last executing test programs: 44.979139016s ago: executing program 1 (id=100): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)={0x771, {{0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}}, 0x0, 0x8, [{{0xa, 0x4e20, 0x10b09427, @private0}}, {{0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa}}, {{0xa, 0x4e22, 0x1, @loopback, 0x5}}, {{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8}}, {{0xa, 0x4e23, 0xd4a, @local, 0x1}}, {{0xa, 0x4e23, 0xffff, @loopback, 0x2}}, {{0xa, 0x4e21, 0x9, @loopback, 0x7}}]}, 0x490) (async) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r0, 0x1}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x558, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x488, 0x488, 0x488, 0xffffffff, 0x4, &(0x7f0000000580), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0x8], 0x4, 0x16, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x200, 0x2}}}, {{@ipv6={@private0, @local, [0xffffff00, 0xff000000], [0xff, 0xff, 0xff, 0xff], 'syzkaller0\x00', 'gre0\x00', {0xff}, {0xff}, 0x16, 0x6, 0x3, 0x12}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x8, 0x7, 0x5, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0xff, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xff], 0x2000, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xf283, {0xb96}}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x800, [0x9, 0x7], 0x6, 0x8, 0x1, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) pread64(r0, &(0x7f0000000b80)=""/148, 0x94, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000c40)) (async) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000c80)="283816814cf4330dc6de6c0c56db9ec220a73288bced33c5ceb9ee20fd64650a9e8de4ec2a40d0265aef85b8dafdd24663e176cacedb65cac676183d675828fd169372c4ef57181ba068698e043379625dbd9d299cd84e", 0x57) (async) socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000d40)='syz0\x00', 0x1ff) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x80c4) (async) r4 = accept4(r2, &(0x7f0000000e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000f00)=0x80, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000f40)={0x0, 0x4}, &(0x7f0000000f80)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000fc0)={r6, 0x6a, "c42cd61b208108353788db57063dd8a08113c5fa7ac8c5179431c185eadc1410db94212b39b119eeb5fa5161df99338b6335a216f6099aa149d40109e6ec1aa015462696c2dcc8fa2fa7f11f5fa15f26a1a03d3a91d89d1468b62eccbb5943e49885eb28a47e225ee947"}, &(0x7f0000001040)=0x72) (async) recvfrom$phonet(r5, &(0x7f0000001080)=""/4096, 0x1000, 0x20, &(0x7f0000002080)={0x23, 0x4, 0x1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000020c0), &(0x7f0000002100)=r0}, 0x20) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000002180)=0x0, &(0x7f00000021c0)=0x4) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x7, '\x00', r8, r9, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x18, 0x1410, 0x120, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x48000) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002400), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x1c, r10, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xf00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r9, 0xf501, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002500), r11) (async) socket$inet_smc(0x2b, 0x1, 0x0) 44.734272953s ago: executing program 1 (id=104): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[], 0x80}}, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/93, 0x5d, 0x0, &(0x7f00000000c0)=""/70, 0x46}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) close(0xffffffffffffffff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r6, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x70, 0x0, 0x9, 0x5, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x982}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e21, 0x3, @remote, 0x7c73}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 44.502160004s ago: executing program 1 (id=108): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x51}], 0x1, 0x2040, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'team_slave_0\x00', 0x100}) socketpair(0x2a, 0x800, 0x50bc, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x6, 0xc1, 0x84, 0x8a0}, {0x0, 0xb, 0xac, 0x3}, {0x21, 0x8, 0x14, 0x80}, {0x9, 0x0, 0x0, 0xa1dc}, {0x2c, 0x1, 0x54, 0x2}, {0x6be, 0x40, 0x1, 0x7}]}, 0x10) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x1, 0x7, 0x1}}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x25}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffcb6, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_JITTER64={0x0, 0xb, 0x3}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x70}}, 0x0) accept(r3, &(0x7f0000000080), &(0x7f0000000100)=0x80) 43.269078153s ago: executing program 1 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000023c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000000000008001b00"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000023c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000000000008001b00"], 0x30}}, 0x0) (async) 21.840619628s ago: executing program 1 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000023c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000000000008001b00"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000023c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000000000008001b00"], 0x30}}, 0x0) (async) 7.621129539s ago: executing program 2 (id=306): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, '/+/&:\'/:[\x00'}]}]}, 0x58}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, @empty, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, @multicast2, @multicast1}}}}) 7.483441389s ago: executing program 1 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000023c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000000000008001b00"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000023c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021000000000008001b00"], 0x30}}, 0x0) (async) 6.583856201s ago: executing program 2 (id=312): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x434, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x13, [0x54, 0x6f7e, 0x7, 0x2, 0x4, 0x5, 0x8, 0x7fffffff, 0x0, 0x7, 0x856, 0x7, 0x6, 0x2, 0x3000, 0x651, 0xe88598c8, 0x6, 0x401, 0x1000, 0xd, 0x4, 0x1, 0x2, 0x1, 0x1, 0x6, 0x80000001, 0x3, 0x9, 0x9, 0x9000, 0x8, 0x1f4, 0x6, 0xfffffffb, 0x4, 0x0, 0x7, 0xdb3, 0x1, 0x62, 0x6, 0x9, 0x71c, 0xe, 0x6b, 0x3, 0x5, 0x560, 0x4, 0x80000, 0xffff, 0x7, 0x0, 0x2a8d, 0xa56, 0x5840, 0x9, 0x6, 0x100, 0x8, 0xfffffff8, 0x9], [0x5, 0x5, 0x80, 0xaf79, 0x9, 0xb3, 0x8, 0x7f5, 0x8, 0x1f, 0x2, 0xf, 0x1, 0x0, 0x80000001, 0x4, 0x4, 0x8, 0x7, 0x2, 0x8, 0x3ff, 0x9fd, 0x8, 0x1, 0x800, 0x9, 0xd, 0x6, 0x10, 0x0, 0x8, 0x4, 0xfffffff9, 0x8b9, 0x0, 0x6, 0x3, 0x0, 0x4, 0xeb, 0x2, 0x4, 0x7, 0x4, 0x3, 0xae5, 0x9, 0x9, 0x4, 0x82, 0x4, 0x7, 0xfffffffc, 0x0, 0x7f, 0x3, 0x0, 0x8, 0x14a0, 0x2b71, 0x2, 0x4acc, 0x1], [0x8001, 0x8727, 0x81, 0x9, 0x6, 0x0, 0x5, 0x7fff, 0xfa6e, 0xb9d, 0x3, 0x7, 0x40, 0xfffff001, 0xffffffff, 0xa, 0xfff, 0x3dcb, 0x2, 0x5, 0xfffffe00, 0xfffffffa, 0x3, 0x31, 0x3, 0xaa, 0x6, 0x0, 0xf, 0x7fff, 0x4b, 0x8ecc, 0x4, 0xfffffffe, 0x9, 0x1, 0x1, 0x4, 0x8, 0x5, 0xffffffff, 0x1, 0x200, 0x9, 0xb06c, 0x2, 0x8, 0xfffffff9, 0x0, 0xbbab, 0x3, 0x8001, 0x2, 0x4, 0x9, 0x10001, 0x8000, 0xc, 0x2, 0xfff, 0x4, 0xfffff000, 0x2, 0x101], [0x800, 0x3, 0x1, 0x40, 0x8001, 0x5, 0x3, 0xe, 0x7, 0x1, 0x8, 0xcfb2, 0x7, 0x401, 0x9, 0x8, 0xfc, 0x1, 0x5, 0x9, 0x0, 0xfffffff0, 0x14000, 0x6, 0x2, 0x80000001, 0x3, 0xb0, 0xa, 0x1, 0xfff, 0x80000001, 0xb3, 0x8, 0x1, 0x9, 0x1, 0x8000, 0xfc, 0x5, 0x0, 0x8, 0x6, 0x1, 0x7c1, 0x8da0, 0x8a, 0x8000, 0x0, 0x2, 0x3, 0x9, 0x7, 0x8001, 0x32, 0xfffffff7, 0x7, 0x6, 0x0, 0xb00000, 0x5, 0x5, 0x8, 0x5], 0x14, ['-\'#:/($%]\'\\\'\x00', '*-', '\x00', '&\x00', '-\x00']}, [""]}, 0x434}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000845) r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='memory.numa_stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd4, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffe01}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xe20}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x29b2}, {0x6, 0x11, 0x9}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000ec0)={r6, "ccf272af0c87693c27d35bd5fa542ee3"}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x14, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40010) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002040)={0x1, &(0x7f0000002000)=[{0x3, 0x3, 0x4, 0x4}]}, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000002080)=0x0) write$cgroup_pid(r2, &(0x7f00000020c0)=r8, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000021c0)={r2, 0x58, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0xb8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xb8}}, 0x140) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000002500)={&(0x7f0000002340), 0xc, &(0x7f00000024c0)={&(0x7f0000002380)={0x140, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7640}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x482b}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x28, 0x1404, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000002640), 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002680), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, 0x1411, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4090) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000002780)={0xc223, 0x3}) sendmsg$key(r2, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000027c0)={0x2, 0x15, 0x9, 0x7, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_ident={0x2, 0xb, 0xff, 0x0, 0x8}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x28}}, 0x4040810) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002880)={0x0, @remote, @multicast2}, &(0x7f00000028c0)=0xc) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x24, r11, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000850) socket$phonet_pipe(0x23, 0x5, 0x2) 6.320789029s ago: executing program 3 (id=314): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000080) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, 0x0, 0x0) socket(0x8, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000100001000000801be152fed80000000000000000007dc5b2bdbf09e78a1ccc10b17e4166544506e0b18637edbdb27a49b37aee9f84c0c4c605d1203ab802f74bc237715fc4030a4c79e1e683a9b08cd64795225de8b81bdfe146eae26a3456a9efba36a66bebf787ca28af6f6dde222edcaef5c7d69c6358a54bee4f5ff75fed46f11269c3c5a8088f6178650d01b621d258dbb0115acf9c2d0abe2382ec29fe9b00d0ed9a34c549599c122df38ce40e3959252604c1643cf83f420af0e09324f1eaf7a14b68d0945337208195", @ANYRES8=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x10, 0x4}, {0x6, 0x9}, {0xa, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r8) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x6b, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x16, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x1, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_query, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x0, 0x3, 0x5, 0x2, 0x10, 0x10}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0x4, 0x4, 0x2, 0xfffffffffffffff4, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='syzkaller\x00', 0xb, 0x34, &(0x7f0000000500)=""/52, 0x40f00, 0x7, '\x00', r6, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r7, r8, r9, r8], 0x0, 0x10, 0x6, @void, @value}, 0x94) 6.320460232s ago: executing program 2 (id=315): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) unshare(0x62040200) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000002c0)=0x7, 0x4) connect$x25(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x20008015}, 0x4000044) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @private}}}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dh\x00', 0x0, 0x401000, 0x61}, 0xffffffffffffff59) 1.82516187s ago: executing program 4 (id=328): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.590119765s ago: executing program 4 (id=329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="03", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x3d, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x6, 0x4) 1.41772436s ago: executing program 4 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000001410000001800176c025d06e0f1c473480000000000000000657468"], 0x34}}, 0x0) 1.320782678s ago: executing program 0 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6c, r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x1dc, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xf8, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x0, 0x6, 0x1, 0xfffffff9}, {0x8000, 0x7, 0x8, 0x3}, {0x2, 0x0, 0xf}, {0x6, 0x6, 0x6, 0x8}, {0x80, 0x1, 0x1, 0x1}, {0x7fff, 0x80, 0x10, 0x6}]}}, @TCA_BPF_ACT={0x9c, 0x1, [@m_xt={0x98, 0xa, 0x0, 0x0, {{0x7}, {0x4}, {0x6d, 0x6, "b02aff89fcb734ba3a7e4bbe7dbf80c9a578cea6f50e70b62c55c42e0420d8c5c688a7cd0b82ff660cc3f662c705e961800970f1285c53934973ac141cc9f45366c1b500c5ef5cf4034b294d4651a863b0842a90625ee18c1d91b04ca14f29de60a80dd02807b5f522"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xa4, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc7}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5e}, @TCA_ROUTE4_ACT={0x80, 0x6, [@m_skbmod={0x7c, 0x10, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x39, 0x6, "7901b3fc3a31098ccc741994d7db7a507cbf22a1ff0285366899077d32faa55f59c3af121f3f1a3ae833a52c0446aab12aca4e1ec3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x92}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%ps \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xff, 0x0, r9, 0x8, '\x00', 0x0, r10, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.212429361s ago: executing program 4 (id=332): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)={'a', ' *:* ', 'rw\x00'}, 0x9) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000940)='westwood\x00', 0x9) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.056968906s ago: executing program 0 (id=333): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 900.566483ms ago: executing program 2 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000006d5005145aa431bdf57810000000000000000950000e96e04fdba2f4c85e75e027233a0ea30d72496d9b3a6d3037fc0f5ae6bd0ff771c1acbb28400"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000240)=""/44, &(0x7f0000000280)=0x2c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x0, 0xd0, 0xd0, 0x380, 0x380, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x290}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x5f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [0x0, 0x0, 0xffffff00], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) getsockname$packet(r3, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x24000180) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080), 0x4) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000340)=ANY=[@ANYRESOCT=r8, @ANYRES16=r10, @ANYRES32=r8, @ANYRESDEC=r8, @ANYRES64, @ANYRES16, @ANYBLOB="c31e534ecbef1cb677a1ee7572f9d77610c5a75de69bf0e63fac18804966c53ef19cc85fce582119d93e226e6d4e31794ffb2a877667e9ef100057a17d43a25c1cfc00244afd827ba577bc632a3f4494be74612514ef05ce653df7460ec1100d04e437315f79f345a1bcd6ddec20cbae164a296b2fd80ef831422fad7664785c5e11d88e790ed00e8582eccc57eebcf193c01b86d0f49cb8b7bf00000080000000009ef25f5f1fb3b83c9d8d4472d66381396e6c3d568489014d"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) 807.516552ms ago: executing program 3 (id=335): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x3]}, 0x6) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x58, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x40850) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='spi_setup\x00', r3, 0x0, 0x7fff}, 0x18) unshare(0x400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) read(r4, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc000000120601"], 0xdc}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x74ce, 0xc7c, 0x1, 0xc0, 0xddbb]}, &(0x7f0000000280)=0x54) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x4, 0x4) 695.673056ms ago: executing program 3 (id=336): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback={0x700}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) 593.597899ms ago: executing program 0 (id=337): socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2a41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x20000000000000a, 0x2, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0xef) 522.397714ms ago: executing program 3 (id=338): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0xc76, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xfffffc01, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xb, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0x100}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000058020000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r7, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200)=0x5, 0xfffffe97) (async) connect$bt_l2cap(r8, &(0x7f00000001c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x1}, 0xe) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) ppoll(&(0x7f0000000140)=[{r3, 0x110}, {r9, 0x5000}], 0x2, 0x0, 0x0, 0x0) 455.059991ms ago: executing program 0 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 365.009714ms ago: executing program 2 (id=340): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x4}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000980)=0x9, 0x4) recvmmsg(r0, &(0x7f0000009640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, &(0x7f0000002e40)=""/4, 0x4}, 0x175}], 0x2, 0x103, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x600}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x2}, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x850) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'pim6reg\x00', {0x5}}) 364.694265ms ago: executing program 3 (id=341): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x3c, r0, 0x101, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "8605adf9363f259da08f111e6d3ba8db"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x4004000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x740, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0xff0a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x7, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) 212.939326ms ago: executing program 4 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2c000000000000000100000001"], 0x30, 0x4048015}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) socket$kcm(0x29, 0x7, 0x0) 209.11812ms ago: executing program 0 (id=343): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x8800) 103.734186ms ago: executing program 3 (id=344): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x47, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x34, &(0x7f0000000600)=""/143, &(0x7f0000000200)=0xffffffffffffffe3) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) epoll_create1(0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 947.174µs ago: executing program 0 (id=345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000000a03000000000000000000070000040900010073797a30000000000800024000000002080002400000000248000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210d0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0x100}, 0x1, 0x0, 0x0, 0x8054}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0xfffffffffffffe6a, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x3, 0x0, 0x101}]}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000030400000000fcdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005000128009000100766c616e00000000400002800600010002000000340004800c0039004ef1f011ffffffff0c0001000300000000feffff0c00010005000000f7ffffff0c004100080000000000000008000500", @ANYRES32=r3], 0x78}}, 0x0) 558.135µs ago: executing program 4 (id=346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000181401000000000003000000080001"], 0x20}, 0x1, 0xf00, 0x0, 0x40000}, 0x4000004) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1f0000000000000000", @ANYRES32=0xffffffffffffffff], 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x408) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000500)=""/51, 0x33, 0x0, &(0x7f0000000780)=""/175, 0xaf}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0xc) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000400)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x28, '\x00', r10, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x10, 0x40, 0x6}, 0x10, r11, r12, 0x8, &(0x7f0000000700)=[r13, 0x1, r14], &(0x7f0000000840)=[{0x1, 0x2, 0x1, 0x6}, {0x3, 0x4, 0x9, 0x7}, {0x2, 0x5, 0x7, 0x6}, {0x3, 0x4, 0x5, 0xa}, {0x4, 0x2, 0x7, 0x6}, {0x3, 0x3, 0xa}, {0x2, 0x3, 0x8, 0x8}, {0x0, 0x4, 0x10, 0x4}], 0x10, 0x2, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c000}, 0x10) syz_emit_ethernet(0x10e, &(0x7f0000000a80)=ANY=[@ANYRES8=r0, @ANYRES16=r6, @ANYRES32=r0, @ANYRESOCT, @ANYBLOB="fa5e19f7ac4c9fb1cf5955278b6a2cad131df026a79b410bf255808f17ebad5c55706e94bf9d77d0ed5cbff041cab8148ceaab4745f384ff1139eea1284a040854e61638fa2fde260725f68cdec358bc6ae2c52dc16ff76f0ca1ddcde6e28879664f06677d498415641322521bb4f2ab3b4993ba5742d86875818d1359a12345c285b8a71dcb9cc5ba8daa85a2d3f9f4ff1837288885dcbb6a5daad667196e9f6621daba969b804e1200065fa10453afb7", @ANYRESHEX=r5], 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 0s ago: executing program 2 (id=347): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500400000000058000b480400", 0x24}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}}, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002180)={&(0x7f0000002380)='btrfs_qgroup_account_extent\x00', r7, 0x0, 0x13}, 0x18) clock_gettime(0x0, &(0x7f00000021c0)) recvmmsg(r5, &(0x7f0000002240)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x46, &(0x7f0000001cc0)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f00000002c0)=""/191, 0xbf}, {&(0x7f0000000540)=""/205, 0xcd}, {&(0x7f0000002080)=""/226}], 0x3, &(0x7f0000000800)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/72, 0x48}], 0x1, &(0x7f0000000640)=""/103, 0x67}, 0xfffff614}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000006c0)=""/235, 0x9e}, {&(0x7f0000001800)=""/118, 0x76}, {&(0x7f0000001880)=""/238, 0xee}, {&(0x7f0000001980)=""/52, 0x44}, {&(0x7f0000001a00)=""/225, 0xe1}], 0x5, &(0x7f0000001b80)=""/123, 0x7b}, 0x3}, {{0x0, 0x0, &(0x7f0000001cc0), 0x2, &(0x7f0000001d00)=""/225, 0xe1}}, {{&(0x7f0000001e00)=@generic, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e80)=""/181, 0xb1}, {&(0x7f0000001f40)=""/95, 0x5f}], 0x2, &(0x7f0000002000)=""/90, 0xfe5f}, 0x3549c9a8}], 0x5, 0x61, &(0x7f0000002200)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000006c000100"/17], 0x14}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000000), &(0x7f00000003c0)='%ps \x00'}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. [ 78.165395][ T5816] cgroup: Unknown subsys name 'net' [ 78.343567][ T5816] cgroup: Unknown subsys name 'cpuset' [ 78.352687][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.962744][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.314685][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.323469][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.332667][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.342495][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.350351][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.377784][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.386734][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.394632][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.403438][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.405973][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.412114][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.424927][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.427813][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.441560][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.450644][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.806957][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 82.934134][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 83.011970][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 83.034793][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.042388][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.050568][ T5826] bridge_slave_0: entered allmulticast mode [ 83.058050][ T5826] bridge_slave_0: entered promiscuous mode [ 83.078400][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.086051][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.093542][ T5826] bridge_slave_1: entered allmulticast mode [ 83.101569][ T5826] bridge_slave_1: entered promiscuous mode [ 83.182335][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.195243][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.243094][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.250463][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.257651][ T5835] bridge_slave_0: entered allmulticast mode [ 83.265585][ T5835] bridge_slave_0: entered promiscuous mode [ 83.274567][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.281877][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.289648][ T5835] bridge_slave_1: entered allmulticast mode [ 83.296840][ T5835] bridge_slave_1: entered promiscuous mode [ 83.351929][ T5826] team0: Port device team_slave_0 added [ 83.373900][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.385411][ T5826] team0: Port device team_slave_1 added [ 83.418294][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.442010][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.449785][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.456944][ T5828] bridge_slave_0: entered allmulticast mode [ 83.464917][ T5828] bridge_slave_0: entered promiscuous mode [ 83.486471][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.494033][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.521606][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.533993][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.541406][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.548692][ T5828] bridge_slave_1: entered allmulticast mode [ 83.556257][ T5828] bridge_slave_1: entered promiscuous mode [ 83.577131][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.584237][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.610638][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.645710][ T5835] team0: Port device team_slave_0 added [ 83.656009][ T5835] team0: Port device team_slave_1 added [ 83.703629][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.728057][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.736750][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.763342][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.786905][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.810435][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.817434][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.843517][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.874875][ T5826] hsr_slave_0: entered promiscuous mode [ 83.881917][ T5826] hsr_slave_1: entered promiscuous mode [ 83.912817][ T5828] team0: Port device team_slave_0 added [ 83.924417][ T5828] team0: Port device team_slave_1 added [ 84.010317][ T5835] hsr_slave_0: entered promiscuous mode [ 84.016725][ T5835] hsr_slave_1: entered promiscuous mode [ 84.023646][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.031874][ T5835] Cannot create hsr debugfs directory [ 84.038252][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.045759][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.071722][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.105034][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.112442][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.138827][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.279955][ T5828] hsr_slave_0: entered promiscuous mode [ 84.286268][ T5828] hsr_slave_1: entered promiscuous mode [ 84.292658][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.300438][ T5828] Cannot create hsr debugfs directory [ 84.409802][ T5827] Bluetooth: hci0: command tx timeout [ 84.489433][ T5827] Bluetooth: hci2: command tx timeout [ 84.489443][ T5834] Bluetooth: hci1: command tx timeout [ 84.524966][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.555613][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.580879][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.606915][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.663983][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.688147][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.712332][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.724125][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.781775][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.796741][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.817772][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.832614][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.981533][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.043041][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.062885][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.077201][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.104444][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.115503][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.122931][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.143946][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.151145][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.175839][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.183117][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.197886][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.218321][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.225513][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.246541][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.253715][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.278902][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.286118][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.696459][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.720831][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.730587][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.832654][ T5828] veth0_vlan: entered promiscuous mode [ 85.838741][ T5826] veth0_vlan: entered promiscuous mode [ 85.858905][ T5828] veth1_vlan: entered promiscuous mode [ 85.882402][ T5835] veth0_vlan: entered promiscuous mode [ 85.897954][ T5826] veth1_vlan: entered promiscuous mode [ 85.922574][ T5835] veth1_vlan: entered promiscuous mode [ 85.938691][ T5828] veth0_macvtap: entered promiscuous mode [ 85.972328][ T5828] veth1_macvtap: entered promiscuous mode [ 85.982771][ T5826] veth0_macvtap: entered promiscuous mode [ 86.005422][ T5826] veth1_macvtap: entered promiscuous mode [ 86.037490][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.051321][ T5835] veth0_macvtap: entered promiscuous mode [ 86.064207][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.080647][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.092566][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.104731][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.118900][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.129580][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.138290][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.147573][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.159950][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.171477][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.182629][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.191825][ T5835] veth1_macvtap: entered promiscuous mode [ 86.201162][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.210837][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.219700][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.228504][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.293420][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.304721][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.315430][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.326588][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.342043][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.383954][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.396335][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.407836][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.419758][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.431463][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.458462][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.472346][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.481729][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.491525][ T5827] Bluetooth: hci0: command tx timeout [ 86.496981][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.530518][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.538640][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.568594][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.572878][ T5827] Bluetooth: hci2: command tx timeout [ 86.576941][ T5834] Bluetooth: hci1: command tx timeout [ 86.595698][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.638456][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.651928][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.708959][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.717246][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.783731][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.807992][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.823733][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.931487][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.945862][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.569994][ T5834] Bluetooth: hci0: command tx timeout [ 88.649274][ T5834] Bluetooth: hci2: command tx timeout [ 88.650266][ T5827] Bluetooth: hci1: command tx timeout [ 90.659180][ T5827] Bluetooth: hci0: command tx timeout [ 90.729998][ T5827] Bluetooth: hci2: command tx timeout [ 90.731508][ T5834] Bluetooth: hci1: command tx timeout [ 91.936701][ T9] cfg80211: failed to load regulatory.db [ 128.278185][ T5884] IPVS: starting estimator thread 0... [ 128.302173][ T5920] Bluetooth: MGMT ver 1.23 [ 128.311524][ T5917] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 128.379151][ T5923] IPVS: using max 27 ests per chain, 64800 per kthread [ 128.446371][ T5884] hid-generic 0005:0C45:0A0F.0001: item fetching failed at offset 0/2 [ 128.488754][ T5918] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 128.528477][ T5884] hid-generic 0005:0C45:0A0F.0001: probe with driver hid-generic failed with error -22 [ 128.770797][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.780776][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.789832][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.798897][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.807883][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.863114][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.871785][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.879882][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.889713][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.902920][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.465986][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.572795][ T5972] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 129.651006][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 130.343218][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 130.395941][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 130.661860][ T5998] netlink: 128 bytes leftover after parsing attributes in process `syz.1.20'. [ 130.709364][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20'. [ 130.890507][ T5834] Bluetooth: hci3: command tx timeout [ 130.936236][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.947956][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.957902][ T5941] bridge_slave_0: entered allmulticast mode [ 130.967776][ T5941] bridge_slave_0: entered promiscuous mode [ 130.974123][ T5834] Bluetooth: hci4: command tx timeout [ 130.982965][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.995643][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.003316][ T5938] bridge_slave_0: entered allmulticast mode [ 131.016890][ T5938] bridge_slave_0: entered promiscuous mode [ 131.047861][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.060758][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.068270][ T5941] bridge_slave_1: entered allmulticast mode [ 131.084178][ T5941] bridge_slave_1: entered promiscuous mode [ 131.095610][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.104198][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.134615][ T5938] bridge_slave_1: entered allmulticast mode [ 131.143213][ T5938] bridge_slave_1: entered promiscuous mode [ 131.199580][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.241215][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.265851][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.303036][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.382257][ T6017] x_tables: duplicate underflow at hook 1 [ 131.402222][ T5941] team0: Port device team_slave_0 added [ 131.463509][ T5938] team0: Port device team_slave_0 added [ 131.507184][ T5941] team0: Port device team_slave_1 added [ 131.534829][ T5938] team0: Port device team_slave_1 added [ 131.826984][ T6034] Zero length message leads to an empty skb [ 131.839873][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.857944][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.939420][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.975375][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.989668][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.017178][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.047421][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.070606][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.111352][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.203354][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.228575][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.252442][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.293075][ T6044] netlink: 224 bytes leftover after parsing attributes in process `syz.2.33'. [ 132.315173][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 132.325087][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.398663][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 132.521872][ T5938] hsr_slave_0: entered promiscuous mode [ 132.535601][ T5938] hsr_slave_1: entered promiscuous mode [ 132.561212][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.579797][ T5938] Cannot create hsr debugfs directory [ 132.868139][ T6066] bond0: entered promiscuous mode [ 132.890198][ T6066] bond_slave_0: entered promiscuous mode [ 132.896488][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.910721][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.933625][ T6066] bond_slave_1: entered promiscuous mode [ 132.963348][ T6065] warning: `syz.0.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.974877][ T5834] Bluetooth: hci3: command tx timeout [ 133.006378][ T5941] hsr_slave_0: entered promiscuous mode [ 133.013911][ T5941] hsr_slave_1: entered promiscuous mode [ 133.034356][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.049269][ T5834] Bluetooth: hci4: command tx timeout [ 133.068298][ T5941] Cannot create hsr debugfs directory [ 133.416427][ T6075] ..@ÿ: renamed from bond_slave_0 (while UP) [ 133.836926][ T6099] ip6tnl1: entered promiscuous mode [ 133.842726][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 133.852003][ T6099] ip6tnl1: entered allmulticast mode [ 133.868535][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 134.053004][ T5938] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.158834][ T5938] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.172385][ T6116] netlink: 48 bytes leftover after parsing attributes in process `syz.0.51'. [ 134.193803][ T5938] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.265927][ T6116] vti0: entered promiscuous mode [ 134.285402][ T5938] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.405777][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.452918][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.543490][ T6124] vlan2: entered allmulticast mode [ 134.548699][ T6124] bond0: entered allmulticast mode [ 134.577491][ T6124] bond_slave_0: entered allmulticast mode [ 134.600354][ T6124] bond_slave_1: entered allmulticast mode [ 134.622847][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.656110][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.005808][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.036596][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.050712][ T5834] Bluetooth: hci3: command tx timeout [ 135.129334][ T5834] Bluetooth: hci4: command tx timeout [ 135.133319][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.167648][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.188049][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.195472][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.276906][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.284169][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.323640][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.330939][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.347543][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.354828][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.833872][ T47] IPVS: starting estimator thread 0... [ 135.929584][ T6161] IPVS: using max 25 ests per chain, 60000 per kthread [ 136.310448][ T6168] xt_TCPMSS: Only works on TCP SYN packets [ 136.341404][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.361981][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.553258][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 136.623729][ T6191] syzkaller0: entered allmulticast mode [ 136.677912][ T5941] veth0_vlan: entered promiscuous mode [ 136.774748][ T5941] veth1_vlan: entered promiscuous mode [ 136.883968][ T5941] veth0_macvtap: entered promiscuous mode [ 136.939559][ T5941] veth1_macvtap: entered promiscuous mode [ 137.028884][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.046312][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.057706][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.068871][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.079262][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.093969][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.105783][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.120450][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.131691][ T5834] Bluetooth: hci3: command tx timeout [ 137.137210][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.147975][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.160356][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.170438][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.181268][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.192891][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.206793][ T6203] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 137.219600][ T5834] Bluetooth: hci4: command tx timeout [ 137.231941][ T6203] netlink: 224 bytes leftover after parsing attributes in process `syz.0.68'. [ 137.264539][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.288197][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.318256][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.327633][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.515298][ T5938] veth0_vlan: entered promiscuous mode [ 137.536030][ T5938] veth1_vlan: entered promiscuous mode [ 137.623444][ T6218] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.692454][ T6225] Illegal XDP return value 4294967262 on prog (id 32) dev N/A, expect packet loss! [ 137.808110][ T6218] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.840608][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 137.850143][ T6230] netlink: 'syz.1.76': attribute type 21 has an invalid length. [ 137.938436][ T5938] veth0_macvtap: entered promiscuous mode [ 138.038064][ T6218] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.093342][ T5938] veth1_macvtap: entered promiscuous mode [ 138.126493][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.134586][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.224138][ T6218] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.298409][ T6236] batman_adv: batadv0: Adding interface: dummy0 [ 138.307415][ T6236] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.334330][ T6236] batman_adv: batadv0: Interface activated: dummy0 [ 138.384105][ T6237] batadv0: mtu less than device minimum [ 138.410882][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.423177][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.434744][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.446516][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.458124][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.470158][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.482216][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.494261][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.506359][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.589332][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.597382][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.652317][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.673206][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.684691][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.697668][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.708781][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.720409][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.732441][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.744288][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.759865][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.793406][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.829304][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.848286][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.866164][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.877261][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.900467][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.911690][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.927417][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.948589][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.002228][ T6218] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.095411][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 139.125297][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 139.135158][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7'. [ 139.158387][ T6218] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.173696][ T5938] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.183476][ T5938] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.193922][ T5938] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.205712][ T5938] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.224955][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 139.278703][ T6218] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.378425][ T6218] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.533181][ T6244] hsr_slave_0 (unregistering): left promiscuous mode [ 139.553733][ T6248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.81'. [ 139.877648][ T6175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.893161][ T6175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.948412][ T6264] vlan2: entered allmulticast mode [ 139.981891][ T6264] bond0: entered allmulticast mode [ 139.987089][ T6264] bond_slave_0: entered allmulticast mode [ 140.026568][ T6264] bond_slave_1: entered allmulticast mode [ 140.051989][ T6264] bridge0: port 3(vlan2) entered blocking state [ 140.058544][ T6264] bridge0: port 3(vlan2) entered disabled state [ 140.076377][ T6264] vlan2: entered promiscuous mode [ 140.103745][ T6264] bond0: entered promiscuous mode [ 140.112456][ T6264] bond_slave_0: entered promiscuous mode [ 140.145894][ T6264] bond_slave_1: entered promiscuous mode [ 140.155877][ T6264] bridge0: port 3(vlan2) entered blocking state [ 140.162514][ T6264] bridge0: port 3(vlan2) entered forwarding state [ 140.284087][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.299614][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.736406][ T6302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.92'. [ 140.933839][ T6311] sctp: [Deprecated]: syz.1.94 (pid 6311) Use of int in max_burst socket option deprecated. [ 140.933839][ T6311] Use struct sctp_assoc_value instead [ 141.051445][ T6314] bridge0: entered promiscuous mode [ 141.057081][ T6314] macvlan2: entered promiscuous mode [ 141.065177][ T6314] bridge0: port 3(macvlan2) entered blocking state [ 141.072384][ T6314] bridge0: port 3(macvlan2) entered disabled state [ 141.091095][ T6314] macvlan2: entered allmulticast mode [ 141.096649][ T6314] bridge0: entered allmulticast mode [ 141.116091][ T6314] macvlan2: left allmulticast mode [ 141.133352][ T6314] bridge0: left allmulticast mode [ 141.180399][ T6314] bridge0: left promiscuous mode [ 141.717794][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 141.730578][ T6341] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 141.745109][ T6341] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 141.831936][ T6344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 141.876228][ T6344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.897449][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 141.913899][ T6344] ipvlan2: entered promiscuous mode [ 141.923367][ T6350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.107'. [ 142.241876][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 142.282715][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 142.289411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.297369][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.305302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.313307][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.321220][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.329209][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.337086][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.345083][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.352982][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.360988][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.368839][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.376833][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.384759][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.392835][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.400836][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.408775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.416732][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.424731][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.432640][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.440650][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.448504][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.456493][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.464388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.472397][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.480289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.488241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.496142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.504128][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.512034][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.520031][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.527882][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.535853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.543744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.551727][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.559621][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.567581][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.575501][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.583493][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.591408][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.599447][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.607288][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.615302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.623220][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.631208][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.639098][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.647042][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.654955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.663025][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.670932][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.678886][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.686814][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.694810][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.702728][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.710710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.718561][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.726569][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.734482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.742582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.750484][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.758445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.766450][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.774441][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.782748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.790748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.798608][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.806637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.814551][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.822551][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.830442][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.838404][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.846314][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.854320][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.862239][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.870207][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.878056][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.886062][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.893212][ T6350] xt_hashlimit: size too large, truncated to 1048576 [ 142.893934][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.908557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.916490][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.924583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.932488][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.940489][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.948445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.956473][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.964367][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.972485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.980437][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.302963][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.467673][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.542668][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.620879][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.702548][ T6380] trusted_key: syz.0.114 sent an empty control message without MSG_MORE. [ 144.046378][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 144.075150][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.108498][ T6393] ipvlan2: entered promiscuous mode [ 144.127479][ T6396] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 144.448582][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.464633][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.472820][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.486508][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.496806][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.499659][ T13] bridge_slave_1: left allmulticast mode [ 144.567348][ T13] bridge_slave_1: left promiscuous mode [ 144.589167][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.624969][ T13] bridge_slave_0: left allmulticast mode [ 144.654134][ T13] bridge_slave_0: left promiscuous mode [ 144.687423][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 144.703041][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.360230][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.372596][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.384843][ T13] bond0 (unregistering): Released all slaves [ 145.664330][ T6420] netlink: 'syz.4.126': attribute type 10 has an invalid length. [ 145.726094][ T6423] netlink: 'syz.4.126': attribute type 10 has an invalid length. [ 145.735484][ T6420] batman_adv: batadv0: Adding interface: team0 [ 145.735781][ T6423] netlink: 2 bytes leftover after parsing attributes in process `syz.4.126'. [ 145.766190][ T6420] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.799449][ T6420] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 145.911219][ T6423] team0: entered promiscuous mode [ 145.916612][ T6423] team_slave_0: entered promiscuous mode [ 145.927388][ T6423] team_slave_1: entered promiscuous mode [ 145.938503][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.963438][ T6423] batman_adv: batadv0: Interface activated: team0 [ 145.979317][ T6423] batman_adv: batadv0: Interface deactivated: team0 [ 145.996472][ T5884] IPVS: starting estimator thread 0... [ 145.998456][ T6423] batman_adv: batadv0: Removing interface: team0 [ 146.015093][ T6423] bridge0: port 3(team0) entered blocking state [ 146.024197][ T6423] bridge0: port 3(team0) entered disabled state [ 146.031343][ T6423] team0: entered allmulticast mode [ 146.036910][ T6423] team_slave_0: entered allmulticast mode [ 146.043668][ T6423] team_slave_1: entered allmulticast mode [ 146.053620][ T6423] bridge0: port 3(team0) entered blocking state [ 146.060342][ T6423] bridge0: port 3(team0) entered forwarding state [ 146.099144][ T6430] IPVS: using max 25 ests per chain, 60000 per kthread [ 146.541170][ T13] hsr_slave_0: left promiscuous mode [ 146.570682][ T5834] Bluetooth: hci1: command tx timeout [ 146.614043][ T13] hsr_slave_1: left promiscuous mode [ 146.645096][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 146.663953][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 146.693629][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.703133][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.719267][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.729128][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.772341][ T13] veth1_macvtap: left promiscuous mode [ 146.790200][ T13] veth0_macvtap: left promiscuous mode [ 146.804286][ T13] veth1_vlan: left promiscuous mode [ 146.819518][ T13] veth0_vlan: left promiscuous mode [ 146.898081][ T6450] xt_TCPMSS: Only works on TCP SYN packets [ 147.550484][ T6468] netlink: 'syz.0.131': attribute type 39 has an invalid length. [ 147.671988][ T13] team0 (unregistering): Port device team_slave_1 removed [ 147.713365][ T13] team0 (unregistering): Port device team_slave_0 removed [ 148.177296][ T6447] syzkaller0: entered promiscuous mode [ 148.185066][ T6447] syzkaller0: entered allmulticast mode [ 148.661780][ T5834] Bluetooth: hci1: command tx timeout [ 149.891688][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 150.121161][ T6400] chnl_net:caif_netlink_parms(): no params data found [ 150.195574][ T13] IPVS: stop unused estimator thread 0... [ 150.222979][ T6499] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20003 [ 150.374593][ T6508] netlink: 184 bytes leftover after parsing attributes in process `syz.4.137'. [ 150.521910][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.562165][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.579343][ T6400] bridge_slave_0: entered allmulticast mode [ 150.639643][ T6400] bridge_slave_0: entered promiscuous mode [ 150.713347][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.731450][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.733206][ T5834] Bluetooth: hci1: command tx timeout [ 150.749469][ T6400] bridge_slave_1: entered allmulticast mode [ 150.763262][ T6400] bridge_slave_1: entered promiscuous mode [ 150.950266][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'. [ 151.117888][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.160041][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 151.170909][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.236559][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 151.268639][ T6543] netlink: 52 bytes leftover after parsing attributes in process `syz.2.147'. [ 151.313731][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 151.322648][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 152.332953][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.154'. [ 152.432164][ T6400] team0: Port device team_slave_0 added [ 152.487695][ T6400] team0: Port device team_slave_1 added [ 152.809274][ T5834] Bluetooth: hci1: command tx timeout [ 152.935781][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.952775][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.038140][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.094258][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.126918][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.234067][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.377852][ T6596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.157'. [ 153.531677][ T6596] syz.4.157 (6596) used greatest stack depth: 20360 bytes left [ 153.696011][ T6599] pim6reg: entered allmulticast mode [ 153.868122][ T6400] hsr_slave_0: entered promiscuous mode [ 153.878249][ T6400] hsr_slave_1: entered promiscuous mode [ 153.955579][ T6400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.986385][ T6400] Cannot create hsr debugfs directory [ 155.292791][ T6651] tipc: Failed to remove unknown binding: 66,3,3/0:137055899/137055900 [ 155.389132][ T6656] __nla_validate_parse: 2 callbacks suppressed [ 155.389152][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'. [ 155.439153][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'. [ 155.447764][ T6651] tipc: Started in network mode [ 155.468198][ T6651] tipc: Node identity a18d, cluster identity 4711 [ 155.474834][ T6651] tipc: Node number set to 41357 [ 155.607232][ T6656] syz_tun: entered promiscuous mode [ 155.654501][ T6656] syz_tun: left promiscuous mode [ 156.007781][ T6669] net_ratelimit: 10 callbacks suppressed [ 156.007819][ T6669] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 156.030855][ C0] hrtimer: interrupt took 1177251 ns [ 156.037272][ T6666] netlink: 'syz.2.173': attribute type 9 has an invalid length. [ 156.060895][ T6669] netlink: 64 bytes leftover after parsing attributes in process `syz.4.175'. [ 156.298204][ T6672] bridge0: port 3(vlan2) entered disabled state [ 156.304828][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.313297][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.405356][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 156.487869][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.529575][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.646153][ T6672] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.656175][ T6672] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.666492][ T6672] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.676128][ T6672] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.684198][ T6684] SET target dimension over the limit! [ 156.795182][ T6400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.864226][ T6400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.945746][ T6400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.017334][ T6400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.028220][ T6691] netlink: 9 bytes leftover after parsing attributes in process `syz.4.182'. [ 157.081033][ T6691] gretap0: entered promiscuous mode [ 157.637100][ T6715] FAULT_INJECTION: forcing a failure. [ 157.637100][ T6715] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 157.707875][ T6715] CPU: 1 UID: 0 PID: 6715 Comm: syz.4.187 Not tainted 6.15.0-rc3-syzkaller-00586-gf438eee2c8c9 #0 PREEMPT(full) [ 157.707904][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 157.707921][ T6715] Call Trace: [ 157.707933][ T6715] [ 157.707942][ T6715] dump_stack_lvl+0x189/0x250 [ 157.707986][ T6715] ? __lock_acquire+0xaac/0xd20 [ 157.708035][ T6715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.708068][ T6715] ? __pfx__printk+0x10/0x10 [ 157.708088][ T6715] ? __might_fault+0xb0/0x130 [ 157.708125][ T6715] should_fail_ex+0x414/0x560 [ 157.708170][ T6715] _copy_from_user+0x2d/0xb0 [ 157.708197][ T6715] ___sys_sendmsg+0x158/0x2a0 [ 157.708223][ T6715] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.708283][ T6715] ? __fget_files+0x2a/0x420 [ 157.708320][ T6715] ? __fget_files+0x3a0/0x420 [ 157.708356][ T6715] __sys_sendmmsg+0x227/0x430 [ 157.708384][ T6715] ? __pfx___sys_sendmmsg+0x10/0x10 [ 157.708415][ T6715] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.708478][ T6715] ? ksys_write+0x1f0/0x250 [ 157.708514][ T6715] ? rcu_is_watching+0x15/0xb0 [ 157.708554][ T6715] __x64_sys_sendmmsg+0xa0/0xc0 [ 157.708578][ T6715] do_syscall_64+0xf6/0x210 [ 157.708605][ T6715] ? clear_bhb_loop+0x45/0xa0 [ 157.708629][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.708657][ T6715] RIP: 0033:0x7f0e84f8e969 [ 157.708679][ T6715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.708695][ T6715] RSP: 002b:00007f0e85d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.708720][ T6715] RAX: ffffffffffffffda RBX: 00007f0e851b5fa0 RCX: 00007f0e84f8e969 [ 157.708734][ T6715] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 157.708746][ T6715] RBP: 00007f0e85d13090 R08: 0000000000000000 R09: 0000000000000000 [ 157.708757][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.708769][ T6715] R13: 0000000000000000 R14: 00007f0e851b5fa0 R15: 00007ffea6e20748 [ 157.708798][ T6715] [ 157.942112][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.967156][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.011071][ T6400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.021621][ T6400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.068539][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.075822][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.101794][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.109045][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.413291][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.192'. [ 158.515781][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 158.599831][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.192'. [ 158.642217][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 158.671458][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.192'. [ 158.723538][ T6741] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.914898][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.997741][ T6745] tipc: Can't bind to reserved service type 1 [ 159.112010][ T6400] veth0_vlan: entered promiscuous mode [ 159.151871][ T6400] veth1_vlan: entered promiscuous mode [ 159.158921][ T6751] tipc: Enabled bearer , priority 0 [ 159.402280][ T6751] syzkaller0: entered promiscuous mode [ 159.418923][ T6751] syzkaller0: entered allmulticast mode [ 159.432800][ T6751] tipc: Resetting bearer [ 159.547248][ T6749] tipc: Resetting bearer [ 159.701388][ T6776] FAULT_INJECTION: forcing a failure. [ 159.701388][ T6776] name failslab, interval 1, probability 0, space 0, times 1 [ 159.759991][ T6776] CPU: 1 UID: 0 PID: 6776 Comm: syz.4.202 Not tainted 6.15.0-rc3-syzkaller-00586-gf438eee2c8c9 #0 PREEMPT(full) [ 159.760021][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 159.760033][ T6776] Call Trace: [ 159.760041][ T6776] [ 159.760050][ T6776] dump_stack_lvl+0x189/0x250 [ 159.760089][ T6776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.760119][ T6776] ? __pfx__printk+0x10/0x10 [ 159.760145][ T6776] ? __pfx___might_resched+0x10/0x10 [ 159.760169][ T6776] should_fail_ex+0x414/0x560 [ 159.760206][ T6776] should_failslab+0xa8/0x100 [ 159.760235][ T6776] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 159.760262][ T6776] ? __alloc_skb+0x112/0x2d0 [ 159.760279][ T6776] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 159.760314][ T6776] __alloc_skb+0x112/0x2d0 [ 159.760338][ T6776] pfkey_sendmsg+0x1dd/0x1090 [ 159.760373][ T6776] ? __pfx___might_resched+0x10/0x10 [ 159.760393][ T6776] ? __lock_acquire+0xaac/0xd20 [ 159.760424][ T6776] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 159.760452][ T6776] ? __lock_acquire+0xaac/0xd20 [ 159.760482][ T6776] ? aa_sk_perm+0x81e/0x950 [ 159.760517][ T6776] ? __pfx_aa_sk_perm+0x10/0x10 [ 159.760544][ T6776] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 159.760575][ T6776] ? aa_sock_msg_perm+0x94/0x160 [ 159.760597][ T6776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.760619][ T6776] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 159.760649][ T6776] __sock_sendmsg+0x219/0x270 [ 159.760681][ T6776] ____sys_sendmsg+0x52d/0x830 [ 159.760709][ T6776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.760742][ T6776] ? import_iovec+0x74/0xa0 [ 159.760772][ T6776] ___sys_sendmsg+0x21f/0x2a0 [ 159.760797][ T6776] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.760858][ T6776] ? __fget_files+0x2a/0x420 [ 159.760884][ T6776] ? __fget_files+0x3a0/0x420 [ 159.760920][ T6776] __sys_sendmmsg+0x227/0x430 [ 159.760953][ T6776] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.760992][ T6776] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 159.761038][ T6776] ? ksys_write+0x1f0/0x250 [ 159.761060][ T6776] ? rcu_is_watching+0x15/0xb0 [ 159.761101][ T6776] __x64_sys_sendmmsg+0xa0/0xc0 [ 159.761126][ T6776] do_syscall_64+0xf6/0x210 [ 159.761154][ T6776] ? clear_bhb_loop+0x45/0xa0 [ 159.761179][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.761199][ T6776] RIP: 0033:0x7f0e84f8e969 [ 159.761217][ T6776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.761234][ T6776] RSP: 002b:00007f0e85d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.761255][ T6776] RAX: ffffffffffffffda RBX: 00007f0e851b5fa0 RCX: 00007f0e84f8e969 [ 159.761270][ T6776] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 159.761282][ T6776] RBP: 00007f0e85d13090 R08: 0000000000000000 R09: 0000000000000000 [ 159.761294][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.761306][ T6776] R13: 0000000000000000 R14: 00007f0e851b5fa0 R15: 00007ffea6e20748 [ 159.761337][ T6776] [ 160.325479][ T6789] raw_sendmsg: syz.0.204 forgot to set AF_INET. Fix it! [ 160.413991][ T6789] IPVS: set_ctl: invalid protocol: 41 172.20.20.21:20002 [ 161.797219][ T6749] tipc: Disabling bearer [ 161.872081][ T6400] veth0_macvtap: entered promiscuous mode [ 161.920566][ T6400] veth1_macvtap: entered promiscuous mode [ 161.996369][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.008852][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.026921][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.053763][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.075374][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.093357][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.107227][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.470656][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.517119][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.537482][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.575074][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.596165][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.607006][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.624769][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.678074][ T6400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.701166][ T6400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.727191][ T6826] __nla_validate_parse: 62 callbacks suppressed [ 162.727215][ T6826] netlink: 112 bytes leftover after parsing attributes in process `syz.2.209'. [ 162.752507][ T6400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.769033][ T6400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.851105][ T6785] infiniband syz0: set active [ 162.879061][ T6785] infiniband syz0: added bond_slave_1 [ 162.912696][ T6785] syz0: rxe_create_cq: returned err = -12 [ 162.947183][ T6785] infiniband syz0: Couldn't create ib_mad CQ [ 162.970295][ T6785] infiniband syz0: Couldn't open port 1 [ 163.015165][ T6837] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.107063][ T6837] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 163.136849][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.174530][ T6785] RDS/IB: syz0: added [ 163.178797][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.208034][ T6785] smc: adding ib device syz0 with port count 1 [ 163.260282][ T6785] smc: ib device syz0 port 1 has pnetid [ 163.311453][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 163.350932][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.388229][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.406807][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.443478][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.468242][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.487603][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.505577][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.524978][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.665539][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.690090][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.778426][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.108772][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.338072][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.597014][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.828280][ T6891] vlan4: entered promiscuous mode [ 165.867129][ T6891] vlan3: entered promiscuous mode [ 165.902815][ T6891] gretap0: entered promiscuous mode [ 166.120095][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.142113][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.158493][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.176370][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.185934][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.454630][ T36] bridge_slave_1: left allmulticast mode [ 166.464304][ T36] bridge_slave_1: left promiscuous mode [ 166.483168][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.515868][ T36] bridge_slave_0: left allmulticast mode [ 166.540311][ T36] bridge_slave_0: left promiscuous mode [ 166.546135][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.042473][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.056235][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.067540][ T36] bond0 (unregistering): Released all slaves [ 168.249488][ T5834] Bluetooth: hci1: command tx timeout [ 169.089240][ T30] audit: type=1800 audit(1745872371.580:2): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.227" name="memory.events" dev="tmpfs" ino=326 res=0 errno=0 [ 169.220894][ T6785] syz.4.203 (6785) used greatest stack depth: 20288 bytes left [ 169.335031][ T6949] __nla_validate_parse: 48 callbacks suppressed [ 169.335050][ T6949] netlink: 80 bytes leftover after parsing attributes in process `syz.4.230'. [ 169.524592][ T6950] gretap0: left promiscuous mode [ 169.665852][ T6950] bridge0: port 3(team0) entered disabled state [ 169.673345][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.681873][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.894993][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 169.941461][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.959432][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.066290][ T6950] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.077080][ T6950] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.087962][ T6950] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.097684][ T6950] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.245517][ T36] hsr_slave_0: left promiscuous mode [ 170.266903][ T36] hsr_slave_1: left promiscuous mode [ 170.285812][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.307975][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.322537][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.332654][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.339124][ T5834] Bluetooth: hci1: command tx timeout [ 170.441366][ T36] veth1_macvtap: left promiscuous mode [ 170.447495][ T36] veth0_macvtap: left promiscuous mode [ 170.452385][ T6976] SET target dimension over the limit! [ 170.459528][ T36] veth1_vlan: left promiscuous mode [ 170.466869][ T36] veth0_vlan: left promiscuous mode [ 171.056831][ T36] team0 (unregistering): Port device team_slave_1 removed [ 171.103412][ T36] team0 (unregistering): Port device team_slave_0 removed [ 171.554181][ T6965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.564341][ T6965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.762978][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 171.895394][ T6900] chnl_net:caif_netlink_parms(): no params data found [ 172.076234][ T7001] netlink: 52 bytes leftover after parsing attributes in process `syz.4.242'. [ 172.326317][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.336009][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.343605][ T6900] bridge_slave_0: entered allmulticast mode [ 172.351815][ T6900] bridge_slave_0: entered promiscuous mode [ 172.365061][ T7020] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 172.365390][ T7017] IPVS: stopping backup sync thread 7020 ... [ 172.400734][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.408234][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.415550][ T5834] Bluetooth: hci1: command tx timeout [ 172.422185][ T6900] bridge_slave_1: entered allmulticast mode [ 172.435556][ T6900] bridge_slave_1: entered promiscuous mode [ 172.514220][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.544847][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.557973][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 172.623885][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 172.780282][ T6900] team0: Port device team_slave_0 added [ 172.790780][ T7033] Dead loop on virtual device ip6_vti0, fix it urgently! [ 172.801934][ T7033] netlink: 'syz.0.251': attribute type 3 has an invalid length. [ 172.805410][ T6900] team0: Port device team_slave_1 added [ 172.816398][ T7034] netlink: 'syz.0.251': attribute type 3 has an invalid length. [ 172.925045][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.948024][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.013021][ T7040] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 173.029255][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.063133][ T7041] netlink: 3 bytes leftover after parsing attributes in process `syz.2.253'. [ 173.077208][ T7040] bond1: entered promiscuous mode [ 173.083151][ T7040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.095655][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.103069][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.129425][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.157911][ T7041] batadv1: entered promiscuous mode [ 173.164098][ T7041] batadv1: entered allmulticast mode [ 173.171950][ T7041] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.181119][ T7041] bond1: (slave batadv1): making interface the new active one [ 173.190335][ T7041] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 173.204178][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 173.297235][ T7046] macvlan2: entered promiscuous mode [ 173.317279][ T7046] macvlan2: entered allmulticast mode [ 173.327155][ T7046] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 173.389616][ T6900] hsr_slave_0: entered promiscuous mode [ 173.418289][ T6900] hsr_slave_1: entered promiscuous mode [ 173.445551][ T6900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.472200][ T6900] Cannot create hsr debugfs directory [ 173.953283][ T7072] wireguard0: entered promiscuous mode [ 173.958822][ T7072] wireguard0: entered allmulticast mode [ 174.299585][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 174.341494][ T7092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.269'. [ 174.359814][ T7092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.269'. [ 174.373782][ T7092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.269'. [ 174.396323][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'. [ 174.489221][ T5834] Bluetooth: hci1: command tx timeout [ 174.593040][ T7103] netlink: 'syz.4.271': attribute type 2 has an invalid length. [ 174.685493][ T7103] : entered promiscuous mode [ 175.104594][ T7132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.280'. [ 175.126357][ T6900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.160596][ T6900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.191697][ T6900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.214397][ T6900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.605072][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.651850][ T6900] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.676634][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.288'. [ 175.696920][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.704143][ T6170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.790441][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.797646][ T6170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.451023][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 176.514921][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.641341][ T6900] veth0_vlan: entered promiscuous mode [ 176.667257][ T6900] veth1_vlan: entered promiscuous mode [ 176.747252][ T6900] veth0_macvtap: entered promiscuous mode [ 176.749242][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 176.773638][ T6900] veth1_macvtap: entered promiscuous mode [ 177.061800][ T7183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.075951][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.107270][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.128252][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.139645][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.154842][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.198726][ T7189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.206994][ T7189] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 177.226527][ T7189] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 177.258494][ T7162] lo speed is unknown, defaulting to 1000 [ 177.345816][ T7162] lo speed is unknown, defaulting to 1000 [ 177.403445][ T7162] lo speed is unknown, defaulting to 1000 [ 177.421355][ T7162] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 177.433581][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.444748][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.459972][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.467783][ T7162] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.476939][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.494794][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.589265][ T7162] lo speed is unknown, defaulting to 1000 [ 177.597869][ T6900] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.616017][ T6900] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.624958][ T6900] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.634516][ T6900] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.660638][ T7162] lo speed is unknown, defaulting to 1000 [ 177.676360][ T7162] lo speed is unknown, defaulting to 1000 [ 177.693899][ T7162] lo speed is unknown, defaulting to 1000 [ 177.702772][ T7162] lo speed is unknown, defaulting to 1000 [ 177.735323][ T7162] lo speed is unknown, defaulting to 1000 [ 178.023434][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.057272][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.189567][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.216872][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.306283][ T7216] No such timeout policy "syz1" [ 178.458029][ T7221] netlink: 256 bytes leftover after parsing attributes in process `syz.4.303'. [ 178.473442][ T7221] netlink: 64 bytes leftover after parsing attributes in process `syz.4.303'. [ 178.668662][ T7223] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 178.763967][ T7230] bond0: left promiscuous mode [ 178.769766][ T7230] bond_slave_0: left promiscuous mode [ 178.791775][ T7230] bond_slave_1: left promiscuous mode [ 178.797745][ T7230] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 178.882897][ T7234] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 178.901796][ T7234] netlink: 'syz.4.308': attribute type 2 has an invalid length. [ 179.605625][ T1050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.961799][ T1050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.185351][ T1050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.324512][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.334835][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.346015][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.361739][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.375643][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.542512][ T1050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.858162][ T7261] __nla_validate_parse: 1 callbacks suppressed [ 180.858182][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 180.938820][ T1050] bridge_slave_1: left allmulticast mode [ 180.948029][ T1050] bridge_slave_1: left promiscuous mode [ 180.958484][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.981685][ T1050] bridge_slave_0: left allmulticast mode [ 180.999178][ T1050] bridge_slave_0: left promiscuous mode [ 181.008020][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.538038][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.550878][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.563916][ T1050] bond0 (unregistering): Released all slaves [ 181.583457][ T7246] lo speed is unknown, defaulting to 1000 [ 182.092020][ T7284] tipc: Started in network mode [ 182.097711][ T7284] tipc: Node identity , cluster identity 4711 [ 182.107164][ T7284] tipc: Failed to obtain node identity [ 182.114752][ T7284] tipc: Enabling of bearer rejected, failed to enable media [ 182.211365][ T7286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.224152][ T7286] netlink: 277 bytes leftover after parsing attributes in process `syz.4.320'. [ 182.298374][ T7292] tipc: Enabling of bearer rejected, failed to enable media [ 182.409238][ T5834] Bluetooth: hci1: command tx timeout [ 182.626786][ T7267] lo speed is unknown, defaulting to 1000 [ 182.667476][ T7259] lo speed is unknown, defaulting to 1000 [ 182.735886][ T7258] lo speed is unknown, defaulting to 1000 [ 183.203195][ T1050] hsr_slave_0: left promiscuous mode [ 183.212163][ T1050] hsr_slave_1: left promiscuous mode [ 183.218795][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.227267][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.236969][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.247333][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.274165][ T1050] veth1_macvtap: left promiscuous mode [ 183.280482][ T1050] veth0_macvtap: left promiscuous mode [ 183.286556][ T1050] veth1_vlan: left promiscuous mode [ 183.295407][ T1050] veth0_vlan: left promiscuous mode [ 183.809698][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 183.857287][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 184.407955][ T7311] tipc: Started in network mode [ 184.413659][ T7311] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 184.428211][ T7311] tipc: Enabled bearer , priority 0 [ 184.489239][ T5834] Bluetooth: hci1: command tx timeout [ 185.172577][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 185.350216][ T7330] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 185.444689][ T7330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.460360][ T6301] tipc: Node number set to 11578026 [ 185.478841][ T7332] ip6erspan0: entered promiscuous mode [ 185.494074][ T7332] bond1: (slave ip6erspan0): making interface the new active one [ 185.513972][ T7332] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 185.544224][ T7330] vlan2: entered allmulticast mode [ 185.549828][ T7330] bond1: entered allmulticast mode [ 185.555666][ T7330] ip6erspan0: entered allmulticast mode [ 185.564807][ T7330] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 185.672797][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 185.698894][ T7340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.334'. [ 185.765020][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.780552][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.788737][ T7267] bridge_slave_0: entered allmulticast mode [ 185.802821][ T7267] bridge_slave_0: entered promiscuous mode [ 185.823699][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.837529][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.846182][ T7267] bridge_slave_1: entered allmulticast mode [ 185.856553][ T7267] bridge_slave_1: entered promiscuous mode [ 185.968228][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.999945][ T7351] tipc: Started in network mode [ 186.007195][ T7351] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 186.027093][ T7351] tipc: Enabled bearer , priority 0 [ 186.046061][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.184358][ T7267] team0: Port device team_slave_0 added [ 186.191850][ T7360] tipc: Enabling of bearer rejected, already enabled [ 186.207902][ T7267] team0: Port device team_slave_1 added [ 186.356185][ T7366] ------------[ cut here ]------------ [ 186.362015][ T7366] UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9 [ 186.369576][ T7366] index 72 is out of range for type 'const int[12]' [ 186.376207][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.3.344 Not tainted 6.15.0-rc3-syzkaller-00586-gf438eee2c8c9 #0 PREEMPT(full) [ 186.376235][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 186.376249][ T7366] Call Trace: [ 186.376257][ T7366] [ 186.376266][ T7366] dump_stack_lvl+0x189/0x250 [ 186.376307][ T7366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.376338][ T7366] ? __pfx__printk+0x10/0x10 [ 186.376356][ T7366] ? sctp_v6_get_dst+0x7cc/0x1bc0 [ 186.376388][ T7366] ? sctp_sendmsg+0x155c/0x2810 [ 186.376406][ T7366] ? __sys_sendto+0x3bd/0x520 [ 186.376424][ T7366] ? __x64_sys_sendto+0xde/0x100 [ 186.376442][ T7366] ? do_syscall_64+0xf6/0x210 [ 186.376476][ T7366] ubsan_epilogue+0xa/0x40 [ 186.376497][ T7366] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 186.376531][ T7366] ip6_rt_copy_init+0x8e7/0x970 [ 186.376565][ T7366] ip6_pol_route+0xbac/0x1180 [ 186.376595][ T7366] ? ip6_pol_route+0x162/0x1180 [ 186.376638][ T7366] ? __pfx_ip6_pol_route+0x10/0x10 [ 186.376667][ T7366] ? ipv6_addr_label+0x1ae/0x1e0 [ 186.376696][ T7366] ? ipv6_get_saddr_eval+0xb85/0xee0 [ 186.376736][ T7366] fib6_rule_lookup+0x348/0x6f0 [ 186.376769][ T7366] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 186.376810][ T7366] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 186.376846][ T7366] ? ip6_route_output_flags+0x2e/0x5d0 [ 186.376878][ T7366] ? __pfx_rcuref_put+0x10/0x10 [ 186.376913][ T7366] ip6_route_output_flags+0x364/0x5d0 [ 186.376942][ T7366] ? ip6_route_output_flags+0x2e/0x5d0 [ 186.376975][ T7366] ip6_dst_lookup_tail+0x299/0x1510 [ 186.377000][ T7366] ? ip6_dst_lookup_tail+0x211/0x1510 [ 186.377028][ T7366] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 186.377047][ T7366] ? __lock_acquire+0xaac/0xd20 [ 186.377096][ T7366] ip6_dst_lookup_flow+0x47/0xe0 [ 186.377117][ T7366] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 186.377147][ T7366] sctp_v6_get_dst+0x7cc/0x1bc0 [ 186.377174][ T7366] ? crng_make_state+0x13a/0x700 [ 186.377201][ T7366] ? __pfx_crng_make_state+0x10/0x10 [ 186.377235][ T7366] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 186.377262][ T7366] ? __asan_memset+0x22/0x50 [ 186.377308][ T7366] ? dst_release+0x72/0x1b0 [ 186.377334][ T7366] sctp_transport_route+0x115/0x2f0 [ 186.377366][ T7366] sctp_assoc_add_peer+0x657/0x13b0 [ 186.377400][ T7366] sctp_connect_new_asoc+0x30a/0x690 [ 186.377424][ T7366] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 186.377446][ T7366] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 186.377466][ T7366] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 186.377484][ T7366] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 186.377504][ T7366] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 186.377528][ T7366] ? security_sctp_bind_connect+0x7e/0x2e0 [ 186.377562][ T7366] sctp_sendmsg+0x155c/0x2810 [ 186.377595][ T7366] ? __pfx_sctp_sendmsg+0x10/0x10 [ 186.377624][ T7366] ? aa_sk_perm+0x81e/0x950 [ 186.377669][ T7366] ? __pfx_aa_sk_perm+0x10/0x10 [ 186.377722][ T7366] ? sock_rps_record_flow+0x19/0x410 [ 186.377755][ T7366] ? inet_sendmsg+0x2f4/0x370 [ 186.377783][ T7366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.377810][ T7366] __sock_sendmsg+0x19c/0x270 [ 186.377842][ T7366] __sys_sendto+0x3bd/0x520 [ 186.377865][ T7366] ? __pfx___sys_sendto+0x10/0x10 [ 186.377882][ T7366] ? do_futex+0x395/0x420 [ 186.377934][ T7366] ? rcu_is_watching+0x15/0xb0 [ 186.377976][ T7366] __x64_sys_sendto+0xde/0x100 [ 186.378000][ T7366] do_syscall_64+0xf6/0x210 [ 186.378029][ T7366] ? clear_bhb_loop+0x45/0xa0 [ 186.378055][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.378075][ T7366] RIP: 0033:0x7f7f1a98e969 [ 186.378095][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.378112][ T7366] RSP: 002b:00007f7f1b76b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 186.378134][ T7366] RAX: ffffffffffffffda RBX: 00007f7f1abb5fa0 RCX: 00007f7f1a98e969 [ 186.378150][ T7366] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000007 [ 186.378163][ T7366] RBP: 00007f7f1aa10ab1 R08: 0000200000000140 R09: 000000000000001c [ 186.378177][ T7366] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000000 [ 186.378189][ T7366] R13: 0000000000000000 R14: 00007f7f1abb5fa0 R15: 00007ffd507b35f8 [ 186.378222][ T7366] [ 186.378230][ T7366] ---[ end trace ]--- [ 186.467825][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 186.470574][ T7366] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 186.470592][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.3.344 Not tainted 6.15.0-rc3-syzkaller-00586-gf438eee2c8c9 #0 PREEMPT(full) [ 186.470626][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 186.470639][ T7366] Call Trace: [ 186.470649][ T7366] [ 186.470659][ T7366] dump_stack_lvl+0x99/0x250 [ 186.470697][ T7366] ? __asan_memcpy+0x40/0x70 [ 186.470720][ T7366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.470751][ T7366] ? __pfx__printk+0x10/0x10 [ 186.470788][ T7366] panic+0x2db/0x790 [ 186.470821][ T7366] ? __pfx_panic+0x10/0x10 [ 186.470848][ T7366] ? _printk+0xcf/0x120 [ 186.470877][ T7366] ? __pfx__printk+0x10/0x10 [ 186.470897][ T7366] ? sctp_v6_get_dst+0x7cc/0x1bc0 [ 186.470933][ T7366] ? sctp_sendmsg+0x155c/0x2810 [ 186.470953][ T7366] ? __sys_sendto+0x3bd/0x520 [ 186.470973][ T7366] ? __x64_sys_sendto+0xde/0x100 [ 186.470992][ T7366] ? do_syscall_64+0xf6/0x210 [ 186.471026][ T7366] check_panic_on_warn+0x89/0xb0 [ 186.471060][ T7366] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 186.471096][ T7366] ip6_rt_copy_init+0x8e7/0x970 [ 186.471133][ T7366] ip6_pol_route+0xbac/0x1180 [ 186.471166][ T7366] ? ip6_pol_route+0x162/0x1180 [ 186.471202][ T7366] ? __pfx_ip6_pol_route+0x10/0x10 [ 186.471234][ T7366] ? ipv6_addr_label+0x1ae/0x1e0 [ 186.471264][ T7366] ? ipv6_get_saddr_eval+0xb85/0xee0 [ 186.471309][ T7366] fib6_rule_lookup+0x348/0x6f0 [ 186.471344][ T7366] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 186.471378][ T7366] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 186.471418][ T7366] ? ip6_route_output_flags+0x2e/0x5d0 [ 186.471454][ T7366] ? __pfx_rcuref_put+0x10/0x10 [ 186.471492][ T7366] ip6_route_output_flags+0x364/0x5d0 [ 186.471527][ T7366] ? ip6_route_output_flags+0x2e/0x5d0 [ 186.471563][ T7366] ip6_dst_lookup_tail+0x299/0x1510 [ 186.471593][ T7366] ? ip6_dst_lookup_tail+0x211/0x1510 [ 186.471632][ T7366] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 186.471654][ T7366] ? __lock_acquire+0xaac/0xd20 [ 186.471709][ T7366] ip6_dst_lookup_flow+0x47/0xe0 [ 186.471734][ T7366] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 186.471768][ T7366] sctp_v6_get_dst+0x7cc/0x1bc0 [ 186.471800][ T7366] ? crng_make_state+0x13a/0x700 [ 186.471830][ T7366] ? __pfx_crng_make_state+0x10/0x10 [ 186.471869][ T7366] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 186.471900][ T7366] ? __asan_memset+0x22/0x50 [ 186.471950][ T7366] ? dst_release+0x72/0x1b0 [ 186.471981][ T7366] sctp_transport_route+0x115/0x2f0 [ 186.472016][ T7366] sctp_assoc_add_peer+0x657/0x13b0 [ 186.472055][ T7366] sctp_connect_new_asoc+0x30a/0x690 [ 186.472082][ T7366] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 186.472108][ T7366] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 186.472130][ T7366] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 186.472151][ T7366] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 186.472175][ T7366] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 186.472204][ T7366] ? security_sctp_bind_connect+0x7e/0x2e0 [ 186.472240][ T7366] sctp_sendmsg+0x155c/0x2810 [ 186.472277][ T7366] ? __pfx_sctp_sendmsg+0x10/0x10 [ 186.472306][ T7366] ? aa_sk_perm+0x81e/0x950 [ 186.472348][ T7366] ? __pfx_aa_sk_perm+0x10/0x10 [ 186.472386][ T7366] ? sock_rps_record_flow+0x19/0x410 [ 186.472419][ T7366] ? inet_sendmsg+0x2f4/0x370 [ 186.472446][ T7366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.472476][ T7366] __sock_sendmsg+0x19c/0x270 [ 186.472512][ T7366] __sys_sendto+0x3bd/0x520 [ 186.472537][ T7366] ? __pfx___sys_sendto+0x10/0x10 [ 186.472556][ T7366] ? do_futex+0x395/0x420 [ 186.472619][ T7366] ? rcu_is_watching+0x15/0xb0 [ 186.472666][ T7366] __x64_sys_sendto+0xde/0x100 [ 186.472695][ T7366] do_syscall_64+0xf6/0x210 [ 186.472726][ T7366] ? clear_bhb_loop+0x45/0xa0 [ 186.472756][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.472779][ T7366] RIP: 0033:0x7f7f1a98e969 [ 186.472803][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.472822][ T7366] RSP: 002b:00007f7f1b76b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 186.472848][ T7366] RAX: ffffffffffffffda RBX: 00007f7f1abb5fa0 RCX: 00007f7f1a98e969 [ 186.472865][ T7366] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000007 [ 186.472881][ T7366] RBP: 00007f7f1aa10ab1 R08: 0000200000000140 R09: 000000000000001c [ 186.472897][ T7366] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000000 [ 186.472911][ T7366] R13: 0000000000000000 R14: 00007f7f1abb5fa0 R15: 00007ffd507b35f8 [ 186.472948][ T7366] [ 186.476173][ T7366] Kernel Offset: disabled