80.252854][ T5253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 80.460594][ T5258] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 80.571954][ T5262] sock: sock_timestamping_bind_phc: sock not bind to device [ 80.740853][ T5267] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.106599][ T29] audit: type=1804 audit(1719478695.040:2): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.27" name="/root/syzkaller.GTAw6T/4/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 81.157272][ T5283] @ÿ: renamed from veth0_vlan (while UP) [ 81.209075][ T5283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.573772][ T5295] syz.2.35[5295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.573980][ T5295] syz.2.35[5295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.633616][ T5292] sctp: [Deprecated]: syz.1.31 (pid 5292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.633616][ T5292] Use struct sctp_sack_info instead [ 81.847888][ T5301] bridge_slave_1: left allmulticast mode [ 81.899827][ T5301] bridge_slave_1: left promiscuous mode [ 81.918748][ T5301] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.995456][ T5301] bridge_slave_0: left allmulticast mode [ 82.006809][ T5301] bridge_slave_0: left promiscuous mode [ 82.031798][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.637167][ T29] audit: type=1804 audit(1719478696.570:3): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.42" name="/root/syzkaller.LOfaTm/12/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 82.863829][ T5322] netlink: 'syz.0.44': attribute type 2 has an invalid length. [ 82.901311][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.910366][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.925444][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.942586][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.950612][ T5096] syz-executor (5096) used greatest stack depth: 18512 bytes left [ 82.951233][ T5334] tunl0: entered promiscuous mode [ 82.964414][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.977005][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.063637][ T5334] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 83.123022][ T5323] tunl0: entered promiscuous mode [ 83.133078][ T5323] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 83.188315][ T5323] __nla_validate_parse: 5 callbacks suppressed [ 83.188340][ T5323] netlink: 9 bytes leftover after parsing attributes in process `syz.0.44'. [ 83.239525][ T5328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'. [ 83.383552][ T5330] netlink: 'syz.1.46': attribute type 2 has an invalid length. [ 83.404080][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 83.447090][ T5341] No such timeout policy "syz0" [ 83.484515][ T5341] Bluetooth: MGMT ver 1.22 [ 83.498000][ T5322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.44'. [ 83.522124][ T5337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'. [ 83.651489][ T5339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.46'. [ 83.679606][ T5097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.688982][ T5097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.724810][ T5097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.742526][ T5097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.753018][ T5097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.762998][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.887150][ T1282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.004221][ T5353] sctp: [Deprecated]: syz.4.49 (pid 5353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.004221][ T5353] Use struct sctp_sack_info instead [ 84.232284][ T5351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.49'. [ 84.425577][ T1282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.562359][ T1282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.762971][ T1282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.939455][ T5381] netlink: 'syz.4.58': attribute type 2 has an invalid length. [ 84.967955][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 85.026551][ T5384] tunl0: entered promiscuous mode [ 85.060961][ T5384] netlink: 'syz.4.58': attribute type 1 has an invalid length. [ 85.079279][ T5384] netlink: 9 bytes leftover after parsing attributes in process `syz.4.58'. [ 85.090982][ T5097] Bluetooth: hci2: command tx timeout [ 85.190078][ T5381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.58'. [ 85.533491][ T1282] bridge_slave_1: left allmulticast mode [ 85.546069][ T1282] bridge_slave_1: left promiscuous mode [ 85.554718][ T1282] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.601941][ T1282] bridge_slave_0: left allmulticast mode [ 85.617507][ T1282] bridge_slave_0: left promiscuous mode [ 85.627896][ T1282] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.891428][ T5097] Bluetooth: hci5: command tx timeout [ 86.082728][ T1282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.096954][ T1282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.109940][ T1282] bond0 (unregistering): Released all slaves [ 86.679037][ T5427] netlink: 'syz.1.66': attribute type 21 has an invalid length. [ 86.704482][ T5427] netlink: 'syz.1.66': attribute type 20 has an invalid length. [ 86.712608][ T5427] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.767245][ T5433] veth1_to_bridge: entered allmulticast mode [ 86.833316][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 87.107363][ T45] cfg80211: failed to load regulatory.db [ 87.171015][ T5097] Bluetooth: hci2: command tx timeout [ 87.201499][ T5331] chnl_net:caif_netlink_parms(): no params data found [ 87.547955][ T1282] hsr_slave_0: left promiscuous mode [ 87.568605][ T1282] hsr_slave_1: left promiscuous mode [ 87.583064][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.591527][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.601261][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.608986][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.664555][ T1282] veth1_macvtap: left promiscuous mode [ 87.676703][ T1282] veth0_macvtap: left promiscuous mode [ 87.683826][ T1282] veth1_vlan: left promiscuous mode [ 87.696781][ T1282] @ÿ: left promiscuous mode [ 87.970044][ T5097] Bluetooth: hci5: command tx timeout [ 88.277683][ T1282] team0 (unregistering): Port device team_slave_1 removed [ 88.316260][ T1282] team0 (unregistering): Port device team_slave_0 removed [ 88.774121][ T5474] __nla_validate_parse: 6 callbacks suppressed [ 88.774144][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 88.793984][ T5474] bridge_slave_1: left allmulticast mode [ 88.814098][ T5474] bridge_slave_1: left promiscuous mode [ 88.827640][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.888231][ T5474] bridge_slave_0: left allmulticast mode [ 88.906746][ T5474] bridge_slave_0: left promiscuous mode [ 88.916355][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.012005][ T5496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.79'. [ 89.199031][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.224638][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.233194][ T5344] bridge_slave_0: entered allmulticast mode [ 89.250160][ T5097] Bluetooth: hci2: command tx timeout [ 89.276646][ T5344] bridge_slave_0: entered promiscuous mode [ 89.447563][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.480763][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.492557][ T5344] bridge_slave_1: entered allmulticast mode [ 89.518768][ T5344] bridge_slave_1: entered promiscuous mode [ 89.642569][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.668152][ T5331] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.706762][ T5331] bridge_slave_0: entered allmulticast mode [ 89.742338][ T5331] bridge_slave_0: entered promiscuous mode [ 89.814727][ T5331] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.837377][ T5331] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.866141][ T5331] bridge_slave_1: entered allmulticast mode [ 89.904942][ T5331] bridge_slave_1: entered promiscuous mode [ 89.931929][ T5530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.87'. [ 89.961341][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.022623][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.056152][ T5097] Bluetooth: hci5: command tx timeout [ 90.172415][ T5534] netlink: 'syz.4.88': attribute type 13 has an invalid length. [ 90.288443][ T5331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.384478][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 90.408837][ T5540] bridge_slave_1: left allmulticast mode [ 90.430412][ T5540] bridge_slave_1: left promiscuous mode [ 90.449046][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.466455][ T5540] bridge_slave_0: left allmulticast mode [ 90.483453][ T5540] bridge_slave_0: left promiscuous mode [ 90.499643][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.668087][ T5331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.698439][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 90.734010][ T5344] team0: Port device team_slave_0 added [ 90.781897][ T5344] team0: Port device team_slave_1 added [ 91.074306][ T5331] team0: Port device team_slave_0 added [ 91.098685][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.128473][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.165567][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.248945][ T5331] team0: Port device team_slave_1 added [ 91.270470][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.277460][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.329532][ T5097] Bluetooth: hci2: command tx timeout [ 91.409429][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.473527][ T5588] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.95'. [ 91.711930][ T5601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 91.721627][ T1282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.845358][ T5331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.869349][ T5331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.897244][ T5331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.922973][ T1282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.999817][ T5611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 92.018169][ T5331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.047584][ T5331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.129507][ T5097] Bluetooth: hci5: command tx timeout [ 92.135113][ T5331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.233280][ T1282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.344471][ T5344] hsr_slave_0: entered promiscuous mode [ 92.372404][ T5344] hsr_slave_1: entered promiscuous mode [ 92.379988][ T5344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.388518][ T5344] Cannot create hsr debugfs directory [ 92.453196][ T1282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.673567][ T5640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.107'. [ 92.758416][ T5331] hsr_slave_0: entered promiscuous mode [ 92.787740][ T5331] hsr_slave_1: entered promiscuous mode [ 92.800647][ T5331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.814015][ T5331] Cannot create hsr debugfs directory [ 92.975898][ T5649] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.429636][ T1282] bridge_slave_1: left allmulticast mode [ 93.435515][ T1282] bridge_slave_1: left promiscuous mode [ 93.445727][ T1282] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.487548][ T1282] bridge_slave_0: left allmulticast mode [ 93.509703][ T1282] bridge_slave_0: left promiscuous mode [ 93.526032][ T1282] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.906694][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.119'. [ 94.038554][ T1282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.056232][ T1282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.068218][ T1282] bond0 (unregistering): Released all slaves [ 94.104571][ T5669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 94.915051][ T1282] hsr_slave_0: left promiscuous mode [ 94.969550][ T1282] hsr_slave_1: left promiscuous mode [ 95.003027][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.035112][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.065438][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.089325][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.202204][ T1282] veth1_macvtap: left promiscuous mode [ 95.208650][ T1282] veth0_macvtap: left promiscuous mode [ 95.267553][ T1282] veth1_vlan: left promiscuous mode [ 95.279279][ T1282] veth0_vlan: left promiscuous mode [ 96.124898][ T1282] team0 (unregistering): Port device team_slave_1 removed [ 96.201083][ T1282] team0 (unregistering): Port device team_slave_0 removed [ 96.799989][ T5720] netlink: 64 bytes leftover after parsing attributes in process `syz.0.131'. [ 96.888166][ T5724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 97.131247][ T5758] netlink: 236 bytes leftover after parsing attributes in process `syz.0.140'. [ 97.258654][ T5763] x_tables: duplicate underflow at hook 1 [ 97.876957][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 98.030590][ T5331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.071556][ T5331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.109024][ T5331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.144050][ T5331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.379597][ T5344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.422859][ T5344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.564338][ T5344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.635367][ T5344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.782270][ T5331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.904210][ T5331] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.961164][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.968436][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.080055][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.087275][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.367674][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.458294][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.550542][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.557734][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.607476][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.614720][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.785658][ T5344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.047024][ T5331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.114249][ T5866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'. [ 100.251855][ T5331] veth0_vlan: entered promiscuous mode [ 100.313237][ T5331] veth1_vlan: entered promiscuous mode [ 100.442692][ T5331] veth0_macvtap: entered promiscuous mode [ 100.480891][ T5331] veth1_macvtap: entered promiscuous mode [ 100.534953][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.652140][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.675362][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.691026][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.703703][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.714262][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.727027][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.748377][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.759930][ T5888] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.171'. [ 100.778331][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.797194][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.808788][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.837404][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.858200][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.870180][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.891579][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.898537][ T5892] netlink: 'syz.4.172': attribute type 7 has an invalid length. [ 100.908782][ T5884] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.171'. [ 100.918587][ T5892] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.172'. [ 100.929577][ T5888] syz.0.171 (5888) used greatest stack depth: 18456 bytes left [ 100.946590][ T5331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.961625][ T5331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.971500][ T5892] netlink: 'syz.4.172': attribute type 3 has an invalid length. [ 100.975601][ T5331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.995001][ T5331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.004472][ T5892] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.172'. [ 101.312580][ T5344] veth0_vlan: entered promiscuous mode [ 101.457054][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.468402][ T5344] veth1_vlan: entered promiscuous mode [ 101.502598][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.558414][ T5907] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 101.671454][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 101.740017][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.762936][ T5344] veth0_macvtap: entered promiscuous mode [ 101.782999][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.804352][ T5344] veth1_macvtap: entered promiscuous mode [ 101.964373][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.000433][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.034458][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.048946][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 102.064943][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 102.069629][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.125829][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.145431][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.169246][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.199133][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.238202][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.287907][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.318720][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.345334][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.376288][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.416770][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.430932][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.442539][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.454504][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.504585][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.531592][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 102.562805][ T5344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.605846][ T5344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.623831][ T5344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.654115][ T5344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.682387][ T5950] netlink: 'syz.4.184': attribute type 2 has an invalid length. [ 102.700153][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 102.727793][ T5953] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 102.758091][ T5959] netlink: 'syz.1.186': attribute type 21 has an invalid length. [ 103.281077][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.319134][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.524024][ T3813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.553550][ T3813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.931242][ T6063] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2048 (only 8 groups) [ 105.238285][ T6060] __nla_validate_parse: 5 callbacks suppressed [ 105.238309][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 105.339013][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.216'. [ 105.747185][ T6095] raw_sendmsg: syz.4.223 forgot to set AF_INET. Fix it! [ 105.928103][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 105.951542][ T6098] bridge_slave_1: left allmulticast mode [ 105.988228][ T6098] bridge_slave_1: left promiscuous mode [ 106.006086][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.032541][ T6098] bridge_slave_0: left allmulticast mode [ 106.049211][ T6098] bridge_slave_0: left promiscuous mode [ 106.064031][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.227914][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 106.390274][ T6134] netlink: 'syz.3.229': attribute type 21 has an invalid length. [ 106.444312][ T6134] netlink: 156 bytes leftover after parsing attributes in process `syz.3.229'. [ 106.489791][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.231'. [ 106.611716][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'. [ 106.725071][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 106.906914][ T6164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.235'. [ 106.956907][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 107.223213][ T6184] netlink: 'syz.2.241': attribute type 2 has an invalid length. [ 107.261983][ T6175] syzkaller1: entered promiscuous mode [ 107.267535][ T6175] syzkaller1: entered allmulticast mode [ 107.328373][ T29] audit: type=1800 audit(1719478721.260:4): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.241" name="memory.events" dev="sda1" ino=1978 res=0 errno=0 [ 107.575054][ T6197] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 107.613042][ T6197] gretap1: entered promiscuous mode [ 107.628618][ T6197] gretap1: entered allmulticast mode [ 107.873640][ T6210] tipc: Enabling of bearer rejected, failed to enable media [ 108.846785][ T6262] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 108.868892][ T6262] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 108.982279][ T6268] debugfs: Directory 'netdev:nicvf0' with parent 'phy14' already present! [ 109.104064][ T6278] netlink: 'syz.3.268': attribute type 2 has an invalid length. [ 109.117145][ T6278] tunl0: entered promiscuous mode [ 109.134205][ T6278] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 109.863052][ T6308] netlink: 'syz.3.279': attribute type 2 has an invalid length. [ 109.904107][ T6308] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 109.970902][ T6316] netlink: 'syz.2.282': attribute type 2 has an invalid length. [ 110.012811][ T6316] tunl0: entered promiscuous mode [ 110.031726][ T6316] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 110.227491][ T6325] syzkaller1: entered promiscuous mode [ 110.257116][ T6325] syzkaller1: entered allmulticast mode [ 110.846910][ T6344] __nla_validate_parse: 26 callbacks suppressed [ 110.846933][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 111.040062][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.292'. [ 111.064726][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 111.522524][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.298'. [ 111.812988][ T6376] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 112.081628][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.304'. [ 112.086557][ T6361] delete_channel: no stack [ 112.116794][ T29] audit: type=1804 audit(1719478726.050:5): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.303" name="/root/syzkaller.s87rM5/23/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 112.188259][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 112.477527][ T6398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.309'. [ 112.588102][ T6400] netlink: 'syz.3.310': attribute type 2 has an invalid length. [ 112.606134][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 112.634211][ T6400] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 112.645175][ T6400] netlink: 9 bytes leftover after parsing attributes in process `syz.3.310'. [ 112.664528][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'. [ 113.086302][ T6423] netlink: 'syz.2.316': attribute type 2 has an invalid length. [ 113.106606][ T6423] netlink: 'syz.2.316': attribute type 1 has an invalid length. [ 113.966609][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.979906][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.988467][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.008696][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.024143][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.039936][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.142429][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.318139][ T6462] Bluetooth: MGMT ver 1.22 [ 114.361981][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.538395][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.685388][ T6471] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 114.702875][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.832042][ T6475] netlink: 'syz.2.333': attribute type 2 has an invalid length. [ 114.881490][ T6475] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 115.013723][ T6482] bridge_slave_1: left allmulticast mode [ 115.021431][ T6482] bridge_slave_1: left promiscuous mode [ 115.027302][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.038360][ T6482] bridge_slave_0: left allmulticast mode [ 115.053293][ T6482] bridge_slave_0: left promiscuous mode [ 115.063739][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.264932][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 115.995249][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.007780][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.020461][ T12] bond0 (unregistering): Released all slaves [ 116.042819][ T6501] __nla_validate_parse: 17 callbacks suppressed [ 116.042843][ T6501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 116.058822][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 116.139985][ T5097] Bluetooth: hci0: command tx timeout [ 116.188632][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.213983][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.236418][ T6448] bridge_slave_0: entered allmulticast mode [ 116.251125][ T6448] bridge_slave_0: entered promiscuous mode [ 116.272550][ T6518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.345'. [ 116.365393][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.385906][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.406595][ T6448] bridge_slave_1: entered allmulticast mode [ 116.414563][ T6448] bridge_slave_1: entered promiscuous mode [ 116.469241][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.346'. [ 116.506258][ T6525] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 116.716074][ T6537] netlink: 'syz.2.349': attribute type 2 has an invalid length. [ 116.733168][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 116.754587][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.770578][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 116.786311][ T6539] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 116.794283][ T6539] netlink: 9 bytes leftover after parsing attributes in process `syz.2.349'. [ 116.828858][ T6534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 116.866132][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 116.890681][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.916724][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.349'. [ 117.044561][ T12] hsr_slave_0: left promiscuous mode [ 117.056955][ T12] hsr_slave_1: left promiscuous mode [ 117.090257][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.104593][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.128965][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.137728][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.172077][ T12] veth1_macvtap: left promiscuous mode [ 117.177817][ T12] veth0_macvtap: left promiscuous mode [ 117.183793][ T12] veth1_vlan: left promiscuous mode [ 117.192862][ T12] veth0_vlan: left promiscuous mode [ 117.763547][ T12] team0 (unregistering): Port device team_slave_1 removed [ 117.806163][ T12] team0 (unregistering): Port device team_slave_0 removed [ 118.172067][ T6448] team0: Port device team_slave_0 added [ 118.208192][ T6558] pim6reg: entered allmulticast mode [ 118.209492][ T5097] Bluetooth: hci0: command tx timeout [ 118.293242][ T6448] team0: Port device team_slave_1 added [ 118.512531][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.521935][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.615648][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.664505][ T6589] xt_hashlimit: invalid interval [ 118.681705][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.688711][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.765764][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.020778][ T6591] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 119.096442][ T6591] team0: Device veth1_macvtap failed to register rx_handler [ 119.152644][ T6593] erspan1: entered promiscuous mode [ 119.179023][ T6600] xt_TCPMSS: Only works on TCP SYN packets [ 119.250392][ T6448] hsr_slave_0: entered promiscuous mode [ 119.277904][ T6448] hsr_slave_1: entered promiscuous mode [ 119.476787][ T6607] netlink: 'syz.0.370': attribute type 2 has an invalid length. [ 119.535646][ T6607] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 119.601432][ T6611] netlink: 'syz.3.371': attribute type 2 has an invalid length. [ 119.641772][ T6616] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 120.202927][ T6636] macvlan0: entered promiscuous mode [ 120.222336][ T6636] batadv_slave_0: entered promiscuous mode [ 120.289898][ T5097] Bluetooth: hci0: command tx timeout [ 120.351637][ T6636] gretap0: entered promiscuous mode [ 120.370840][ T6636] gretap0: left promiscuous mode [ 120.432090][ T6448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.444433][ T6448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.462585][ T6448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.485346][ T6448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.543868][ T6657] netlink: 'syz.1.387': attribute type 2 has an invalid length. [ 120.590899][ T6657] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 120.869487][ T6668] syzkaller1: entered promiscuous mode [ 120.875033][ T6668] syzkaller1: entered allmulticast mode [ 120.944973][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.147564][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.389863][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.397193][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.434467][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.441745][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.001323][ T6712] syzkaller1: entered promiscuous mode [ 122.007277][ T6712] syzkaller1: entered allmulticast mode [ 122.056169][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.369692][ T5097] Bluetooth: hci0: command tx timeout [ 122.603757][ T6448] veth0_vlan: entered promiscuous mode [ 122.617925][ T6448] veth1_vlan: entered promiscuous mode [ 122.658502][ T6448] veth0_macvtap: entered promiscuous mode [ 122.672750][ T6448] veth1_macvtap: entered promiscuous mode [ 122.696494][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.707387][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.717475][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.728141][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.738194][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.750045][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.768153][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.781402][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.797869][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.817533][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.832683][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.859204][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.882776][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.914010][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.939538][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.969267][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.980165][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.992256][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.055810][ T6751] bridge_slave_0: entered promiscuous mode [ 123.116731][ T6448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.133124][ T6448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.144538][ T6448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.163161][ T6448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.458612][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.476099][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.514543][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.523620][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.542431][ T6772] __nla_validate_parse: 22 callbacks suppressed [ 123.542455][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 123.725454][ T6774] netlink: 277 bytes leftover after parsing attributes in process `syz.3.426'. [ 124.203208][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 124.600088][ T6834] Cannot find set identified by id 0 to match [ 125.329055][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 125.637118][ T6888] netlink: 'syz.3.462': attribute type 2 has an invalid length. [ 125.655272][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 125.667599][ T6888] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 125.697873][ T6888] netlink: 9 bytes leftover after parsing attributes in process `syz.3.462'. [ 125.736013][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.462'. [ 125.758889][ T6901] Cannot find set identified by id 0 to match [ 125.865330][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 125.882369][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 126.056307][ T6911] wg2: entered promiscuous mode [ 126.093904][ T6911] wg2: entered allmulticast mode [ 126.252334][ T6925] netlink: 'syz.3.472': attribute type 11 has an invalid length. [ 126.283230][ T6930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.473'. [ 126.485623][ T6941] netlink: 'syz.0.478': attribute type 31 has an invalid length. [ 126.525106][ T6941] Cannot find add_set index 0 as target [ 126.611083][ T6943] netlink: 'syz.4.480': attribute type 2 has an invalid length. [ 126.642034][ T6943] tunl0: entered promiscuous mode [ 126.674903][ T6943] netlink: 'syz.4.480': attribute type 1 has an invalid length. [ 126.748231][ T6953] netlink: 'syz.2.481': attribute type 15 has an invalid length. [ 126.793723][ T6953] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 126.803973][ T6953] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 126.813114][ T6953] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 126.822012][ T6953] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 126.834379][ T6953] vxlan0: entered promiscuous mode [ 127.263982][ T6974] netlink: 'syz.4.489': attribute type 2 has an invalid length. [ 127.296117][ T6974] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 128.142973][ T7017] netlink: 'syz.0.505': attribute type 2 has an invalid length. [ 128.564800][ T7043] __nla_validate_parse: 13 callbacks suppressed [ 128.564823][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.513'. [ 128.580957][ T7045] openvswitch: netlink: Message has 16 unknown bytes. [ 128.794309][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 128.817419][ T7059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'. [ 128.841266][ T7055] netlink: 9 bytes leftover after parsing attributes in process `syz.1.521'. [ 128.900387][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.521'. [ 129.018087][ T7071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.521'. [ 129.051367][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 129.147908][ T7073] dccp_invalid_packet: P.Data Offset(0) too small [ 129.324345][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'. [ 129.522541][ T7105] netlink: 2 bytes leftover after parsing attributes in process `syz.2.534'. [ 129.586059][ T7105] team0: entered promiscuous mode [ 129.619344][ T7105] team_slave_0: entered promiscuous mode [ 129.625408][ T7105] team_slave_1: entered promiscuous mode [ 129.669249][ T7116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.535'. [ 129.823857][ T7125] syzkaller1: entered promiscuous mode [ 129.839600][ T7125] syzkaller1: entered allmulticast mode [ 129.861035][ T29] audit: type=1804 audit(1719478743.790:6): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.538" name="/root/syzkaller.pluPFs/143/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 130.212962][ T7142] bridge_slave_1: left allmulticast mode [ 130.218674][ T7142] bridge_slave_1: left promiscuous mode [ 130.268693][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.290183][ T7142] bridge_slave_0: left allmulticast mode [ 130.296003][ T7142] bridge_slave_0: left promiscuous mode [ 130.305501][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.491278][ T7160] netlink: 'syz.2.551': attribute type 11 has an invalid length. [ 130.728785][ T7168] xt_connbytes: Forcing CT accounting to be enabled [ 130.753694][ T7168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.842309][ T7162] No such timeout policy "syz0" [ 130.868523][ T7175] validate_nla: 6 callbacks suppressed [ 130.868547][ T7175] netlink: 'syz.1.556': attribute type 2 has an invalid length. [ 130.912039][ T7175] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 131.172090][ T7187] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 131.236452][ T784] IPVS: starting estimator thread 0... [ 131.298930][ T7194] netlink: 'syz.0.562': attribute type 3 has an invalid length. [ 131.330612][ T7197] netlink: 'syz.4.563': attribute type 2 has an invalid length. [ 131.343782][ T7197] netlink: 'syz.4.563': attribute type 1 has an invalid length. [ 131.369393][ T7192] IPVS: using max 16 ests per chain, 38400 per kthread [ 131.803525][ T7218] syz.2.567[7218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.806710][ T7218] syz.2.567[7218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.830629][ T7219] netlink: 'syz.4.569': attribute type 2 has an invalid length. [ 131.891569][ T7219] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 132.158759][ T7234] netlink: 'syz.4.575': attribute type 3 has an invalid length. [ 132.392179][ T7247] netlink: 'syz.1.576': attribute type 2 has an invalid length. [ 132.417298][ T7247] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 133.175074][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.640163][ T7313] __nla_validate_parse: 28 callbacks suppressed [ 133.640189][ T7313] netlink: 224 bytes leftover after parsing attributes in process `syz.2.601'. [ 134.009482][ T7332] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.606'. [ 134.186718][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'. [ 134.234178][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 134.245918][ T7348] netlink: 9 bytes leftover after parsing attributes in process `syz.1.611'. [ 134.268296][ T7348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'. [ 134.335765][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'. [ 134.832525][ T7381] netlink: 224 bytes leftover after parsing attributes in process `syz.2.620'. [ 135.247254][ T7401] netlink: 6204 bytes leftover after parsing attributes in process `syz.2.625'. [ 135.277602][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 135.583641][ T7418] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 136.238187][ T7458] validate_nla: 24 callbacks suppressed [ 136.238212][ T7458] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 136.279660][ T7458] netlink: 'syz.4.643': attribute type 3 has an invalid length. [ 136.383500][ T7463] netlink: 'syz.2.645': attribute type 2 has an invalid length. [ 136.392988][ T7463] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 136.484140][ T7471] netlink: 'syz.4.646': attribute type 5 has an invalid length. [ 137.291494][ T7508] netlink: 'syz.0.658': attribute type 2 has an invalid length. [ 137.330933][ T7508] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 137.403044][ T7514] netlink: 'syz.1.659': attribute type 6 has an invalid length. [ 137.657164][ T7521] netlink: 'syz.2.660': attribute type 2 has an invalid length. [ 137.846355][ T145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.867285][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.882510][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.895944][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.908480][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.917945][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 137.927404][ T7529] netlink: 'syz.2.660': attribute type 1 has an invalid length. [ 137.927404][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.997395][ T7520] syzkaller1: entered promiscuous mode [ 138.003111][ T7520] syzkaller1: entered allmulticast mode [ 138.101714][ T145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.240487][ T145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.460045][ T145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.782218][ T7577] Unknown options in mask 1f4 [ 138.817958][ T7576] __nla_validate_parse: 26 callbacks suppressed [ 138.817981][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 138.943216][ T7582] netlink: 9 bytes leftover after parsing attributes in process `syz.2.672'. [ 138.953754][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 138.972910][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 138.983251][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.676'. [ 139.005293][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'. [ 139.054085][ T7584] netlink: 9 bytes leftover after parsing attributes in process `syz.4.676'. [ 139.085640][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.676'. [ 139.718301][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.737961][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.753227][ T145] bond0 (unregistering): Released all slaves [ 139.854861][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 139.974913][ T5102] Bluetooth: hci4: command tx timeout [ 139.986301][ T7624] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.683'. [ 140.259034][ T7643] sctp: [Deprecated]: syz.2.688 (pid 7643) Use of int in max_burst socket option deprecated. [ 140.259034][ T7643] Use struct sctp_assoc_value instead [ 140.427092][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 140.441660][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.473053][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.498543][ T7540] bridge_slave_0: entered allmulticast mode [ 140.510827][ T7540] bridge_slave_0: entered promiscuous mode [ 140.537803][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.555466][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.568489][ T7540] bridge_slave_1: entered allmulticast mode [ 140.590588][ T7540] bridge_slave_1: entered promiscuous mode [ 140.602451][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.680137][ T145] macvlan0: left promiscuous mode [ 140.686507][ T145] batadv_slave_0: left promiscuous mode [ 140.732801][ T145] hsr_slave_0: left promiscuous mode [ 140.747594][ T145] hsr_slave_1: left promiscuous mode [ 140.760498][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.767977][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.800269][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.807764][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.847195][ T145] veth0_macvtap: left promiscuous mode [ 140.857695][ T145] veth1_vlan: left promiscuous mode [ 140.864447][ T145] veth0_vlan: left promiscuous mode [ 141.535081][ T145] team0 (unregistering): Port device team_slave_1 removed [ 141.577140][ T145] team0 (unregistering): Port device team_slave_0 removed [ 141.995243][ T7663] validate_nla: 12 callbacks suppressed [ 141.995268][ T7663] netlink: 'syz.4.692': attribute type 2 has an invalid length. [ 142.049759][ T5102] Bluetooth: hci4: command tx timeout [ 142.057365][ T7667] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 142.154055][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.175022][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.337774][ T7540] team0: Port device team_slave_0 added [ 142.379055][ T7540] team0: Port device team_slave_1 added [ 142.555347][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.573537][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.607712][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.650614][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.678055][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.722085][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.988525][ T7540] hsr_slave_0: entered promiscuous mode [ 143.015829][ T7540] hsr_slave_1: entered promiscuous mode [ 143.039556][ T7540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.062726][ T7540] Cannot create hsr debugfs directory [ 143.085521][ T145] IPVS: stop unused estimator thread 0... [ 143.148881][ T7731] can: request_module (can-proto-0) failed. [ 143.256542][ T7736] netlink: 'syz.1.708': attribute type 2 has an invalid length. [ 143.309214][ T7738] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 143.887845][ T7759] __nla_validate_parse: 13 callbacks suppressed [ 143.887868][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.716'. [ 144.139130][ T5102] Bluetooth: hci4: command tx timeout [ 144.555159][ T7540] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 144.624940][ T7540] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 144.671168][ T7540] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 144.716791][ T7540] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.956681][ T7794] pimreg: entered allmulticast mode [ 144.982355][ T7792] netlink: 'syz.2.723': attribute type 2 has an invalid length. [ 144.997071][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 145.026086][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.055341][ T7540] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.071645][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.078846][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.095110][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.102331][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.143198][ T7792] netlink: 'syz.2.723': attribute type 1 has an invalid length. [ 145.154463][ T7792] netlink: 9 bytes leftover after parsing attributes in process `syz.2.723'. [ 145.193538][ T7792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'. [ 145.256030][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.723'. [ 145.462232][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'. [ 145.847109][ T7540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.899645][ T1044] ================================================================== [ 145.907776][ T1044] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 145.915970][ T1044] Read of size 8 at addr ffff8880674ea0b8 by task kworker/u8:6/1044 [ 145.923998][ T1044] [ 145.926358][ T1044] CPU: 0 PID: 1044 Comm: kworker/u8:6 Not tainted 6.10.0-rc4-syzkaller-00945-gf261aa15b2ca #0 [ 145.936644][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 145.946819][ T1044] Workqueue: l2tp l2tp_tunnel_del_work [ 145.952366][ T1044] Call Trace: [ 145.954477][ T7540] veth0_vlan: entered promiscuous mode [ 145.955662][ T1044] [ 145.964080][ T1044] dump_stack_lvl+0x241/0x360 [ 145.968988][ T1044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.974261][ T1044] ? __pfx__printk+0x10/0x10 [ 145.978905][ T1044] ? _printk+0xd5/0x120 [ 145.983121][ T1044] ? __virt_addr_valid+0x183/0x520 [ 145.988287][ T1044] ? __virt_addr_valid+0x183/0x520 [ 145.993447][ T1044] print_report+0x169/0x550 [ 145.998002][ T1044] ? __virt_addr_valid+0x183/0x520 [ 146.003167][ T1044] ? __virt_addr_valid+0x183/0x520 [ 146.003547][ T7540] veth1_vlan: entered promiscuous mode [ 146.008296][ T1044] ? __virt_addr_valid+0x44e/0x520 [ 146.008331][ T1044] ? __phys_addr+0xba/0x170 [ 146.008361][ T1044] ? l2tp_tunnel_del_work+0xe5/0x330 [ 146.029384][ T1044] kasan_report+0x143/0x180 [ 146.033989][ T1044] ? l2tp_tunnel_del_work+0xe5/0x330 [ 146.039433][ T1044] l2tp_tunnel_del_work+0xe5/0x330 [ 146.044607][ T1044] ? process_scheduled_works+0x945/0x1830 [ 146.050401][ T1044] process_scheduled_works+0xa2c/0x1830 [ 146.056022][ T1044] ? __pfx_process_scheduled_works+0x10/0x10 [ 146.062099][ T1044] ? assign_work+0x364/0x3d0 [ 146.066750][ T1044] worker_thread+0x86d/0xd70 [ 146.071403][ T1044] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 146.077346][ T1044] ? __kthread_parkme+0x169/0x1d0 [ 146.082435][ T1044] ? __pfx_worker_thread+0x10/0x10 [ 146.087586][ T1044] kthread+0x2f0/0x390 [ 146.091677][ T1044] ? __pfx_worker_thread+0x10/0x10 [ 146.096809][ T1044] ? __pfx_kthread+0x10/0x10 [ 146.101425][ T1044] ret_from_fork+0x4b/0x80 [ 146.105862][ T1044] ? __pfx_kthread+0x10/0x10 [ 146.110469][ T1044] ret_from_fork_asm+0x1a/0x30 [ 146.115258][ T1044] [ 146.118277][ T1044] [ 146.120602][ T1044] Allocated by task 7826: [ 146.124932][ T1044] kasan_save_track+0x3f/0x80 [ 146.129615][ T1044] __kasan_kmalloc+0x98/0xb0 [ 146.134216][ T1044] __kmalloc_noprof+0x1f9/0x400 [ 146.139072][ T1044] l2tp_session_create+0x3b/0xc20 [ 146.144112][ T1044] pppol2tp_connect+0xca3/0x17a0 [ 146.149053][ T1044] __sys_connect+0x2df/0x310 [ 146.153664][ T1044] __x64_sys_connect+0x7a/0x90 [ 146.158457][ T1044] do_syscall_64+0xf3/0x230 [ 146.163062][ T1044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.169058][ T1044] [ 146.171820][ T1044] Freed by task 16: [ 146.175622][ T1044] kasan_save_track+0x3f/0x80 [ 146.180305][ T1044] kasan_save_free_info+0x40/0x50 [ 146.185333][ T1044] poison_slab_object+0xe0/0x150 [ 146.190276][ T1044] __kasan_slab_free+0x37/0x60 [ 146.195048][ T1044] kfree+0x149/0x360 [ 146.198970][ T1044] __sk_destruct+0x58/0x5f0 [ 146.203487][ T1044] rcu_core+0xafd/0x1830 [ 146.207734][ T1044] handle_softirqs+0x2c4/0x970 [ 146.212502][ T1044] run_ksoftirqd+0xca/0x130 [ 146.217012][ T1044] smpboot_thread_fn+0x544/0xa30 [ 146.221959][ T1044] kthread+0x2f0/0x390 [ 146.226038][ T1044] ret_from_fork+0x4b/0x80 [ 146.230471][ T1044] ret_from_fork_asm+0x1a/0x30 [ 146.235246][ T1044] [ 146.237582][ T1044] Last potentially related work creation: [ 146.243300][ T1044] kasan_save_stack+0x3f/0x60 [ 146.247990][ T1044] __kasan_record_aux_stack+0xac/0xc0 [ 146.253362][ T1044] call_rcu+0x167/0xa70 [ 146.257612][ T1044] pppol2tp_release+0x24b/0x350 [ 146.262479][ T1044] sock_close+0xbc/0x240 [ 146.266724][ T1044] __fput+0x406/0x8b0 [ 146.270707][ T1044] task_work_run+0x24f/0x310 [ 146.275390][ T1044] syscall_exit_to_user_mode+0x168/0x370 [ 146.281032][ T1044] do_syscall_64+0x100/0x230 [ 146.285723][ T1044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.291632][ T1044] [ 146.293956][ T1044] The buggy address belongs to the object at ffff8880674ea000 [ 146.293956][ T1044] which belongs to the cache kmalloc-1k of size 1024 [ 146.308291][ T1044] The buggy address is located 184 bytes inside of [ 146.308291][ T1044] freed 1024-byte region [ffff8880674ea000, ffff8880674ea400) [ 146.322379][ T1044] [ 146.324710][ T1044] The buggy address belongs to the physical page: [ 146.331300][ T1044] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x674e8 [ 146.340242][ T1044] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 146.348745][ T1044] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 146.356468][ T1044] page_type: 0xffffefff(slab) [ 146.361151][ T1044] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 146.369759][ T1044] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 146.378348][ T1044] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 146.387110][ T1044] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 146.395787][ T1044] head: 00fff00000000003 ffffea00019d3a01 ffffffffffffffff 0000000000000000 [ 146.404467][ T1044] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 146.413317][ T1044] page dumped because: kasan: bad access detected [ 146.419831][ T1044] page_owner tracks the page as allocated [ 146.425562][ T1044] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6661, tgid 6660 (syz.2.389), ts 121081702018, free_ts 121017006805 [ 146.447627][ T1044] post_alloc_hook+0x1f3/0x230 [ 146.452405][ T1044] get_page_from_freelist+0x2e43/0x2f00 [ 146.457972][ T1044] __alloc_pages_noprof+0x256/0x6c0 [ 146.463277][ T1044] alloc_slab_page+0x5f/0x120 [ 146.467965][ T1044] allocate_slab+0x5a/0x2f0 [ 146.472474][ T1044] ___slab_alloc+0xcd1/0x14b0 [ 146.477155][ T1044] __slab_alloc+0x58/0xa0 [ 146.481490][ T1044] kmalloc_node_track_caller_noprof+0x281/0x440 [ 146.487732][ T1044] kmalloc_reserve+0x111/0x2a0 [ 146.492503][ T1044] __alloc_skb+0x1f3/0x440 [ 146.496954][ T1044] __pskb_copy_fclone+0xb7/0x11e0 [ 146.501990][ T1044] tipc_sk_mcast_rcv+0x70f/0x1400 [ 146.507205][ T1044] tipc_mcast_xmit+0x12ad/0x19c0 [ 146.512162][ T1044] tipc_send_group_bcast+0x8bd/0xbd0 [ 146.517457][ T1044] __tipc_sendmsg+0x363/0x35f0 [ 146.522226][ T1044] tipc_sendmsg+0x55/0x70 [ 146.526649][ T1044] page last free pid 6675 tgid 6675 stack trace: [ 146.532972][ T1044] free_unref_page+0xd22/0xea0 [ 146.537833][ T1044] __slab_free+0x31b/0x3d0 [ 146.542275][ T1044] qlist_free_all+0x9e/0x140 [ 146.546877][ T1044] kasan_quarantine_reduce+0x14f/0x170 [ 146.552341][ T1044] __kasan_slab_alloc+0x23/0x80 [ 146.557220][ T1044] kmem_cache_alloc_noprof+0x135/0x2a0 [ 146.562693][ T1044] getname_flags+0xbd/0x4f0 [ 146.567209][ T1044] __x64_sys_symlinkat+0x7c/0xb0 [ 146.572155][ T1044] do_syscall_64+0xf3/0x230 [ 146.576667][ T1044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.582573][ T1044] [ 146.584898][ T1044] Memory state around the buggy address: [ 146.590526][ T1044] ffff8880674e9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.598592][ T1044] ffff8880674ea000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.606652][ T1044] >ffff8880674ea080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.614717][ T1044] ^ [ 146.620696][ T1044] ffff8880674ea100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.628756][ T1044] ffff8880674ea180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.636813][ T1044] ================================================================== [ 146.644933][ T1044] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.652159][ T1044] CPU: 0 PID: 1044 Comm: kworker/u8:6 Not tainted 6.10.0-rc4-syzkaller-00945-gf261aa15b2ca #0 [ 146.662434][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 146.672526][ T1044] Workqueue: l2tp l2tp_tunnel_del_work [ 146.678060][ T1044] Call Trace: [ 146.681370][ T1044] [ 146.684327][ T1044] dump_stack_lvl+0x241/0x360 [ 146.689053][ T1044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.694299][ T1044] ? __pfx__printk+0x10/0x10 [ 146.699027][ T1044] ? vscnprintf+0x5d/0x90 [ 146.703405][ T1044] panic+0x349/0x860 [ 146.707346][ T1044] ? check_panic_on_warn+0x21/0xb0 [ 146.712505][ T1044] ? __pfx_panic+0x10/0x10 [ 146.716965][ T1044] ? mark_lock+0x9a/0x350 [ 146.721338][ T1044] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 146.727280][ T1044] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 146.733216][ T1044] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 146.739586][ T1044] ? print_report+0x502/0x550 [ 146.744402][ T1044] check_panic_on_warn+0x86/0xb0 [ 146.749389][ T1044] ? l2tp_tunnel_del_work+0xe5/0x330 [ 146.754724][ T1044] end_report+0x77/0x160 [ 146.759011][ T1044] kasan_report+0x154/0x180 [ 146.763553][ T1044] ? l2tp_tunnel_del_work+0xe5/0x330 [ 146.768882][ T1044] l2tp_tunnel_del_work+0xe5/0x330 [ 146.774019][ T1044] ? process_scheduled_works+0x945/0x1830 [ 146.779749][ T1044] process_scheduled_works+0xa2c/0x1830 [ 146.785319][ T1044] ? __pfx_process_scheduled_works+0x10/0x10 [ 146.791311][ T1044] ? assign_work+0x364/0x3d0 [ 146.795920][ T1044] worker_thread+0x86d/0xd70 [ 146.800532][ T1044] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 146.806436][ T1044] ? __kthread_parkme+0x169/0x1d0 [ 146.811474][ T1044] ? __pfx_worker_thread+0x10/0x10 [ 146.816606][ T1044] kthread+0x2f0/0x390 [ 146.820687][ T1044] ? __pfx_worker_thread+0x10/0x10 [ 146.825828][ T1044] ? __pfx_kthread+0x10/0x10 [ 146.830431][ T1044] ret_from_fork+0x4b/0x80 [ 146.835123][ T1044] ? __pfx_kthread+0x10/0x10 [ 146.839737][ T1044] ret_from_fork_asm+0x1a/0x30 [ 146.844534][ T1044] [ 146.849406][ T1044] Kernel Offset: disabled [ 146.853767][ T1044] Rebooting in 86400 seconds..