last executing test programs: 1m28.810869076s ago: executing program 3 (id=277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x76c3607c93e1d7d5, 0x4000010, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, 0x0, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r6}]}, 0x28}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000400000001907864010102ffffffff0194040100"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x1f}]}}]}, 0x44}}, 0x4040010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0xc}, {0xd, 0x8}, {0xc, 0x3}}, [{0x8, 0xb, 0xf39b}, {0x8}, {0x8, 0xb, 0x38a32de3}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x4880) r10 = accept4(r4, 0x0, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)="8871a255216be4379ca427f46c4093522d2a6648563028c9e55bd08e04c4862e89eea88f40691c", &(0x7f0000000600)="9907bbee6ab1fdc5811d2008c7d88882a05f207ce35568141c32873df971663ea7e1f51d4fe9f7b293e4964c9b0ed872ce2a896f9605f24d6e81c1feb36bc6c477e1e012e60a6c905519358dcc9b533f7212e006d8034a26720301847cd1ee396b1e3fcfb2c622c057e96dc56dd390dc69d7327097f32a557707c1cb5ba70a317ec4d347397a60c565c34e67ef17cf349055a207347dcd6655a486c734e0739df20a0000000012586b374faa5ff2339cee595f4b17030e5873c742c81336da221616f6da7cdc156dfc2a8272fec810dafeacb3020ce0e484ee4572a2f7956b53c499920692ba377c", 0x1000, r11}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2c, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) socket$nl_route(0x10, 0x3, 0x0) 1m14.185285182s ago: executing program 3 (id=277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x76c3607c93e1d7d5, 0x4000010, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, 0x0, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r6}]}, 0x28}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000400000001907864010102ffffffff0194040100"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x1f}]}}]}, 0x44}}, 0x4040010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0xc}, {0xd, 0x8}, {0xc, 0x3}}, [{0x8, 0xb, 0xf39b}, {0x8}, {0x8, 0xb, 0x38a32de3}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x4880) r10 = accept4(r4, 0x0, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)="8871a255216be4379ca427f46c4093522d2a6648563028c9e55bd08e04c4862e89eea88f40691c", &(0x7f0000000600)="9907bbee6ab1fdc5811d2008c7d88882a05f207ce35568141c32873df971663ea7e1f51d4fe9f7b293e4964c9b0ed872ce2a896f9605f24d6e81c1feb36bc6c477e1e012e60a6c905519358dcc9b533f7212e006d8034a26720301847cd1ee396b1e3fcfb2c622c057e96dc56dd390dc69d7327097f32a557707c1cb5ba70a317ec4d347397a60c565c34e67ef17cf349055a207347dcd6655a486c734e0739df20a0000000012586b374faa5ff2339cee595f4b17030e5873c742c81336da221616f6da7cdc156dfc2a8272fec810dafeacb3020ce0e484ee4572a2f7956b53c499920692ba377c", 0x1000, r11}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2c, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) socket$nl_route(0x10, 0x3, 0x0) 59.836864389s ago: executing program 3 (id=277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x76c3607c93e1d7d5, 0x4000010, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, 0x0, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r6}]}, 0x28}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000400000001907864010102ffffffff0194040100"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x1f}]}}]}, 0x44}}, 0x4040010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0xc}, {0xd, 0x8}, {0xc, 0x3}}, [{0x8, 0xb, 0xf39b}, {0x8}, {0x8, 0xb, 0x38a32de3}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x4880) r10 = accept4(r4, 0x0, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)="8871a255216be4379ca427f46c4093522d2a6648563028c9e55bd08e04c4862e89eea88f40691c", &(0x7f0000000600)="9907bbee6ab1fdc5811d2008c7d88882a05f207ce35568141c32873df971663ea7e1f51d4fe9f7b293e4964c9b0ed872ce2a896f9605f24d6e81c1feb36bc6c477e1e012e60a6c905519358dcc9b533f7212e006d8034a26720301847cd1ee396b1e3fcfb2c622c057e96dc56dd390dc69d7327097f32a557707c1cb5ba70a317ec4d347397a60c565c34e67ef17cf349055a207347dcd6655a486c734e0739df20a0000000012586b374faa5ff2339cee595f4b17030e5873c742c81336da221616f6da7cdc156dfc2a8272fec810dafeacb3020ce0e484ee4572a2f7956b53c499920692ba377c", 0x1000, r11}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2c, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) socket$nl_route(0x10, 0x3, 0x0) 48.202256396s ago: executing program 3 (id=277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x76c3607c93e1d7d5, 0x4000010, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, 0x0, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r6}]}, 0x28}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000400000001907864010102ffffffff0194040100"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x1f}]}}]}, 0x44}}, 0x4040010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0xc}, {0xd, 0x8}, {0xc, 0x3}}, [{0x8, 0xb, 0xf39b}, {0x8}, {0x8, 0xb, 0x38a32de3}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x4880) r10 = accept4(r4, 0x0, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)="8871a255216be4379ca427f46c4093522d2a6648563028c9e55bd08e04c4862e89eea88f40691c", &(0x7f0000000600)="9907bbee6ab1fdc5811d2008c7d88882a05f207ce35568141c32873df971663ea7e1f51d4fe9f7b293e4964c9b0ed872ce2a896f9605f24d6e81c1feb36bc6c477e1e012e60a6c905519358dcc9b533f7212e006d8034a26720301847cd1ee396b1e3fcfb2c622c057e96dc56dd390dc69d7327097f32a557707c1cb5ba70a317ec4d347397a60c565c34e67ef17cf349055a207347dcd6655a486c734e0739df20a0000000012586b374faa5ff2339cee595f4b17030e5873c742c81336da221616f6da7cdc156dfc2a8272fec810dafeacb3020ce0e484ee4572a2f7956b53c499920692ba377c", 0x1000, r11}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2c, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) socket$nl_route(0x10, 0x3, 0x0) 33.542615112s ago: executing program 3 (id=277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x76c3607c93e1d7d5, 0x4000010, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, 0x0, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r6}]}, 0x28}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000400000001907864010102ffffffff0194040100"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x1f}]}}]}, 0x44}}, 0x4040010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0xc}, {0xd, 0x8}, {0xc, 0x3}}, [{0x8, 0xb, 0xf39b}, {0x8}, {0x8, 0xb, 0x38a32de3}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x4880) r10 = accept4(r4, 0x0, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)="8871a255216be4379ca427f46c4093522d2a6648563028c9e55bd08e04c4862e89eea88f40691c", &(0x7f0000000600)="9907bbee6ab1fdc5811d2008c7d88882a05f207ce35568141c32873df971663ea7e1f51d4fe9f7b293e4964c9b0ed872ce2a896f9605f24d6e81c1feb36bc6c477e1e012e60a6c905519358dcc9b533f7212e006d8034a26720301847cd1ee396b1e3fcfb2c622c057e96dc56dd390dc69d7327097f32a557707c1cb5ba70a317ec4d347397a60c565c34e67ef17cf349055a207347dcd6655a486c734e0739df20a0000000012586b374faa5ff2339cee595f4b17030e5873c742c81336da221616f6da7cdc156dfc2a8272fec810dafeacb3020ce0e484ee4572a2f7956b53c499920692ba377c", 0x1000, r11}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2c, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) socket$nl_route(0x10, 0x3, 0x0) 22.381467855s ago: executing program 3 (id=277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x76c3607c93e1d7d5, 0x4000010, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, 0x0, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r6}]}, 0x28}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000400000001907864010102ffffffff0194040100"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x1f}]}}]}, 0x44}}, 0x4040010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0xc}, {0xd, 0x8}, {0xc, 0x3}}, [{0x8, 0xb, 0xf39b}, {0x8}, {0x8, 0xb, 0x38a32de3}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x4880) r10 = accept4(r4, 0x0, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)="8871a255216be4379ca427f46c4093522d2a6648563028c9e55bd08e04c4862e89eea88f40691c", &(0x7f0000000600)="9907bbee6ab1fdc5811d2008c7d88882a05f207ce35568141c32873df971663ea7e1f51d4fe9f7b293e4964c9b0ed872ce2a896f9605f24d6e81c1feb36bc6c477e1e012e60a6c905519358dcc9b533f7212e006d8034a26720301847cd1ee396b1e3fcfb2c622c057e96dc56dd390dc69d7327097f32a557707c1cb5ba70a317ec4d347397a60c565c34e67ef17cf349055a207347dcd6655a486c734e0739df20a0000000012586b374faa5ff2339cee595f4b17030e5873c742c81336da221616f6da7cdc156dfc2a8272fec810dafeacb3020ce0e484ee4572a2f7956b53c499920692ba377c", 0x1000, r11}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2c, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) socket$nl_route(0x10, 0x3, 0x0) 3.056001821s ago: executing program 0 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000002300)=ANY=[@ANYBLOB="dccdd8706b7c29240dd5638785173e0f67930a3df41d07f764bad85e753a874e69b8b2c4dcd047fb1102873979b8752541de1b7c5fe069cdad5261"]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00001aa000/0x4000)=nil, 0x4000, 0x3, 0x2010, r1, 0xc6e9c000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 2.885559965s ago: executing program 4 (id=1067): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050003000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@can_newroute={0x34, 0x18, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0x4, 0xfffffffffffffffc, 0x8}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "1fbde55eb0d7e533"}, 0x6}}]}, 0x34}}, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x1f, 0x8a, 0x61}, 0x2c) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe87e419245e83e68, 0x80010, r3, 0x40aa6000) 2.563461949s ago: executing program 4 (id=1069): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r1}) (async) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="7b7c30087c9f59f10f5122a282628d812c5d0689a8579b69368eb5e7c86a0000abe3ba70fb59d9a68bf5701baf49160a1f453b1ff3a69dcbc7fef351d080e4a9ba89c3b7bbcd3fcb82a8ca49e3809e02ddcf3cf49c69eb9c987a419490f81dbcf223f29d183b7c5df5ea81cccedfa1e8ebd77c8ff11c4f62a32c1d027fb71a0e742a32cb4b5029eb3b00000000000394578effe51885be122884739a37a68102ab85058487636d1ae65040f957356ab5c15443fdcdf7295342abc32732ee3b953819cc02ea7e7d22df760e93a00126b0835bce96bc228be53eaa261db1155c58700b700c", 0xe4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}], 0x2, 0x0) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="5e000000000000231295924709edc000"], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 2.513795821s ago: executing program 4 (id=1070): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 2.363831777s ago: executing program 4 (id=1073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000000c3f"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x40) 2.207499512s ago: executing program 0 (id=1075): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000080) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 2.164285796s ago: executing program 2 (id=1076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000080)={0x57}) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000000080)=0x43) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0xe, &(0x7f00000001c0)=0x4, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4020010) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x1c2, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "98ce9c", 0x18c, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x3b}, @hopopts={0x2b}, @routing={0x3c, 0x0, 0x1, 0x94}, @srh={0xff, 0xa, 0x4, 0x5, 0xe, 0x40, 0xfed9, [@private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33, 0x4, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x5, 0xc}}, @calipso={0x7, 0x18, {0x0, 0x4, 0xc, 0xc, [0x4403aad3, 0x7]}}, @pad1]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x6, 0x0, 0x2, 0x4e23, 0x4e22, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x3, 0xa, 0x4, 0x62, 0x7fff, 0x5, 0x6, 0x10001}, {0x4, 0x5, 0x40, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x10000, 0x3, 0x0, 0xf8b0, 0x6, 0x400, 0x0, 0x6}, {0x4, 0x7, 0x0, 0x8, 0x10, 0x18000000, 0x6}, {0xf, 0x8001, 0x1, 0x80, 0x80000001, 0x800, 0x9, 0xfffff81}, {0x8, 0x8, 0x8, 0x400, 0x4cee1ac4, 0x1b97, 0x4, 0x1}, {0x1, 0x7, 0x2, 0x10001, 0xd3fb, 0x8, 0x1, 0x400}]}}}}}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r11}, 0x10) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7fffffffffffffff}) (async) socket(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010058a67000fedbdf250800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8840) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.13744078s ago: executing program 4 (id=1077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xb0d, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x40030000000000}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80000) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7) sendmsg$alg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40810}, 0x20044000) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x64, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="f200000095", @ANYRES8=r2], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc9, 0x10, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r11, 0x0, 0x82, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x3]}, &(0x7f0000000340)=0x50) getsockopt$EBT_SO_GET_INFO(r11, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x9, 0x7, 0x97d3, 0x73]}, &(0x7f0000000080)=0x50) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x8}, {0x5f2, 0xb3, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x0, 0x3}}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0xd4}}, 0x0) 2.039166076s ago: executing program 0 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x7, 0x12) mkdirat$cgroup(r6, &(0x7f00000001c0)='syz0\x00', 0x1ff) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0904000000000000000002000000580004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000180001800d00010073791ff057c4f8cd1b8f0000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xac}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080006000a01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) close(0x3) 1.790777153s ago: executing program 2 (id=1080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c0002800800"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00) 1.500990278s ago: executing program 2 (id=1083): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c6014"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x8004) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x7) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000240)=""/113, &(0x7f00000001c0)=0x71) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'batadv_slave_0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x40000}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x51, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.230543719s ago: executing program 2 (id=1085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket(0x840000000002, 0x1, 0x100) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) syz_emit_ethernet(0xd2, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f84ec0", 0x9c, 0x2f, 0x0, @ipv4, @local, {[@srh={0x3a, 0xa, 0x4, 0x5, 0x0, 0x0, 0x0, [@empty, @remote, @remote, @private2, @remote]}]}}}}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004004}, 0x20000000) 1.099668164s ago: executing program 0 (id=1086): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bbd, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x2000000, 0x0, 0x3, 0x7, 0x200}}, 0xe8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0xd7, "1115ab65f210f2d75649841499bf5e52041bc181f08d8164b2cc5962189d6e5ae7796e529adb876c0c0fe590eca2bc881fb72adcf54b8cd246144c959ec391098fd0d5ec084e0594cef1551e32053cf95109fada92452c402bd11a1e7c17dc72049117eac46d6d772a02fe4954d3253fe269f4d4a063a7ca04f6d15a67921179c10739efa7c1bf281855aec676fe58b61205e5f54cdcce12baccf6ac2cc4be678368cd468d946b71eacb545da350c1a946515062ec54e4d70ad37d2f1bb553f0f58b78ccce211839cd5fa06014ab7e05b086d6b972c0ec"}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000003c000000030a01020000000000020000020000000900010073797a30000000001a000300"], 0x98}}, 0x0) 1.092441398s ago: executing program 2 (id=1087): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000000c0)={0x3}, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 963.474449ms ago: executing program 0 (id=1088): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000080) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 841.985069ms ago: executing program 0 (id=1089): socket$packet(0x11, 0xa, 0x300) r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r3, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r3, r4, 0x2f, 0x28, 0x4, @void, @void, @void, @value}, 0x20) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f0000000040)={0x402, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xe}, 0x0, 0x0) close(r0) 794.701907ms ago: executing program 4 (id=1090): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006200000095000000000000004a245dc0487f8144f380001250aff00a31edb63e4002d0a52901ef84d30c62bd67c342e25abbf5f59916c17d0b252980debdcdbd58cdec385205a8bdaaf4fad13044e944629d5086c82012a68f5b6728e12433ab69f1e30ba642a901ce9dd75c9c0b287500e7e8731fb058a79488bb2d63677b66a12d7eba0c897ea645febea3a5e72e356fd29bdad716965b86f6d2db"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x1, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x50}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xdb, &(0x7f0000000700)=""/219, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x9, 0x10, 0x48, @mcast2, @mcast2={0xff, 0x5}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x7e, 0x2, 0x400, 0x0, @private0, @mcast1, 0x80, 0x7, 0x9, 0xdbe}}) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@newqdisc={0x44, 0x24, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x4, 0x7}, {0xfff2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$inet(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}], 0x1, 0x4004441) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 534.696646ms ago: executing program 1 (id=1092): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x1, 0x6}]}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x34, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x1, 0x6}]}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x34, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0xfffffffffffffcfa, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80) 454.744623ms ago: executing program 1 (id=1093): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000003b80)={0x10000001}) write(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b25, &(0x7f0000000000)={'wlan1\x00'}) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04190082e52441"], 0x20}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e1c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r7, &(0x7f0000000100)='S', 0x1, 0x8000, 0x0, 0x0) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x810, r6, 0x4ca1e000) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) readv(r9, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/56, 0x6a}], 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1fd}, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8000100000000000000000000000000000000aa0000000000000000000000d2486cbd0000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaa4c00000000bf059078ac1414000a010900441404030000000000000000e000000100000000890bcee0000002ac1414bb83020000000000000000000000000000000000000000000088e6602481992e54bbb7b1b56b6f4499ebff22812ca341414cce24b1c11e2e4a1642fcc4981bc387310de88b5785a8e6b916f1721dea4852d027b5892209edd00c4fa6f8787f669e036f58323656016ea56ac085229f727ba40b783a5da71fbde6557db549485cd342e0116bd1ecd01338d0b071ef899d511126f0736ddcf793a4e3ca53f81b91c0f357cca6b2d21b059fb98148c067", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) 347.063408ms ago: executing program 1 (id=1094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27b00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3dc31c961ed0cfc6dd30d6953e035a25b589709f0661dede8c6afc79f152", 0x22) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='@', 0x1}], 0x1}, 0x4000000) (async) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='@', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000003060103000000000000000000000000050001000700000006f6fd801a56176f47dda3d5cf8baf51ec022a698f12b91dbf642b27cdfe73c5f393b645fbbe05fbf9e8d2df4eee7f03"], 0x1c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 247.916391ms ago: executing program 1 (id=1095): r0 = socket(0x10, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) (async) sendmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000004200010a04000000ffffffff0b0004"], 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0xd0) close(0xffffffffffffffff) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000540)=""/104, &(0x7f0000000300)=0x68) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000027de14c98f97b3a1000c000000000000000071120c0000000700ba7926b515b716d7fefa50b6d4b88799345b3c829aae8d234e6aa317f84e6a8508691a28da679358203ec8ae94d20d101acad3734259038f0920cd6c07bf1ead2454b47007227d2353de987ea5fd27f30d0d9c9009b953eeb1525cff03000028d6eefef069e7deef77ebd800c899ab4d978359f09132606365d4a954a47306b868849a295569e6729fc5fe3dd03f59b5cc022089950d4d4eb3dbf0624d"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x6, 0x80000, 0x2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) getsockopt$ax25_int(r7, 0x101, 0x6, &(0x7f0000000840), &(0x7f0000000880)=0x4) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0xfffe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r9}, 0x20) 172.206339ms ago: executing program 2 (id=1096): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0xfffffffc, @local, 0x6}, 0x1c) 90.977528ms ago: executing program 1 (id=1097): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x1, &(0x7f00000005c0)=@raw=[@exit], &(0x7f0000000740)='GPL\x00', 0x9, 0x77, &(0x7f0000000a40)=""/119, 0xc3200, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000980)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140006"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x1, &(0x7f00000005c0)=@raw=[@exit], &(0x7f0000000740)='GPL\x00', 0x9, 0x77, &(0x7f0000000a40)=""/119, 0xc3200, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000980)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140006"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 0s ago: executing program 1 (id=1098): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast1, 0x8000, 0x6, 0x1000, 0x400, 0x2, 0x84000000, r1}) r2 = socket(0x5, 0x2, 0x1) preadv(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000140)=""/70, 0x46}, {&(0x7f00000001c0)=""/32, 0x20}], 0x4, 0x8, 0x7) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xb7a71a022af386c4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@del={0x100, 0x11, 0x622, 0x70bd2c, 0x25dfdbfb, {{'jitterentropy_rng\x00'}, '\x00', '\x00', 0x2400, 0xd5827457aa095a9c}, [{0x8, 0x1, 0x25eb}, {0x8, 0x1, 0xb325}, {0x8, 0x1, 0x8000}, {0x8, 0x1, 0x1ff}]}, 0x100}, 0x1, 0x0, 0x0, 0x88}, 0x24000010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) syz_genetlink_get_family_id$fou(&(0x7f0000000440), r2) connect$pppl2tp(r2, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x3, 0x2, {0xa, 0x4e24, 0x1, @remote}}}, 0x32) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000894}, 0x4008801) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r4) (async) syz_extract_tcp_res(&(0x7f00000006c0), 0x1, 0x5) (async) connect$l2tp6(r2, &(0x7f0000000700)={0xa, 0x0, 0x1, @local, 0x9, 0x4}, 0x20) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r9, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x5, 0x34, @random="84"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8e24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010040}, 0x4000080) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r10, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40009) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000000a40)={0x0, 0x7fffffff, 0x3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000e40)={r11, 0x8000000000000001, 0x0, [0x4a, 0x5, 0xb, 0xffffffffffffb101, 0xffffffffffffff34], [0xf577, 0x9, 0x3, 0x100, 0x8, 0x80000000000, 0x9, 0x9, 0x4, 0x7c, 0x2, 0x6, 0x2, 0x6, 0x3, 0x1, 0x7fff, 0xe, 0xfffffffffffff801, 0xd35, 0x0, 0x9, 0x5, 0xffffffff, 0x0, 0x8000000000000001, 0x9, 0x3, 0x2, 0x8, 0xffffffffffffff0d, 0xddb, 0x2, 0x0, 0x7, 0x5, 0x2, 0xffffffffffffffff, 0x3, 0x3d, 0x9, 0xb0a, 0xffff, 0x1, 0x0, 0x5, 0xcc98, 0x2, 0x9, 0x0, 0x8, 0x5, 0x9, 0x5, 0x7f, 0xa0, 0x8, 0x8, 0x80, 0x101, 0x7, 0xb, 0x800, 0x9, 0x7, 0x8, 0x1, 0x5, 0x4, 0x80, 0x10001, 0x2, 0xc, 0x8, 0x0, 0x7, 0x3, 0x0, 0x800, 0x5, 0x0, 0x2, 0x7, 0x7, 0x2, 0x0, 0x7, 0x3, 0x32, 0x800, 0x0, 0x4, 0x6, 0x8001, 0xffffffff, 0x85, 0xd8, 0x7fff, 0x4, 0x100000000, 0x3, 0x25, 0xfffffffffffffffc, 0x9, 0x206, 0x4, 0xbf5d, 0x6, 0x4, 0xffffffffffffffff, 0x9, 0x1, 0x80, 0xb, 0x9, 0x9, 0x10, 0x1, 0x574b, 0x8, 0x7574]}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001280), r4) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000012c0)=0x4000, 0x4) (rerun: 32) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r12, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x41) kernel console output (not intermixed with test programs): handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.501750][ T5933] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 85.519155][ T5930] batman_adv: batadv0: Interface activated: virt_wifi0 [ 85.678775][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.696333][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.804200][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.814028][ T5938] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 85.821430][ T5933] af_packet: tpacket_rcv: packet too big, clamped from 3940 to 3696. macoff=96 [ 85.832563][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.842304][ T5934] Zero length message leads to an empty skb [ 85.854705][ T5938] syzkaller1: entered promiscuous mode [ 85.868204][ T5938] syzkaller1: entered allmulticast mode [ 85.936609][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.958337][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.097695][ T5975] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 88.115809][ T5199] udevd[5199]: worker [5878] terminated by signal 33 (Unknown signal 33) [ 88.126413][ T5975] syzkaller0: Linktype set failed because interface is up [ 88.153106][ T5199] udevd[5199]: worker [5878] failed while handling '/devices/virtual/block/loop1' [ 88.214653][ T5978] syzkaller0: create flow: hash 1469415295 index 0 [ 88.667849][ T5199] udevd[5199]: worker [5877] terminated by signal 33 (Unknown signal 33) [ 88.694809][ T5199] udevd[5199]: worker [5877] failed while handling '/devices/virtual/block/loop4' [ 88.705429][ T5985] netlink: 'syz.1.19': attribute type 4 has an invalid length. [ 88.739256][ T5985] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.19'. [ 88.749507][ T5988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19'. [ 90.711978][ T5974] syzkaller0 (unregistered): delete flow: hash 1469415295 index 0 [ 90.914162][ T6005] sctp: [Deprecated]: syz.2.24 (pid 6005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.914162][ T6005] Use struct sctp_sack_info instead [ 90.918737][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 90.958413][ T6008] netlink: 14 bytes leftover after parsing attributes in process `syz.1.27'. [ 91.083680][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24'. [ 91.112114][ T6019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24'. [ 91.152350][ T6023] netlink: 26 bytes leftover after parsing attributes in process `syz.4.30'. [ 91.205927][ T6024] netlink: 'syz.2.24': attribute type 16 has an invalid length. [ 91.231350][ T6024] netlink: 'syz.2.24': attribute type 17 has an invalid length. [ 91.413632][ T6027] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 91.474220][ T6024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.511598][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 91.651667][ T6034] sctp: failed to load transform for md5: -2 [ 91.997294][ T979] cfg80211: failed to load regulatory.db [ 92.029815][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.110509][ T6051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.237882][ T6057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.441063][ T6080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.42'. [ 92.589743][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.603706][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.000513][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 93.055705][ T6093] vlan2: entered promiscuous mode [ 93.109399][ T6093] bridge0: entered promiscuous mode [ 93.131485][ T6093] vlan2: entered allmulticast mode [ 93.136676][ T6093] bridge0: entered allmulticast mode [ 93.236948][ T6094] bridge_slave_0: left allmulticast mode [ 93.250475][ T6094] bridge_slave_0: left promiscuous mode [ 93.257085][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.329873][ T6094] bridge_slave_1: left allmulticast mode [ 93.366814][ T6094] bridge_slave_1: left promiscuous mode [ 93.384416][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.435483][ T6094] bond0: (slave bond_slave_0): Releasing backup interface [ 93.465005][ T6094] bond0: (slave bond_slave_1): Releasing backup interface [ 93.493950][ T6094] team0: Port device team_slave_0 removed [ 93.534327][ T6094] team0: Port device team_slave_1 removed [ 93.547454][ T6112] xt_TCPMSS: Only works on TCP SYN packets [ 93.549100][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.566458][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.577356][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.589070][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.739897][ T6118] tipc: Started in network mode [ 93.781521][ T6118] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 93.790995][ T6118] tipc: Enabled bearer , priority 0 [ 93.807922][ T6120] tipc: Enabling of bearer rejected, already enabled [ 94.005095][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 94.033213][ T6128] netlink: 'syz.1.56': attribute type 30 has an invalid length. [ 94.119902][ T6137] !: renamed from dummy0 (while UP) [ 94.216811][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.264472][ T979] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 94.292520][ T979] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 94.432731][ T36] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 94.453951][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 94.475118][ T6156] openvswitch: netlink: Missing key (keys=40, expected=80) [ 94.508837][ T55] block nbd0: Receive control failed (result -104) [ 94.558686][ T4543] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 94.681195][ T4543] wlan1: authentication with 08:02:11:00:00:00 timed out [ 94.842220][ T6166] netlink: zone id is out of range [ 94.860205][ T6166] netlink: del zone limit has 8 unknown bytes [ 94.911270][ T979] tipc: Node number set to 11578026 [ 94.930551][ T137] tipc: Subscription rejected, illegal request [ 95.429452][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.506556][ T6179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.539561][ T6182] netlink: 'syz.3.70': attribute type 15 has an invalid length. [ 95.814550][ T6190] veth3: entered allmulticast mode [ 95.820967][ T6190] bridge0: port 1(veth3) entered blocking state [ 95.827396][ T6190] bridge0: port 1(veth3) entered disabled state [ 95.842581][ T6190] veth3: entered promiscuous mode [ 95.859260][ T6190] bridge0: port 1(veth3) entered blocking state [ 95.865850][ T6190] bridge0: port 1(veth3) entered forwarding state [ 96.048512][ T36] bridge0: port 1(veth3) entered disabled state [ 96.518127][ T6202] __nla_validate_parse: 4 callbacks suppressed [ 96.518150][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 96.630845][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 96.828574][ T6220] veth0: entered promiscuous mode [ 96.831092][ T6217] netlink: 104 bytes leftover after parsing attributes in process `syz.0.81'. [ 96.949521][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 97.010262][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.83'. [ 97.092375][ T6227] Bluetooth: MGMT ver 1.23 [ 97.432188][ T6219] veth0: left promiscuous mode [ 97.475395][ T6242] netlink: 'syz.3.89': attribute type 8 has an invalid length. [ 97.660036][ T6249] dummy0 speed is unknown, defaulting to 1000 [ 97.688063][ T6249] dummy0 speed is unknown, defaulting to 1000 [ 97.708580][ T6249] dummy0 speed is unknown, defaulting to 1000 [ 97.776949][ T6249] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.835023][ T6249] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.906214][ T6249] dummy0 speed is unknown, defaulting to 1000 [ 97.916354][ T6249] dummy0 speed is unknown, defaulting to 1000 [ 97.938488][ T6249] dummy0 speed is unknown, defaulting to 1000 [ 97.948407][ T6249] dummy0 speed is unknown, defaulting to 1000 [ 97.959769][ T6249] dummy0 speed is unknown, defaulting to 1000 [ 97.968475][ T6249] dummy0 speed is unknown, defaulting to 1000 [ 98.245219][ T6263] netlink: 96 bytes leftover after parsing attributes in process `syz.2.96'. [ 98.387076][ T6266] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 98.435583][ T6269] netlink: 'syz.1.99': attribute type 1 has an invalid length. [ 98.765875][ T6286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 98.786025][ T6288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.106'. [ 98.946984][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 98.968625][ T6299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.109'. [ 99.614557][ T6323] batadv_slave_0: entered promiscuous mode [ 99.703427][ T6330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.843611][ T6342] sctp: failed to load transform for md5: -2 [ 99.866796][ T6330] bridge1: entered promiscuous mode [ 100.074071][ T6359] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 100.253544][ T6366] openvswitch: netlink: Unknown key attributes 2 [ 100.254105][ T6365] batman_adv: batadv0: Adding interface: dummy0 [ 100.272309][ T6365] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.298601][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.128'. [ 100.315047][ T6365] batman_adv: batadv0: Interface activated: dummy0 [ 100.323031][ T6321] batadv_slave_0: left promiscuous mode [ 100.325620][ T6370] openvswitch: netlink: Unknown key attributes 2 [ 100.332629][ T6366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.500002][ T6369] batadv0: mtu less than device minimum [ 100.519688][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.531841][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.544059][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.555641][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.594169][ T6365] warning: `syz.4.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.736138][ T6377] can: request_module (can-proto-0) failed. [ 101.336517][ T6412] dummy0 speed is unknown, defaulting to 1000 [ 101.968115][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.151'. [ 101.971698][ T6445] netlink: 165 bytes leftover after parsing attributes in process `syz.2.150'. [ 102.124828][ T6450] bridge_slave_0: left allmulticast mode [ 102.135690][ T6450] bridge_slave_0: left promiscuous mode [ 102.141666][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.162480][ T6450] bridge_slave_1: left allmulticast mode [ 102.168306][ T6450] bridge_slave_1: left promiscuous mode [ 102.174311][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.188219][ T6450] bond0: (slave bond_slave_0): Releasing backup interface [ 102.207839][ T6450] bond0: (slave bond_slave_1): Releasing backup interface [ 102.241148][ T6450] team0: Port device team_slave_0 removed [ 102.259003][ T6450] team0: Port device team_slave_1 removed [ 102.266006][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.280353][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.296106][ T6450] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 102.304576][ T6450] batman_adv: batadv0: Removing interface: virt_wifi0 [ 102.326212][ T5881] dummy0 speed is unknown, defaulting to 1000 [ 102.365154][ T6448] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.517655][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 102.686298][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 103.053069][ T6473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.090746][ T6473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.112454][ T6473] bond0 (unregistering): Released all slaves [ 103.161583][ T6487] netlink: 52 bytes leftover after parsing attributes in process `syz.0.162'. [ 103.170927][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 103.360333][ T6491] xt_CT: No such helper "pptp" [ 103.384578][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'. [ 103.676699][ T6519] sctp: [Deprecated]: syz.2.171 (pid 6519) Use of int in max_burst socket option. [ 103.676699][ T6519] Use struct sctp_assoc_value instead [ 103.768269][ T6523] dummy0 speed is unknown, defaulting to 1000 [ 103.930950][ T6529] veth1: entered promiscuous mode [ 103.936440][ T6529] vlan2: entered promiscuous mode [ 104.069532][ T6528] vlan2: entered promiscuous mode [ 104.263513][ T6537] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 104.357113][ T6553] IPVS: length: 43 != 24 [ 104.580005][ T6561] netlink: 124 bytes leftover after parsing attributes in process `syz.3.180'. [ 104.896705][ T6569] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.183'. [ 104.917883][ T6579] dummy0 speed is unknown, defaulting to 1000 [ 104.953936][ T6569] net_ratelimit: 28 callbacks suppressed [ 104.953959][ T6569] openvswitch: netlink: Message has 5 unknown bytes. [ 105.164800][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 105.240485][ T5882] IPVS: starting estimator thread 0... [ 105.361879][ T6594] IPVS: using max 28 ests per chain, 67200 per kthread [ 105.538880][ T6606] vlan0: entered promiscuous mode [ 105.608450][ T6606] team0: Failed to send port change of device vlan0 via netlink (err -105) [ 105.648420][ T6606] team0: Failed to send options change via netlink (err -105) [ 105.676188][ T6606] team0: Port device vlan0 added [ 105.714521][ T6606] syz.3.192 (6606) used greatest stack depth: 19784 bytes left [ 105.744325][ T6622] netlink: 'syz.4.197': attribute type 5 has an invalid length. [ 105.770368][ T6616] netlink: 'syz.0.196': attribute type 2 has an invalid length. [ 105.915434][ T6631] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 106.381475][ T5882] IPVS: starting estimator thread 0... [ 106.420179][ T6670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.502189][ T6668] IPVS: using max 24 ests per chain, 57600 per kthread [ 106.596538][ T6680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.627408][ T6683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.639332][ T6685] NCSI netlink: No device for ifindex 0 [ 106.754388][ T6694] openvswitch: netlink: Message has 24 unknown bytes. [ 106.761485][ T6694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.104291][ T6720] __nla_validate_parse: 9 callbacks suppressed [ 107.104310][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 107.268505][ T6725] netlink: 92 bytes leftover after parsing attributes in process `syz.0.223'. [ 107.393597][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 107.564123][ T6741] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 107.566017][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'. [ 107.581734][ T6742] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 107.619093][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'. [ 107.685593][ T6750] netlink: 'syz.0.231': attribute type 8 has an invalid length. [ 107.730252][ T6750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.137483][ T6769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.185528][ T6771] dummy0 speed is unknown, defaulting to 1000 [ 108.203468][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 108.614302][ T6777] dummy0 speed is unknown, defaulting to 1000 [ 109.156345][ T6798] xt_TPROXY: Can be used only with -p tcp or -p udp [ 109.425271][ T6808] netlink: 220 bytes leftover after parsing attributes in process `syz.2.245'. [ 109.727327][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 110.328815][ T6837] netlink: 'syz.2.252': attribute type 10 has an invalid length. [ 110.571149][ T6837] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.614992][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 110.655847][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 111.716264][ T6901] dummy0 speed is unknown, defaulting to 1000 [ 111.892461][ T6896] dummy0 speed is unknown, defaulting to 1000 [ 111.911275][ T6909] dummy0 speed is unknown, defaulting to 1000 [ 112.293805][ T6915] vlan2: entered promiscuous mode [ 112.299099][ T6915] bridge0: entered promiscuous mode [ 112.334953][ T6915] vlan2: entered allmulticast mode [ 112.344184][ T6915] bridge0: entered allmulticast mode [ 112.365600][ T6916] bridge_slave_0: left allmulticast mode [ 112.372325][ T6916] bridge_slave_0: left promiscuous mode [ 112.378450][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.406204][ T6916] bridge_slave_1: left allmulticast mode [ 112.421297][ T6916] bridge_slave_1: left promiscuous mode [ 112.444862][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.538127][ T6916] bond0: (slave bond_slave_0): Releasing backup interface [ 112.575039][ T6916] bond0: (slave bond_slave_1): Releasing backup interface [ 112.613304][ T6916] team0: Port device team_slave_0 removed [ 112.647410][ T6916] team0: Port device team_slave_1 removed [ 112.684789][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.710290][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.738079][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.758067][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.103827][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.423037][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.449244][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.456511][ T6921] netlink: 'syz.2.278': attribute type 10 has an invalid length. [ 113.456533][ T6921] __nla_validate_parse: 3 callbacks suppressed [ 113.456544][ T6921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.278'. [ 113.482132][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.495046][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.507323][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.515825][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.515999][ T6921] batadv0: entered promiscuous mode [ 113.532590][ T6921] batadv0: entered allmulticast mode [ 113.545268][ T6921] bridge0: port 1(batadv0) entered blocking state [ 113.556973][ T6921] bridge0: port 1(batadv0) entered disabled state [ 113.567406][ T6921] bridge0: port 1(batadv0) entered blocking state [ 113.574054][ T6921] bridge0: port 1(batadv0) entered forwarding state [ 113.610360][ T6920] dummy0 speed is unknown, defaulting to 1000 [ 113.643528][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.788607][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.876072][ T6931] dummy0 speed is unknown, defaulting to 1000 [ 113.896849][ T6942] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 113.999067][ T6942] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 114.036909][ T6942] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 114.050226][ T6942] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 114.053972][ T137] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 114.066966][ T137] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 114.225835][ T36] veth3: left promiscuous mode [ 114.233458][ T36] bridge0: port 1(veth3) entered disabled state [ 114.557584][ T6968] netlink: 300 bytes leftover after parsing attributes in process `syz.1.290'. [ 114.904924][ T36] bond0 (unregistering): Released all slaves [ 114.921764][ T36] bond1 (unregistering): Released all slaves [ 115.148030][ T6977] netlink: 'syz.1.292': attribute type 39 has an invalid length. [ 115.153180][ T36] tipc: Disabling bearer [ 115.214659][ T36] tipc: Left network mode [ 115.234038][ T6976] netlink: 1 bytes leftover after parsing attributes in process `syz.4.293'. [ 115.248249][ T6931] chnl_net:caif_netlink_parms(): no params data found [ 115.263246][ T6976] netlink: 1 bytes leftover after parsing attributes in process `syz.4.293'. [ 115.339576][ T6976] netlink: 56 bytes leftover after parsing attributes in process `syz.4.293'. [ 115.340963][ T6987] IPv6: Can't replace route, no match found [ 115.472418][ T6992] xt_TPROXY: Can be used only with -p tcp or -p udp [ 115.575664][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 115.593371][ T55] Bluetooth: hci4: command tx timeout [ 115.846177][ T36] hsr_slave_0: left promiscuous mode [ 115.876905][ T36] hsr_slave_1: left promiscuous mode [ 115.915378][ T36] veth1_macvtap: left promiscuous mode [ 115.951597][ T36] veth0_macvtap: left promiscuous mode [ 115.961091][ T36] veth1_vlan: left promiscuous mode [ 116.344281][ T7030] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 116.376115][ T36] team0 (unregistering): Port device vlan0 removed [ 117.086962][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.094266][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.108094][ T6931] bridge_slave_0: entered allmulticast mode [ 117.117267][ T6931] bridge_slave_0: entered promiscuous mode [ 117.218448][ T7034] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 117.219510][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.238791][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.246862][ T6931] bridge_slave_1: entered allmulticast mode [ 117.256813][ T6931] bridge_slave_1: entered promiscuous mode [ 117.414164][ T6931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.448442][ T6931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.649113][ T6931] team0: Port device team_slave_0 added [ 117.670366][ T55] Bluetooth: hci4: command tx timeout [ 117.687078][ T6931] team0: Port device team_slave_1 added [ 117.699916][ T7061] netlink: 96 bytes leftover after parsing attributes in process `syz.4.313'. [ 117.846622][ T7061] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.855926][ T7061] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.865293][ T7061] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.874204][ T7061] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.932993][ T7061] vxlan0: entered promiscuous mode [ 117.938188][ T7061] vxlan0: entered allmulticast mode [ 117.977471][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 118.028940][ T7061] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.038133][ T7061] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.047364][ T7061] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.056362][ T7061] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.255758][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.278092][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.330557][ T6931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.365730][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.374607][ T36] IPVS: stop unused estimator thread 0... [ 118.401472][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.530203][ T6931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.817643][ T6931] hsr_slave_0: entered promiscuous mode [ 118.832577][ T6931] hsr_slave_1: entered promiscuous mode [ 118.833183][ T7084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.320'. [ 118.838900][ T6931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.890167][ T6931] Cannot create hsr debugfs directory [ 119.079429][ T7100] IPv6: NLM_F_REPLACE set, but no existing node found! [ 119.114535][ T7102] sctp: [Deprecated]: syz.2.319 (pid 7102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.114535][ T7102] Use struct sctp_sack_info instead [ 119.290218][ T7111] netlink: 160 bytes leftover after parsing attributes in process `syz.0.326'. [ 119.522392][ T7121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.328'. [ 119.750433][ T55] Bluetooth: hci4: command tx timeout [ 120.062045][ T6931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.072675][ T7147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.079994][ T7147] IPv6: NLM_F_CREATE should be set when creating new route [ 120.087344][ T7147] IPv6: NLM_F_CREATE should be set when creating new route [ 120.094653][ T7147] IPv6: NLM_F_CREATE should be set when creating new route [ 120.109025][ T6931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.122777][ T6931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.137579][ T6931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.317788][ T7155] Bluetooth: MGMT ver 1.23 [ 120.394076][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.449687][ T7155] dummy0 speed is unknown, defaulting to 1000 [ 120.477673][ T6931] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.539114][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.546412][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.734638][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.740277][ T7156] dummy0 speed is unknown, defaulting to 1000 [ 120.741881][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.833968][ T55] Bluetooth: hci4: command tx timeout [ 121.905916][ T6931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.043953][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 122.177429][ T6931] veth0_vlan: entered promiscuous mode [ 122.226793][ T6931] veth1_vlan: entered promiscuous mode [ 122.487346][ T6931] veth0_macvtap: entered promiscuous mode [ 122.546001][ T10] IPVS: starting estimator thread 0... [ 122.574264][ T6931] veth1_macvtap: entered promiscuous mode [ 122.643084][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.657877][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.660861][ T7191] IPVS: using max 30 ests per chain, 72000 per kthread [ 122.689247][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.693722][ T7195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.345'. [ 122.708827][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.726956][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.776522][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.816003][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.859363][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.887513][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 122.890143][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.922406][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.959348][ T6931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.970420][ T6931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.991342][ T7204] sctp: [Deprecated]: syz.2.348 (pid 7204) Use of int in max_burst socket option. [ 122.991342][ T7204] Use struct sctp_assoc_value instead [ 123.016253][ T6931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.034790][ T6931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.322389][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.352423][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.507842][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.537700][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.242183][ T7193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.389251][ T7193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.675642][ T7258] FAULT_INJECTION: forcing a failure. [ 124.675642][ T7258] name failslab, interval 1, probability 0, space 0, times 1 [ 124.711990][ T7258] CPU: 1 UID: 0 PID: 7258 Comm: syz.2.364 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 124.712019][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 124.712029][ T7258] Call Trace: [ 124.712037][ T7258] [ 124.712045][ T7258] dump_stack_lvl+0x189/0x250 [ 124.712080][ T7258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.712104][ T7258] ? __pfx__printk+0x10/0x10 [ 124.712129][ T7258] ? __pfx___might_resched+0x10/0x10 [ 124.712145][ T7258] ? fs_reclaim_acquire+0x7d/0x100 [ 124.712173][ T7258] should_fail_ex+0x414/0x560 [ 124.712206][ T7258] should_failslab+0xa8/0x100 [ 124.712231][ T7258] __kmalloc_noprof+0xcb/0x4f0 [ 124.712250][ T7258] ? kfree+0x4d/0x440 [ 124.712267][ T7258] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 124.712292][ T7258] tomoyo_realpath_from_path+0xe3/0x5d0 [ 124.712314][ T7258] ? tomoyo_domain+0xda/0x130 [ 124.712340][ T7258] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 124.712368][ T7258] tomoyo_path_number_perm+0x1e8/0x5a0 [ 124.712397][ T7258] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 124.712444][ T7258] ? __lock_acquire+0xaac/0xd20 [ 124.712502][ T7258] ? __fget_files+0x2a/0x420 [ 124.712531][ T7258] ? __fget_files+0x3a0/0x420 [ 124.712552][ T7258] ? __fget_files+0x2a/0x420 [ 124.712587][ T7258] security_file_ioctl+0xcb/0x2d0 [ 124.712617][ T7258] __se_sys_ioctl+0x47/0x170 [ 124.712640][ T7258] do_syscall_64+0xf6/0x210 [ 124.712667][ T7258] ? clear_bhb_loop+0x45/0xa0 [ 124.712690][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.712707][ T7258] RIP: 0033:0x7f0a7898e969 [ 124.712722][ T7258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.712736][ T7258] RSP: 002b:00007f0a79797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.712755][ T7258] RAX: ffffffffffffffda RBX: 00007f0a78bb5fa0 RCX: 00007f0a7898e969 [ 124.712767][ T7258] RDX: 0000200000000140 RSI: 00000000400454d8 RDI: 0000000000000003 [ 124.712777][ T7258] RBP: 00007f0a79797090 R08: 0000000000000000 R09: 0000000000000000 [ 124.712787][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.712797][ T7258] R13: 0000000000000000 R14: 00007f0a78bb5fa0 R15: 00007ffe533d9bc8 [ 124.712827][ T7258] [ 124.714090][ T7258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.062675][ T7193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.076633][ T7262] netlink: 5 bytes leftover after parsing attributes in process `syz.4.365'. [ 125.185678][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.195575][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.205786][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.214324][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.222361][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.281793][ T7193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.319522][ T7262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.542610][ T7273] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 125.581403][ T7266] dummy0 speed is unknown, defaulting to 1000 [ 125.697912][ T7193] bridge_slave_1: left allmulticast mode [ 125.704341][ T7193] bridge_slave_1: left promiscuous mode [ 125.710780][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.740517][ T7193] bridge_slave_0: left allmulticast mode [ 125.751303][ T7193] bridge_slave_0: left promiscuous mode [ 125.763290][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.350714][ T7193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.372852][ T7193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.384697][ T7193] bond0 (unregistering): Released all slaves [ 126.864153][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 127.077469][ T7302] team0: Port device team_slave_0 removed [ 127.149162][ T7306] netlink: 'syz.4.376': attribute type 3 has an invalid length. [ 127.167546][ T7306] netlink: 3 bytes leftover after parsing attributes in process `syz.4.376'. [ 127.275816][ T55] Bluetooth: hci4: command tx timeout [ 127.747477][ T7327] netlink: 72 bytes leftover after parsing attributes in process `syz.1.380'. [ 128.040732][ T7307] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.059963][ T7307] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.080240][ T7307] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.089348][ T7307] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.263728][ T7307] vlan2: left promiscuous mode [ 128.268574][ T7307] bridge0: left promiscuous mode [ 128.294171][ T7307] vlan2: left allmulticast mode [ 128.300928][ T7307] bridge0: left allmulticast mode [ 128.389094][ T7193] hsr_slave_0: left promiscuous mode [ 128.396412][ T7193] hsr_slave_1: left promiscuous mode [ 128.402720][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.412887][ T7193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.435690][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.445982][ T7193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.470724][ T7193] veth1_macvtap: left promiscuous mode [ 128.476543][ T7193] veth0_macvtap: left promiscuous mode [ 128.482529][ T7193] veth1_vlan: left promiscuous mode [ 128.488050][ T7193] veth0_vlan: left promiscuous mode [ 128.505929][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.382'. [ 129.307034][ T7193] team0 (unregistering): Port device team_slave_1 removed [ 129.350850][ T55] Bluetooth: hci4: command tx timeout [ 129.367663][ T7193] team0 (unregistering): Port device team_slave_0 removed [ 129.761305][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 129.870287][ T7341] netem: change failed [ 129.979246][ T7351] batadv1: entered promiscuous mode [ 130.009899][ T7357] netlink: 'syz.1.387': attribute type 45 has an invalid length. [ 130.139855][ T7352] dummy0 speed is unknown, defaulting to 1000 [ 130.357670][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.387137][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.409879][ T7266] bridge_slave_0: entered allmulticast mode [ 130.442801][ T7266] bridge_slave_0: entered promiscuous mode [ 130.494074][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.514474][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.523173][ T7266] bridge_slave_1: entered allmulticast mode [ 130.535904][ T7266] bridge_slave_1: entered promiscuous mode [ 130.760943][ T7370] dummy0 speed is unknown, defaulting to 1000 [ 131.063846][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.086863][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.165654][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 131.174834][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 131.307728][ T7393] pimreg: entered allmulticast mode [ 131.317348][ T7390] pimreg: left allmulticast mode [ 131.376938][ T7266] team0: Port device team_slave_0 added [ 131.388767][ T7266] team0: Port device team_slave_1 added [ 131.430703][ T55] Bluetooth: hci4: command tx timeout [ 131.491191][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.520128][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.567954][ T7266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.609976][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.629284][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.661399][ T7266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.707908][ T7410] netlink: 92 bytes leftover after parsing attributes in process `syz.4.402'. [ 131.727214][ T7408] syzkaller1: entered promiscuous mode [ 131.733565][ T7410] openvswitch: netlink: Flow key attr not present in new flow. [ 131.741426][ T7408] syzkaller1: entered allmulticast mode [ 131.763589][ T7410] netlink: 44 bytes leftover after parsing attributes in process `syz.4.402'. [ 131.776168][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 131.786812][ T7408] syzkaller1: left promiscuous mode [ 131.796416][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 131.796547][ T7408] syzkaller1: left allmulticast mode [ 131.819695][ T7412] IPVS: length: 78 != 8 [ 131.828854][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 131.946101][ T7266] hsr_slave_0: entered promiscuous mode [ 131.962768][ T7266] hsr_slave_1: entered promiscuous mode [ 131.974637][ T7266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.986533][ T7266] Cannot create hsr debugfs directory [ 132.039899][ T7417] bridge0: port 1(batadv0) entered disabled state [ 132.159514][ T7417] bond0: (slave wlan1): Releasing backup interface [ 132.222494][ T7421] netlink: 96 bytes leftover after parsing attributes in process `syz.1.405'. [ 132.806469][ T7432] dummy0 speed is unknown, defaulting to 1000 [ 132.959299][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.023165][ T7452] syzkaller1: entered promiscuous mode [ 133.028919][ T7452] syzkaller1: entered allmulticast mode [ 133.297556][ T7467] dummy0 speed is unknown, defaulting to 1000 [ 133.453794][ T7470] dummy0 speed is unknown, defaulting to 1000 [ 133.512722][ T55] Bluetooth: hci4: command tx timeout [ 134.073597][ T7266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.140188][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 134.334210][ T7266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.379485][ T7266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.437133][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 134.478999][ T7266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.607229][ T7520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.192881][ T7551] xt_hashlimit: size too large, truncated to 1048576 [ 135.255199][ T7539] vlan2: entered allmulticast mode [ 135.276853][ T7539] bond0: entered allmulticast mode [ 135.281143][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 135.294605][ T7539] bond_slave_0: entered allmulticast mode [ 135.311170][ T7539] bond_slave_1: entered allmulticast mode [ 135.499109][ T7542] : renamed from bond0 (while UP) [ 135.637287][ T7556] xt_hashlimit: max too large, truncated to 1048576 [ 135.789369][ T7266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.936920][ T7266] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.994411][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.001697][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.076811][ T7571] netlink: 'syz.0.435': attribute type 1 has an invalid length. [ 136.194916][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.202161][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.344294][ T7581] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 136.344611][ T7582] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 136.366055][ T7266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.552811][ T7582] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.611027][ T7590] __nla_validate_parse: 2 callbacks suppressed [ 136.611048][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 136.630930][ T7581] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.658856][ T7599] netlink: 312 bytes leftover after parsing attributes in process `syz.0.440'. [ 136.683893][ T7598] netlink: 312 bytes leftover after parsing attributes in process `syz.0.440'. [ 137.009534][ T7610] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 137.078148][ T7266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.091007][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 137.202349][ T7266] veth0_vlan: entered promiscuous mode [ 137.224576][ T7266] veth1_vlan: entered promiscuous mode [ 137.305241][ T7266] veth0_macvtap: entered promiscuous mode [ 137.327640][ T7266] veth1_macvtap: entered promiscuous mode [ 137.345767][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.368920][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.393816][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.404841][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.414837][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.425431][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.437477][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.472387][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 137.478114][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.499999][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.510029][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.526957][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.543864][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.602802][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.659437][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.674736][ T7622] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 137.687698][ T7622] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 137.722392][ T7266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.731696][ T7266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.755821][ T7266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.780235][ T7266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.024577][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 138.052974][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 138.091636][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.109765][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.132683][ T7647] x_tables: duplicate underflow at hook 2 [ 138.213769][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.233772][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.272913][ T7650] netlink: 96 bytes leftover after parsing attributes in process `syz.2.453'. [ 138.330964][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.454'. [ 138.688789][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.460'. [ 138.724465][ T7667] syzkaller0: entered promiscuous mode [ 138.730001][ T7667] syzkaller0: entered allmulticast mode [ 138.809777][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.563488][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.577489][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.587608][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.604441][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.623859][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.675300][ T7689] sctp: [Deprecated]: syz.2.464 (pid 7689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.675300][ T7689] Use struct sctp_sack_info instead [ 140.815210][ T7678] dummy0: entered allmulticast mode [ 141.001975][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.079894][ T7720] IPv6: sit2: Disabled Multicast RS [ 141.090121][ T7686] dummy0 speed is unknown, defaulting to 1000 [ 141.211127][ T7724] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 141.304163][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.364628][ T7724] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 141.629022][ T7743] netlink: del zone limit has 4 unknown bytes [ 141.676556][ T55] Bluetooth: hci4: command tx timeout [ 141.823259][ T7755] __nla_validate_parse: 1 callbacks suppressed [ 141.823278][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 141.947406][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 142.329316][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.410678][ T7686] chnl_net:caif_netlink_parms(): no params data found [ 142.456027][ T7759] dummy0 speed is unknown, defaulting to 1000 [ 142.738758][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.747418][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.773389][ T7686] bridge_slave_0: entered allmulticast mode [ 142.801780][ T7686] bridge_slave_0: entered promiscuous mode [ 142.863477][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.935889][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.951687][ T7686] bridge_slave_1: entered allmulticast mode [ 142.960132][ T7686] bridge_slave_1: entered promiscuous mode [ 143.042693][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.105540][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.115405][ T36] bridge_slave_1: left allmulticast mode [ 143.121567][ T36] bridge_slave_1: left promiscuous mode [ 143.127674][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.152536][ T36] bridge_slave_0: left allmulticast mode [ 143.158210][ T36] bridge_slave_0: left promiscuous mode [ 143.169887][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.596436][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.608468][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.619466][ T36] bond0 (unregistering): Released all slaves [ 143.722729][ T7686] team0: Port device team_slave_0 added [ 143.733004][ T7686] team0: Port device team_slave_1 added [ 143.767583][ T55] Bluetooth: hci4: command tx timeout [ 143.826816][ T7806] xt_l2tp: missing protocol rule (udp|l2tpip) [ 143.834303][ T7807] netlink: 'syz.2.489': attribute type 4 has an invalid length. [ 143.887241][ T7798] dummy0 speed is unknown, defaulting to 1000 [ 144.034872][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.042406][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.069815][ T7686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.086822][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.094275][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.122674][ T7686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.182720][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 144.198075][ T7812] syzkaller0: entered promiscuous mode [ 144.204027][ T7812] syzkaller0: entered allmulticast mode [ 144.274124][ T36] hsr_slave_0: left promiscuous mode [ 144.280249][ T36] hsr_slave_1: left promiscuous mode [ 144.286366][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.294317][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.303743][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.312605][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.331774][ T36] veth1_macvtap: left promiscuous mode [ 144.337393][ T36] veth0_macvtap: left promiscuous mode [ 144.343178][ T36] veth1_vlan: left promiscuous mode [ 144.348536][ T36] veth0_vlan: left promiscuous mode [ 144.765108][ T36] team0 (unregistering): Port device team_slave_1 removed [ 144.816320][ T36] team0 (unregistering): Port device team_slave_0 removed [ 144.858883][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 145.845062][ T55] Bluetooth: hci4: command tx timeout [ 146.565387][ T7686] hsr_slave_0: entered promiscuous mode [ 146.578784][ T7686] hsr_slave_1: entered promiscuous mode [ 146.586393][ T7686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.598566][ T7686] Cannot create hsr debugfs directory [ 146.708044][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 146.946146][ T7826] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 147.356758][ T7838] vxcan5: entered allmulticast mode [ 147.397949][ T7851] nbd: socks must be embedded in a SOCK_ITEM attr [ 147.442032][ T7851] netlink: 5 bytes leftover after parsing attributes in process `syz.4.498'. [ 147.484538][ T7850] netlink: 'syz.1.503': attribute type 27 has an invalid length. [ 147.736991][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.745123][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.914892][ T55] Bluetooth: hci4: command tx timeout [ 148.013542][ T7850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.064765][ T7850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.332895][ T7850] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.364530][ T7850] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.389117][ T7850] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.438941][ T7850] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.712149][ T7854] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.754197][ T7854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.105542][ T7898] bridge0: port 3(vlan2) entered blocking state [ 149.152646][ T7901] netlink: 'syz.4.513': attribute type 11 has an invalid length. [ 149.169704][ T7901] netlink: 224 bytes leftover after parsing attributes in process `syz.4.513'. [ 149.179575][ T7898] bridge0: port 3(vlan2) entered disabled state [ 149.192991][ T7898] vlan2: entered allmulticast mode [ 149.214202][ T7898] macvlan1: entered allmulticast mode [ 149.243767][ T7898] vlan2: entered promiscuous mode [ 149.265897][ T7898] macvlan1: entered promiscuous mode [ 149.471309][ T7913] sctp: [Deprecated]: syz.0.516 (pid 7913) Use of int in maxseg socket option. [ 149.471309][ T7913] Use struct sctp_assoc_value instead [ 149.593554][ T7686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 149.666532][ T7919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 149.677121][ T7919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.695432][ T7919] dummy0: entered promiscuous mode [ 149.710362][ T7919] macsec1: entered promiscuous mode [ 149.726642][ T7919] dummy0: left promiscuous mode [ 149.778370][ T7686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 149.809271][ T7686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 149.884617][ T7686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 149.948075][ T7932] lo speed is unknown, defaulting to 1000 [ 149.967526][ T7932] lo speed is unknown, defaulting to 1000 [ 149.998261][ T7932] lo speed is unknown, defaulting to 1000 [ 150.042999][ T7932] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.123971][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.164880][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.523'. [ 150.196268][ T7932] lo speed is unknown, defaulting to 1000 [ 150.204511][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.224365][ T7932] lo speed is unknown, defaulting to 1000 [ 150.233697][ T7932] lo speed is unknown, defaulting to 1000 [ 150.253010][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.260540][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.296707][ T7932] lo speed is unknown, defaulting to 1000 [ 150.305246][ T7932] lo speed is unknown, defaulting to 1000 [ 150.326302][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.333568][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.454357][ T7686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.786492][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.903250][ T7686] veth0_vlan: entered promiscuous mode [ 150.937552][ T7686] veth1_vlan: entered promiscuous mode [ 150.998545][ T7686] veth0_macvtap: entered promiscuous mode [ 151.019444][ T7686] veth1_macvtap: entered promiscuous mode [ 151.041511][ T7958] netlink: 80 bytes leftover after parsing attributes in process `syz.0.528'. [ 151.049380][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.065669][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.078709][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.142984][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.158241][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.176174][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.197725][ T7686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.233549][ T7686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.257675][ T7686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.285956][ T7686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.489757][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.520018][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.631421][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.649605][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.738860][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 151.739616][ T7970] dummy0 speed is unknown, defaulting to 1000 [ 151.819789][ T7970] lo speed is unknown, defaulting to 1000 [ 151.841688][ T7978] dummy0 speed is unknown, defaulting to 1000 [ 151.890339][ T7978] lo speed is unknown, defaulting to 1000 [ 152.265762][ T7982] dummy0 speed is unknown, defaulting to 1000 [ 152.293283][ T7982] lo speed is unknown, defaulting to 1000 [ 152.334090][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 152.502608][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 152.532460][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.536'. [ 152.610655][ T7986] geneve2: entered promiscuous mode [ 152.616293][ T7986] geneve2: entered allmulticast mode [ 152.781025][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 152.858657][ T7995] netlink: 144 bytes leftover after parsing attributes in process `syz.2.538'. [ 152.890488][ T7995] nbd: must specify at least one socket [ 152.922616][ T7996] SET target dimension over the limit! [ 152.988407][ T7999] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 153.019508][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 153.285347][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.336736][ T8006] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.346108][ T8006] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.354911][ T8006] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.363809][ T8006] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.056481][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.187643][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.546'. [ 154.259415][ T8013] dummy0 speed is unknown, defaulting to 1000 [ 154.354849][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.405421][ T8013] lo speed is unknown, defaulting to 1000 [ 154.489093][ T8015] dummy0 speed is unknown, defaulting to 1000 [ 154.549202][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.607447][ T8015] lo speed is unknown, defaulting to 1000 [ 154.814178][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.825767][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.834609][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.844132][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.870832][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.254470][ T8022] dummy0 speed is unknown, defaulting to 1000 [ 155.296890][ T8022] lo speed is unknown, defaulting to 1000 [ 155.307560][ T36] bridge_slave_1: left allmulticast mode [ 155.325948][ T36] bridge_slave_1: left promiscuous mode [ 155.331880][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.346966][ T36] bridge_slave_0: left allmulticast mode [ 155.355979][ T36] bridge_slave_0: left promiscuous mode [ 155.364975][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.904525][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.915935][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.926406][ T36] bond0 (unregistering): Released all slaves [ 156.286912][ T8050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.698772][ T8022] chnl_net:caif_netlink_parms(): no params data found [ 156.779414][ T8077] netlink: 48 bytes leftover after parsing attributes in process `syz.0.561'. [ 156.827894][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.835776][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.885973][ T8073] batman_adv: batadv0: Interface deactivated: dummy0 [ 156.961110][ T55] Bluetooth: hci4: command tx timeout [ 156.973363][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.990023][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.117231][ T8073] bridge1: left promiscuous mode [ 157.124842][ T8073] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.135442][ T8073] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.146812][ T8073] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.155831][ T8073] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.168140][ T8073] geneve2: left promiscuous mode [ 157.173433][ T8073] geneve2: left allmulticast mode [ 157.185282][ T8073] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.194597][ T8073] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.203843][ T8073] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.212841][ T8073] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.318095][ T8081] dummy0 speed is unknown, defaulting to 1000 [ 157.395097][ T8081] lo speed is unknown, defaulting to 1000 [ 157.488582][ T36] hsr_slave_0: left promiscuous mode [ 157.501379][ T36] hsr_slave_1: left promiscuous mode [ 157.541082][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.549244][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.573085][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.582741][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.604294][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 157.638778][ T36] veth1_macvtap: left promiscuous mode [ 157.644761][ T36] veth0_macvtap: left promiscuous mode [ 157.660537][ T36] veth1_vlan: left promiscuous mode [ 157.669210][ T36] veth0_vlan: left promiscuous mode [ 158.174462][ T36] team0 (unregistering): Port device team_slave_1 removed [ 158.218275][ T36] team0 (unregistering): Port device team_slave_0 removed [ 158.655716][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.663431][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.670921][ T8022] bridge_slave_0: entered allmulticast mode [ 158.678772][ T8022] bridge_slave_0: entered promiscuous mode [ 158.714458][ T8109] batadv1: entered promiscuous mode [ 158.755109][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.766166][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.782031][ T8022] bridge_slave_1: entered allmulticast mode [ 158.796771][ T8022] bridge_slave_1: entered promiscuous mode [ 158.835069][ T8103] dummy0 speed is unknown, defaulting to 1000 [ 158.891047][ T8103] lo speed is unknown, defaulting to 1000 [ 158.966751][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.035764][ T55] Bluetooth: hci4: command 0x041b tx timeout [ 159.042537][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.193478][ T8022] team0: Port device team_slave_0 added [ 159.213645][ T8022] team0: Port device team_slave_1 added [ 159.299413][ T8127] dummy0 speed is unknown, defaulting to 1000 [ 159.332803][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.351132][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.395598][ T8022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.408925][ T8127] lo speed is unknown, defaulting to 1000 [ 159.421821][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.428958][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.455826][ T8022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.567653][ T8022] hsr_slave_0: entered promiscuous mode [ 159.575965][ T8022] hsr_slave_1: entered promiscuous mode [ 159.583188][ T8022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.591924][ T8022] Cannot create hsr debugfs directory [ 160.242205][ T8156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.313679][ T8142] team0 (unregistering): Port device team_slave_0 removed [ 160.326251][ T8142] team0 (unregistering): Port device team_slave_1 removed [ 160.393562][ T8156] netlink: 164 bytes leftover after parsing attributes in process `syz.0.584'. [ 160.412944][ T8156] netlink: 164 bytes leftover after parsing attributes in process `syz.0.584'. [ 160.429610][ T8156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.584'. [ 160.709615][ T8175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.592'. [ 160.804594][ T8172] dummy0 speed is unknown, defaulting to 1000 [ 160.832082][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 160.847402][ T8180] tipc: Can't bind to reserved service type 0 [ 160.877478][ T8172] lo speed is unknown, defaulting to 1000 [ 161.076526][ T8192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 161.113051][ T5841] Bluetooth: hci4: command 0x041b tx timeout [ 161.194802][ T8198] netlink: 'syz.1.599': attribute type 20 has an invalid length. [ 161.307577][ T8022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 161.322942][ T8022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 161.342596][ T8022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 161.365598][ T8022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 161.801598][ T8224] netlink: 44 bytes leftover after parsing attributes in process `syz.1.608'. [ 161.831432][ T8224] netlink: 43 bytes leftover after parsing attributes in process `syz.1.608'. [ 161.843872][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.854860][ T8224] netlink: 'syz.1.608': attribute type 5 has an invalid length. [ 161.863890][ T8224] netlink: 43 bytes leftover after parsing attributes in process `syz.1.608'. [ 161.951815][ T8022] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.993829][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.001169][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.063703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.070884][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.141352][ T8233] dummy0 speed is unknown, defaulting to 1000 [ 162.147806][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 162.159415][ T8233] lo speed is unknown, defaulting to 1000 [ 162.186846][ T8022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.316363][ T8243] openvswitch: netlink: Message has 20 unknown bytes. [ 162.323641][ T8243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.585333][ T8022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.726005][ T8022] veth0_vlan: entered promiscuous mode [ 162.795389][ T8022] veth1_vlan: entered promiscuous mode [ 162.910075][ T8022] veth0_macvtap: entered promiscuous mode [ 162.915103][ T8262] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 162.945630][ T8022] veth1_macvtap: entered promiscuous mode [ 163.123521][ T8262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.145376][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.167921][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 163.191853][ T5841] Bluetooth: hci4: command 0x041b tx timeout [ 163.203547][ T8273] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.215738][ T8262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.623'. [ 163.252639][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.265299][ T8022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.274879][ T8022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.286521][ T8022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.301975][ T8022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.514016][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.533143][ T8282] Bluetooth: MGMT ver 1.23 [ 163.548365][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.663684][ T8283] syzkaller1: entered promiscuous mode [ 163.669235][ T8283] syzkaller1: entered allmulticast mode [ 163.718495][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.732500][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.758177][ T8283] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 164.182521][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 164.282378][ T8320] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 164.332457][ T8320] macsec1: entered promiscuous mode [ 164.353934][ T8320] macsec1: entered allmulticast mode [ 164.369561][ T8320] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 164.539778][ T8321] macsec2: entered promiscuous mode [ 164.583562][ T8321] macsec2: entered allmulticast mode [ 164.898123][ T7193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.952923][ T8338] @ÿ: renamed from bond_slave_0 [ 165.020546][ T7193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.237579][ T7193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.306590][ T7193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.466696][ T7193] bridge_slave_1: left allmulticast mode [ 165.472622][ T7193] bridge_slave_1: left promiscuous mode [ 165.478471][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.488807][ T7193] bridge_slave_0: left allmulticast mode [ 165.495004][ T7193] bridge_slave_0: left promiscuous mode [ 165.501278][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.962570][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 166.249622][ T8385] netlink: 'syz.2.645': attribute type 32 has an invalid length. [ 166.274497][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 166.301940][ T7193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.323877][ T7193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.344622][ T7193] bond0 (unregistering): Released all slaves [ 166.429299][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.439320][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.447708][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.465505][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.477352][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.789942][ T8385] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 167.220287][ T8387] dummy0 speed is unknown, defaulting to 1000 [ 167.228383][ T8387] lo speed is unknown, defaulting to 1000 [ 167.240993][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 167.279568][ T8407] dummy0 speed is unknown, defaulting to 1000 [ 167.335189][ T8407] lo speed is unknown, defaulting to 1000 [ 167.453500][ T7193] hsr_slave_0: left promiscuous mode [ 167.470475][ T7193] hsr_slave_1: left promiscuous mode [ 167.476765][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.502861][ T7193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.523894][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.536191][ T7193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.591952][ T7193] veth1_macvtap: left promiscuous mode [ 167.597813][ T7193] veth0_macvtap: left promiscuous mode [ 167.603721][ T7193] veth1_vlan: left promiscuous mode [ 167.609650][ T7193] veth0_vlan: left promiscuous mode [ 168.117861][ T7193] team0 (unregistering): Port device team_slave_1 removed [ 168.159704][ T7193] team0 (unregistering): Port device team_slave_0 removed [ 168.550295][ T55] Bluetooth: hci4: command tx timeout [ 169.162858][ T8451] netlink: 84 bytes leftover after parsing attributes in process `syz.4.661'. [ 169.173440][ T8387] chnl_net:caif_netlink_parms(): no params data found [ 169.279512][ T8456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.664'. [ 169.432538][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.436684][ T8467] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 169.439713][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.448734][ T8467] openvswitch: netlink: Flow key attr not present in new flow. [ 169.504619][ T8387] bridge_slave_0: entered allmulticast mode [ 169.528307][ T8387] bridge_slave_0: entered promiscuous mode [ 169.568263][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.595322][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.608471][ T8387] bridge_slave_1: entered allmulticast mode [ 169.624503][ T8387] bridge_slave_1: entered promiscuous mode [ 169.633211][ T8468] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 169.887436][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.906898][ T8484] hsr_slave_0: left promiscuous mode [ 169.921619][ T8484] hsr_slave_1: left promiscuous mode [ 169.969684][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.979212][ T8488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.672'. [ 169.989926][ T8495] dummy0: left allmulticast mode [ 170.073026][ T8498] netlink: 'syz.4.675': attribute type 2 has an invalid length. [ 170.089077][ T8498] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 170.093097][ T8495] dummy0 speed is unknown, defaulting to 1000 [ 170.096979][ T8498] netlink: 224 bytes leftover after parsing attributes in process `syz.4.675'. [ 170.127367][ T8495] lo speed is unknown, defaulting to 1000 [ 170.139984][ T8387] team0: Port device team_slave_0 added [ 170.180717][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 170.229105][ T8387] team0: Port device team_slave_1 added [ 170.382133][ T8505] pim6reg1: entered promiscuous mode [ 170.387508][ T8505] pim6reg1: entered allmulticast mode [ 170.432703][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.439720][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.463415][ T8512] netlink: 128 bytes leftover after parsing attributes in process `syz.0.679'. [ 170.466884][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.630225][ T55] Bluetooth: hci4: command tx timeout [ 170.695573][ T8528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.677'. [ 170.756732][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.814032][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.935240][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.091854][ T8510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.109359][ T8510] team0: Port device bond2 added [ 171.265173][ T8543] netlink: 'syz.0.684': attribute type 10 has an invalid length. [ 171.273906][ T8543] team0: Cannot enslave team device to itself [ 171.448863][ T8387] hsr_slave_0: entered promiscuous mode [ 171.481999][ T8387] hsr_slave_1: entered promiscuous mode [ 171.773041][ T8566] netem: change failed [ 171.778244][ T8568] netlink: 140 bytes leftover after parsing attributes in process `syz.0.693'. [ 171.788586][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 171.794842][ T8559] dummy0 speed is unknown, defaulting to 1000 [ 171.812130][ T8559] lo speed is unknown, defaulting to 1000 [ 172.264541][ T8590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.697'. [ 172.291605][ T8595] x_tables: duplicate underflow at hook 3 [ 172.477451][ T8600] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 172.499072][ T8600] bond0: (slave macvlan4): making interface the new active one [ 172.514162][ T8600] bond0: (slave macvlan4): Enslaving as an active interface with an up link [ 172.658320][ T8610] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 172.686242][ T8387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.714797][ T55] Bluetooth: hci4: command tx timeout [ 172.750776][ T8387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.783021][ T8387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.807513][ T8614] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 172.843929][ T8614] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 172.879170][ T8387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.895344][ T8614] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 172.909073][ T8614] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 173.067857][ T8626] dummy0 speed is unknown, defaulting to 1000 [ 173.109636][ T8626] lo speed is unknown, defaulting to 1000 [ 173.501126][ T8643] dummy0 speed is unknown, defaulting to 1000 [ 173.509244][ T8643] lo speed is unknown, defaulting to 1000 [ 173.537915][ T8387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.762037][ T8387] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.803594][ T8664] vlan0: entered promiscuous mode [ 173.812060][ T8664] batman_adv: batadv0: Adding interface: vlan0 [ 173.840655][ T8664] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.907628][ T8664] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 173.951291][ T8650] dummy0 speed is unknown, defaulting to 1000 [ 173.959401][ T8650] lo speed is unknown, defaulting to 1000 [ 174.082404][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.089666][ T7192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.098058][ T8673] netlink: 'syz.0.722': attribute type 6 has an invalid length. [ 174.116483][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.123746][ T7192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.466951][ T8682] dummy0 speed is unknown, defaulting to 1000 [ 174.477547][ T8682] lo speed is unknown, defaulting to 1000 [ 174.790431][ T55] Bluetooth: hci4: command tx timeout [ 175.007375][ T8701] netlink: 'syz.1.730': attribute type 2 has an invalid length. [ 175.076391][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.132196][ T8703] __nla_validate_parse: 7 callbacks suppressed [ 175.132216][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 175.208880][ T8387] veth0_vlan: entered promiscuous mode [ 175.235954][ T8696] dummy0 speed is unknown, defaulting to 1000 [ 175.256887][ T8387] veth1_vlan: entered promiscuous mode [ 175.289613][ T8696] lo speed is unknown, defaulting to 1000 [ 175.618409][ T8387] veth0_macvtap: entered promiscuous mode [ 175.642218][ T8715] netlink: 'syz.1.734': attribute type 4 has an invalid length. [ 175.665893][ T8387] veth1_macvtap: entered promiscuous mode [ 175.699548][ T8721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'. [ 175.846249][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.854912][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 175.859204][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.985295][ T8736] netlink: 56 bytes leftover after parsing attributes in process `syz.4.740'. [ 176.054360][ T8387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.092880][ T8387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.103308][ T8387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.112385][ T8387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.133863][ T8737] netlink: 56 bytes leftover after parsing attributes in process `syz.4.740'. [ 176.548459][ T8760] dummy0 speed is unknown, defaulting to 1000 [ 176.555073][ T7192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.568898][ T7192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.756989][ T8760] lo speed is unknown, defaulting to 1000 [ 177.049329][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 178.776319][ T8766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.744'. [ 178.803994][ T7192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.833577][ T7192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.966721][ T8775] dummy0 speed is unknown, defaulting to 1000 [ 179.002109][ T8784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 179.011489][ T8784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 179.022042][ T8784] netlink: 'syz.4.751': attribute type 4 has an invalid length. [ 179.040150][ T8775] lo speed is unknown, defaulting to 1000 [ 179.181376][ T8793] netlink: 192 bytes leftover after parsing attributes in process `syz.4.754'. [ 179.394823][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.554526][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.702212][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.785078][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.909463][ T62] bridge_slave_1: left allmulticast mode [ 179.916766][ T62] bridge_slave_1: left promiscuous mode [ 179.922909][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.933328][ T62] bridge_slave_0: left allmulticast mode [ 179.939005][ T62] bridge_slave_0: left promiscuous mode [ 179.945297][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.277345][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.288833][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.299345][ T62] bond0 (unregistering): Released all slaves [ 180.634281][ T8810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.677817][ T8818] __nla_validate_parse: 2 callbacks suppressed [ 180.677835][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 180.931207][ T8818] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.131515][ T8832] netlink: 'syz.4.765': attribute type 10 has an invalid length. [ 181.137541][ T8834] netlink: 'syz.4.765': attribute type 10 has an invalid length. [ 181.252642][ T8832] veth1_macvtap: left promiscuous mode [ 181.268770][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.269025][ T8832] team0: Device veth1_macvtap failed to register rx_handler [ 181.286273][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.311124][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.323350][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.332676][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.341839][ T8834] team0: Device veth1_macvtap failed to register rx_handler [ 181.475002][ T8841] dummy0 speed is unknown, defaulting to 1000 [ 181.508820][ T8841] lo speed is unknown, defaulting to 1000 [ 181.573787][ T62] hsr_slave_0: left promiscuous mode [ 181.583739][ T62] hsr_slave_1: left promiscuous mode [ 181.591236][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.598769][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.607297][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.617596][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.657582][ T62] veth1_macvtap: left promiscuous mode [ 181.668107][ T62] veth0_macvtap: left promiscuous mode [ 181.675760][ T62] veth1_vlan: left promiscuous mode [ 181.681815][ T62] veth0_vlan: left promiscuous mode [ 181.823972][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 182.210286][ T62] team0 (unregistering): Port device team_slave_1 removed [ 182.257302][ T62] team0 (unregistering): Port device team_slave_0 removed [ 182.721169][ T8842] dummy0 speed is unknown, defaulting to 1000 [ 182.738454][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.774'. [ 182.748352][ T8842] lo speed is unknown, defaulting to 1000 [ 182.756935][ T8862] dummy0 speed is unknown, defaulting to 1000 [ 182.843259][ T8862] lo speed is unknown, defaulting to 1000 [ 183.154050][ T8890] netlink: 3 bytes leftover after parsing attributes in process `syz.1.779'. [ 183.202152][ T8890] batadv1: entered promiscuous mode [ 183.207461][ T8890] batadv1: entered allmulticast mode [ 183.330465][ T8842] chnl_net:caif_netlink_parms(): no params data found [ 183.430293][ T5841] Bluetooth: hci4: command tx timeout [ 183.494135][ T8903] x_tables: duplicate underflow at hook 3 [ 183.517561][ T8901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.780'. [ 183.544438][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.552313][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.559618][ T8842] bridge_slave_0: entered allmulticast mode [ 183.568227][ T8842] bridge_slave_0: entered promiscuous mode [ 183.577639][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.585031][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.593170][ T8842] bridge_slave_1: entered allmulticast mode [ 183.601252][ T8842] bridge_slave_1: entered promiscuous mode [ 183.687391][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.710213][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.829879][ T8842] team0: Port device team_slave_0 added [ 183.856096][ T8842] team0: Port device team_slave_1 added [ 183.962070][ T8919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.010948][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.017949][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.021449][ T8924] netlink: 'syz.4.782': attribute type 27 has an invalid length. [ 184.083462][ T8842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.111869][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.129936][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.156855][ T8842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.176331][ T8924] vlan0: left promiscuous mode [ 184.259691][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.269062][ T8931] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.277495][ T8931] batman_adv: batadv0: Interface activated: dummy0 [ 184.285245][ T8931] batadv0: mtu less than device minimum [ 184.293022][ T8931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.295728][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 184.305052][ T8931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.325353][ T8931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.337605][ T8931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.349637][ T8931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.361872][ T8931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.374024][ T8931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.385913][ T8931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.499952][ T8842] hsr_slave_0: entered promiscuous mode [ 184.507579][ T8842] hsr_slave_1: entered promiscuous mode [ 184.550408][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 184.573305][ T8943] dummy0 speed is unknown, defaulting to 1000 [ 184.593551][ T8943] lo speed is unknown, defaulting to 1000 [ 185.042702][ T8976] Bluetooth: MGMT ver 1.23 [ 185.191464][ T8984] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.804'. [ 185.517290][ T55] Bluetooth: hci4: command tx timeout [ 185.690691][ T9003] sctp: [Deprecated]: syz.0.810 (pid 9003) Use of int in max_burst socket option. [ 185.690691][ T9003] Use struct sctp_assoc_value instead [ 185.733969][ T9005] netlink: 'syz.4.812': attribute type 12 has an invalid length. [ 185.741918][ T9005] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.812'. [ 185.828163][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.812'. [ 185.865119][ T9007] dummy0 speed is unknown, defaulting to 1000 [ 185.875012][ T9010] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 185.879276][ T9007] lo speed is unknown, defaulting to 1000 [ 185.901183][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 185.970320][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 186.081726][ T9017] team0: Port device bond2 removed [ 186.089968][ T9017] bond0: (slave macvlan4): Releasing active interface [ 186.131131][ T9024] syz_tun: entered allmulticast mode [ 186.139379][ T9019] netlink: 44 bytes leftover after parsing attributes in process `syz.0.817'. [ 186.148888][ T9019] netlink: 'syz.0.817': attribute type 2 has an invalid length. [ 186.149988][ T9017] Unknown options in mask 700 [ 186.167876][ T9023] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 186.189977][ T8842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.203211][ T9018] syz_tun: left allmulticast mode [ 186.209531][ T8842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.231288][ T8842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.255197][ T8842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.708752][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.793658][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.855483][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.862757][ T7192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.916348][ T9048] dummy0 speed is unknown, defaulting to 1000 [ 186.954832][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.962105][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.025286][ T9048] lo speed is unknown, defaulting to 1000 [ 187.092786][ T9063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.104189][ T9062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.158977][ T9062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 187.174358][ T9062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.194811][ T9062] dummy0: entered promiscuous mode [ 187.201296][ T9062] macsec1: entered promiscuous mode [ 187.206700][ T9062] macsec1: entered allmulticast mode [ 187.212712][ T9062] dummy0: entered allmulticast mode [ 187.224273][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 187.237546][ T9062] dummy0: left allmulticast mode [ 187.247181][ T9062] dummy0: left promiscuous mode [ 187.352673][ T9063] vlan2: entered promiscuous mode [ 187.362874][ T9063] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 187.377582][ T9063] vlan2: entered allmulticast mode [ 187.386553][ T9063] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 187.400688][ T9058] dummy0 speed is unknown, defaulting to 1000 [ 187.409562][ T9058] lo speed is unknown, defaulting to 1000 [ 187.421928][ T8842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.590658][ T55] Bluetooth: hci4: command 0x040f tx timeout [ 187.593884][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 188.269315][ T9100] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 188.303502][ T9100] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.840'. [ 188.338212][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.355082][ T9103] netlink: 'syz.2.841': attribute type 21 has an invalid length. [ 188.364732][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 188.412414][ T9100] vlan3: entered allmulticast mode [ 188.433629][ T9100] batadv0: entered allmulticast mode [ 188.574546][ T8842] veth0_vlan: entered promiscuous mode [ 188.607915][ T8842] veth1_vlan: entered promiscuous mode [ 188.652363][ T9120] Cannot find del_set index 1 as target [ 188.686102][ T9116] dummy0 speed is unknown, defaulting to 1000 [ 188.708451][ T9116] lo speed is unknown, defaulting to 1000 [ 188.802228][ T8842] veth0_macvtap: entered promiscuous mode [ 188.849111][ T8842] veth1_macvtap: entered promiscuous mode [ 188.924817][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.980531][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 188.980624][ T9124] dummy0 speed is unknown, defaulting to 1000 [ 188.997957][ T9124] lo speed is unknown, defaulting to 1000 [ 189.005982][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.128524][ T8842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.148815][ T8842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.176107][ T8842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.199977][ T8842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.321677][ T9129] vlan2: entered promiscuous mode [ 189.327837][ T9129] bond0: entered promiscuous mode [ 189.333323][ T9129] vlan2: entered allmulticast mode [ 189.338568][ T9129] bond0: entered allmulticast mode [ 189.538215][ T9137] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 189.672322][ T5841] Bluetooth: hci4: command 0x040f tx timeout [ 189.735796][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.753331][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.913278][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.945400][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.125490][ T9154] xt_HMARK: proto mask must be zero with L3 mode [ 190.214218][ T9150] dummy0 speed is unknown, defaulting to 1000 [ 190.237489][ T9150] lo speed is unknown, defaulting to 1000 [ 190.261163][ T9158] bridge0: entered promiscuous mode [ 190.268157][ T9158] bridge0: port 1(macvlan5) entered blocking state [ 190.279390][ T9158] bridge0: port 1(macvlan5) entered disabled state [ 190.289509][ T9158] macvlan5: entered allmulticast mode [ 190.297724][ T9158] bridge0: entered allmulticast mode [ 190.397459][ T9158] macvlan5: left allmulticast mode [ 190.409771][ T9158] bridge0: left allmulticast mode [ 190.433361][ T9158] bridge0: left promiscuous mode [ 190.917207][ T9166] ipip0: entered promiscuous mode [ 190.942727][ T9166] ipip0: entered allmulticast mode [ 191.047337][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.238986][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.391181][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.774773][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.867154][ T12] bridge_slave_1: left allmulticast mode [ 191.873414][ T12] bridge_slave_1: left promiscuous mode [ 191.879979][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.889405][ T12] bridge_slave_0: left allmulticast mode [ 191.895545][ T12] bridge_slave_0: left promiscuous mode [ 191.901423][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.228335][ T9179] FAULT_INJECTION: forcing a failure. [ 192.228335][ T9179] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 192.267356][ T9179] CPU: 1 UID: 0 PID: 9179 Comm: syz.4.864 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 192.267385][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.267395][ T9179] Call Trace: [ 192.267403][ T9179] [ 192.267412][ T9179] dump_stack_lvl+0x189/0x250 [ 192.267449][ T9179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.267476][ T9179] ? __pfx__printk+0x10/0x10 [ 192.267511][ T9179] should_fail_ex+0x414/0x560 [ 192.267546][ T9179] _copy_to_user+0x31/0xb0 [ 192.267573][ T9179] simple_read_from_buffer+0xe1/0x170 [ 192.267603][ T9179] proc_fail_nth_read+0x1df/0x250 [ 192.267632][ T9179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.267661][ T9179] ? rw_verify_area+0x258/0x650 [ 192.267681][ T9179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.267707][ T9179] vfs_read+0x1fd/0x980 [ 192.267734][ T9179] ? __pfx___mutex_lock+0x10/0x10 [ 192.267763][ T9179] ? __pfx_vfs_read+0x10/0x10 [ 192.267785][ T9179] ? __fget_files+0x2a/0x420 [ 192.267815][ T9179] ? __fget_files+0x3a0/0x420 [ 192.267837][ T9179] ? __fget_files+0x2a/0x420 [ 192.267871][ T9179] ksys_read+0x145/0x250 [ 192.267897][ T9179] ? __pfx_ksys_read+0x10/0x10 [ 192.267922][ T9179] ? do_syscall_64+0xba/0x210 [ 192.267952][ T9179] do_syscall_64+0xf6/0x210 [ 192.267986][ T9179] ? clear_bhb_loop+0x45/0xa0 [ 192.268011][ T9179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.268029][ T9179] RIP: 0033:0x7f04add8d37c [ 192.268046][ T9179] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.268063][ T9179] RSP: 002b:00007f04aec3b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.268083][ T9179] RAX: ffffffffffffffda RBX: 00007f04adfb5fa0 RCX: 00007f04add8d37c [ 192.268097][ T9179] RDX: 000000000000000f RSI: 00007f04aec3b0a0 RDI: 0000000000000005 [ 192.268109][ T9179] RBP: 00007f04aec3b090 R08: 0000000000000000 R09: 0000000000000000 [ 192.268120][ T9179] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.268132][ T9179] R13: 0000000000000000 R14: 00007f04adfb5fa0 R15: 00007ffc61d2c6e8 [ 192.268165][ T9179] [ 192.663888][ T9190] __nla_validate_parse: 1 callbacks suppressed [ 192.663908][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 192.798467][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.816297][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.837189][ T12] bond0 (unregistering): Released all slaves [ 192.871564][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.882876][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.892785][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.901407][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.910566][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.223371][ T9191] dummy0 speed is unknown, defaulting to 1000 [ 193.328416][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 193.394412][ T9191] lo speed is unknown, defaulting to 1000 [ 193.478297][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 193.677008][ T12] hsr_slave_0: left promiscuous mode [ 193.734643][ T12] hsr_slave_1: left promiscuous mode [ 193.747578][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.764728][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.784526][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.796683][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.824130][ T12] veth1_macvtap: left promiscuous mode [ 193.829811][ T12] veth0_macvtap: left promiscuous mode [ 193.840985][ T12] veth1_vlan: left promiscuous mode [ 193.846318][ T12] veth0_vlan: left promiscuous mode [ 194.267048][ T12] team0 (unregistering): Port device team_slave_1 removed [ 194.304821][ T12] team0 (unregistering): Port device team_slave_0 removed [ 194.393109][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.740133][ T9247] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.881'. [ 194.950458][ T55] Bluetooth: hci4: command tx timeout [ 194.992265][ T9255] dummy0 speed is unknown, defaulting to 1000 [ 195.001565][ T9255] lo speed is unknown, defaulting to 1000 [ 195.001650][ T9264] netlink: 'syz.2.882': attribute type 12 has an invalid length. [ 195.050359][ T9264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.882'. [ 195.082235][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 195.217648][ T9191] chnl_net:caif_netlink_parms(): no params data found [ 195.301097][ T9279] netlink: 165 bytes leftover after parsing attributes in process `syz.4.889'. [ 195.326930][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 195.423843][ T9287] xfrm1: entered promiscuous mode [ 195.441227][ T9287] xfrm1: entered allmulticast mode [ 195.679781][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.691424][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.698691][ T9191] bridge_slave_0: entered allmulticast mode [ 195.709305][ T9191] bridge_slave_0: entered promiscuous mode [ 195.846960][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.859830][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.867251][ T9191] bridge_slave_1: entered allmulticast mode [ 195.878194][ T9191] bridge_slave_1: entered promiscuous mode [ 195.910214][ T9303] veth0_to_bridge: entered promiscuous mode [ 195.914713][ T9301] dummy0 speed is unknown, defaulting to 1000 [ 195.929977][ T9301] lo speed is unknown, defaulting to 1000 [ 195.936247][ T9302] veth0_to_bridge: left promiscuous mode [ 196.065870][ T9304] dummy0 speed is unknown, defaulting to 1000 [ 196.107785][ T9314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.895'. [ 196.123565][ T9304] lo speed is unknown, defaulting to 1000 [ 196.185177][ T9191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.318615][ T9191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.383120][ T9191] team0: Port device team_slave_0 added [ 196.394544][ T9191] team0: Port device team_slave_1 added [ 196.547713][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.555838][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.582692][ T9191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.032344][ T55] Bluetooth: hci4: command tx timeout [ 197.135811][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.166567][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.193274][ T9191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.315736][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 197.387746][ T9191] hsr_slave_0: entered promiscuous mode [ 197.395805][ T9191] hsr_slave_1: entered promiscuous mode [ 197.564833][ T9348] dummy0 speed is unknown, defaulting to 1000 [ 197.599045][ T9348] lo speed is unknown, defaulting to 1000 [ 198.175114][ T9378] dummy0 speed is unknown, defaulting to 1000 [ 198.184384][ T9380] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 198.193809][ T9378] lo speed is unknown, defaulting to 1000 [ 198.239037][ T9380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.239244][ T9382] __nla_validate_parse: 1 callbacks suppressed [ 198.239258][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.912'. [ 198.538347][ T9389] nbd: nbd0 already in use [ 198.642840][ T9191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.679887][ T9191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.724752][ T9397] xt_ecn: cannot match TCP bits for non-tcp packets [ 198.737309][ T9191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.767485][ T9191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.008645][ T9401] net_ratelimit: 13 callbacks suppressed [ 199.008666][ T9401] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.020506][ T9191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.034523][ T9406] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 199.047214][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 199.062568][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 199.069491][ T9191] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.090125][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.097346][ T7192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.106093][ T9407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.121491][ T9407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.128688][ T55] Bluetooth: hci4: command tx timeout [ 199.168454][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.175774][ T7192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.588265][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 200.044796][ T9191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.126222][ T9191] veth0_vlan: entered promiscuous mode [ 200.164152][ T9191] veth1_vlan: entered promiscuous mode [ 200.342679][ T9191] veth0_macvtap: entered promiscuous mode [ 200.383351][ T9191] veth1_macvtap: entered promiscuous mode [ 200.533830][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.622155][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.656537][ T9191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.680614][ T9191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.702298][ T9191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.725928][ T9191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.899621][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.917337][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.963990][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.976066][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.148973][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.935'. [ 201.190407][ T5833] Bluetooth: hci4: command tx timeout [ 201.342153][ T9472] netlink: zone id is out of range [ 201.347647][ T9472] netlink: zone id is out of range [ 201.354653][ T9472] netlink: zone id is out of range [ 201.359824][ T9472] netlink: zone id is out of range [ 201.365093][ T9472] netlink: zone id is out of range [ 201.370363][ T9472] netlink: zone id is out of range [ 201.375585][ T9472] netlink: zone id is out of range [ 201.381715][ T9472] netlink: zone id is out of range [ 201.386932][ T9472] netlink: zone id is out of range [ 201.563738][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 201.592701][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 201.599189][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 201.599205][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 201.620445][ T9482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.940'. [ 201.627009][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 201.639661][ T9477] netlink: 44 bytes leftover after parsing attributes in process `syz.0.940'. [ 201.655632][ T9484] vlan3: entered promiscuous mode [ 201.663899][ T9484] bridge0: entered promiscuous mode [ 201.669331][ T9484] vlan3: entered allmulticast mode [ 201.680451][ T9484] bridge0: entered allmulticast mode [ 201.854757][ T9491] FAULT_INJECTION: forcing a failure. [ 201.854757][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.868712][ T9491] CPU: 1 UID: 0 PID: 9491 Comm: syz.2.947 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 201.868741][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.868752][ T9491] Call Trace: [ 201.868759][ T9491] [ 201.868766][ T9491] dump_stack_lvl+0x189/0x250 [ 201.868802][ T9491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.868829][ T9491] ? __pfx__printk+0x10/0x10 [ 201.868864][ T9491] should_fail_ex+0x414/0x560 [ 201.868897][ T9491] _copy_to_user+0x31/0xb0 [ 201.868922][ T9491] simple_read_from_buffer+0xe1/0x170 [ 201.868946][ T9491] proc_fail_nth_read+0x1df/0x250 [ 201.868972][ T9491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.869000][ T9491] ? rw_verify_area+0x258/0x650 [ 201.869021][ T9491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.869047][ T9491] vfs_read+0x1fd/0x980 [ 201.869074][ T9491] ? __pfx___mutex_lock+0x10/0x10 [ 201.869101][ T9491] ? __pfx_vfs_read+0x10/0x10 [ 201.869122][ T9491] ? __fget_files+0x2a/0x420 [ 201.869152][ T9491] ? __fget_files+0x3a0/0x420 [ 201.869174][ T9491] ? __fget_files+0x2a/0x420 [ 201.869208][ T9491] ksys_read+0x145/0x250 [ 201.869232][ T9491] ? __pfx_ksys_read+0x10/0x10 [ 201.869257][ T9491] ? do_syscall_64+0xba/0x210 [ 201.869287][ T9491] do_syscall_64+0xf6/0x210 [ 201.869313][ T9491] ? clear_bhb_loop+0x45/0xa0 [ 201.869336][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.869352][ T9491] RIP: 0033:0x7f0a7898d37c [ 201.869370][ T9491] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 201.869386][ T9491] RSP: 002b:00007f0a79797030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.869408][ T9491] RAX: ffffffffffffffda RBX: 00007f0a78bb5fa0 RCX: 00007f0a7898d37c [ 201.869421][ T9491] RDX: 000000000000000f RSI: 00007f0a797970a0 RDI: 0000000000000005 [ 201.869433][ T9491] RBP: 00007f0a79797090 R08: 0000000000000000 R09: 0000000000000000 [ 201.869444][ T9491] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 201.869455][ T9491] R13: 0000000000000000 R14: 00007f0a78bb5fa0 R15: 00007ffe533d9bc8 [ 201.869487][ T9491] [ 202.276119][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 202.365123][ T9514] trusted_key: syz.4.950 sent an empty control message without MSG_MORE. [ 202.389215][ T9519] netlink: 'syz.2.952': attribute type 21 has an invalid length. [ 202.413863][ T9519] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.708033][ T9532] dummy0 speed is unknown, defaulting to 1000 [ 202.726167][ T9532] lo speed is unknown, defaulting to 1000 [ 203.112310][ T9561] netlink: 'syz.4.966': attribute type 9 has an invalid length. [ 203.297434][ T9569] __nla_validate_parse: 2 callbacks suppressed [ 203.297454][ T9569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.968'. [ 203.406048][ T9573] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 203.433201][ T9569] bridge0: port 4(gretap0) entered blocking state [ 203.457518][ T9569] bridge0: port 4(gretap0) entered disabled state [ 203.475218][ T9569] gretap0: entered allmulticast mode [ 203.504465][ T9569] gretap0: entered promiscuous mode [ 203.666200][ T9576] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.677251][ T9576] bond3: (slave bond4): making interface the new active one [ 203.687292][ T9576] bond3: (slave bond4): Enslaving as an active interface with an up link [ 203.704785][ T9577] macsec3: entered promiscuous mode [ 203.711110][ T9577] bond3: entered promiscuous mode [ 203.716180][ T9577] bond4: entered promiscuous mode [ 203.722213][ T9577] macsec3: entered allmulticast mode [ 203.727535][ T9577] bond3: entered allmulticast mode [ 203.732881][ T9577] bond4: entered allmulticast mode [ 204.245872][ T30] audit: type=1800 audit(1746137328.452:2): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.980" name=04 dev="tmpfs" ino=1272 res=0 errno=0 [ 204.292759][ T9609] dummy0 speed is unknown, defaulting to 1000 [ 204.313417][ T9609] lo speed is unknown, defaulting to 1000 [ 204.371994][ T9612] netlink: 'syz.1.979': attribute type 1 has an invalid length. [ 204.616973][ T9625] sctp: [Deprecated]: syz.0.982 (pid 9625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.616973][ T9625] Use struct sctp_sack_info instead [ 204.773727][ T9627] tipc: Enabling of bearer rejected, failed to enable media [ 204.983503][ T9636] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 205.023211][ T9636] dummy0 speed is unknown, defaulting to 1000 [ 205.081634][ T9636] lo speed is unknown, defaulting to 1000 [ 205.139002][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 205.431189][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 205.466478][ T9653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.991'. [ 205.503656][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.991'. [ 205.540454][ T9658] sctp: [Deprecated]: syz.1.992 (pid 9658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.540454][ T9658] Use struct sctp_sack_info instead [ 205.565126][ T9658] netlink: 'syz.1.992': attribute type 10 has an invalid length. [ 205.582851][ T9648] netlink: 'syz.4.989': attribute type 10 has an invalid length. [ 205.610181][ T9648] netlink: 40 bytes leftover after parsing attributes in process `syz.4.989'. [ 205.614396][ T9663] netlink: 128 bytes leftover after parsing attributes in process `syz.2.993'. [ 205.649670][ T9648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.690324][ T9648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.702623][ T9648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.706099][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 205.728022][ T9648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.739516][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 205.744085][ T9648] team0: Port device geneve0 added [ 205.838263][ T9665] netlink: 124 bytes leftover after parsing attributes in process `syz.2.993'. [ 205.919401][ T9667] netlink: 'syz.0.994': attribute type 64 has an invalid length. [ 206.260803][ T9691] veth1_to_team: entered promiscuous mode [ 206.266929][ T9691] net_ratelimit: 492 callbacks suppressed [ 206.266947][ T9691] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 206.588990][ T9706] netlink: 'syz.2.1009': attribute type 39 has an invalid length. [ 206.617887][ T9708] netlink: 'syz.4.1010': attribute type 8 has an invalid length. [ 206.707750][ T9712] batman_adv: batadv0: Adding interface: dummy0 [ 206.727658][ T9712] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.755673][ T9712] batman_adv: batadv0: Interface activated: dummy0 [ 206.773942][ T9713] batadv0: mtu less than device minimum [ 206.781095][ T9713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.792713][ T9713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.804084][ T9713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.815413][ T9713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.826753][ T9713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.838069][ T9713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.849369][ T9713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.860800][ T9713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.296395][ T9738] veth1_to_team: left promiscuous mode [ 207.377339][ T9738] xfrm1: left promiscuous mode [ 207.400947][ T9746] netlink: 'syz.4.1022': attribute type 29 has an invalid length. [ 207.409205][ T9738] xfrm1: left allmulticast mode [ 207.415888][ T9745] netlink: 'syz.4.1022': attribute type 29 has an invalid length. [ 207.713609][ T9764] netlink: 'syz.0.1027': attribute type 10 has an invalid length. [ 207.721893][ T9764] batadv0: entered promiscuous mode [ 207.727253][ T9764] batadv0: entered allmulticast mode [ 207.734811][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.754030][ T9764] netlink: 'syz.0.1027': attribute type 10 has an invalid length. [ 207.925413][ T9772] dummy0 speed is unknown, defaulting to 1000 [ 207.933594][ T9772] lo speed is unknown, defaulting to 1000 [ 208.135461][ T9776] IPVS: Error connecting to the multicast addr [ 208.148686][ T9776] IPVS: Error connecting to the multicast addr [ 208.388431][ T9785] __nla_validate_parse: 11 callbacks suppressed [ 208.388452][ T9785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1031'. [ 208.734168][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 209.019971][ T9827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'. [ 209.040988][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 209.388281][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1054'. [ 209.492376][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1058'. [ 209.794710][ T9866] netlink: 'syz.4.1063': attribute type 10 has an invalid length. [ 209.808695][ T9866] team0: Port device syz_tun added [ 210.241335][ T9880] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.322074][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 210.568158][ T9895] dummy0 speed is unknown, defaulting to 1000 [ 210.589059][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 210.611327][ T9895] lo speed is unknown, defaulting to 1000 [ 210.847419][ T9911] dummy0 speed is unknown, defaulting to 1000 [ 210.923279][ T9911] lo speed is unknown, defaulting to 1000 [ 210.929942][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 210.955630][ T9913] smc: net device bond0 applied user defined pnetid SYZ0 [ 210.975255][ T9913] smc: net device bond0 erased user defined pnetid SYZ0 [ 210.993123][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1078'. [ 211.512301][ T9947] bond0: option resend_igmp: invalid value (262144) [ 211.518965][ T9947] bond0: option resend_igmp: allowed values 0 - 255 [ 211.669788][ T9958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.825824][T10010] netlink: 'syz.1.1097': attribute type 6 has an invalid length. [ 212.853895][T10012] netlink: 'syz.1.1097': attribute type 6 has an invalid length. [ 212.856777][T10011] dummy0 speed is unknown, defaulting to 1000 [ 212.875534][T10011] lo speed is unknown, defaulting to 1000 [ 212.939075][T10015] ------------[ cut here ]------------ [ 212.944790][T10015] memcpy: detected field-spanning write (size 512) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 212.966708][T10015] WARNING: CPU: 0 PID: 10015 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 212.976480][T10015] Modules linked in: [ 212.980473][T10015] CPU: 0 UID: 0 PID: 10015 Comm: syz.1.1098 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 212.992819][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.003312][T10015] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 213.009004][T10015] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 213.029316][T10015] RSP: 0018:ffffc9000c177920 EFLAGS: 00010246 [ 213.036251][T10015] RAX: 606be6df87abb900 RBX: ffff88803063bc68 RCX: ffff8880524c5a00 [ 213.044424][T10015] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 213.053017][T10015] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 213.061259][T10015] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000200 [ 213.069360][T10015] R13: 1ffff9200182ef4e R14: ffffc9000c177a94 R15: 0000000000000200 [ 213.077416][T10015] FS: 00007f3ab306c6c0(0000) GS:ffff8881260c4000(0000) knlGS:0000000000000000 [ 213.086449][T10015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.093559][T10015] CR2: 00007f3ab306bf98 CR3: 000000005b2a4000 CR4: 00000000003526f0 [ 213.101616][T10015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.109655][T10015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.117704][T10015] Call Trace: [ 213.121048][T10015] [ 213.124023][T10015] ip6_route_info_create+0x629/0xa70 [ 213.129388][T10015] ip6_route_add+0x29/0x2f0 [ 213.134486][T10015] ? ipv6_route_ioctl+0x313/0x480 [ 213.139566][T10015] ipv6_route_ioctl+0x35c/0x480 [ 213.144694][T10015] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 213.150361][T10015] inet6_ioctl+0x219/0x280 [ 213.154833][T10015] ? __pfx_inet6_ioctl+0x10/0x10 [ 213.159944][T10015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.166037][T10015] sock_do_ioctl+0xd9/0x300 [ 213.170686][T10015] ? __pfx_sock_do_ioctl+0x10/0x10 [ 213.175863][T10015] ? __lock_acquire+0xaac/0xd20 [ 213.180843][T10015] sock_ioctl+0x576/0x790 [ 213.185246][T10015] ? __pfx_sock_ioctl+0x10/0x10 [ 213.190212][T10015] ? __fget_files+0x3a0/0x420 [ 213.194956][T10015] ? __fget_files+0x2a/0x420 [ 213.199606][T10015] ? bpf_lsm_file_ioctl+0x9/0x20 [ 213.204634][T10015] ? __pfx_sock_ioctl+0x10/0x10 [ 213.209538][T10015] __se_sys_ioctl+0xf9/0x170 [ 213.214258][T10015] do_syscall_64+0xf6/0x210 [ 213.218813][T10015] ? clear_bhb_loop+0x45/0xa0 [ 213.223593][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.229523][T10015] RIP: 0033:0x7f3ab218e969 [ 213.234255][T10015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.254246][T10015] RSP: 002b:00007f3ab306c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.262827][T10015] RAX: ffffffffffffffda RBX: 00007f3ab23b5fa0 RCX: 00007f3ab218e969 [ 213.270914][T10015] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000003 [ 213.278933][T10015] RBP: 00007f3ab2210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 213.287017][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.295127][T10015] R13: 0000000000000000 R14: 00007f3ab23b5fa0 R15: 00007fffc710a398 [ 213.303347][T10015] [ 213.306403][T10015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.313808][T10015] CPU: 0 UID: 0 PID: 10015 Comm: syz.1.1098 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 213.325918][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.335980][T10015] Call Trace: [ 213.339270][T10015] [ 213.342202][T10015] dump_stack_lvl+0x99/0x250 [ 213.346831][T10015] ? __asan_memcpy+0x40/0x70 [ 213.351438][T10015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.356724][T10015] ? __pfx__printk+0x10/0x10 [ 213.361330][T10015] panic+0x2db/0x790 [ 213.365245][T10015] ? __pfx_panic+0x10/0x10 [ 213.369722][T10015] ? show_trace_log_lvl+0x4fb/0x550 [ 213.374953][T10015] __warn+0x31b/0x4b0 [ 213.378972][T10015] ? ipv6_addr_prefix+0x124/0x1d0 [ 213.384098][T10015] ? ipv6_addr_prefix+0x124/0x1d0 [ 213.389130][T10015] report_bug+0x2be/0x4f0 [ 213.393466][T10015] ? ipv6_addr_prefix+0x124/0x1d0 [ 213.398502][T10015] ? ipv6_addr_prefix+0x124/0x1d0 [ 213.403538][T10015] ? ipv6_addr_prefix+0x126/0x1d0 [ 213.408573][T10015] handle_bug+0x84/0x160 [ 213.412822][T10015] exc_invalid_op+0x1a/0x50 [ 213.417338][T10015] asm_exc_invalid_op+0x1a/0x20 [ 213.422192][T10015] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 213.427957][T10015] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 213.447679][T10015] RSP: 0018:ffffc9000c177920 EFLAGS: 00010246 [ 213.453778][T10015] RAX: 606be6df87abb900 RBX: ffff88803063bc68 RCX: ffff8880524c5a00 [ 213.461777][T10015] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 213.469777][T10015] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 213.477770][T10015] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000200 [ 213.485770][T10015] R13: 1ffff9200182ef4e R14: ffffc9000c177a94 R15: 0000000000000200 [ 213.493800][T10015] ip6_route_info_create+0x629/0xa70 [ 213.499118][T10015] ip6_route_add+0x29/0x2f0 [ 213.503636][T10015] ? ipv6_route_ioctl+0x313/0x480 [ 213.508675][T10015] ipv6_route_ioctl+0x35c/0x480 [ 213.513542][T10015] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 213.518970][T10015] inet6_ioctl+0x219/0x280 [ 213.523412][T10015] ? __pfx_inet6_ioctl+0x10/0x10 [ 213.528389][T10015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.534409][T10015] sock_do_ioctl+0xd9/0x300 [ 213.538945][T10015] ? __pfx_sock_do_ioctl+0x10/0x10 [ 213.544073][T10015] ? __lock_acquire+0xaac/0xd20 [ 213.548948][T10015] sock_ioctl+0x576/0x790 [ 213.553300][T10015] ? __pfx_sock_ioctl+0x10/0x10 [ 213.558160][T10015] ? __fget_files+0x3a0/0x420 [ 213.562852][T10015] ? __fget_files+0x2a/0x420 [ 213.567543][T10015] ? bpf_lsm_file_ioctl+0x9/0x20 [ 213.572496][T10015] ? __pfx_sock_ioctl+0x10/0x10 [ 213.577361][T10015] __se_sys_ioctl+0xf9/0x170 [ 213.581971][T10015] do_syscall_64+0xf6/0x210 [ 213.586505][T10015] ? clear_bhb_loop+0x45/0xa0 [ 213.591204][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.597104][T10015] RIP: 0033:0x7f3ab218e969 [ 213.601525][T10015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.621158][T10015] RSP: 002b:00007f3ab306c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.629849][T10015] RAX: ffffffffffffffda RBX: 00007f3ab23b5fa0 RCX: 00007f3ab218e969 [ 213.637825][T10015] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000003 [ 213.645803][T10015] RBP: 00007f3ab2210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 213.653784][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.661764][T10015] R13: 0000000000000000 R14: 00007f3ab23b5fa0 R15: 00007fffc710a398 [ 213.669762][T10015] [ 213.673079][T10015] Kernel Offset: disabled [ 213.677406][T10015] Rebooting in 86400 seconds..