last executing test programs: 1m24.936165763s ago: executing program 2 (id=825): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901008102000000000003000000000800040001000000", 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000280)={0x80000000}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffff0000080000000800028004000100180001801400020073797a5f74756e000000000000000000"], 0x34}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="030e0000000000000000010000080056af5c514742a91a87860207852de7b5f098b490d5ef41bf03251b07cb47ffdb0a23b8c33e5cf67a97c0c59cf6fb2c10a34acd521f3e3eb0ee82b95a2d4cce18b37cb8973756ce54c5c716176e4a5aae87ae3e7a93bc1e5b209227701bd03923e8057e165b3ca2dfa5942d81cdf0d3c5c9ee64b147b1170bf24aeeb05662274ebc4d6e"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00022dbd70f9fadbdf2512000000080009a442844b499e2fff2d22db4e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001000330100000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000009a2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000004c0012007266633435343328726663343130362d67636d2d6165736e6929000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff700000000001c0016"], 0x158}}, 0x0) close(r1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0x12) 1m12.292214643s ago: executing program 2 (id=825): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901008102000000000003000000000800040001000000", 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000280)={0x80000000}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffff0000080000000800028004000100180001801400020073797a5f74756e000000000000000000"], 0x34}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="030e0000000000000000010000080056af5c514742a91a87860207852de7b5f098b490d5ef41bf03251b07cb47ffdb0a23b8c33e5cf67a97c0c59cf6fb2c10a34acd521f3e3eb0ee82b95a2d4cce18b37cb8973756ce54c5c716176e4a5aae87ae3e7a93bc1e5b209227701bd03923e8057e165b3ca2dfa5942d81cdf0d3c5c9ee64b147b1170bf24aeeb05662274ebc4d6e"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00022dbd70f9fadbdf2512000000080009a442844b499e2fff2d22db4e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001000330100000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000009a2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000004c0012007266633435343328726663343130362d67636d2d6165736e6929000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff700000000001c0016"], 0x158}}, 0x0) close(r1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0x12) 59.093260356s ago: executing program 2 (id=825): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901008102000000000003000000000800040001000000", 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000280)={0x80000000}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffff0000080000000800028004000100180001801400020073797a5f74756e000000000000000000"], 0x34}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="030e0000000000000000010000080056af5c514742a91a87860207852de7b5f098b490d5ef41bf03251b07cb47ffdb0a23b8c33e5cf67a97c0c59cf6fb2c10a34acd521f3e3eb0ee82b95a2d4cce18b37cb8973756ce54c5c716176e4a5aae87ae3e7a93bc1e5b209227701bd03923e8057e165b3ca2dfa5942d81cdf0d3c5c9ee64b147b1170bf24aeeb05662274ebc4d6e"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00022dbd70f9fadbdf2512000000080009a442844b499e2fff2d22db4e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001000330100000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000009a2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000004c0012007266633435343328726663343130362d67636d2d6165736e6929000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff700000000001c0016"], 0x158}}, 0x0) close(r1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0x12) 43.257171737s ago: executing program 2 (id=825): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901008102000000000003000000000800040001000000", 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000280)={0x80000000}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffff0000080000000800028004000100180001801400020073797a5f74756e000000000000000000"], 0x34}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="030e0000000000000000010000080056af5c514742a91a87860207852de7b5f098b490d5ef41bf03251b07cb47ffdb0a23b8c33e5cf67a97c0c59cf6fb2c10a34acd521f3e3eb0ee82b95a2d4cce18b37cb8973756ce54c5c716176e4a5aae87ae3e7a93bc1e5b209227701bd03923e8057e165b3ca2dfa5942d81cdf0d3c5c9ee64b147b1170bf24aeeb05662274ebc4d6e"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00022dbd70f9fadbdf2512000000080009a442844b499e2fff2d22db4e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001000330100000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000009a2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000004c0012007266633435343328726663343130362d67636d2d6165736e6929000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff700000000001c0016"], 0x158}}, 0x0) close(r1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0x12) 30.224096167s ago: executing program 2 (id=825): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901008102000000000003000000000800040001000000", 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000280)={0x80000000}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffff0000080000000800028004000100180001801400020073797a5f74756e000000000000000000"], 0x34}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="030e0000000000000000010000080056af5c514742a91a87860207852de7b5f098b490d5ef41bf03251b07cb47ffdb0a23b8c33e5cf67a97c0c59cf6fb2c10a34acd521f3e3eb0ee82b95a2d4cce18b37cb8973756ce54c5c716176e4a5aae87ae3e7a93bc1e5b209227701bd03923e8057e165b3ca2dfa5942d81cdf0d3c5c9ee64b147b1170bf24aeeb05662274ebc4d6e"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00022dbd70f9fadbdf2512000000080009a442844b499e2fff2d22db4e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001000330100000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000009a2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000004c0012007266633435343328726663343130362d67636d2d6165736e6929000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff700000000001c0016"], 0x158}}, 0x0) close(r1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0x12) 28.349024031s ago: executing program 0 (id=1450): recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/231, 0xe7, 0x1, &(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x7f, @private1, 0x6}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200)={0x6, 0x5}, 0x2) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0xb34, @empty, 0x3}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x7ff, 0x100, 0x5, 0x4, 0x8, 0x7}, &(0x7f0000000440)=0x9c) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '\'!^\\*{:'}, {0x20, '-,@+\''}, {0x20, '&'}], 0xa, "c0b50d1d907777ade51da12de07920fc7a66c2ba97859f14ca1252a53de2d0dc5aee957b064953e737cb7f1f0a06d140ba9bdba0aad2a3fff24337d00163a1dcf4fa9f42077ff75844602b16f34327229b2c2f40b8e17d7905e0f4684a8b697d4e142889cfec6f7835ef02d37098bede43527e6b48d3bbb23985940a339ad4df50f9bf61f89e811325b69e6cf598ff23baea6153690e3a91a98bd928893dfb6917638a02584f74d59b62bbd7bbc8824c84edf79d6e76cc75873dc5768e6da85792abe0edcb"}, 0xe0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000580)={0x7, [0x0, 0x10, 0x2, 0x5, 0x1ff, 0x0, 0x5]}, 0x12) unshare(0x10000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r5) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000640), r1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @remote}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x0, 0x1, 0x6, 0x9, {{0x16, 0x4, 0x2, 0x32, 0x58, 0x64, 0x0, 0x7, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x80}, @private=0xa010100, {[@timestamp_prespec={0x44, 0x44, 0xff, 0x3, 0x3, [{@multicast1, 0xfffffffa}, {@loopback, 0x5}, {@private=0xa010100, 0x5}, {@local, 0x5}, {@private=0xa010100, 0xfffffffe}, {@empty, 0x81}, {@rand_addr=0x64010101}, {@loopback, 0x12c2}]}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000007c0)={@remote, @dev, 0x0}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000880)={@multicast2, @dev, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ac0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x154, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x20004041) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000c80)={r3, 0x6, 0xfff, 0x5}) setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f0000000cc0)={0x7fff, {{0xa, 0x4e22, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}}}, 0x108) sendmsg$alg(r13, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e00)="f35ed0e731fa67f69d255183ea19416f53b68aeb7b32a6b9d0cc7125e1b8fb4fb92d222d4969a23898daa6d5dbb8c46cf45c6fcca18a4ddd96780639d032b7d72b06ef6f5cd4fb12b7c6f754d3bd36597a2950640af5beb07bd1821c5c9b98c1072b2f4a5af8666d8513d0b4d1e7b60ae4282d54a12f771aebb99d7098be9dc770a04ec474c1fb028050c4e8d7906536dfbc19f5d53113e36685b36d8f7c3d6d193738841c9609324e3e7128280a211b55", 0xb1}], 0x1, &(0x7f0000000f00)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x48, 0x81}, 0x4000000) getsockopt$inet6_mtu(r13, 0x29, 0x17, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) setsockopt$inet_icmp_ICMP_FILTER(r13, 0x1, 0x1, &(0x7f0000001040)={0xb41}, 0x4) 28.155256023s ago: executing program 0 (id=1451): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) unshare(0x20040600) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0xd000000, 0x0}, 0x40002002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a000100bb"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x1, 0x202, 0x1, 0x8, 0x1, 0x73, 0x80000000}, &(0x7f0000000180)=0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@loopback}, 0x20) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x20}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x61}]}]}, 0x20}}, 0x4008004) 27.176418492s ago: executing program 0 (id=1461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x7e, 0x0, 0x5, 0x7, 0xffffffdf}) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="10030300ffffffff02004788aa96a13bc5a000117942428ff08bf9232300007fca1a00217734e4c0e197c7008f2c", 0x2e, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00', 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587"}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_tunnel_key={0x48, 0x1, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000e0605000000000000000000e05a2b407985f453be718abdaf723c080000040900020073797a3100000000050001f2a4da7300a654da44d2116ee372d835fd3dd66ef82396d905899d96bc5750abb681155ea0b9be252b260e40919b16b559341c6a2ff55dc287a7bc80000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r8, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x93, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000880), 0x8, 0x47, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x4c, 0x11, 0x1, 0x40000000, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 25.591455449s ago: executing program 0 (id=1466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff71, 0x11, 0x0, 0x27) r4 = accept$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000004c0)=0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000108000000000000000000800000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r11 = openat$cgroup_ro(r4, &(0x7f0000000300)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$l2tp6(0xa, 0x2, 0x73) 24.569969298s ago: executing program 0 (id=1473): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x1e}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYBLOB], 0x1c}}, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x0) socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) 24.524720949s ago: executing program 4 (id=1474): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100003daa000000000000000000640001000006020202020202015b53848b960c121824c7f943261839e56582a1348a5457341b5c8864fbc931016daad9ed25b6e774f4b40862af7591ebd89f919482c5f6135ec9f9448139a877861e4aeec314281e6aa65d"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1f, 0x3, 0x6, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1008018}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="a9c7cd1b", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf250800000008000400040000004c0002800800050008000000080009008511000008000900ff7f000008000900a50a0000060002004e240000080007000c000000080003000400000006000b000a0000000800030003000000"], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0xc, &(0x7f0000000000)=0x3, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000600)) sendmmsg(r7, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000003d80)=0x2, 0x4) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/7, 0x7}}], 0x1, 0x12102, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000019078ac7fa20f392c04446f8028e8db8e617a211e00f8e0988c01b79da98001ac1414bb04009078a704dbd21e7fe4649a093500000000"], 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 23.74182821s ago: executing program 3 (id=1479): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="dc", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x6, 0x1, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"/2446], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) bind$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0xffff8001, @empty, 0xb, 0x3}, 0x20) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff0}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_CLASSID={0x8}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x6, 0x4}, {0x8, 0xb}, {0xfff3, 0xfff3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r6}, 0x8) 23.589712972s ago: executing program 1 (id=1481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00002b0000/0x1000)=nil, 0x1000, 0x1, 0x12, r4, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="fba7000000002bd4000004"], 0x14}}, 0x0) 23.581062715s ago: executing program 4 (id=1482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYRES32=r2], 0x58}}, 0x0) 23.546054375s ago: executing program 0 (id=1483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) unshare(0x20000400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001180)={'gre0\x00', &(0x7f0000001100)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x21d0, 0x8, {{0x17, 0x4, 0x1, 0x1e, 0x5c, 0x68, 0x0, 0x5, 0x4, 0x0, @local, @multicast1, {[@ssrr={0x89, 0x13, 0xf6, [@local, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @ssrr={0x89, 0x27, 0x92, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @multicast2, @multicast2, @multicast1, @empty]}, @noop, @ssrr={0x89, 0x7, 0xac, [@loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)=""/133, 0x16d, 0x85, 0x0, 0x7, 0x10000, @value}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001540)={{0x1, 0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)='%ps \x00'}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000006"], 0x66) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xe2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x5, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x95}], &(0x7f00000000c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000001440)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x5, 0xe, 0x1d3, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001580)=[0x1, r5], &(0x7f00000015c0)=[{0x4, 0x5, 0x10, 0x4}, {0x5, 0x2, 0x2, 0xa}, {0x3, 0x5, 0x3, 0x4}, {0x1, 0x3, 0xb}, {0x3, 0x1, 0xe, 0xa}, {0x3, 0x3, 0xc, 0xb}, {0x2, 0x3, 0x10, 0x1}], 0x10, 0x7ff, @void, @value}, 0x94) 23.413528973s ago: executing program 4 (id=1484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x1eb4, 0x30, 0x51b, 0x0, 0x0, {}, [{0x1ea0, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1d88, 0x4, 0x0, 0x0, {{0xa}, {0x1c74, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x7f, 0x3, 0x4, 0x5, 0x2}, 0x80, 0x9, [{0x1000, 0x7, 0x4, 0x2, 0xffffffff, 0x4}]}, [{0x1, 0x35, 0x3, 0x3, 0x9, 0x4}, {0x5, 0x4, 0x0, 0x9, 0x0, 0x6}, {0x7, 0x6, 0x0, 0x3, 0xffffff8a}, {0x3359c7f0, 0x5, 0xffff, 0xf, 0x8}, {0xe87, 0x6, 0x2, 0xff, 0x7a0d, 0xb7}, {0x6, 0x6, 0xfffffff3, 0x7, 0x10, 0x8}, {0x800, 0x9, 0x1, 0x8, 0x6, 0xb}, {0x5, 0x0, 0xa4b, 0x5, 0x9648, 0xd}, {0x9, 0x6, 0xffffffff, 0x1, 0x2, 0x2}, {0x7, 0xb, 0x3, 0xb941, 0x4, 0x7fffffff}, {0xf5b2, 0xc, 0x81e8, 0x2, 0x1, 0x1}, {0x8, 0x8, 0x6, 0x0, 0x2}, {0x1, 0x7, 0x8, 0x10000, 0x0, 0x1}, {0x5, 0x9, 0x8, 0x2, 0x9, 0xce}, {0x10, 0x2, 0x9, 0xfff, 0x0, 0x3}, {0xe, 0x2, 0x10000000, 0x21, 0x9, 0x1}, {0xa, 0x1, 0x567, 0x9e, 0x9}, {0x9, 0x3, 0x6, 0xffffffff, 0x0, 0x3ff}, {0x700000, 0x5, 0x101, 0x9f17, 0xfff, 0xde}, {0x7f, 0x2d, 0x5, 0xd62, 0x45f80, 0x4}, {0x4, 0x7, 0x1, 0x6, 0x6, 0x3}, {0x493a, 0x0, 0x7fff, 0x9, 0x30, 0x9}, {0x4, 0x324d, 0x9, 0x9, 0xf, 0x80}, {0x10, 0x7, 0x1, 0xdd1, 0x323, 0x4}, {0xced, 0x8, 0x0, 0x7, 0x0, 0x4}, {0xe, 0x0, 0x2682, 0xc13, 0x4, 0x2000}, {0x2, 0x73, 0x74, 0x7, 0x4a99856a, 0x1}, {0xc, 0xa, 0x9, 0xfffffffe, 0x9, 0x8}, {0x5, 0x7, 0x2, 0x80000000, 0x8000, 0x40}, {0xc1, 0xfffffffd, 0xfffffffd, 0x800, 0x9, 0x3}, {0x44, 0x5, 0x8, 0x7, 0x7, 0x2}, {0x800, 0x8, 0x8001, 0x5, 0x6, 0x3}, {0x4, 0xe52, 0xfffffffd, 0x8, 0x9, 0x100}, {0x2, 0x7fffffff, 0xd3, 0x8fcd, 0x7b3, 0x8}, {0xff, 0x3, 0x1, 0x800, 0x9, 0x6b1}, {0xe, 0x3ff, 0x71, 0x9, 0x2, 0xffffffff}, {0x100, 0x40, 0x5, 0x1, 0x6}, {0xd45, 0x8, 0x2, 0x9, 0x9, 0x175}, {0xffff, 0x2, 0x3, 0x7, 0x26, 0x6}, {0x6, 0x400, 0xff, 0x7, 0x4, 0x4}, {0x5, 0x2, 0x4, 0xfffffff7, 0x507c, 0x3}, {0x3, 0xe216, 0x1, 0x8, 0xfffffffb, 0x3ff}, {0x5, 0x1, 0x1, 0x4, 0x216, 0x5}, {0x25, 0x8, 0x2000000, 0x2, 0xffff1b09, 0x8000}, {0x80000001, 0x8, 0xb, 0x7, 0x8, 0x3df1b666}, {0x7fff, 0x268, 0x7fff, 0xd775, 0x900, 0x62}, {0x7, 0x4, 0x1c9e800, 0x5, 0x9e50, 0x379}, {0xffff, 0x69, 0x5, 0x9, 0x5, 0xfffffff2}, {0x3, 0x3, 0x7, 0x7, 0x40000000, 0x9}, {0xfffffff0, 0x8c15, 0x5, 0x2, 0x100, 0x7fffffff}, {0xd1c, 0x67c, 0x7, 0x100, 0xbb2, 0x1}, {0x2, 0x5, 0x8, 0x2, 0x7, 0xfffffffd}, {0x40, 0xbc5, 0x0, 0x83, 0xb, 0x3}, {0x7, 0x7ff, 0x9, 0x6, 0x7, 0x5}, {0x5, 0x1, 0xb6, 0xc51, 0x8, 0x845}, {0x9, 0x9, 0xce, 0x80000001, 0x10, 0x101}, {0x60ba, 0x1, 0x3, 0x0, 0x7, 0x7}, {0x80000001, 0xfffffffd, 0x3, 0x2, 0x0, 0x8}, {0x6, 0x4, 0x7, 0x4, 0x4, 0x8}, {0x7, 0x9, 0xc99e, 0xef, 0x100, 0x1}, {0x4, 0x3, 0x9, 0x1, 0x5, 0x4}, {0x1ff, 0x7, 0x9, 0x7, 0x6, 0xfb09}, {0x5, 0x8, 0x10000, 0xd, 0x7f, 0xfffffffb}, {0x5, 0xb8, 0xe, 0x4, 0x5, 0x9}, {0xffff1b9b, 0x6, 0x6, 0x3, 0x8, 0x4c8}, {0x6, 0xd90, 0x39b2f53e, 0x1, 0x4, 0x1}, {0x5, 0x0, 0x1, 0x20000, 0x2, 0x8}, {0xf, 0x9, 0x0, 0xfffffffc, 0x7, 0x1}, {0x7, 0x5, 0xffff, 0xfff, 0xfe9, 0xffffffff}, {0x7fff, 0x1, 0x1, 0x6, 0x2, 0x4}, {0x8, 0x5dcd, 0x2, 0x5, 0x40, 0xa5f4}, {0xfffffffe, 0x1ac, 0x2, 0x1, 0x6, 0x4}, {0x6, 0x100, 0x8000, 0x10000, 0x2bc8, 0x4}, {0x5, 0x9c, 0x5, 0x1, 0xffffbddf, 0xa5}, {0xbd4, 0x2, 0xb52, 0x1, 0x7, 0xfffffffa}, {0x6, 0x3, 0x7, 0x2d, 0x80000000, 0x3}, {0x4, 0x1ff, 0x200, 0x1, 0x4, 0x5}, {0x0, 0x9, 0x3, 0x4, 0x6, 0xaf40}, {0x9, 0x4, 0xe, 0x6, 0x8, 0x9}, {0xfffffff7, 0x3e2, 0x2, 0x2, 0x9, 0x7}, {0x8000, 0x3, 0x7, 0x6, 0x8000, 0x1}, {0x5, 0x0, 0x3, 0x9, 0x88d, 0x5}, {0x3, 0x9, 0x3ff, 0x7, 0x88, 0x6}, {0x4, 0x5, 0xca23, 0xb, 0x0, 0xf0}, {0x5376, 0x284, 0x4, 0x6, 0x7, 0x55}, {0x7, 0x7fff, 0x4, 0x7, 0x9, 0x10}, {0x8, 0x8, 0x7, 0x50d, 0x8, 0x4}, {0x6, 0x3, 0x7, 0x2, 0x6, 0x7}, {0x3d72cc1a, 0x9, 0x2, 0x2, 0x1, 0x1000}, {0x64, 0x4, 0x80, 0x6, 0xd165, 0x1a905f03}, {0x2, 0x100, 0x2, 0x0, 0x55, 0x7414}, {0x400, 0xb9, 0x4, 0x4, 0x7, 0x10001}, {0x8, 0x3, 0x5, 0x846, 0xbdf, 0x52}, {0x200, 0xff, 0x7, 0x10000, 0x10001, 0x40}, {0x1, 0x5, 0x101, 0x7, 0x0, 0x6}, {0x8, 0xff, 0x3, 0xcd2, 0x40, 0x400}, {0x5, 0xffffffda, 0x0, 0x4, 0x6, 0xdc}, {0x1ff, 0x6, 0xdb, 0xbd12, 0x1, 0x4}, {0x8000, 0x5, 0x7, 0x8000, 0xfff, 0xf}, {0xb, 0x2fa, 0x200, 0x2, 0x8}, {0x9, 0x8, 0x400, 0x618, 0x1ff, 0x5}, {0x11, 0x7, 0x7, 0xfffffffe, 0x7fffffff, 0x6}, {0x54, 0x81, 0x6, 0xbd, 0x7fffffff}, {0xffffffa5, 0x401, 0x1ff, 0x6, 0x69d, 0x2}, {0x2, 0x80, 0x7, 0x3, 0x1, 0x9}, {0x7fff, 0x1, 0x7, 0x7, 0x1f, 0x5}, {0x5, 0xff8, 0xb, 0x7, 0x3, 0x4}, {0x9, 0x401, 0x5, 0x4, 0x7, 0x8}, {0x5, 0x4, 0x3, 0xffffff00, 0x5, 0x58}, {0x4, 0x2, 0xfff, 0x1, 0x7, 0x3}, {0x9, 0xfffff800, 0xd1, 0x9, 0x3, 0x3}, {0x8fd, 0xfffffff7, 0x2, 0x8001, 0xaf2, 0x9}, {0x7, 0x0, 0x2, 0x6, 0x4, 0x2}, {0x7f, 0xf5, 0x4, 0x7, 0x35, 0x5}, {0xfffffff8, 0x7, 0x76d8, 0x2, 0x8, 0xf472}, {0x40, 0x76, 0x3ff, 0x4, 0x90cc, 0xfffffff8}, {0x9, 0x1, 0xb, 0x5, 0x3, 0x10}, {0x1, 0x6, 0x4, 0x9, 0x4, 0x7}, {0xf03, 0x800, 0x7f, 0x2, 0xffffffff, 0xead9}, {0x8, 0xffff, 0x0, 0x7, 0x37, 0x4}, {0xe83f, 0x9, 0x3, 0x2, 0x7, 0x6}, {0x852, 0xfffffffe, 0x6a1588c8, 0x8, 0x1, 0x1}, {0xfffffff7, 0x0, 0x800, 0x8, 0x10, 0x6}, {0x8001, 0x3, 0x4, 0x8, 0x3, 0x1}, {0x0, 0x2189cc16, 0x6, 0x616, 0x4, 0xe385}, {0xfffffffc, 0x9, 0x8, 0x7a, 0x8001, 0x1}, {0x2, 0x2, 0x2, 0xfffffffe, 0x0, 0x2}, {0x8e, 0x7f, 0xd, 0xf84, 0xdd, 0x4}], [{0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x6}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x5}, {0xead31cee2f3e32b}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x4}, {0x3, 0x1}, {0x2}, {}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0x4, 0x0, 0xcc13, 0x9}, 0xf, 0x2, [{0x8, 0x6, 0x200, 0x5, 0x7, 0x5}]}, [{0xffff9678, 0x7f, 0xfffffffb, 0x6, 0x1, 0x515}, {0x4, 0x4, 0x0, 0x93, 0x8001, 0x308}, {0x1, 0x1, 0x4, 0xc0, 0x9, 0x80000000}, {0x5, 0x55a, 0x400, 0xa32, 0x7}, {0x4, 0xe825, 0x8000, 0x800, 0x401, 0x9}, {0x0, 0x8, 0x9, 0x9, 0x4, 0x7fffffff}, {0x80000001, 0x10, 0x6, 0x2, 0x7, 0x2}, {0xb4e, 0x8, 0x10001, 0xe, 0x2, 0x7}, {0x79d, 0xc6b, 0x3, 0x5, 0xa9a, 0x4}, {0x5da, 0x80000001, 0x5, 0xfffff1f3, 0x4, 0x6}, {0x8000, 0x8, 0x722, 0x855, 0x8, 0xa0e}, {0x104, 0x1240000, 0x10, 0x7, 0x7fffffff, 0x7ff}, {0x3, 0x5, 0x0, 0x2, 0x4, 0xef}, {0x67, 0x5, 0x4, 0x7, 0x0, 0x3c99}, {0x7, 0x8, 0x8, 0x3, 0x5, 0xffff1ab7}, {0x7, 0xa4e, 0x7, 0x80, 0x1, 0x8}, {0x80, 0x6d06, 0xa, 0x8c2e, 0x2, 0x5}, {0x981b, 0x7, 0x0, 0x5, 0x9, 0x6}, {0x2, 0x1, 0x8, 0xfffffffd, 0x1, 0x6}, {0x400, 0x10, 0x0, 0x7ff, 0x0, 0x3}, {0x1000, 0x22513060, 0x200, 0x7f, 0xb99, 0x8000}, {0x2, 0x4, 0x1, 0xfffff000, 0x80, 0x1}, {0x6f8, 0x9, 0x2, 0x8, 0xfffffea6, 0xc}, {0xd, 0x6, 0x6e59, 0x2c, 0x4, 0xd639}, {0x2, 0xfff, 0xfb, 0x8, 0x0, 0x6}, {0x1, 0x98dd, 0x7, 0x5, 0x0, 0x10000}, {0x4, 0x4a, 0x5, 0x8, 0x0, 0xe238}, {0xe18, 0x7fc, 0x4, 0x5b, 0x4, 0x8}, {0x9, 0xc9, 0x8, 0x4, 0x5, 0x8}, {0xab7, 0xffffffff, 0xd, 0x4, 0xa22, 0x20000}, {0xa, 0x2, 0x800, 0x728, 0x1, 0xff}, {0x8, 0x7ff, 0x0, 0x0, 0x6, 0x400}, {0x4, 0x4, 0x101, 0x2, 0xfffffc00, 0x7}, {0x2, 0x8, 0x0, 0x7, 0x80, 0xb}, {0x181, 0x109, 0x7f, 0x1, 0x2, 0x200}, {0x74, 0x3ff, 0x4, 0x1d5, 0x7, 0x100}, {0x0, 0x60, 0xca, 0x4c81, 0x3, 0x5}, {0x24b, 0x1ff, 0x1, 0xf, 0x400, 0xf}, {0x9, 0x400, 0x4, 0x105e, 0x7, 0x101}, {0xe, 0x5, 0x10001, 0xb3ca, 0xc43c, 0x80}, {0x2, 0x6, 0xd, 0x10001, 0x4, 0x55}, {0x4, 0xfffffffb, 0x1, 0x9, 0x0, 0x3}, {0x6, 0x6, 0x31cc, 0x7, 0x1, 0x10000}, {0xffffff7f, 0x7fff, 0x4, 0xfffffff9, 0xe86, 0x4}, {0x5, 0x9, 0x17, 0x0, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x1, 0x4, 0xc326000}, {0x7, 0x0, 0xa6, 0xd, 0x5, 0x8}, {0x2, 0x1, 0x5, 0xda, 0x7, 0x7}, {0x6, 0x2, 0x5, 0x69ad8270, 0x6, 0x4}, {0xfffff000, 0xfffe000, 0xf, 0x6, 0xb, 0x401}, {0x8, 0x3, 0xffffffff, 0x46, 0x1, 0x3}, {0x3, 0x6, 0x9, 0x0, 0x8, 0x9}, {0x1, 0x7, 0x6, 0x2, 0xce75, 0x8}, {0x15b, 0xfffffffc, 0x2, 0x5, 0xfffffff7, 0x7}, {0x2, 0x3, 0x5, 0x5, 0x1, 0x66}, {0x2, 0x5, 0x0, 0x81, 0x100, 0x2fb}, {0x6, 0x8, 0x10000, 0x8, 0x9, 0x400}, {0xfffff235, 0xfffffffb, 0x7fffffff, 0x1, 0x1}, {0x0, 0x5, 0x4, 0x7fff, 0x8}, {0x6, 0x4, 0x47fe860f, 0x5, 0x8001, 0x10000}, {0xffff0ef4, 0x38, 0x257, 0x6, 0x9, 0x3ff}, {0x0, 0x1, 0x5, 0x0, 0xfffffc00, 0x8}, {0x4, 0x7, 0x8, 0x2, 0x1, 0x9}, {0x32cd, 0xe, 0x7, 0x4, 0x80000e, 0x1}, {0xb6, 0x10001, 0x200, 0x4, 0x9, 0x3}, {0x5, 0x18e, 0x78b, 0x9, 0x3, 0x4}, {0xfff, 0x2, 0xfffffffc, 0x6fd, 0xdbf, 0x9}, {0x6, 0x40, 0x6, 0x4, 0x4, 0x7}, {0x8, 0x2, 0x1000, 0x0, 0x8e, 0x500}, {0x6, 0x800, 0xb9d, 0xfffffc00, 0x0, 0x80000000}, {0x2, 0x5, 0x1, 0x5d, 0x4, 0x7}, {0x9, 0x7f, 0x5, 0x6, 0x6, 0x6}, {0x1, 0x59, 0xcf3, 0x1ff, 0x5}, {0x5, 0x3, 0x2, 0x5, 0x5, 0xfa4}, {0x10000, 0xfffffffd, 0x8, 0x7, 0x9, 0x7}, {0x3, 0x1, 0xfffffffc, 0x9, 0xfffffffc, 0x30}, {0x48d7ed68, 0x3fc00000, 0x7, 0x8, 0x4, 0x200}, {0x6, 0x9, 0x24b5d26a, 0x2, 0x4, 0x5}, {0x8964, 0xe, 0xffff, 0x3, 0x10000, 0x3}, {0x6, 0x7f, 0x5c, 0xb, 0x8, 0x3}, {0x9, 0x434370d6, 0x9, 0x40, 0xe, 0x7}, {0xd4d2, 0xbe26, 0x80000001, 0x7, 0x6, 0x1}, {0xc, 0xc5c, 0x5, 0x1, 0xfffffffe, 0x7fff}, {0x8, 0x5ede0841, 0x7f, 0x1a, 0x8, 0x8}, {0x1, 0xfffffff8, 0x8001, 0x7e500000, 0x6, 0x3}, {0x7, 0x2, 0x7, 0x9, 0x3, 0xfe}, {0x5, 0xf31, 0xfffffff7, 0x100, 0x7f, 0x1}, {0x81, 0x6, 0x7, 0x401, 0x8, 0x2}, {0xfffffffb, 0x77e, 0x2, 0x8, 0x7, 0xfffffd87}, {0xfff, 0x64e8, 0x54940303, 0x2, 0x0, 0x7}, {0x0, 0xffffff96, 0x2, 0xf, 0xc, 0xfdf}, {0x9, 0x4, 0x9, 0xc1a9, 0x4, 0xbc}, {0x7e, 0xb, 0x7, 0x0, 0x7, 0x11}, {0x4, 0x9, 0x0, 0x3, 0x5, 0xe43d}, {0x1, 0x1, 0x7, 0x92, 0x4, 0x9}, {0x5, 0x6, 0x0, 0xfffffbff, 0x6, 0x117}, {0x8001, 0x1, 0x776, 0x5eab3968, 0xfffffffd, 0x7}, {0x6, 0x7ff, 0x7, 0xc37, 0x9, 0x90}, {0x7ff, 0x1ff, 0x94c, 0x1, 0x8, 0x3}, {0x28, 0xfffffffa, 0x6, 0xecb6fe2, 0x80000000}, {0x1, 0x1, 0x5, 0x80000000, 0x0, 0x80000001}, {0x252, 0xc, 0x6, 0x38, 0xb9, 0x7}, {0x1ff, 0x3, 0xffffffff, 0x8, 0x3, 0x60}, {0x9, 0x444d, 0x9, 0x5, 0x8e, 0x6}, {0xfffffff8, 0x2000, 0x8, 0x7, 0x3, 0x2}, {0x1ff, 0xfffffffc, 0x6, 0x9, 0x8, 0x4}, {0x4, 0x6, 0x1, 0x20000000, 0x1, 0x9}, {0x4, 0x0, 0x85, 0xd26, 0x0, 0x7ff}, {0x3, 0x7, 0xf010, 0x9, 0x1}, {0x4, 0x35, 0x0, 0x4, 0x4}, {0x7, 0x987, 0x8, 0xfffffffa, 0x4, 0x1b2}, {0x1, 0x6, 0x8, 0x377ed041, 0x6, 0xfff}, {0xd0, 0x6, 0x1, 0x7f, 0x0, 0x7}, {0x0, 0x7, 0x7, 0xe19, 0x7, 0x4}, {0x21f4, 0x7, 0x463, 0x4, 0x7868}, {0x6, 0x8, 0x9, 0x6133, 0x0, 0x2}, {0x10000, 0x7, 0x1, 0x980, 0x9}, {0x49e4, 0x4, 0xb, 0x6, 0x3, 0x80}, {0x4, 0x7, 0x8, 0x6, 0xfffffff7, 0xe}, {0x9, 0x200, 0x6, 0x6, 0x8a23, 0x5}, {0x80000000, 0xffffffff, 0xb, 0x80000000, 0x3, 0x5}, {0x7, 0x4, 0x9, 0x0, 0x2, 0x7}, {0x18a, 0x8, 0x0, 0x8, 0x400, 0x3ff}, {0x3, 0xfffffffa, 0x7, 0x7, 0x3, 0x85}, {0x7, 0xf, 0x6bf82efd, 0x1000, 0xfffffffa, 0x4}, {0x2, 0x7ff, 0x9, 0x9, 0x10001, 0x3}, {0x87, 0x1, 0x3, 0x5, 0x8a78}, {0x6, 0x7, 0x9ae, 0x0, 0x27e1}], [{0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x3}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x57234e57aced91ee, 0x1}, {0x6, 0x1}, {0x5, 0x1}], 0x1}}]}, {0xe9, 0x6, "a7fb354f272cd58027d7d7d5fb8d291425a7f33d7c53715e4f4cc58179839af315161b02199f47ecb60e47af85730ccf29bafbb5e60f231ddd2535e98371e167772d2ef38861d32b01012dd0c2d777de3353aa30450079a268356abdc9300a88475d51e7617a84fd37d7b5cbd18cb17df686c7f3e8be4e48159ace7546c06419e345ad1f8a5afd5ae572362e358139c7064ac6fcd18ab0253a7f5a4b8cbd48522c43b06b509fe11a2432c940135f9595f20b0f07d91f74448e570c7683340742dc84a0bc34a355baa586201fe082f8dd651a4c8356a31d4a8e02b066d0ea42988d4484aca2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1eb4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003001d766cbd1bf7458f7880a1fd6c368c62"], 0x34}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f130c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b980680b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3ba7a79b7c3d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f1de385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf24285bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f92186086e29c61137abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f0a101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1ffe30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72aff3bc19faa5401120000793ac48c1b539c75ab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0e900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085b11345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330447d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce21071a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a800336342173862ea26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9ef10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77a1b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f000000000000000000000000000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883d862a3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5e000000000000000000000000000000000af4e479c04b448b0e73388f0e6fe5ca37dc33c10f8b8dd0bb298f571a94fdc799cc173408b2555f6298ee02348261ec43e9421f8f23ec48c32eb8be9919fb40dd20f6714559596403f81cce0de947baf3ec72d16a1fa955474c246e2f16e28d46edfe7a83ae193b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 23.293890309s ago: executing program 1 (id=1485): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9111a040018740100067401000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x40030000000000}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601000000000000000000ff00000000000000686173683a6e6574000000000900020073797a3200000000140007800800080000000000080006400000000005"], 0x5c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000080)=""/13, &(0x7f00000000c0)=0xd) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'veth0_to_team\x00', {}, 0xd}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n', @ANYRES8=r6], 0x4c}}, 0x0) 23.160645491s ago: executing program 4 (id=1486): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x120, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f7700050000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r2}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22.83110797s ago: executing program 3 (id=1487): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a800008100000086dd600000000018000000000000000000000000000000000000fc0000000000000100000000000005020000c204"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b'], 0x8) socket$igmp6(0xa, 0x3, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9801000018000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000200100000000000000000000000000010000000000000000f600000000000000000000000000000000000000000000000000000000168d24cf4e95da0e0000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000008001e000000005098001400736861332d3232342d6365000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060020000000000002abc5a32752d70f92d657b3c4cb9b65494aa4106115393ecdcaef5ae8e48b161e43109c3604ca97651633a5b6a6cdacda0ce9c532835d0eae09c56a07ff466e7cbd849d7b58930a06aa0047c8a5cddd2a593"], 0x198}}, 0x890) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040), &(0x7f0000000240)=0x4) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$cgroup_devices(r0, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)={'#! ', '', [{0x20, 'memory.events\x00'}], 0xa, "fad41443638904bc5c5faffcd479bdeee0ec"}, 0x25) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000521a01000000000000000000020002000600030027000000"], 0x1c}}, 0x0) 22.718281614s ago: executing program 3 (id=1488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0xc084) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x10, 0x8, 0x1, 0xfff, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x68, 0x0, 0x7, 0x38, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp={0x44, 0x14, 0xb0, 0x0, 0x5, [0x6, 0x5, 0xb, 0x80]}, @ra={0x94, 0x4}]}}}}}) 22.646958083s ago: executing program 1 (id=1489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x25, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff00000000000ec00058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000000010000000000", 0x58}], 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x280) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x0, [0x8000, 0x5, 0xb, 0x5, 0x10000]}, &(0x7f0000000140)=0x54) sendto$packet(r3, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r10, 0x105, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}}, 0x0) pwritev(r8, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 22.591231336s ago: executing program 3 (id=1490): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000b40)={r3}, &(0x7f0000002a40)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001380)={r3, 0x6, 0x5, 0x1, 0x4, 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0xe, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018100000d8b4cb6a1c8d27feafad9d58b5452a3dfcc086c5a4a300d12fb3b8000000", @ANYRES32=r4, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r4, &(0x7f0000000280)="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", &(0x7f0000001280)=""/179}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0xc54, 0x25, 0x8, 0x2, 0x2}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r5, 0xe, 0x6}, &(0x7f0000000240)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 22.501186872s ago: executing program 3 (id=1491): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 22.129144859s ago: executing program 1 (id=1492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x4000000000002fe, 0x0, 0x0) (fail_nth: 57) 22.125720087s ago: executing program 4 (id=1493): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x1e}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYBLOB], 0x1c}}, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x0) socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) 21.728776832s ago: executing program 1 (id=1494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x58}}, 0x0) 19.903089636s ago: executing program 3 (id=1495): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)='s', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="06987728e729ecb494924da9913d596cb581d832ab19937b137f164cc9d8f2eb0c2fade94b8aefad67a53c4c9156a4832a4e0e90e3e1e9dc0f2acc20598fd58f57a34db4b44479e52edbd8c946a0f25d9fa32717aafdad752136eba890ac1830cc7c6e57ceb18a738f3dcc19c2559e6c2a19dbdc2ba64e56c3fa5bf2bba41f496fc4c9995966aee50ac5379065c40773628b174417c5b56c8cc39a928cd97ce7f042b8255136c4d641514343743aae1e3a8df492e31d00"/197, 0xc5}, {&(0x7f00000003c0)="27ff76aa439bc330a3f8e05741476e5335cbf3ce9a9d774d3cb3fa55f587379aa533de6aa2730db9f771a8658c3a1eb1e4348114b56bca1c269a66b53c2ff2108ca7bc254ed65fc6137e6ef065eb945aac271c84d230e424e9dc3407f46f9b002206cdb0808b1fb840321126fbd3bbaeba507ac6a034bc63f22bdf9a4dad7ac32ecc876c24273ab793157848b10ef6405a9735e3a45aa240eb919fe7c837b8b36e4e592f2d911cc47d19ff74d6e1770c8fa0c3e38533880052833276231837a2bea0d774fccc93d84b14e6875429bb8a4fa31106ad9cdd09eff787050b82d2c92ab21cc811fbb8420a1c66adbf1e1ba26523ee364f02", 0xf6}], 0x2}}], 0x1, 0x200000000000000) 19.842789802s ago: executing program 1 (id=1496): r0 = socket$inet6(0xa, 0x2, 0x3a) unshare(0x24020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @local}}, 0x1e) sendmmsg$inet6(r0, &(0x7f0000000800), 0x0, 0x0) 19.781604785s ago: executing program 4 (id=1497): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1f, &(0x7f0000000040)=0x1, 0x4) sendfile(r2, r3, 0x0, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x9c) 0s ago: executing program 2 (id=825): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901008102000000000003000000000800040001000000", 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000280)={0x80000000}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffff0000080000000800028004000100180001801400020073797a5f74756e000000000000000000"], 0x34}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="030e0000000000000000010000080056af5c514742a91a87860207852de7b5f098b490d5ef41bf03251b07cb47ffdb0a23b8c33e5cf67a97c0c59cf6fb2c10a34acd521f3e3eb0ee82b95a2d4cce18b37cb8973756ce54c5c716176e4a5aae87ae3e7a93bc1e5b209227701bd03923e8057e165b3ca2dfa5942d81cdf0d3c5c9ee64b147b1170bf24aeeb05662274ebc4d6e"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00022dbd70f9fadbdf2512000000080009a442844b499e2fff2d22db4e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001000330100000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000009a2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000004c0012007266633435343328726663343130362d67636d2d6165736e6929000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff700000000001c0016"], 0x158}}, 0x0) close(r1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0x12) kernel console output (not intermixed with test programs): 15][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 282.502447][ T8684] bridge0: port 1(gretap0) entered blocking state [ 282.525599][ T8684] bridge0: port 1(gretap0) entered disabled state [ 282.547480][ T8684] gretap0: entered allmulticast mode [ 282.564555][ T8684] gretap0: entered promiscuous mode [ 282.606676][ T8684] bridge0: port 1(gretap0) entered blocking state [ 282.613334][ T8684] bridge0: port 1(gretap0) entered forwarding state [ 282.683792][ T8688] gretap0: left allmulticast mode [ 282.690189][ T8692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.710623][ T8688] gretap0: left promiscuous mode [ 282.726831][ T8688] bridge0: port 1(gretap0) entered disabled state [ 282.743535][ T8692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.098556][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.422667][ T8586] veth0_vlan: entered promiscuous mode [ 283.491183][ T8586] veth1_vlan: entered promiscuous mode [ 283.628348][ T8586] veth0_macvtap: entered promiscuous mode [ 283.672888][ T8711] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 283.704636][ T8586] veth1_macvtap: entered promiscuous mode [ 283.778302][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.805146][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.826577][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.851269][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.876209][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.896239][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.916428][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.942924][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.972914][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.189459][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.220721][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.246327][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.290909][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.313794][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.342418][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.350551][ T8725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.370786][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.398587][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.406309][ T8725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.438042][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.688179][ T8734] netlink: 'syz.4.1000': attribute type 11 has an invalid length. [ 284.702247][ T8734] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.1000'. [ 284.851358][ T5315] IPVS: starting estimator thread 0... [ 284.913876][ T8586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.956240][ T8586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.965052][ T8586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.966216][ T8740] IPVS: using max 17 ests per chain, 40800 per kthread [ 284.981866][ T8586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.172574][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.183400][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.218115][ T8748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1006'. [ 285.304612][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.327464][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.327577][ T8748] ip6t_rpfilter: unknown options [ 285.747741][ T8745] netlink: 'syz.3.1005': attribute type 4 has an invalid length. [ 285.837819][ T8759] netlink: 105108 bytes leftover after parsing attributes in process `syz.1.1010'. [ 285.882163][ T8759] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 285.908672][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1010'. [ 286.066196][ T8761] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1010'. [ 286.322722][ T8774] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1010'. [ 286.461692][ T8784] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1018'. [ 286.537837][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1019'. [ 286.610374][ T8786] ip6t_rpfilter: unknown options [ 286.834326][ T8797] FAULT_INJECTION: forcing a failure. [ 286.834326][ T8797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.884481][ T8797] CPU: 0 UID: 0 PID: 8797 Comm: syz.4.1023 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 286.895580][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 286.905691][ T8797] Call Trace: [ 286.909011][ T8797] [ 286.911989][ T8797] dump_stack_lvl+0x241/0x360 [ 286.916815][ T8797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.922156][ T8797] ? __pfx__printk+0x10/0x10 [ 286.926801][ T8797] ? __pfx_lock_release+0x10/0x10 [ 286.931918][ T8797] should_fail_ex+0x3b0/0x4e0 [ 286.936778][ T8797] _copy_from_iter+0x1f6/0x1960 [ 286.941693][ T8797] ? __virt_addr_valid+0x183/0x530 [ 286.946859][ T8797] ? __pfx_lock_release+0x10/0x10 [ 286.952553][ T8797] ? __alloc_skb+0x28f/0x440 [ 286.957342][ T8797] ? __pfx__copy_from_iter+0x10/0x10 [ 286.962998][ T8797] ? __virt_addr_valid+0x183/0x530 [ 286.968298][ T8797] ? __virt_addr_valid+0x183/0x530 [ 286.973593][ T8797] ? __virt_addr_valid+0x45f/0x530 [ 286.978849][ T8797] ? __check_object_size+0x49c/0x900 [ 286.984242][ T8797] netlink_sendmsg+0x73d/0xcb0 [ 286.989410][ T8797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.994733][ T8797] ? __import_iovec+0x536/0x820 [ 286.999617][ T8797] ? aa_sock_msg_perm+0x91/0x160 [ 287.004638][ T8797] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 287.010389][ T8797] ? security_socket_sendmsg+0x87/0xb0 [ 287.015901][ T8797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.021249][ T8797] __sock_sendmsg+0x221/0x270 [ 287.025959][ T8797] ____sys_sendmsg+0x525/0x7d0 [ 287.030859][ T8797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.036260][ T8797] __sys_sendmsg+0x2b0/0x3a0 [ 287.040864][ T8797] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.046215][ T8797] ? vfs_write+0x7c4/0xc90 [ 287.050700][ T8797] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.057061][ T8797] ? do_syscall_64+0x100/0x230 [ 287.061863][ T8797] ? do_syscall_64+0xb6/0x230 [ 287.066584][ T8797] do_syscall_64+0xf3/0x230 [ 287.071208][ T8797] ? clear_bhb_loop+0x35/0x90 [ 287.075932][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.081864][ T8797] RIP: 0033:0x7f4a75d7def9 [ 287.086467][ T8797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.106088][ T8797] RSP: 002b:00007f4a76c5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.114539][ T8797] RAX: ffffffffffffffda RBX: 00007f4a75f35f80 RCX: 00007f4a75d7def9 [ 287.122527][ T8797] RDX: 0000000000040000 RSI: 0000000020000280 RDI: 0000000000000004 [ 287.131314][ T8797] RBP: 00007f4a76c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 287.139594][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.148075][ T8797] R13: 0000000000000000 R14: 00007f4a75f35f80 R15: 00007ffefcda5708 [ 287.156806][ T8797] [ 287.199195][ T2996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.778546][ T2996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.871464][ T2996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.941175][ T2996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.134603][ T2996] bridge_slave_1: left allmulticast mode [ 288.158663][ T2996] bridge_slave_1: left promiscuous mode [ 288.186237][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.194377][ T8815] Bluetooth: MGMT ver 1.23 [ 288.212650][ T8815] Bluetooth: hci3: unsupported parameter 65535 [ 288.236227][ T8815] Bluetooth: hci3: unsupported parameter 65535 [ 288.277142][ T2996] bridge_slave_0: left allmulticast mode [ 288.286691][ T8811] can: request_module (can-proto-4) failed. [ 288.306113][ T2996] bridge_slave_0: left promiscuous mode [ 288.335973][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.352129][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 288.503417][ T8821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'. [ 288.663384][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.682268][ T8830] ip6t_rpfilter: unknown options [ 288.689967][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.698702][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.721162][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.730338][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.739668][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.095376][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.110262][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.125228][ T2996] bond0 (unregistering): Released all slaves [ 289.142914][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.397629][ T8838] FAULT_INJECTION: forcing a failure. [ 289.397629][ T8838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.457315][ T8838] CPU: 1 UID: 0 PID: 8838 Comm: syz.0.1039 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 289.468071][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 289.478165][ T8838] Call Trace: [ 289.481823][ T8838] [ 289.484816][ T8838] dump_stack_lvl+0x241/0x360 [ 289.489533][ T8838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.494813][ T8838] ? __pfx__printk+0x10/0x10 [ 289.499576][ T8838] ? snprintf+0xda/0x120 [ 289.503955][ T8838] should_fail_ex+0x3b0/0x4e0 [ 289.508695][ T8838] _copy_to_user+0x2f/0xb0 [ 289.513130][ T8838] simple_read_from_buffer+0xca/0x150 [ 289.518558][ T8838] proc_fail_nth_read+0x1ec/0x260 [ 289.523603][ T8838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.529339][ T8838] ? rw_verify_area+0x520/0x6b0 [ 289.534828][ T8838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.540481][ T8838] vfs_read+0x204/0xbc0 [ 289.544819][ T8838] ? __pfx_lock_release+0x10/0x10 [ 289.549865][ T8838] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 289.555531][ T8838] ? __pfx_vfs_read+0x10/0x10 [ 289.560483][ T8838] ? __fget_files+0x29/0x470 [ 289.565088][ T8838] ? __fget_files+0x3f6/0x470 [ 289.569799][ T8838] ksys_read+0x1a0/0x2c0 [ 289.574145][ T8838] ? __pfx_ksys_read+0x10/0x10 [ 289.578924][ T8838] ? do_syscall_64+0x100/0x230 [ 289.583790][ T8838] ? do_syscall_64+0xb6/0x230 [ 289.588691][ T8838] do_syscall_64+0xf3/0x230 [ 289.593324][ T8838] ? clear_bhb_loop+0x35/0x90 [ 289.598021][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.603926][ T8838] RIP: 0033:0x7f551a37c93c [ 289.608441][ T8838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 289.628169][ T8838] RSP: 002b:00007f551b1b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.636650][ T8838] RAX: ffffffffffffffda RBX: 00007f551a535f80 RCX: 00007f551a37c93c [ 289.644695][ T8838] RDX: 000000000000000f RSI: 00007f551b1b00a0 RDI: 0000000000000007 [ 289.652820][ T8838] RBP: 00007f551b1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 289.661072][ T8838] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 289.669147][ T8838] R13: 0000000000000000 R14: 00007f551a535f80 R15: 00007ffd1c405158 [ 289.677164][ T8838] [ 289.728140][ T8845] netlink: 'syz.3.1040': attribute type 11 has an invalid length. [ 290.129888][ T8855] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1044'. [ 290.332041][ T8859] batadv_slave_1: entered promiscuous mode [ 290.399054][ T8865] netlink: 'syz.1.1046': attribute type 4 has an invalid length. [ 290.421736][ T2996] hsr_slave_0: left promiscuous mode [ 290.428734][ T2996] hsr_slave_1: left promiscuous mode [ 290.435500][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.451362][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.461168][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.468809][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.519026][ T2996] veth1_macvtap: left promiscuous mode [ 290.524622][ T2996] veth0_macvtap: left promiscuous mode [ 290.540909][ T2996] veth1_vlan: left promiscuous mode [ 290.560644][ T2996] veth0_vlan: left promiscuous mode [ 290.565779][ T8868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1046'. [ 290.700402][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 290.836213][ T5240] Bluetooth: hci4: command tx timeout [ 291.473683][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 291.540171][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 292.072676][ T8859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1044'. [ 292.089736][ T8863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1044'. [ 292.117376][ T8871] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 292.136076][ T8854] batadv_slave_1: left promiscuous mode [ 292.152588][ T8871] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 292.238590][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 292.439032][ T8894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.541291][ T8894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.662630][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.681983][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.692641][ T8828] bridge_slave_0: entered allmulticast mode [ 292.711285][ T8828] bridge_slave_0: entered promiscuous mode [ 292.726188][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.733748][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.747305][ T8828] bridge_slave_1: entered allmulticast mode [ 292.758176][ T8828] bridge_slave_1: entered promiscuous mode [ 292.807505][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.831265][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.896136][ T5240] Bluetooth: hci4: command tx timeout [ 292.921804][ T8828] team0: Port device team_slave_0 added [ 292.930753][ T8907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.947751][ T8828] team0: Port device team_slave_1 added [ 292.953874][ T8909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1059'. [ 293.045422][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.066106][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.116389][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.139108][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.162949][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.226011][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.279343][ T8914] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 293.401320][ T8918] bridge0: port 3(bond0) entered blocking state [ 293.414332][ T8918] bridge0: port 3(bond0) entered disabled state [ 293.433853][ T8918] bond0: entered allmulticast mode [ 293.444532][ T8918] bond_slave_0: entered allmulticast mode [ 293.452006][ T8918] bond_slave_1: entered allmulticast mode [ 293.467652][ T8918] bond0: entered promiscuous mode [ 293.474433][ T8918] bond_slave_0: entered promiscuous mode [ 293.483624][ T8918] bond_slave_1: entered promiscuous mode [ 293.494173][ T8918] bridge0: port 3(bond0) entered blocking state [ 293.502008][ T8918] bridge0: port 3(bond0) entered forwarding state [ 293.532775][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 293.573925][ T8828] hsr_slave_0: entered promiscuous mode [ 293.582892][ T8828] hsr_slave_1: entered promiscuous mode [ 293.602739][ T8924] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 293.634635][ T8924] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 293.838976][ T8928] netlink: 'syz.0.1065': attribute type 5 has an invalid length. [ 293.847370][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 294.410595][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1072'. [ 294.548603][ T8949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.616750][ T8949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.705283][ T8828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.731470][ T8828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.755231][ T8828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.821785][ T8828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.978512][ T5240] Bluetooth: hci4: command tx timeout [ 295.002534][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 295.088250][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.124829][ T8828] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.143095][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.150535][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.183335][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.190638][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.831717][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.967730][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1093'. [ 295.988054][ T8828] veth0_vlan: entered promiscuous mode [ 296.023223][ T8828] veth1_vlan: entered promiscuous mode [ 296.065872][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 296.090549][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.128840][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.164966][ T8828] veth0_macvtap: entered promiscuous mode [ 296.194730][ T8828] veth1_macvtap: entered promiscuous mode [ 296.232973][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 296.240289][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.271119][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.289099][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.302367][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.312779][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.323593][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.333700][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.349420][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.363979][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.403087][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.416354][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.427860][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.439677][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.449788][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.460627][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.471126][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.483039][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.495152][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.510477][ T8828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.520244][ T8828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.530074][ T8828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.539048][ T8828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.677154][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.693593][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.728168][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.744334][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.986564][ T9027] netlink: 'syz.1.1103': attribute type 21 has an invalid length. [ 297.000291][ T9027] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1103'. [ 297.028976][ T9027] netlink: 'syz.1.1103': attribute type 4 has an invalid length. [ 297.042511][ T9027] netlink: 'syz.1.1103': attribute type 3 has an invalid length. [ 297.088604][ T9027] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1103'. [ 297.209383][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 297.437516][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 297.451174][ T9048] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 297.487576][ T9048] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 297.530918][ T9055] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1114'. [ 297.552508][ T9051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.583354][ T9051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.615143][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 297.863696][ T9065] bridge0: port 1(bond0) entered blocking state [ 297.886151][ T9065] bridge0: port 1(bond0) entered disabled state [ 297.892648][ T9065] bond0: entered allmulticast mode [ 297.898059][ T9065] bond_slave_0: entered allmulticast mode [ 297.903835][ T9065] bond_slave_1: entered allmulticast mode [ 297.914443][ T9065] bond0: entered promiscuous mode [ 297.919635][ T9065] bond_slave_0: entered promiscuous mode [ 297.925577][ T9065] bond_slave_1: entered promiscuous mode [ 297.934114][ T9065] bridge0: port 1(bond0) entered blocking state [ 297.940610][ T9065] bridge0: port 1(bond0) entered forwarding state [ 298.043569][ T9067] team0: Port device team_slave_0 removed [ 298.224939][ T9071] netlink: 'syz.0.1119': attribute type 11 has an invalid length. [ 298.606291][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 298.617255][ T9086] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 298.636439][ T9086] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 298.718015][ T9095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'. [ 298.751852][ T9095] ip6t_rpfilter: unknown options [ 298.805456][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.836169][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.887877][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 298.917902][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.925110][ T9100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.659481][ T2996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.976563][ T9130] __nla_validate_parse: 1 callbacks suppressed [ 300.976587][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1141'. [ 301.019093][ T9129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.092588][ T9129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.117320][ T2996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.152556][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.154195][ T9130] ip6t_rpfilter: unknown options [ 301.171025][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.196175][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.208473][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.217955][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 301.227687][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.335505][ T2996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.475642][ T2996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.802381][ T2996] bridge_slave_1: left allmulticast mode [ 301.835540][ T2996] bridge_slave_1: left promiscuous mode [ 301.850184][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.933478][ T2996] bridge_slave_0: left allmulticast mode [ 301.953658][ T2996] bridge_slave_0: left promiscuous mode [ 301.962813][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.254145][ T29] audit: type=1107 audit(1726302106.688:5): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 302.436684][ T9177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1154'. [ 302.611731][ T9180] ip6t_rpfilter: unknown options [ 302.808849][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.823113][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.838332][ T2996] bond0 (unregistering): Released all slaves [ 302.852903][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 302.970399][ T9140] chnl_net:caif_netlink_parms(): no params data found [ 303.180565][ T9193] ip6gretap1: entered promiscuous mode [ 303.189062][ T9193] ip6gretap1: entered allmulticast mode [ 303.231135][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.300584][ T55] Bluetooth: hci4: command tx timeout [ 303.310012][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.523510][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.549740][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.563222][ T9140] bridge_slave_0: entered allmulticast mode [ 303.583410][ T9140] bridge_slave_0: entered promiscuous mode [ 303.612011][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.623887][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.633434][ T9140] bridge_slave_1: entered allmulticast mode [ 303.641425][ T9140] bridge_slave_1: entered promiscuous mode [ 303.847671][ T2996] hsr_slave_0: left promiscuous mode [ 303.854370][ T2996] hsr_slave_1: left promiscuous mode [ 303.868893][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.886327][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.902274][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.910259][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.970010][ T2996] veth1_macvtap: left promiscuous mode [ 303.981438][ T2996] veth0_macvtap: left promiscuous mode [ 303.995288][ T2996] veth1_vlan: left promiscuous mode [ 304.006215][ T2996] veth0_vlan: left promiscuous mode [ 304.412394][ T9232] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1167'. [ 304.806795][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 304.860616][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 305.376128][ T55] Bluetooth: hci4: command tx timeout [ 305.394533][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.410590][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.422256][ T9230] netlink: 'syz.3.1168': attribute type 5 has an invalid length. [ 305.430360][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 305.439441][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 305.641303][ T9140] team0: Port device team_slave_0 added [ 305.672548][ T9140] team0: Port device team_slave_1 added [ 305.820470][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.845727][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.880801][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.892962][ T9251] bridge0: port 3(bond0) entered blocking state [ 305.904006][ T9251] bridge0: port 3(bond0) entered disabled state [ 305.942267][ T9251] bond0: entered allmulticast mode [ 305.947998][ T9251] bond_slave_0: entered allmulticast mode [ 305.954469][ T9251] bond_slave_1: entered allmulticast mode [ 305.974353][ T9251] bond0: entered promiscuous mode [ 305.990159][ T9251] bond_slave_0: entered promiscuous mode [ 305.996443][ T9251] bond_slave_1: entered promiscuous mode [ 306.005587][ T9251] bridge0: port 3(bond0) entered blocking state [ 306.012068][ T9251] bridge0: port 3(bond0) entered forwarding state [ 306.041302][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.056064][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.106665][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.175083][ T9257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.209981][ T9257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.269476][ T9140] hsr_slave_0: entered promiscuous mode [ 306.289040][ T9140] hsr_slave_1: entered promiscuous mode [ 306.343345][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1178'. [ 306.514833][ T9267] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1180'. [ 306.673525][ T9273] netlink: 'syz.3.1182': attribute type 5 has an invalid length. [ 306.683493][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'. [ 307.042251][ T9282] x_tables: duplicate underflow at hook 1 [ 307.186965][ T9140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.209940][ T9140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.235782][ T9140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.270281][ T9140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.453796][ T9301] netlink: 'syz.1.1194': attribute type 5 has an invalid length. [ 307.461842][ T55] Bluetooth: hci4: command tx timeout [ 307.474001][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 307.564322][ T9302] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1192'. [ 307.581245][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.622339][ T9140] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.664620][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.672121][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.708010][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.715217][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.752939][ T9308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.787045][ T9308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.054338][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1199'. [ 308.119560][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'. [ 308.148220][ T9324] netlink: 'syz.4.1199': attribute type 15 has an invalid length. [ 308.372018][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.475037][ T9140] veth0_vlan: entered promiscuous mode [ 308.517470][ T9140] veth1_vlan: entered promiscuous mode [ 308.637558][ T9140] veth0_macvtap: entered promiscuous mode [ 308.652658][ T9140] veth1_macvtap: entered promiscuous mode [ 308.707827][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.719715][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.741708][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.762313][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.772483][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.787973][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.798740][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.799311][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 308.809411][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.812311][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.874498][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.911240][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.937311][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.952249][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.962429][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.973566][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.995586][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.028386][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.049215][ T9347] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.1204'. [ 309.053664][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.077430][ T9347] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 309.085432][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'. [ 309.114858][ T9349] netlink: 'syz.1.1206': attribute type 5 has an invalid length. [ 309.135184][ T9140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.163410][ T9140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.193624][ T9140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.213143][ T9140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.537350][ T55] Bluetooth: hci4: command tx timeout [ 309.692565][ T9365] FAULT_INJECTION: forcing a failure. [ 309.692565][ T9365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.719093][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.728770][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.739471][ T9365] CPU: 1 UID: 0 PID: 9365 Comm: syz.1.1211 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 309.750291][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 309.760385][ T9365] Call Trace: [ 309.763697][ T9365] [ 309.766659][ T9365] dump_stack_lvl+0x241/0x360 [ 309.771469][ T9365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.776708][ T9365] ? __pfx__printk+0x10/0x10 [ 309.781400][ T9365] ? __pfx_lock_release+0x10/0x10 [ 309.786553][ T9365] should_fail_ex+0x3b0/0x4e0 [ 309.791299][ T9365] _copy_from_user+0x2f/0xe0 [ 309.795930][ T9365] copy_msghdr_from_user+0xae/0x680 [ 309.801181][ T9365] ? __pfx___might_resched+0x10/0x10 [ 309.806520][ T9365] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 309.812379][ T9365] ? __might_fault+0xaa/0x120 [ 309.817120][ T9365] do_recvmmsg+0x40f/0xae0 [ 309.821581][ T9365] ? __pfx_lock_release+0x10/0x10 [ 309.826731][ T9365] ? __pfx_do_recvmmsg+0x10/0x10 [ 309.831817][ T9365] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 309.837798][ T9365] ? ksys_write+0x23e/0x2c0 [ 309.842345][ T9365] ? __pfx_lock_release+0x10/0x10 [ 309.847427][ T9365] ? vfs_write+0x7c4/0xc90 [ 309.851889][ T9365] ? __mutex_unlock_slowpath+0x21d/0x750 [ 309.852782][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.857555][ T9365] ? __fget_files+0x3f6/0x470 [ 309.857607][ T9365] __x64_sys_recvmmsg+0x199/0x250 [ 309.857639][ T9365] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 309.868599][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.870123][ T9365] ? do_syscall_64+0x100/0x230 [ 309.870168][ T9365] ? do_syscall_64+0xb6/0x230 [ 309.897620][ T9365] do_syscall_64+0xf3/0x230 [ 309.902184][ T9365] ? clear_bhb_loop+0x35/0x90 [ 309.906916][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.912860][ T9365] RIP: 0033:0x7f4fb877def9 [ 309.917303][ T9365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.937416][ T9365] RSP: 002b:00007f4fb95dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 309.945876][ T9365] RAX: ffffffffffffffda RBX: 00007f4fb8935f80 RCX: 00007f4fb877def9 [ 309.953877][ T9365] RDX: 03ffffffffffff67 RSI: 0000000020002440 RDI: 0000000000000005 [ 309.961890][ T9365] RBP: 00007f4fb95dd090 R08: 0000000000000000 R09: 0000000000000000 [ 309.969921][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.977920][ T9365] R13: 0000000000000000 R14: 00007f4fb8935f80 R15: 00007ffc658b46d8 [ 309.985966][ T9365] [ 310.008605][ T9367] batadv_slave_0: entered promiscuous mode [ 310.029839][ T9366] batadv_slave_0: left promiscuous mode [ 310.297649][ T9378] netlink: 'syz.1.1214': attribute type 15 has an invalid length. [ 310.379446][ T9385] netlink: 'syz.0.1218': attribute type 5 has an invalid length. [ 310.614336][ T9397] Bluetooth: MGMT ver 1.23 [ 311.173644][ T9414] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.280354][ T9416] FAULT_INJECTION: forcing a failure. [ 311.280354][ T9416] name failslab, interval 1, probability 0, space 0, times 0 [ 311.317481][ T9416] CPU: 1 UID: 0 PID: 9416 Comm: syz.0.1228 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 311.328666][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 311.338762][ T9416] Call Trace: [ 311.342158][ T9416] [ 311.345116][ T9416] dump_stack_lvl+0x241/0x360 [ 311.349860][ T9416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.355107][ T9416] ? __pfx__printk+0x10/0x10 [ 311.359749][ T9416] ? __kmalloc_noprof+0xb0/0x400 [ 311.364720][ T9416] ? __pfx___might_resched+0x10/0x10 [ 311.370056][ T9416] should_fail_ex+0x3b0/0x4e0 [ 311.374909][ T9416] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 311.381194][ T9416] should_failslab+0xac/0x100 [ 311.385924][ T9416] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 311.392196][ T9416] __kmalloc_noprof+0xd8/0x400 [ 311.396981][ T9416] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 311.403072][ T9416] genl_rcv_msg+0x802/0xec0 [ 311.407669][ T9416] ? mark_lock+0x9a/0x350 [ 311.412028][ T9416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.417087][ T9416] ? __pfx_lock_acquire+0x10/0x10 [ 311.422127][ T9416] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 311.428214][ T9416] ? __pfx___might_resched+0x10/0x10 [ 311.433523][ T9416] netlink_rcv_skb+0x1e3/0x430 [ 311.438311][ T9416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.443375][ T9416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.448720][ T9416] genl_rcv+0x28/0x40 [ 311.452726][ T9416] netlink_unicast+0x7f6/0x990 [ 311.457536][ T9416] ? __pfx_netlink_unicast+0x10/0x10 [ 311.462870][ T9416] ? __virt_addr_valid+0x183/0x530 [ 311.468018][ T9416] netlink_sendmsg+0x8e4/0xcb0 [ 311.473087][ T9416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.478398][ T9416] ? __import_iovec+0x536/0x820 [ 311.483270][ T9416] ? aa_sock_msg_perm+0x91/0x160 [ 311.488224][ T9416] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 311.493619][ T9416] ? security_socket_sendmsg+0x87/0xb0 [ 311.499105][ T9416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.504429][ T9416] __sock_sendmsg+0x221/0x270 [ 311.509147][ T9416] ____sys_sendmsg+0x525/0x7d0 [ 311.513953][ T9416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.519281][ T9416] __sys_sendmsg+0x2b0/0x3a0 [ 311.523892][ T9416] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.529112][ T9416] ? vfs_write+0x7c4/0xc90 [ 311.533590][ T9416] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.539939][ T9416] ? do_syscall_64+0x100/0x230 [ 311.544724][ T9416] ? do_syscall_64+0xb6/0x230 [ 311.549422][ T9416] do_syscall_64+0xf3/0x230 [ 311.553945][ T9416] ? clear_bhb_loop+0x35/0x90 [ 311.558639][ T9416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.564564][ T9416] RIP: 0033:0x7f551a37def9 [ 311.569003][ T9416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.588627][ T9416] RSP: 002b:00007f551b1b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.597058][ T9416] RAX: ffffffffffffffda RBX: 00007f551a535f80 RCX: 00007f551a37def9 [ 311.605039][ T9416] RDX: 0000000000040000 RSI: 0000000020000280 RDI: 0000000000000004 [ 311.613033][ T9416] RBP: 00007f551b1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 311.621020][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.629016][ T9416] R13: 0000000000000000 R14: 00007f551a535f80 R15: 00007ffd1c405158 [ 311.637036][ T9416] [ 311.751895][ T9423] netlink: 'syz.3.1232': attribute type 6 has an invalid length. [ 311.776408][ T9423] __nla_validate_parse: 9 callbacks suppressed [ 311.776431][ T9423] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1232'. [ 312.113045][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 312.150656][ T9436] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 312.152812][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 312.172200][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1235'. [ 312.205076][ T9442] netlink: 'syz.0.1237': attribute type 15 has an invalid length. [ 312.229594][ T9436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'. [ 312.249553][ T9436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.283288][ T9436] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 312.293384][ T9436] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 312.614198][ T9436] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 312.681003][ T9436] bond1 (unregistering): Released all slaves [ 312.737351][ T9454] netlink: 'syz.4.1243': attribute type 5 has an invalid length. [ 312.745702][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 312.895007][ T2996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.651858][ T2996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.753862][ T2996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.924803][ T2996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.961137][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 314.214998][ T2996] bridge_slave_1: left allmulticast mode [ 314.226067][ T2996] bridge_slave_1: left promiscuous mode [ 314.231986][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.272006][ T2996] bridge_slave_0: left allmulticast mode [ 314.289098][ T2996] bridge_slave_0: left promiscuous mode [ 314.295178][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.390941][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.402557][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.413337][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.416651][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1252'. [ 314.451471][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.461687][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 314.479549][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.565369][ T9489] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1254'. [ 314.975634][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.993735][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.007154][ T2996] bond0 (unregistering): Released all slaves [ 315.024901][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 315.034689][ T9484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.049417][ T9484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.059269][ T9484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.067405][ T9484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.497925][ T9506] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 315.524948][ T9506] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 315.656135][ T2996] hsr_slave_0: left promiscuous mode [ 315.675146][ T2996] hsr_slave_1: left promiscuous mode [ 315.715796][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.723558][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.732969][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.749503][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.782507][ T2996] veth1_macvtap: left promiscuous mode [ 315.788488][ T2996] veth0_macvtap: left promiscuous mode [ 315.794410][ T2996] veth1_vlan: left promiscuous mode [ 315.800345][ T2996] veth0_vlan: left promiscuous mode [ 316.468940][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 316.529481][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 316.576472][ T55] Bluetooth: hci4: command tx timeout [ 317.215828][ T9479] chnl_net:caif_netlink_parms(): no params data found [ 317.389891][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465393][ T9540] __nla_validate_parse: 2 callbacks suppressed [ 317.465419][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1271'. [ 317.602649][ T9544] netlink: 'syz.0.1271': attribute type 15 has an invalid length. [ 317.646150][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.653344][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.678574][ T9479] bridge_slave_0: entered allmulticast mode [ 317.693615][ T9479] bridge_slave_0: entered promiscuous mode [ 317.702298][ T9546] bridge0: port 4(gretap0) entered blocking state [ 317.711914][ T9546] bridge0: port 4(gretap0) entered disabled state [ 317.719450][ T9546] gretap0: entered allmulticast mode [ 317.726714][ T9546] gretap0: entered promiscuous mode [ 317.735649][ T9546] bridge0: port 4(gretap0) entered blocking state [ 317.742300][ T9546] bridge0: port 4(gretap0) entered forwarding state [ 317.751602][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.759062][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.766724][ T9479] bridge_slave_1: entered allmulticast mode [ 317.774122][ T9479] bridge_slave_1: entered promiscuous mode [ 317.801686][ T9552] gretap0: left allmulticast mode [ 317.816024][ T9552] gretap0: left promiscuous mode [ 317.821405][ T9552] bridge0: port 4(gretap0) entered disabled state [ 317.852033][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 317.971078][ T9479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.003622][ T9479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.141408][ T9479] team0: Port device team_slave_0 added [ 318.210318][ T9479] team0: Port device team_slave_1 added [ 318.345819][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.376184][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.435986][ T9479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.483377][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.500780][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.570953][ T9479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.634882][ T9564] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 318.658122][ T55] Bluetooth: hci4: command tx timeout [ 318.691211][ T9567] vlan1: entered promiscuous mode [ 318.845490][ T9564] vlan1 (unregistering): left promiscuous mode [ 318.919300][ T9479] hsr_slave_0: entered promiscuous mode [ 318.942298][ T9479] hsr_slave_1: entered promiscuous mode [ 318.958180][ T9578] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1280'. [ 319.021553][ T29] audit: type=1107 audit(1726302123.458:6): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='véÈicã`eþ˜!«‹xXN ú¼xá³}¾åØ>¬ÿ¡.bA.J]ŒUaÛ®Œïšpòt ®¸dÛ3°]¿Awù•¢CÝD~Z‰ò8Ëøéºî¦‹5' [ 319.168679][ T2967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.267017][ T2967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.404252][ T2967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.433145][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1286'. [ 319.433181][ T9583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1287'. [ 319.478544][ T9582] netlink: 'syz.1.1286': attribute type 15 has an invalid length. [ 319.792356][ T2967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.827176][ T9600] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 319.888811][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.910072][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.922501][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.946947][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.954972][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 319.973023][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.046360][ T2967] bridge_slave_1: left allmulticast mode [ 320.063790][ T2967] bridge_slave_1: left promiscuous mode [ 320.073493][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.098426][ T2967] bridge_slave_0: left allmulticast mode [ 320.113337][ T2967] bridge_slave_0: left promiscuous mode [ 320.120613][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.243781][ T9614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.309218][ T9614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.388822][ T9614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.736269][ T55] Bluetooth: hci4: command tx timeout [ 320.800672][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.823784][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.840420][ T2967] bond0 (unregistering): Released all slaves [ 320.862277][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1291'. [ 321.190202][ T9630] pim6reg: entered allmulticast mode [ 321.210523][ T9479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.227929][ T9479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.252184][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 321.293452][ T9479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.324842][ T9632] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 321.335242][ T9479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.342753][ T9632] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 321.384900][ T9636] pim6reg: left allmulticast mode [ 321.475832][ T2967] hsr_slave_0: left promiscuous mode [ 321.483433][ T2967] hsr_slave_1: left promiscuous mode [ 321.533605][ T2967] veth1_macvtap: left promiscuous mode [ 321.543308][ T2967] veth0_macvtap: left promiscuous mode [ 321.552270][ T2967] veth1_vlan: left promiscuous mode [ 321.561266][ T2967] veth0_vlan: left promiscuous mode [ 321.705211][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 322.018815][ T55] Bluetooth: hci3: command tx timeout [ 322.575250][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 322.640220][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 322.817610][ T55] Bluetooth: hci4: command tx timeout [ 323.255531][ T9601] chnl_net:caif_netlink_parms(): no params data found [ 323.358206][ T9670] bridge0: port 4(syz_tun) entered blocking state [ 323.364909][ T9670] bridge0: port 4(syz_tun) entered disabled state [ 323.380706][ T9670] syz_tun: entered allmulticast mode [ 323.389204][ T9670] syz_tun: entered promiscuous mode [ 323.398922][ T9670] bridge0: port 4(syz_tun) entered blocking state [ 323.405607][ T9670] bridge0: port 4(syz_tun) entered forwarding state [ 323.657586][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.664937][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.672674][ T9601] bridge_slave_0: entered allmulticast mode [ 323.681873][ T9601] bridge_slave_0: entered promiscuous mode [ 323.712428][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.721891][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 323.731274][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.739689][ T9601] bridge_slave_1: entered allmulticast mode [ 323.750139][ T9683] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1310'. [ 323.757848][ T9601] bridge_slave_1: entered promiscuous mode [ 323.843179][ T9601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.924763][ T9601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.053808][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 324.068689][ T9601] team0: Port device team_slave_0 added [ 324.087234][ T9694] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 324.098463][ T55] Bluetooth: hci3: command tx timeout [ 324.115837][ T9694] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 324.124661][ T9601] team0: Port device team_slave_1 added [ 324.137430][ T9479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.202794][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.210466][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.240301][ T9601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.254258][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.262536][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.288750][ T9601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.366997][ T9479] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.404572][ T9601] hsr_slave_0: entered promiscuous mode [ 324.411977][ T9601] hsr_slave_1: entered promiscuous mode [ 324.420095][ T9601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.427983][ T9601] Cannot create hsr debugfs directory [ 324.456108][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.463284][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.557671][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.564890][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.597946][ T9706] netlink: 'syz.1.1317': attribute type 5 has an invalid length. [ 324.606698][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 324.788116][ T9708] netlink: 'syz.1.1318': attribute type 5 has an invalid length. [ 324.801798][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 325.176848][ T9720] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.186482][ T9720] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.195336][ T9720] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.204193][ T9720] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.252479][ T9720] vxlan0: entered promiscuous mode [ 325.265668][ T9720] vxlan0: entered allmulticast mode [ 325.295784][ T9720] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.305876][ T9720] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.315735][ T9720] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.324698][ T9720] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.530579][ T9479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.744787][ T9601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 325.789564][ T9601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 325.827834][ T9601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 325.840030][ T2637] IPVS: starting estimator thread 0... [ 325.876652][ T9601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 325.906359][ T9479] veth0_vlan: entered promiscuous mode [ 325.926339][ T9743] IPVS: using max 15 ests per chain, 36000 per kthread [ 325.944025][ T9479] veth1_vlan: entered promiscuous mode [ 326.094975][ T9479] veth0_macvtap: entered promiscuous mode [ 326.125243][ T9479] veth1_macvtap: entered promiscuous mode [ 326.176422][ T55] Bluetooth: hci3: command tx timeout [ 326.200137][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.212807][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.234640][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.245778][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.270082][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.291260][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.311957][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.331162][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1328'. [ 326.432492][ T9601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.452806][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.473344][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.484761][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 326.495597][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.507292][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.517472][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.528094][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.540487][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.559053][ T9752] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 326.575237][ T9752] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 326.590005][ T9479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.603052][ T9479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.621389][ T9479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.630340][ T9479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.649919][ T9601] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.691334][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.698560][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.755747][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.762980][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.929925][ T9601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.963201][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.994834][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.090205][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.099865][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.516487][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.630401][ T9601] veth0_vlan: entered promiscuous mode [ 327.704459][ T9601] veth1_vlan: entered promiscuous mode [ 327.811485][ T9601] veth0_macvtap: entered promiscuous mode [ 327.835300][ T9601] veth1_macvtap: entered promiscuous mode [ 327.909691][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.929922][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.950716][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.990406][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.014723][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.041856][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.055822][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.066991][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.104646][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.135828][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.161337][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.180534][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.196709][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.213173][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.225320][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.243027][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.255334][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.268924][ T55] Bluetooth: hci3: command tx timeout [ 328.289021][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.319419][ T9601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.329566][ T9601] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.339136][ T9601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.349088][ T9601] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.661611][ T143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.744003][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.766287][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.793316][ T9797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1343'. [ 328.997403][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.014599][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.358689][ T143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.487644][ T143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.549009][ T143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.656978][ T143] bridge_slave_1: left allmulticast mode [ 329.662861][ T143] bridge_slave_1: left promiscuous mode [ 329.669190][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.682467][ T143] bridge_slave_0: left allmulticast mode [ 329.688590][ T143] bridge_slave_0: left promiscuous mode [ 329.694305][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.464619][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.483145][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.493815][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.508728][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.517740][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 330.529858][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.618785][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.636741][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.657789][ T143] bond0 (unregistering): Released all slaves [ 330.727167][ T9812] netlink: 'syz.3.1350': attribute type 5 has an invalid length. [ 330.745744][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 330.810115][ T9811] bridge0: port 4(syz_tun) entered blocking state [ 330.829090][ T9811] bridge0: port 4(syz_tun) entered disabled state [ 330.835806][ T9811] syz_tun: entered allmulticast mode [ 330.858814][ T9811] syz_tun: entered promiscuous mode [ 330.875345][ T9811] bridge0: port 4(syz_tun) entered blocking state [ 330.882065][ T9811] bridge0: port 4(syz_tun) entered forwarding state [ 330.894425][ T9814] netlink: 'syz.4.1351': attribute type 5 has an invalid length. [ 330.910781][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 331.239605][ T9829] Bluetooth: MGMT ver 1.23 [ 331.303172][ T9836] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1357'. [ 331.313550][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1357'. [ 331.338881][ T9834] tc_dump_action: action bad kind [ 331.478308][ T143] hsr_slave_0: left promiscuous mode [ 331.542985][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 331.556753][ T143] hsr_slave_1: left promiscuous mode [ 331.584952][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.617416][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.637877][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.645391][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.671527][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 331.681475][ T143] veth1_macvtap: left promiscuous mode [ 331.687362][ T143] veth0_macvtap: left promiscuous mode [ 331.693147][ T143] veth1_vlan: left promiscuous mode [ 331.701563][ T143] veth0_vlan: left promiscuous mode [ 332.567617][ T143] team0 (unregistering): Port device team_slave_1 removed [ 332.622595][ T143] team0 (unregistering): Port device team_slave_0 removed [ 332.660982][ T55] Bluetooth: hci4: command tx timeout [ 333.119246][ T9845] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 333.124276][ T9853] netlink: 'syz.4.1363': attribute type 5 has an invalid length. [ 333.146695][ T9845] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 333.154250][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 333.188602][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1362'. [ 333.552557][ T9877] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1368'. [ 333.847222][ T9817] chnl_net:caif_netlink_parms(): no params data found [ 333.916927][ T9887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.976562][ T9887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.005142][ T9885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.059778][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.068073][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.075390][ T9817] bridge_slave_0: entered allmulticast mode [ 334.084041][ T9817] bridge_slave_0: entered promiscuous mode [ 334.116407][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.124180][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.142351][ T9817] bridge_slave_1: entered allmulticast mode [ 334.151179][ T9817] bridge_slave_1: entered promiscuous mode [ 334.209012][ T9817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.223030][ T9817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.324170][ T9817] team0: Port device team_slave_0 added [ 334.350064][ T9817] team0: Port device team_slave_1 added [ 334.439745][ T9897] __nla_validate_parse: 1 callbacks suppressed [ 334.439768][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 334.455242][ T9897] bridge_slave_1: left allmulticast mode [ 334.468853][ T9897] bridge_slave_1: left promiscuous mode [ 334.474951][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.500017][ T9897] bridge_slave_0: left allmulticast mode [ 334.503830][ T9900] sctp: [Deprecated]: syz.3.1374 (pid 9900) Use of int in max_burst socket option. [ 334.503830][ T9900] Use struct sctp_assoc_value instead [ 334.513111][ T9897] bridge_slave_0: left promiscuous mode [ 334.527020][ T9897] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.541937][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 334.610363][ T9906] sctp: [Deprecated]: syz.1.1376 (pid 9906) Use of int in max_burst socket option. [ 334.610363][ T9906] Use struct sctp_assoc_value instead [ 334.650121][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.658934][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.685992][ T9817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.699220][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'. [ 334.710731][ T9902] syz_tun: left allmulticast mode [ 334.715965][ T9902] syz_tun: left promiscuous mode [ 334.721361][ T9902] bridge0: port 4(syz_tun) entered disabled state [ 334.730533][ T9902] bond0: left allmulticast mode [ 334.736227][ T9902] bond_slave_0: left allmulticast mode [ 334.741806][ T9902] bond_slave_1: left allmulticast mode [ 334.747833][ T55] Bluetooth: hci4: command tx timeout [ 334.753750][ T9902] bond0: left promiscuous mode [ 334.758705][ T9902] bond_slave_0: left promiscuous mode [ 334.764392][ T9902] bond_slave_1: left promiscuous mode [ 334.771052][ T9902] bridge0: port 3(bond0) entered disabled state [ 334.780992][ T9902] bridge_slave_1: left allmulticast mode [ 334.787288][ T9902] bridge_slave_1: left promiscuous mode [ 334.793199][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.802944][ T9902] bridge_slave_0: left allmulticast mode [ 334.809017][ T9902] bridge_slave_0: left promiscuous mode [ 334.814882][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.891339][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.899652][ T9903] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 334.909369][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.937122][ T9903] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 334.948871][ T9817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.073925][ T9817] hsr_slave_0: entered promiscuous mode [ 335.095200][ T9817] hsr_slave_1: entered promiscuous mode [ 335.386212][ T9924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.436750][ T9924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.507590][ T9924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.696948][ T9939] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.779048][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 336.145382][ T9817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.161413][ T9817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.184098][ T9817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.203984][ T9817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 336.474151][ T9817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.559126][ T9817] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.600873][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.608317][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.673111][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.680327][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.786387][ T9955] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1389'. [ 336.816047][ T55] Bluetooth: hci4: command tx timeout [ 337.092496][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 337.125652][ T9964] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 337.160059][ T9964] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 337.339865][ T9975] netlink: 'syz.4.1394': attribute type 7 has an invalid length. [ 337.347901][ T9975] netlink: 'syz.4.1394': attribute type 39 has an invalid length. [ 337.407992][ T9975] bridge1: port 1(gretap1) entered blocking state [ 337.414687][ T9975] bridge1: port 1(gretap1) entered disabled state [ 337.422813][ T9975] gretap1: entered allmulticast mode [ 337.430999][ T9975] gretap1: entered promiscuous mode [ 337.447566][ T9817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.471955][ T9975] netlink: 'syz.4.1394': attribute type 7 has an invalid length. [ 337.481020][ T9975] netlink: 'syz.4.1394': attribute type 39 has an invalid length. [ 337.502427][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 337.543895][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'. [ 337.581393][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 337.631157][ T9981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.692624][ T9817] veth0_vlan: entered promiscuous mode [ 337.724776][ T9817] veth1_vlan: entered promiscuous mode [ 337.808593][ T9817] veth0_macvtap: entered promiscuous mode [ 337.829264][ T9817] veth1_macvtap: entered promiscuous mode [ 337.861897][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.881261][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.892234][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.904035][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.918431][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.929230][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.939446][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.950096][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.962641][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.010318][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.036920][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.058621][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.076946][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.088440][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.099808][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.109999][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.147060][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.159182][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.214264][ T9817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.234288][ T9817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.257032][ T9817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.269212][ T9817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.359831][ T9999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.371149][T10000] FAULT_INJECTION: forcing a failure. [ 338.371149][T10000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.389664][T10000] CPU: 0 UID: 0 PID: 10000 Comm: syz.0.1404 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 338.400583][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 338.410768][T10000] Call Trace: [ 338.414085][T10000] [ 338.417059][T10000] dump_stack_lvl+0x241/0x360 [ 338.421803][T10000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.427052][T10000] ? __pfx__printk+0x10/0x10 [ 338.431806][T10000] ? snprintf+0xda/0x120 [ 338.436108][T10000] should_fail_ex+0x3b0/0x4e0 [ 338.440843][T10000] _copy_to_user+0x2f/0xb0 [ 338.445307][T10000] simple_read_from_buffer+0xca/0x150 [ 338.450725][T10000] proc_fail_nth_read+0x1ec/0x260 [ 338.455788][T10000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.461459][T10000] ? rw_verify_area+0x520/0x6b0 [ 338.466344][T10000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.471927][T10000] vfs_read+0x204/0xbc0 [ 338.476136][T10000] ? __pfx_lock_release+0x10/0x10 [ 338.481208][T10000] ? do_sock_setsockopt+0x3e2/0x720 [ 338.486445][T10000] ? __pfx_vfs_read+0x10/0x10 [ 338.491166][T10000] ? __fget_files+0x29/0x470 [ 338.492183][ T9995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.495777][T10000] ? __fget_files+0x3f6/0x470 [ 338.510219][T10000] ksys_read+0x1a0/0x2c0 [ 338.514593][T10000] ? __pfx_ksys_read+0x10/0x10 [ 338.519394][T10000] ? do_syscall_64+0x100/0x230 [ 338.524210][T10000] ? do_syscall_64+0xb6/0x230 [ 338.528953][T10000] do_syscall_64+0xf3/0x230 [ 338.533509][T10000] ? clear_bhb_loop+0x35/0x90 [ 338.538234][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.544173][T10000] RIP: 0033:0x7f551a37c93c [ 338.548631][T10000] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 338.568453][T10000] RSP: 002b:00007f551b18f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.576921][T10000] RAX: ffffffffffffffda RBX: 00007f551a536058 RCX: 00007f551a37c93c [ 338.585287][T10000] RDX: 000000000000000f RSI: 00007f551b18f0a0 RDI: 0000000000000004 [ 338.593341][T10000] RBP: 00007f551b18f090 R08: 0000000000000000 R09: 0000000000000000 [ 338.601359][T10000] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 338.609371][T10000] R13: 0000000000000001 R14: 00007f551a536058 R15: 00007ffd1c405158 [ 338.617405][T10000] [ 338.776524][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.794627][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.873746][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.887750][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.897351][ T55] Bluetooth: hci4: command tx timeout [ 338.946085][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 338.986700][T10013] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 339.031005][T10013] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 339.294564][T10023] ip6t_srh: unknown srh invflags 4000 [ 339.580234][T10033] vlan1: entered promiscuous mode [ 339.628846][T10035] FAULT_INJECTION: forcing a failure. [ 339.628846][T10035] name failslab, interval 1, probability 0, space 0, times 0 [ 339.632381][T10033] vlan1 (unregistering): left promiscuous mode [ 339.642220][T10035] CPU: 0 UID: 0 PID: 10035 Comm: syz.3.1421 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 339.642285][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 339.642300][T10035] Call Trace: [ 339.642310][T10035] [ 339.642321][T10035] dump_stack_lvl+0x241/0x360 [ 339.642366][T10035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.642402][T10035] ? __pfx__printk+0x10/0x10 [ 339.642454][T10035] should_fail_ex+0x3b0/0x4e0 [ 339.642495][T10035] ? radix_tree_node_alloc+0x8b/0x3c0 [ 339.642524][T10035] should_failslab+0xac/0x100 [ 339.642561][T10035] ? radix_tree_node_alloc+0x8b/0x3c0 [ 339.642590][T10035] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 339.642622][T10035] radix_tree_node_alloc+0x8b/0x3c0 [ 339.642665][T10035] idr_get_free+0x296/0xab0 [ 339.642709][T10035] idr_alloc_u32+0x195/0x330 [ 339.642744][T10035] ? __pfx_idr_alloc_u32+0x10/0x10 [ 339.642781][T10035] ? l2tp_tunnel_register+0x13e/0x1b20 [ 339.642823][T10035] l2tp_tunnel_register+0x160/0x1b20 [ 339.642864][T10035] ? lockdep_hardirqs_on+0x99/0x150 [ 339.642900][T10035] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 339.642937][T10035] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 339.642982][T10035] ? __asan_memset+0x23/0x50 [ 339.643019][T10035] ? lockdep_init_map_type+0xa1/0x910 [ 339.643057][T10035] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 339.643095][T10035] ? __kasan_kmalloc+0x98/0xb0 [ 339.786497][T10035] ? l2tp_tunnel_create+0x258/0x400 [ 339.791761][T10035] ? l2tp_tunnel_create+0x2d4/0x400 [ 339.796985][T10035] l2tp_nl_cmd_tunnel_create+0x76f/0xb60 [ 339.802645][T10035] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 339.808811][T10035] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 339.815092][T10035] ? __nla_parse+0x40/0x60 [ 339.819528][T10035] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 339.825905][T10035] genl_rcv_msg+0xb14/0xec0 [ 339.830447][T10035] ? mark_lock+0x9a/0x350 [ 339.834812][T10035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.839853][T10035] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 339.845804][T10035] ? __pfx_lock_acquire+0x10/0x10 [ 339.851319][T10035] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 339.857608][T10035] ? __pfx___might_resched+0x10/0x10 [ 339.862968][T10035] netlink_rcv_skb+0x1e3/0x430 [ 339.867845][T10035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.872886][T10035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.878210][T10035] ? __netlink_deliver_tap+0x77e/0x7c0 [ 339.883702][T10035] genl_rcv+0x28/0x40 [ 339.887697][T10035] netlink_unicast+0x7f6/0x990 [ 339.892574][T10035] ? __pfx_netlink_unicast+0x10/0x10 [ 339.897963][T10035] ? __virt_addr_valid+0x183/0x530 [ 339.903086][T10035] ? __check_object_size+0x49c/0x900 [ 339.908394][T10035] ? bpf_lsm_netlink_send+0x9/0x10 [ 339.913527][T10035] netlink_sendmsg+0x8e4/0xcb0 [ 339.918321][T10035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.923623][T10035] ? __import_iovec+0x536/0x820 [ 339.928486][T10035] ? aa_sock_msg_perm+0x91/0x160 [ 339.933457][T10035] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 339.938758][T10035] ? security_socket_sendmsg+0x87/0xb0 [ 339.944265][T10035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.949568][T10035] __sock_sendmsg+0x221/0x270 [ 339.954269][T10035] ____sys_sendmsg+0x525/0x7d0 [ 339.959075][T10035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.964475][T10035] __sys_sendmsg+0x2b0/0x3a0 [ 339.969122][T10035] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.974308][T10035] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.980654][T10035] ? do_syscall_64+0x100/0x230 [ 339.985439][T10035] ? do_syscall_64+0xb6/0x230 [ 339.990163][T10035] do_syscall_64+0xf3/0x230 [ 339.994688][T10035] ? clear_bhb_loop+0x35/0x90 [ 339.999383][T10035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.005327][T10035] RIP: 0033:0x7fd4f5b7def9 [ 340.009750][T10035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.029465][T10035] RSP: 002b:00007fd4f6949038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.038001][T10035] RAX: ffffffffffffffda RBX: 00007fd4f5d35f80 RCX: 00007fd4f5b7def9 [ 340.045996][T10035] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 340.054012][T10035] RBP: 00007fd4f6949090 R08: 0000000000000000 R09: 0000000000000000 [ 340.062005][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.070000][T10035] R13: 0000000000000000 R14: 00007fd4f5d35f80 R15: 00007fffde385108 [ 340.078089][T10035] [ 340.324065][T10046] __nla_validate_parse: 1 callbacks suppressed [ 340.324086][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'. [ 340.368940][T10050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.386979][T10046] sctp: [Deprecated]: syz.3.1423 (pid 10046) Use of int in max_burst socket option. [ 340.386979][T10046] Use struct sctp_assoc_value instead [ 340.661768][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 340.679634][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 340.836840][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 340.854921][T10071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 340.872392][T10071] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 341.353336][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 341.362909][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1440'. [ 341.518647][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1442'. [ 341.619999][ T143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.562904][ T143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.618728][ T143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.695607][ T143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.779969][ T143] bridge_slave_1: left allmulticast mode [ 342.785642][ T143] bridge_slave_1: left promiscuous mode [ 342.796236][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.807763][ T143] bridge_slave_0: left allmulticast mode [ 342.813529][ T143] bridge_slave_0: left promiscuous mode [ 342.819927][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.652840][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.686843][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.693198][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.705876][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.714906][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.724474][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.732848][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.740523][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.744216][ T143] bond0 (unregistering): Released all slaves [ 344.271465][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'. [ 344.338316][T10150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 344.383345][T10150] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 344.404998][T10133] chnl_net:caif_netlink_parms(): no params data found [ 344.656192][ T143] hsr_slave_0: left promiscuous mode [ 344.662490][ T143] hsr_slave_1: left promiscuous mode [ 344.677107][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.684913][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.693256][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.701363][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.743205][ T143] veth1_macvtap: left promiscuous mode [ 344.749386][ T143] veth0_macvtap: left promiscuous mode [ 344.758234][ T143] veth1_vlan: left promiscuous mode [ 344.763672][ T143] veth0_vlan: left promiscuous mode [ 345.423590][ T143] team0 (unregistering): Port device team_slave_1 removed [ 345.483291][ T143] team0 (unregistering): Port device team_slave_0 removed [ 345.787807][ T5240] Bluetooth: hci4: command tx timeout [ 346.075169][T10133] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.094295][T10133] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.126208][T10133] bridge_slave_0: entered allmulticast mode [ 346.134766][T10133] bridge_slave_0: entered promiscuous mode [ 346.170849][T10133] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.205237][T10133] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.228698][T10133] bridge_slave_1: entered allmulticast mode [ 346.252307][T10133] bridge_slave_1: entered promiscuous mode [ 346.277923][T10185] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 346.296499][T10185] netlink: 9396 bytes leftover after parsing attributes in process `syz.4.1467'. [ 346.472952][T10133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.501544][T10133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.694119][T10205] FAULT_INJECTION: forcing a failure. [ 346.694119][T10205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.743518][T10205] CPU: 0 UID: 0 PID: 10205 Comm: syz.1.1469 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 346.754526][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 346.764707][T10205] Call Trace: [ 346.768025][T10205] [ 346.770991][T10205] dump_stack_lvl+0x241/0x360 [ 346.775724][T10205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.781065][T10205] ? __pfx__printk+0x10/0x10 [ 346.785713][T10205] ? __pfx_lock_release+0x10/0x10 [ 346.790803][T10205] should_fail_ex+0x3b0/0x4e0 [ 346.795598][T10205] _copy_from_user+0x2f/0xe0 [ 346.800233][T10205] copy_msghdr_from_user+0xae/0x680 [ 346.805480][T10205] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 346.811355][T10205] __sys_sendmsg+0x23d/0x3a0 [ 346.815986][T10205] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.821135][T10205] ? vfs_write+0x7c4/0xc90 [ 346.825612][T10205] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 346.832015][T10205] ? do_syscall_64+0x100/0x230 [ 346.836823][T10205] ? do_syscall_64+0xb6/0x230 [ 346.841521][T10205] do_syscall_64+0xf3/0x230 [ 346.846043][T10205] ? clear_bhb_loop+0x35/0x90 [ 346.850821][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.856988][T10205] RIP: 0033:0x7f4fb877def9 [ 346.861412][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.881044][T10205] RSP: 002b:00007f4fb959b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.889584][T10205] RAX: ffffffffffffffda RBX: 00007f4fb8936130 RCX: 00007f4fb877def9 [ 346.897600][T10205] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 346.905668][T10205] RBP: 00007f4fb959b090 R08: 0000000000000000 R09: 0000000000000000 [ 346.913648][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.921628][T10205] R13: 0000000000000000 R14: 00007f4fb8936130 R15: 00007ffc658b46d8 [ 346.929709][T10205] [ 346.951681][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 346.983856][T10133] team0: Port device team_slave_0 added [ 347.003899][T10133] team0: Port device team_slave_1 added [ 347.231542][T10133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.259444][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.303278][T10133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.337284][T10133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.344284][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.345332][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 347.382347][T10133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.404779][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 347.411842][T10215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.446418][T10217] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 347.455964][T10215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.490058][T10217] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 347.601787][T10133] hsr_slave_0: entered promiscuous mode [ 347.614183][T10133] hsr_slave_1: entered promiscuous mode [ 347.631099][T10226] x_tables: duplicate underflow at hook 2 [ 347.856368][ T5240] Bluetooth: hci4: command tx timeout [ 348.089684][T10235] sctp: [Deprecated]: syz.3.1479 (pid 10235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.089684][T10235] Use struct sctp_sack_info instead [ 348.266831][T10240] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1482'. [ 348.403931][T10242] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.534775][T10251] netlink: 105108 bytes leftover after parsing attributes in process `syz.1.1485'. [ 348.627982][T10254] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1485'. [ 348.722764][T10242] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.791716][T10133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.806927][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'. [ 348.822356][T10255] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.831592][T10255] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.842378][T10255] vxlan0: entered promiscuous mode [ 348.889547][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 348.955599][T10251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1485'. [ 349.040710][T10242] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.064282][T10242] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.086989][T10133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.102356][T10133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.655548][T10272] FAULT_INJECTION: forcing a failure. [ 349.655548][T10272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.669073][T10272] CPU: 0 UID: 0 PID: 10272 Comm: syz.1.1492 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 349.679878][T10272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 349.690392][T10272] Call Trace: [ 349.693713][T10272] [ 349.696687][T10272] dump_stack_lvl+0x241/0x360 [ 349.701429][T10272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.706693][T10272] ? __pfx__printk+0x10/0x10 [ 349.711325][T10272] ? __pfx_lock_release+0x10/0x10 [ 349.716466][T10272] should_fail_ex+0x3b0/0x4e0 [ 349.721262][T10272] _copy_from_user+0x2f/0xe0 [ 349.725896][T10272] copy_msghdr_from_user+0xae/0x680 [ 349.731122][T10272] ? __pfx___might_resched+0x10/0x10 [ 349.736608][T10272] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 349.742529][T10272] ? __might_fault+0xaa/0x120 [ 349.747230][T10272] do_recvmmsg+0x40f/0xae0 [ 349.751670][T10272] ? __pfx_lock_release+0x10/0x10 [ 349.756716][T10272] ? __pfx_do_recvmmsg+0x10/0x10 [ 349.761767][T10272] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 349.767688][T10272] ? ksys_write+0x23e/0x2c0 [ 349.772208][T10272] ? __pfx_lock_release+0x10/0x10 [ 349.777274][T10272] ? vfs_write+0x7c4/0xc90 [ 349.781815][T10272] ? __mutex_unlock_slowpath+0x21d/0x750 [ 349.787483][T10272] ? __fget_files+0x3f6/0x470 [ 349.792208][T10272] __x64_sys_recvmmsg+0x199/0x250 [ 349.797261][T10272] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 349.802933][T10272] ? do_syscall_64+0x100/0x230 [ 349.807719][T10272] ? do_syscall_64+0xb6/0x230 [ 349.812588][T10272] do_syscall_64+0xf3/0x230 [ 349.817107][T10272] ? clear_bhb_loop+0x35/0x90 [ 349.821798][T10272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.827702][T10272] RIP: 0033:0x7f4fb877def9 [ 349.832145][T10272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.851763][T10272] RSP: 002b:00007f4fb95dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 349.860208][T10272] RAX: ffffffffffffffda RBX: 00007f4fb8935f80 RCX: 00007f4fb877def9 [ 349.868216][T10272] RDX: 04000000000002fe RSI: 0000000020006100 RDI: 0000000000000004 [ 349.876208][T10272] RBP: 00007f4fb95dd090 R08: 0000000000000000 R09: 0000000000000000 [ 349.884206][T10272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.892323][T10272] R13: 0000000000000000 R14: 00007f4fb8935f80 R15: 00007ffc658b46d8 [ 349.900344][T10272] [ 349.936185][ T5240] Bluetooth: hci4: command tx timeout [ 351.774350][T10242] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.785183][T10242] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.800654][T10133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.821259][T10278] __nla_validate_parse: 1 callbacks suppressed [ 351.821283][T10278] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1494'. [ 351.837745][T10275] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 351.853519][T10275] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 352.017442][ T5240] Bluetooth: hci4: command tx timeout [ 352.085554][T10242] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.115993][T10242] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.183071][T10242] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.217599][T10242] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.286596][T10242] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.294941][T10242] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.399572][T10242] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.414886][T10242] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.486985][T10133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.509051][T10133] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.523535][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.530749][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.593727][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.601087][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.827033][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.841328][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.852147][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.861366][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.870409][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.878461][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 364.888486][ T5242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.896070][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.897506][ T5242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.923820][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.945781][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 364.959373][ T5242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.997926][ T1113] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.015318][ T1113] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.034092][ T8319] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.046854][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.048547][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.063869][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.077849][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.091660][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 365.100135][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.101887][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.121805][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.157713][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.170860][ T1113] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.181878][ T1113] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.181932][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 365.204128][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.213318][ T8541] bridge0: port 4(syz_tun) entered disabled state [ 365.254937][ T8541] syz_tun (unregistering): left allmulticast mode [ 365.262190][ T8541] syz_tun (unregistering): left promiscuous mode [ 365.269287][ T8541] bridge0: port 4(syz_tun) entered disabled state [ 365.340689][T10133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.379903][ T1113] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.391285][ T1113] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.549917][ T1113] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.561308][ T1113] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.964172][ T1113] bond0: left allmulticast mode [ 365.970267][ T1113] bond_slave_0: left allmulticast mode [ 365.975773][ T1113] bond_slave_1: left allmulticast mode [ 365.983035][ T1113] bond0: left promiscuous mode [ 365.988094][ T1113] bond_slave_0: left promiscuous mode [ 365.993650][ T1113] bond_slave_1: left promiscuous mode [ 365.999544][ T1113] bridge0: port 1(bond0) entered disabled state [ 366.010145][ T1113] bridge_slave_1: left allmulticast mode [ 366.017544][ T1113] bridge_slave_1: left promiscuous mode [ 366.023508][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.488863][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.504885][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.518294][ T1113] bond0 (unregistering): Released all slaves [ 366.534075][T10297] chnl_net:caif_netlink_parms(): no params data found [ 366.558153][T10133] veth0_vlan: entered promiscuous mode [ 366.796282][T10299] chnl_net:caif_netlink_parms(): no params data found [ 366.815722][T10133] veth1_vlan: entered promiscuous mode [ 366.923122][T10295] chnl_net:caif_netlink_parms(): no params data found [ 366.938681][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.946268][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.953512][T10297] bridge_slave_0: entered allmulticast mode [ 366.961774][T10297] bridge_slave_0: entered promiscuous mode [ 366.971618][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.979092][ T5242] Bluetooth: hci0: command tx timeout [ 366.979164][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.992416][T10297] bridge_slave_1: entered allmulticast mode [ 367.000504][T10297] bridge_slave_1: entered promiscuous mode [ 367.059535][ T5242] Bluetooth: hci6: command tx timeout [ 367.164246][T10300] chnl_net:caif_netlink_parms(): no params data found [ 367.183461][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.198311][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.216206][ T5242] Bluetooth: hci2: command tx timeout [ 367.296692][ T5242] Bluetooth: hci3: command tx timeout [ 367.315123][T10299] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.322891][T10299] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.330709][T10299] bridge_slave_0: entered allmulticast mode [ 367.339048][T10299] bridge_slave_0: entered promiscuous mode [ 367.408849][T10297] team0: Port device team_slave_0 added [ 367.423599][ T1113] hsr_slave_0: left promiscuous mode [ 367.429872][ T1113] hsr_slave_1: left promiscuous mode [ 367.443379][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.450926][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.459600][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.467330][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.490063][ T1113] veth1_macvtap: left promiscuous mode [ 367.495625][ T1113] veth0_macvtap: left promiscuous mode [ 367.502105][ T1113] veth1_vlan: left promiscuous mode [ 367.509070][ T1113] veth0_vlan: left promiscuous mode [ 368.116476][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 368.712956][T10299] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.720988][T10299] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.728720][T10299] bridge_slave_1: entered allmulticast mode [ 368.737357][T10299] bridge_slave_1: entered promiscuous mode [ 368.788168][T10295] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.795371][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.802750][T10295] bridge_slave_0: entered allmulticast mode [ 368.810388][T10295] bridge_slave_0: entered promiscuous mode [ 368.844810][T10297] team0: Port device team_slave_1 added [ 368.873961][T10295] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.881966][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.907608][T10295] bridge_slave_1: entered allmulticast mode [ 368.915379][T10295] bridge_slave_1: entered promiscuous mode [ 368.990998][T10299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.003760][T10299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.058745][ T5242] Bluetooth: hci0: command tx timeout [ 369.067243][T10295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.093830][T10300] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.101838][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.109251][T10300] bridge_slave_0: entered allmulticast mode [ 369.117074][T10300] bridge_slave_0: entered promiscuous mode [ 369.136181][ T5242] Bluetooth: hci6: command tx timeout [ 369.145684][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.158045][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.184808][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.199851][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.207179][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.233905][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.263493][T10295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.274457][T10300] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.282112][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.289492][T10300] bridge_slave_1: entered allmulticast mode [ 369.298125][ T5242] Bluetooth: hci2: command tx timeout [ 369.298625][T10300] bridge_slave_1: entered promiscuous mode [ 369.329432][T10299] team0: Port device team_slave_0 added [ 369.339266][T10299] team0: Port device team_slave_1 added [ 369.376542][ T5242] Bluetooth: hci3: command tx timeout [ 369.481578][T10133] veth0_macvtap: entered promiscuous mode [ 369.494288][T10297] hsr_slave_0: entered promiscuous mode [ 369.501343][T10297] hsr_slave_1: entered promiscuous mode [ 369.514881][T10297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.522586][T10297] Cannot create hsr debugfs directory [ 369.563839][T10295] team0: Port device team_slave_0 added [ 369.574157][T10300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.594615][T10133] veth1_macvtap: entered promiscuous mode [ 369.603245][T10299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.611204][T10299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.638078][T10299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.651675][T10295] team0: Port device team_slave_1 added [ 369.661958][T10300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.688531][T10299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.695583][T10299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.722671][T10299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.793688][T10295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.801034][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.827783][T10295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.861998][T10300] team0: Port device team_slave_0 added [ 369.876194][T10300] team0: Port device team_slave_1 added [ 369.889122][T10133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.899812][T10133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.910119][T10133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.920946][T10133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.932121][T10133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.942900][T10133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.954739][T10133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.978632][T10295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.985635][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.012180][T10295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.100597][T10299] hsr_slave_0: entered promiscuous mode [ 370.107312][T10299] hsr_slave_1: entered promiscuous mode [ 370.113717][T10299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.121637][T10299] Cannot create hsr debugfs directory [ 370.135138][T10133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.145841][T10133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.157086][T10133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.168569][T10133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.179027][T10133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.190146][T10133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.201926][T10133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.229398][T10300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.236934][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.264941][T10300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.300495][T10133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.309515][T10133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.320513][T10133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.329284][T10133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.341580][T10300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.349692][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.375955][T10300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.472017][T10295] hsr_slave_0: entered promiscuous mode [ 370.482508][T10295] hsr_slave_1: entered promiscuous mode [ 370.490468][T10295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.499592][T10295] Cannot create hsr debugfs directory [ 370.592034][T10300] hsr_slave_0: entered promiscuous mode [ 370.599272][T10300] hsr_slave_1: entered promiscuous mode [ 370.605671][T10300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.613827][T10300] Cannot create hsr debugfs directory [ 370.682519][T10297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.802906][T10297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.927861][T10297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.051724][T10297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.086527][ T1113] IPVS: stop unused estimator thread 0... [ 371.138479][ T5242] Bluetooth: hci0: command tx timeout [ 371.167804][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.175713][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.216113][ T5242] Bluetooth: hci6: command tx timeout [ 371.301369][T10299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.353714][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.363664][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.376482][ T5242] Bluetooth: hci2: command tx timeout [ 371.407043][T10299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.457184][ T5242] Bluetooth: hci3: command tx timeout [ 371.529415][T10299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.587181][T10299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.685840][ T1113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.790051][ T1113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.855138][T10299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.928386][ T1113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.955761][T10299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.987428][T10299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 372.012182][ T1113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.045527][T10299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 372.179310][T10299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.282003][ T1113] bond0: left allmulticast mode [ 372.288216][ T1113] bond_slave_0: left allmulticast mode [ 372.293753][ T1113] bond_slave_1: left allmulticast mode [ 372.299435][ T1113] bond0: left promiscuous mode [ 372.304212][ T1113] bond_slave_0: left promiscuous mode [ 372.310824][ T1113] bond_slave_1: left promiscuous mode [ 372.318035][ T1113] bridge0: port 3(bond0) entered disabled state [ 372.328798][ T1113] bridge_slave_1: left allmulticast mode [ 372.334649][ T1113] bridge_slave_1: left promiscuous mode [ 372.341342][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.351746][ T1113] bridge_slave_0: left allmulticast mode [ 372.358030][ T1113] bridge_slave_0: left promiscuous mode [ 372.364049][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.378339][ T1113] gretap1: left allmulticast mode [ 372.383631][ T1113] gretap1: left promiscuous mode [ 372.389466][ T1113] bridge1: port 1(gretap1) entered disabled state [ 373.221763][ T5242] Bluetooth: hci0: command tx timeout [ 373.306902][ T5242] Bluetooth: hci6: command tx timeout [ 373.373080][ T8319] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.401162][ T8319] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.412167][ T8319] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.426676][ T8319] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.435007][ T8319] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 373.445678][ T8319] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.456250][ T8319] Bluetooth: hci2: command tx timeout [ 373.536388][ T8319] Bluetooth: hci3: command tx timeout [ 373.605046][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.622062][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.639381][ T1113] bond0 (unregistering): Released all slaves [ 373.794724][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.809896][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.823786][ T1113] bond0 (unregistering): Released all slaves [ 373.980120][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.993589][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.007491][ T1113] bond0 (unregistering): Released all slaves [ 374.020877][ T1113] bond1 (unregistering): Released all slaves [ 374.052451][T10299] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.078147][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.085771][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.202281][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.209503][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.238288][T10295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.264564][T10295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.290462][ T1113] ------------[ cut here ]------------ [ 374.296591][ T1113] WARNING: CPU: 1 PID: 1113 at net/l2tp/l2tp_core.c:1881 l2tp_exit_net+0x165/0x170 [ 374.306079][ T1113] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 374.310055][ T1113] CPU: 1 UID: 0 PID: 1113 Comm: kworker/u8:6 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 374.321036][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 374.331382][ T1113] Workqueue: netns cleanup_net [ 374.336415][ T1113] RIP: 0010:l2tp_exit_net+0x165/0x170 [ 374.342162][ T1113] Code: 0f 0b 90 e9 3b ff ff ff e8 c8 35 b1 f6 eb 05 e8 c1 35 b1 f6 90 0f 0b 90 e9 7a ff ff ff e8 b3 35 b1 f6 eb 05 e8 ac 35 b1 f6 90 <0f> 0b 90 eb b5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 374.362089][ T1113] RSP: 0018:ffffc9000431fa98 EFLAGS: 00010293 [ 374.369072][ T1113] RAX: ffffffff8ae256fd RBX: ffff888064c94888 RCX: ffff888027e4bc00 [ 374.377613][ T1113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 374.385637][ T1113] RBP: ffffc9000431fbb0 R08: ffffffff8bb26e16 R09: 1ffffffff2030615 [ 374.393803][ T1113] R10: dffffc0000000000 R11: fffffbfff2030616 R12: dffffc0000000000 [ 374.402061][ T1113] R13: 1ffffffff1fd1cfc R14: ffff888064c94930 R15: ffff888064c94840 [ 374.402685][T10295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.411017][ T1113] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 374.427142][ T1113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.433849][ T1113] CR2: 00007f830f9c8f30 CR3: 0000000027dde000 CR4: 00000000003506f0 [ 374.441938][ T1113] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 374.450128][ T1113] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 374.459127][ T1113] Call Trace: [ 374.462453][ T1113] [ 374.465423][ T1113] ? __warn+0x163/0x4e0 [ 374.470002][ T1113] ? l2tp_exit_net+0x165/0x170 [ 374.474823][ T1113] ? report_bug+0x2b3/0x500 [ 374.479644][ T1113] ? l2tp_exit_net+0x165/0x170 [ 374.484472][ T1113] ? handle_bug+0x3e/0x70 [ 374.489045][ T1113] ? exc_invalid_op+0x1a/0x50 [ 374.493766][ T1113] ? asm_exc_invalid_op+0x1a/0x20 [ 374.498975][ T1113] ? idr_destroy+0x56/0x290 [ 374.503521][ T1113] ? l2tp_exit_net+0x15d/0x170 [ 374.508412][ T1113] ? l2tp_exit_net+0x165/0x170 [ 374.513341][ T1113] ? l2tp_exit_net+0x15d/0x170 [ 374.518370][ T1113] cleanup_net+0x802/0xcc0 [ 374.522842][ T1113] ? __pfx_cleanup_net+0x10/0x10 [ 374.527890][ T1113] ? process_scheduled_works+0x945/0x1830 [ 374.533661][ T1113] process_scheduled_works+0xa2c/0x1830 [ 374.539596][ T1113] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.545782][ T1113] ? assign_work+0x364/0x3d0 [ 374.550565][ T1113] worker_thread+0x86d/0xd10 [ 374.555220][ T1113] ? __kthread_parkme+0x169/0x1d0 [ 374.560357][ T1113] ? __pfx_worker_thread+0x10/0x10 [ 374.565585][ T1113] kthread+0x2f0/0x390 [ 374.570122][ T1113] ? __pfx_worker_thread+0x10/0x10 [ 374.575288][ T1113] ? __pfx_kthread+0x10/0x10 [ 374.580533][ T1113] ret_from_fork+0x4b/0x80 [ 374.585008][ T1113] ? __pfx_kthread+0x10/0x10 [ 374.589785][ T1113] ret_from_fork_asm+0x1a/0x30 [ 374.594671][ T1113] [ 374.597814][ T1113] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 374.605128][ T1113] CPU: 1 UID: 0 PID: 1113 Comm: kworker/u8:6 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 374.616037][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 374.626130][ T1113] Workqueue: netns cleanup_net [ 374.630947][ T1113] Call Trace: [ 374.634242][ T1113] [ 374.637183][ T1113] dump_stack_lvl+0x241/0x360 [ 374.641909][ T1113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.647172][ T1113] ? __pfx__printk+0x10/0x10 [ 374.651880][ T1113] ? _printk+0xd5/0x120 [ 374.656083][ T1113] ? vscnprintf+0x5d/0x90 [ 374.660449][ T1113] panic+0x349/0x860 [ 374.664372][ T1113] ? __warn+0x172/0x4e0 [ 374.668557][ T1113] ? __pfx_panic+0x10/0x10 [ 374.672997][ T1113] ? show_trace_log_lvl+0x4e6/0x520 [ 374.678228][ T1113] ? ret_from_fork_asm+0x1a/0x30 [ 374.683226][ T1113] __warn+0x346/0x4e0 [ 374.687237][ T1113] ? l2tp_exit_net+0x165/0x170 [ 374.692050][ T1113] report_bug+0x2b3/0x500 [ 374.696421][ T1113] ? l2tp_exit_net+0x165/0x170 [ 374.701215][ T1113] handle_bug+0x3e/0x70 [ 374.705414][ T1113] exc_invalid_op+0x1a/0x50 [ 374.710448][ T1113] asm_exc_invalid_op+0x1a/0x20 [ 374.715312][ T1113] RIP: 0010:l2tp_exit_net+0x165/0x170 [ 374.720710][ T1113] Code: 0f 0b 90 e9 3b ff ff ff e8 c8 35 b1 f6 eb 05 e8 c1 35 b1 f6 90 0f 0b 90 e9 7a ff ff ff e8 b3 35 b1 f6 eb 05 e8 ac 35 b1 f6 90 <0f> 0b 90 eb b5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 374.740679][ T1113] RSP: 0018:ffffc9000431fa98 EFLAGS: 00010293 [ 374.746795][ T1113] RAX: ffffffff8ae256fd RBX: ffff888064c94888 RCX: ffff888027e4bc00 [ 374.754893][ T1113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 374.762963][ T1113] RBP: ffffc9000431fbb0 R08: ffffffff8bb26e16 R09: 1ffffffff2030615 [ 374.770948][ T1113] R10: dffffc0000000000 R11: fffffbfff2030616 R12: dffffc0000000000 [ 374.778941][ T1113] R13: 1ffffffff1fd1cfc R14: ffff888064c94930 R15: ffff888064c94840 [ 374.786960][ T1113] ? idr_destroy+0x56/0x290 [ 374.791504][ T1113] ? l2tp_exit_net+0x15d/0x170 [ 374.796306][ T1113] ? l2tp_exit_net+0x15d/0x170 [ 374.801185][ T1113] cleanup_net+0x802/0xcc0 [ 374.805638][ T1113] ? __pfx_cleanup_net+0x10/0x10 [ 374.810601][ T1113] ? process_scheduled_works+0x945/0x1830 [ 374.816348][ T1113] process_scheduled_works+0xa2c/0x1830 [ 374.821958][ T1113] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.827962][ T1113] ? assign_work+0x364/0x3d0 [ 374.832589][ T1113] worker_thread+0x86d/0xd10 [ 374.837211][ T1113] ? __kthread_parkme+0x169/0x1d0 [ 374.842343][ T1113] ? __pfx_worker_thread+0x10/0x10 [ 374.847509][ T1113] kthread+0x2f0/0x390 [ 374.851631][ T1113] ? __pfx_worker_thread+0x10/0x10 [ 374.856771][ T1113] ? __pfx_kthread+0x10/0x10 [ 374.861482][ T1113] ret_from_fork+0x4b/0x80 [ 374.865925][ T1113] ? __pfx_kthread+0x10/0x10 [ 374.870650][ T1113] ret_from_fork_asm+0x1a/0x30 [ 374.875445][ T1113] [ 374.878774][ T1113] Kernel Offset: disabled [ 374.883179][ T1113] Rebooting in 86400 seconds..