last executing test programs: 5.379801847s ago: executing program 3 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x8, 0x6, 0x4, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x10, 0x8, 0x849}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000def685a278a6628cf318564100", @ANYRES16=r2, @ANYBLOB="010027bd7000fadbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000004005a80"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000940)={'gre0\x00', 0x0, 0x8, 0x700, 0x3ff, 0x6, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x68, 0x0, 0x22, 0x4, 0x0, @local, @broadcast, {[@rr={0x7, 0xf, 0x53, [@rand_addr=0x64010102, @private=0xa010101, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "fcbd04c9f9d371f2842f027e5b58"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@remote, @loopback}, &(0x7f0000000340)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x0, 0x92, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), &(0x7f00000005c0), 0xfffffffffffffc81, 0x2c, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r7 = socket$nl_generic(0x11, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102}, {0x16, 0x7c, 0x0, @rand_addr=0x64010102}}}}}, 0x0) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000380)={r6, 0x1, 0x6, @remote}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4, 0x2, 0x5192}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @initdev}, &(0x7f0000000480)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)) socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f00000009c0)="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", 0xfb, 0x4, &(0x7f0000000ac0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x83, 0x4}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)) 5.131430595s ago: executing program 3 (id=115): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0xa, [@broadcast, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @broadcast]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x2}}, 0x26) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000029000000340000000101"], 0x18}, 0x4000000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x164, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x140, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x99}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x50000000000}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x184, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x134, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x130, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbba}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x54aa3290}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe67}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6be9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x45fe8264}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x12c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}]}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x27e6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc5}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6fd4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELTABLE={0x1b4, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x98, 0x6, "080a5e014ad26a3b805254e343bf5ebcb936fefa8eeee3f1a048b74930e76c17bc8300aa1d881cc82de3ec572c5a259c6a41e38e3e48648584b45c5b87f4ef2e781164426eb2c7df55e3395dc5ef9f247f4263d559e61a372d62822ee4c92574ac5f2e9b0dc3d50be0f448c3419fdc3b7505b0e8aa10d19827bc1755ef9d65c136d2df04c8817f5e0de15e4c385141dd400ab085"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xca, 0x6, "85f8c433718a129c8fa8990b1a43a44187d092bc48fe89a2cd64c605ea5fcb93dccc50451c3d42c7cb942debaa42816847838b70e8491e57606c77d6b4eead355bc1d5493d6dccdf94837dd7cebc427e991b14b1b81a1a984762363ffa8e86f162add0238327f82f310149363011e06b8d35a7e24ff98480393c3c533706c02a3cd14104b2896928a64d5810dc321393d90d953d54b9c9a1ec364f49cd7558698313232e1684241a5e4a4c2f35850767f34c9a13b696f71f43103617fb524d6e905d848f2749"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x74, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x738}, 0x1, 0x0, 0x0, 0x24000000}, 0x8011) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="007d5775f4b3d9974bc348800007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x880) 4.164170371s ago: executing program 4 (id=122): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/100}}}}}}, 0x0) 4.026316054s ago: executing program 4 (id=125): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802110000000802110000015050505050500000000000", @ANYRES8=r0], 0x40}}, 0x0) 2.932432116s ago: executing program 2 (id=130): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @remote, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000002c0)="79ef34395d4c410d25e52319c6a502980fd70906f311e78ea6dce2f7034f7998430f21880804822ef849375a", 0x2c}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendto$inet6(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 2.841096194s ago: executing program 2 (id=131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="618e38850ee1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x87}}}}}}}, 0x0) 2.78964991s ago: executing program 2 (id=132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r1, 0x1, 0x0, 0x100000, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x4008000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022abdd67000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="28000e00680402000400821a01770006000000ffffffffffff000001000500000002000000000100"], 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="b40000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800040000e40000140001000000000000000000cc0c3ae27f00000114000100fe8000000000000000000000000000aa2c0002"], 0xb4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYBLOB], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x8841) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010b000a0000000000000e00000008000300", @ANYRES32=r9], 0x1c}}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x4008000) r12 = socket$inet(0x2, 0x4000000805, 0x0) listen(r12, 0x5) sendmmsg(r12, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000001"], 0x18}}], 0x2, 0x844) (async) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd090030120300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) (async) socket$inet_sctp(0x2, 0x5, 0x84) 2.049093002s ago: executing program 1 (id=133): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x20) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c, 0x0, 0x600}}], 0x1, 0x0) 2.048377954s ago: executing program 4 (id=135): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a, 0x0, 0x20], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.991735495s ago: executing program 2 (id=136): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000980)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYBLOB="2550e61b060aa3ce542ac975ed129767789ae17a61047cddf4ddc603b1fdade3ebd5d049cd185cefed141ce3dedbe55b695f94188460cc4cc7b3e7467d780cdf823908aeab367447dc650d96e695db8f6931fd82c839db25a1ddef92a38ed9a6068bd014454b95b0ec06b0270520a73f3190d16d58d726feb6880e65a343fc88b8aaf040", @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec05444180d0000493a00fc000000000000000000000000000000008000000000000000000000000000010200907800000000e8928eb79ce96018b08800000000fe80000000000000000000000000002dfe8000000000000000000000000000aa1100000000000000fafb17c163a3040b7758ba1b5be6d88a9121102d5bfcc3063817ab1c3599"], 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000", @ANYRES16=r6, @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) syz_emit_ethernet(0x6a, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x4000) unshare(0x62040200) mmap(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0xa19cc000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40000) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000)=r9, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r12, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004300)="dc53410c028336dd2edc80341a8ed1eddb7a666f426f671c2334281380dd7b98", 0x20}, {&(0x7f0000000780)="4cdd3b8b18257694ae8b637b5c4147d1a6dd59775e694104a33f3f06f1136766573635a7ffe52379e3f33e6a5f044ac2bab7344e9d994f2ba8a2899bf5918743c6e37df42acaea8c3667e421d9709ff182f6792ccffebb0f7dea5d3ff3276a0b23275595edf85ac8506f4a9a1476a856697f35bf80b01da3676be928a2504fbd13472064b86a2a9a1b21a114907b140002f12ba75fb17047e0bf4745f6d1b2c02573e77f0f87868ce24a85f8d3a520f50b3a4a5b8ed16a", 0xb7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="324d86ee95cf0d1e5585e3279efe4fd0b6dafbb8048d24b39011f56d7a3e1e36818fa7d4910a423ba628d2adf685f7851c5ac3c9d7af25a03fc032808300000000000000000000000000000000000000e14b959416747e592f14514f0000000000000000000000000000276688950a2ad029bb0d21ac8493c49ac9ea1c3ba7e3fd4382c35790f754169b5eee17607fecb03b73fc747603fdfa4a5cabaa204e265367659473bce6d49f933c513488c5eac87e19c6736ad2149beb4b67987fdaeb2db67987c5880028015814a7af905b5ace6a4dd2f864008dc9233052bcc0cd2b8556a18539672b36cd9de9cf904364991901af647a398a424c6d98c2903e220582a1bef6c7001a1e48f0c055cb56b9d9f37eda6354fb973bacb8033a9b325732b52bfaf654e4652d00"/309, 0x135}, {&(0x7f0000006cc0)="9adaf615e5f5caf2dbb930eb4bcf83a7d5ab7d2880e4d75510dc058f0589b593507d47a2ca9b9e99e17e94105b4e27d6d5d400a38307094ba788d8e215f310fdddb0ca1e2c967def94c13173db119bbdeac74519", 0x54}], 0x2}}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000000a80)="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", 0x11c}, {&(0x7f0000007400)="2007958f55c3d9b287d30db0fb5ae3315c802a94fd6b45d491c96f01932d498bf38d4f4a939c2dda011380827e0027e5b1550379df10d44eae40bc853e152b6d0b639e15585c6a1a02f872741c1f19c86ca55a3f912a7dadf2922bfbf003af2c5a417734db649c805cd509", 0x6b}], 0x2}}], 0x3, 0x4840) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="5fc840a2b263ebd0b0512d8aa541b376d6f44ed8a08010b51e24b0e5f551f33a86122edbb4060ede618c4ef70f1c192bbdbc4aec808846e9f7a5314f57ef352c29977e7c9e7ce7d9c2d2487ee058fc23e91e6bcc2911682e8e7ca4d37f2803dd4f0894b3a253353588647f11b80db12a4d47b21084c0c60362ab773f637f34891b2ba9115a949a1659c4058ea9355a6892f5bbfa85cdef7f79f6bda16b4f27741192cee940a5b8595eb87dea3c3da28d78be25ff58bcebda971d083379758d8301f321f017d77da346cd1e079f038b141cf9333696c2a6952010326c9418cee313cf481e", @ANYRES8=r11, @ANYRES32=0x0, @ANYBLOB="91"], 0x20) connect$bt_l2cap(r3, &(0x7f0000000040), 0xe) 1.891751196s ago: executing program 4 (id=137): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040000", 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) writev(r7, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000780)="18943582cfc95a4c17de1524e11fa76ef3de37aa294129b5724faee81b4a4dfaf38ea0d1898a56e4606b0eb66c172bfe4a74249a4a1892e26e83ebddb30dc3da36d840eb2a8fa3242601623cacd868eb44e8404ef6d4be9abde6577533f15a8ae4862751092f90d2ef49fc3a1167bcca03427709f911fa58a13c192495baae341afe37c81c375382b33d27d2", 0x8c}, {&(0x7f0000000840)="05dedd1cf5a912d99e4887503ea2ae090f87bed8a5c47601276eceb374be0aadf4d797eaf590f3f15a75c5ffd55de9b4f353088573e5abea5dbde6f70426e0fa6cf00132cff410003b4cff2666b634fd0bc7b700caf45d51f9bb8637e97ef44ae89243a6d1629548cf9ea6d741a361d44e8a989f818bcd86f5cfd3c0c78f984de09e17b72b962ac5573b0dc52ec80f3864b0595f9008dcc1d17ea1b1bd5ecabee7e79dfa99ce85c9fb56214e7b8a82ddd4af7875a6d3115e6a91eec12c69f35edab787", 0xc3}], 0x3) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0045a8abade7d5dce0357379705c00002e2b4f41501f2945d0ccecbf7a5ee5cdee1a9a6595eac2", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000800050001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5421400020077673100"/86], 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000040), 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.83872977s ago: executing program 3 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000000)=0x7, 0x4) 1.808758055s ago: executing program 1 (id=140): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x236, 0xffffffffffffff80}}}}}}, 0x0) (fail_nth: 2) 1.243955946s ago: executing program 1 (id=141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001740)=""/198, 0xc6}], 0x2}, 0x10101) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4044004) 1.141724939s ago: executing program 3 (id=142): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (fail_nth: 2) 1.058414114s ago: executing program 0 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.048473774s ago: executing program 2 (id=144): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d00)="5c00000012006bab9a4626df2290ea85cbf0f43d76b04c2e043fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/235, 0xeb}, {&(0x7f0000000d80)=""/4029, 0xfbd}, {&(0x7f00000009c0)=""/233, 0xe9}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f0000000000)=""/64, 0x40}], 0x9}, 0x20) 930.039405ms ago: executing program 0 (id=145): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0xd8, 0x10, 0xffffff1f, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_VF_PORTS={0x78, 0x18, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'ip6gretap\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x9c43}, @IFLA_PORT_VF={0x8, 0x1, 0x7ff}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "94ab77714cd00a0679f822a0b42cb076"}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '&\'%%^$\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d628f1606318bc3e671f9205cad552bd"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "db2f4863e3a2abead9be4f4e18fd9131"}]}]}]}, 0xd8}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @dev, {[@rr={0x7, 0x3}, @timestamp={0x44, 0x18, 0x8a, 0x0, 0x0, [0x8, 0xffffffff, 0xffffffff, 0x1, 0xffff]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@rand_addr=0x64010100}, {@loopback, 0x200}, {@multicast2}, {}, {@multicast2}, {@private}]}]}}}}}}}, 0x0) 845.24922ms ago: executing program 0 (id=146): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000400)={{0x3, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x7}}, {0x4}}]}]}, 0x58}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0xa, 0x6) (async) r7 = socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f00000000c0)=@fragment={0x2e, 0x0, 0x9, 0x1, 0x0, 0x2, 0x65}, 0x8) (async) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f00000000c0)=@fragment={0x2e, 0x0, 0x9, 0x1, 0x0, 0x2, 0x65}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) write(r8, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) (async) write(r8, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r10, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r10, 0x1, 0x6, @local}, 0xff47) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$netlink(0x10, 0x3, 0x0) 841.136638ms ago: executing program 4 (id=147): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x44, 0x14, 0x800, 0x64c, 0x25dfdbfe, {0x2, 0x80, 0x8, 0xfd, r3}, [@IFA_TARGET_NETNSID={0xfffffffffffffff5, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffff}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x5, 0x6, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000140)) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002a000b00000009000000000000000000"], 0x14}}, 0x0) 500.106653ms ago: executing program 0 (id=148): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/95, 0x5f}], 0x1}, 0x117}], 0x1, 0x2, 0x0) 499.263902ms ago: executing program 4 (id=149): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x20, 0x200000000000008f, &(0x7f0000001880)=ANY=[@ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x2a, 0x0, 0x1800000, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) (async) mmap(&(0x7f0000142000/0x2000)=nil, 0x2000, 0x3000002, 0x20010, r0, 0xf633b000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async, rerun: 64) unshare(0x6a040000) (async, rerun: 64) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x20000400) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000caf600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="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"], 0x184}}, 0x0) (async) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r6}, 0x10) (async, rerun: 32) r8 = socket$kcm(0xa, 0x5, 0x0) (rerun: 32) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 434.927716ms ago: executing program 0 (id=150): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}}]}, 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1402, 0x20, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400084c}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bond\x00'}) listen(r0, 0x4) 373.565416ms ago: executing program 1 (id=151): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100010026bd700000000000ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c00110000000000000000000000000000000000ac1414bb000000000000000000000000ac1efe"], 0xec}, 0x1, 0x0, 0x0, 0x815}, 0x20000140) 246.680804ms ago: executing program 1 (id=152): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x100, 0x29}}}}}}}, 0x0) 246.400688ms ago: executing program 3 (id=153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="618e38850ee1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @remote, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x87, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x1, 0x8001, 0x4}]}}}}}}}}, 0x0) 116.041611ms ago: executing program 2 (id=154): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 115.47398ms ago: executing program 0 (id=155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a0002000000080017000300000008001300000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x1, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {}, {0x1, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xfed3, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x44, 0x0, 0x207, 0x0, 0x0, {0x4b}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 109.431342ms ago: executing program 3 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=157): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0xd8, 0x10, 0xffffff1f, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_VF_PORTS={0x78, 0x18, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'ip6gretap\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x9c43}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "94ab77714cd00a0679f822a0b42cb076"}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '&\'%%^$\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d628f1606318bc3e671f9205cad552bd"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "db2f4863e3a2abead9be4f4e18fd9131"}]}]}]}, 0xd8}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @dev, {[@rr={0x7, 0x3}, @timestamp={0x44, 0x18, 0x8a, 0x0, 0x0, [0x8, 0xffffffff, 0xffffffff, 0x1, 0xffff]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@rand_addr=0x64010100}, {@loopback, 0x200}, {@multicast2}, {}, {@multicast2}, {@private}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 68.553659][ T5819] cgroup: Unknown subsys name 'net' [ 68.695595][ T5819] cgroup: Unknown subsys name 'cpuset' [ 68.703318][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.108917][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.514269][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.520646][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.333717][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.361116][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.371190][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.392418][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.400167][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.409069][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.418210][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.437210][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.451833][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.459777][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.565681][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.573640][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.581260][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.592154][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.599668][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.608569][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.616433][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.624663][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.651257][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.659351][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.705034][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.715574][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.723738][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.732259][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.740812][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.878832][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.977477][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 73.036930][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.045249][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.052823][ T5829] bridge_slave_0: entered allmulticast mode [ 73.059597][ T5829] bridge_slave_0: entered promiscuous mode [ 73.087769][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.094980][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.102319][ T5829] bridge_slave_1: entered allmulticast mode [ 73.108889][ T5829] bridge_slave_1: entered promiscuous mode [ 73.192574][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.206396][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.279420][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.288125][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.295331][ T5833] bridge_slave_0: entered allmulticast mode [ 73.302287][ T5833] bridge_slave_0: entered promiscuous mode [ 73.324275][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.331730][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.338924][ T5833] bridge_slave_1: entered allmulticast mode [ 73.346124][ T5833] bridge_slave_1: entered promiscuous mode [ 73.360069][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 73.372440][ T5829] team0: Port device team_slave_0 added [ 73.378433][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 73.406188][ T5829] team0: Port device team_slave_1 added [ 73.412237][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 73.438302][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.450854][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.513835][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.520817][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.547093][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.566175][ T5833] team0: Port device team_slave_0 added [ 73.574544][ T5833] team0: Port device team_slave_1 added [ 73.583868][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.590831][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.617264][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.698128][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.705303][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.731757][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.744123][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.751233][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.777233][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.796851][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.804377][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.811746][ T5837] bridge_slave_0: entered allmulticast mode [ 73.818352][ T5837] bridge_slave_0: entered promiscuous mode [ 73.859827][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.867190][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.874615][ T5837] bridge_slave_1: entered allmulticast mode [ 73.881992][ T5837] bridge_slave_1: entered promiscuous mode [ 73.894752][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.902426][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.909540][ T5839] bridge_slave_0: entered allmulticast mode [ 73.916479][ T5839] bridge_slave_0: entered promiscuous mode [ 73.923548][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.930645][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.940972][ T5842] bridge_slave_0: entered allmulticast mode [ 73.947628][ T5842] bridge_slave_0: entered promiscuous mode [ 73.960254][ T5829] hsr_slave_0: entered promiscuous mode [ 73.966675][ T5829] hsr_slave_1: entered promiscuous mode [ 73.989671][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.997713][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.005496][ T5839] bridge_slave_1: entered allmulticast mode [ 74.012654][ T5839] bridge_slave_1: entered promiscuous mode [ 74.019265][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.026792][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.034154][ T5842] bridge_slave_1: entered allmulticast mode [ 74.040780][ T5842] bridge_slave_1: entered promiscuous mode [ 74.066748][ T5833] hsr_slave_0: entered promiscuous mode [ 74.073166][ T5833] hsr_slave_1: entered promiscuous mode [ 74.079726][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.087797][ T5833] Cannot create hsr debugfs directory [ 74.095102][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.107169][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.185150][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.196966][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.218506][ T5837] team0: Port device team_slave_0 added [ 74.227542][ T5837] team0: Port device team_slave_1 added [ 74.235875][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.254074][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.292509][ T5839] team0: Port device team_slave_0 added [ 74.323092][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.330070][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.356472][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.370441][ T5839] team0: Port device team_slave_1 added [ 74.400315][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.407651][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.434178][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.455912][ T5842] team0: Port device team_slave_0 added [ 74.463966][ T5842] team0: Port device team_slave_1 added [ 74.471637][ T54] Bluetooth: hci0: command tx timeout [ 74.513172][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.520151][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.546796][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.552024][ T54] Bluetooth: hci1: command tx timeout [ 74.561026][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.569757][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.596462][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.636927][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.644129][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.670599][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.706840][ T5837] hsr_slave_0: entered promiscuous mode [ 74.712556][ T54] Bluetooth: hci2: command tx timeout [ 74.712831][ T54] Bluetooth: hci3: command tx timeout [ 74.723326][ T5837] hsr_slave_1: entered promiscuous mode [ 74.729565][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.738370][ T5837] Cannot create hsr debugfs directory [ 74.761244][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.768236][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.794534][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.805524][ T54] Bluetooth: hci4: command tx timeout [ 74.829220][ T5839] hsr_slave_0: entered promiscuous mode [ 74.835615][ T5839] hsr_slave_1: entered promiscuous mode [ 74.841782][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.849356][ T5839] Cannot create hsr debugfs directory [ 74.918553][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.931616][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.966139][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.992704][ T5842] hsr_slave_0: entered promiscuous mode [ 74.998844][ T5842] hsr_slave_1: entered promiscuous mode [ 75.006551][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.014370][ T5842] Cannot create hsr debugfs directory [ 75.028493][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.124957][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.146266][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.156227][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.165976][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.263698][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.275312][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.286738][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.314831][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.368648][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.379386][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.390754][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.400039][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.453519][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.466417][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.477243][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.503147][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.576566][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.585630][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.602590][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.643882][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.651229][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.665324][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.690069][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.697189][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.707159][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.714276][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.745082][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.757260][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.764385][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.825589][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.836574][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.866788][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.873962][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.885204][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.892366][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.926982][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.981373][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.990443][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.015040][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.036173][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.043332][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.054727][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.061944][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.084764][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.118144][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.125313][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.142969][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.150099][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.286030][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.347405][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.378226][ T5829] veth0_vlan: entered promiscuous mode [ 76.390140][ T5829] veth1_vlan: entered promiscuous mode [ 76.504347][ T5833] veth0_vlan: entered promiscuous mode [ 76.534917][ T5829] veth0_macvtap: entered promiscuous mode [ 76.553179][ T54] Bluetooth: hci0: command tx timeout [ 76.572399][ T5833] veth1_vlan: entered promiscuous mode [ 76.594981][ T5829] veth1_macvtap: entered promiscuous mode [ 76.624685][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.631901][ T54] Bluetooth: hci1: command tx timeout [ 76.638917][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.676577][ T5833] veth0_macvtap: entered promiscuous mode [ 76.694474][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.707329][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.726338][ T5833] veth1_macvtap: entered promiscuous mode [ 76.750225][ T5842] veth0_vlan: entered promiscuous mode [ 76.765402][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.791070][ T54] Bluetooth: hci3: command tx timeout [ 76.801558][ T54] Bluetooth: hci2: command tx timeout [ 76.805466][ T5842] veth1_vlan: entered promiscuous mode [ 76.831668][ T5839] veth0_vlan: entered promiscuous mode [ 76.844019][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.863482][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.872416][ T54] Bluetooth: hci4: command tx timeout [ 76.881743][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.890484][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.908527][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.921628][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.934455][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.960359][ T5839] veth1_vlan: entered promiscuous mode [ 76.968634][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.980049][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.993614][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.004837][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.013856][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.023102][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.033558][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.069788][ T5842] veth0_macvtap: entered promiscuous mode [ 77.121684][ T5842] veth1_macvtap: entered promiscuous mode [ 77.158810][ T5837] veth0_vlan: entered promiscuous mode [ 77.171330][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.179966][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.194768][ T5837] veth1_vlan: entered promiscuous mode [ 77.228707][ T5839] veth0_macvtap: entered promiscuous mode [ 77.242279][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.253165][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.263466][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.275173][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.286380][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.306160][ T5839] veth1_macvtap: entered promiscuous mode [ 77.321641][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.333439][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.343384][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.355004][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.365843][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.386402][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.398214][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.408201][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.419008][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.428947][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.440299][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.452242][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.463131][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.465946][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.471247][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.487718][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.496779][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.505568][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.523837][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.534806][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.545027][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.556088][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.569016][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.580403][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.592467][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.604759][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.613830][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.622965][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.632029][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.652758][ T5837] veth0_macvtap: entered promiscuous mode [ 77.665078][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.675932][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.700554][ T5837] veth1_macvtap: entered promiscuous mode [ 77.753187][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.767985][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.778313][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.789011][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.799721][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.810324][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.822030][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.835017][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.846590][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.859100][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.863393][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.867601][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.909868][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.921640][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.933133][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.943710][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.953583][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.964135][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.973986][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.984787][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.996654][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.047151][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.077759][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.087151][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.096050][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.128099][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.139318][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.168264][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.240675][ T5915] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 78.302527][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.322234][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.322935][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.347502][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.414855][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.441952][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.479256][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.537278][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.545623][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.569788][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.615622][ T5925] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.631574][ T54] Bluetooth: hci0: command tx timeout [ 78.653480][ T5928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 78.664978][ T5930] xt_hashlimit: max too large, truncated to 1048576 [ 78.674845][ T5930] No such timeout policy "syz1" [ 78.693678][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.711609][ T54] Bluetooth: hci1: command tx timeout [ 78.871625][ T54] Bluetooth: hci2: command tx timeout [ 78.878435][ T5148] Bluetooth: hci3: command tx timeout [ 78.951630][ T54] Bluetooth: hci4: command tx timeout [ 79.129025][ T5952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.397992][ T5967] FAULT_INJECTION: forcing a failure. [ 79.397992][ T5967] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.423139][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.0.17 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 79.423171][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.423187][ T5967] Call Trace: [ 79.423195][ T5967] [ 79.423204][ T5967] dump_stack_lvl+0x241/0x360 [ 79.423245][ T5967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.423272][ T5967] ? __pfx__printk+0x10/0x10 [ 79.423307][ T5967] should_fail_ex+0x424/0x570 [ 79.423340][ T5967] _copy_from_user+0x2d/0xb0 [ 79.423365][ T5967] copy_msghdr_from_user+0xb3/0x580 [ 79.423389][ T5967] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 79.423407][ T5967] ? __fget_files+0x2a/0x420 [ 79.423452][ T5967] ? __fget_files+0x2a/0x420 [ 79.423486][ T5967] __sys_sendmsg+0x20a/0x360 [ 79.423517][ T5967] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.423579][ T5967] ? do_syscall_64+0xb6/0x230 [ 79.423610][ T5967] do_syscall_64+0xf3/0x230 [ 79.423638][ T5967] ? clear_bhb_loop+0x45/0xa0 [ 79.423660][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.423684][ T5967] RIP: 0033:0x7f446b78d169 [ 79.423705][ T5967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.423722][ T5967] RSP: 002b:00007f446c618038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.423743][ T5967] RAX: ffffffffffffffda RBX: 00007f446b9a5fa0 RCX: 00007f446b78d169 [ 79.423758][ T5967] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 79.423771][ T5967] RBP: 00007f446c618090 R08: 0000000000000000 R09: 0000000000000000 [ 79.423782][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.423794][ T5967] R13: 0000000000000000 R14: 00007f446b9a5fa0 R15: 00007ffddae5e218 [ 79.423818][ T5967] [ 79.960191][ T5959] syzkaller0: entered promiscuous mode [ 79.976370][ T5959] syzkaller0: entered allmulticast mode [ 80.078333][ T5983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21'. [ 80.266893][ T5996] FAULT_INJECTION: forcing a failure. [ 80.266893][ T5996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.323170][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.3.22 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 80.323201][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.323213][ T5996] Call Trace: [ 80.323220][ T5996] [ 80.323229][ T5996] dump_stack_lvl+0x241/0x360 [ 80.323263][ T5996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.323290][ T5996] ? __pfx__printk+0x10/0x10 [ 80.323324][ T5996] should_fail_ex+0x424/0x570 [ 80.323361][ T5996] _copy_from_user+0x2d/0xb0 [ 80.323387][ T5996] copy_msghdr_from_user+0xb3/0x580 [ 80.323418][ T5996] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 80.323437][ T5996] ? __fget_files+0x2a/0x420 [ 80.323467][ T5996] ? __fget_files+0x2a/0x420 [ 80.323500][ T5996] __sys_sendmmsg+0x361/0x7b0 [ 80.323535][ T5996] ? __pfx___sys_sendmmsg+0x10/0x10 [ 80.323585][ T5996] ? rcu_read_lock_any_held+0xbb/0x160 [ 80.323609][ T5996] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 80.323634][ T5996] ? vfs_write+0xb29/0xd10 [ 80.323661][ T5996] ? ksys_write+0x24e/0x2d0 [ 80.323684][ T5996] ? __mutex_unlock_slowpath+0x229/0x800 [ 80.323732][ T5996] ? ksys_write+0x275/0x2d0 [ 80.323759][ T5996] __x64_sys_sendmmsg+0xa0/0xb0 [ 80.323786][ T5996] do_syscall_64+0xf3/0x230 [ 80.323813][ T5996] ? clear_bhb_loop+0x45/0xa0 [ 80.323835][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.323852][ T5996] RIP: 0033:0x7f753f98d169 [ 80.323869][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.323884][ T5996] RSP: 002b:00007f75407bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.323904][ T5996] RAX: ffffffffffffffda RBX: 00007f753fba5fa0 RCX: 00007f753f98d169 [ 80.323918][ T5996] RDX: 0000000000000001 RSI: 00002000000049c0 RDI: 0000000000000003 [ 80.323929][ T5996] RBP: 00007f75407bf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.323941][ T5996] R10: 0000000030000840 R11: 0000000000000246 R12: 0000000000000001 [ 80.323952][ T5996] R13: 0000000000000000 R14: 00007f753fba5fa0 R15: 00007ffef7925bb8 [ 80.323977][ T5996] [ 80.721112][ T54] Bluetooth: hci0: command tx timeout [ 80.752860][ T6007] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 80.797220][ T6007] netlink: 224 bytes leftover after parsing attributes in process `syz.3.23'. [ 80.806927][ T54] Bluetooth: hci1: command tx timeout [ 80.951508][ T54] Bluetooth: hci2: command tx timeout [ 80.951600][ T5148] Bluetooth: hci3: command tx timeout [ 81.031234][ T5148] Bluetooth: hci4: command tx timeout [ 82.467543][ T5983] vti0: entered promiscuous mode [ 82.474886][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 82.712737][ T6047] FAULT_INJECTION: forcing a failure. [ 82.712737][ T6047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.786552][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.2.31 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 82.786583][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.786596][ T6047] Call Trace: [ 82.786603][ T6047] [ 82.786612][ T6047] dump_stack_lvl+0x241/0x360 [ 82.786646][ T6047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.786674][ T6047] ? __pfx__printk+0x10/0x10 [ 82.786707][ T6047] should_fail_ex+0x424/0x570 [ 82.786739][ T6047] _copy_from_user+0x2d/0xb0 [ 82.786766][ T6047] copy_msghdr_from_user+0xb3/0x580 [ 82.786791][ T6047] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 82.786809][ T6047] ? __fget_files+0x2a/0x420 [ 82.786841][ T6047] ? __fget_files+0x2a/0x420 [ 82.786874][ T6047] __sys_sendmmsg+0x361/0x7b0 [ 82.786909][ T6047] ? __pfx___sys_sendmmsg+0x10/0x10 [ 82.786960][ T6047] ? rcu_read_lock_any_held+0xbb/0x160 [ 82.786984][ T6047] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 82.787010][ T6047] ? vfs_write+0xb29/0xd10 [ 82.787036][ T6047] ? ksys_write+0x24e/0x2d0 [ 82.787058][ T6047] ? __mutex_unlock_slowpath+0x229/0x800 [ 82.787107][ T6047] ? ksys_write+0x275/0x2d0 [ 82.787147][ T6047] __x64_sys_sendmmsg+0xa0/0xb0 [ 82.787181][ T6047] do_syscall_64+0xf3/0x230 [ 82.787209][ T6047] ? clear_bhb_loop+0x45/0xa0 [ 82.787231][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.787249][ T6047] RIP: 0033:0x7fbaba58d169 [ 82.787266][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.787282][ T6047] RSP: 002b:00007fbabb337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.787304][ T6047] RAX: ffffffffffffffda RBX: 00007fbaba7a5fa0 RCX: 00007fbaba58d169 [ 82.787318][ T6047] RDX: 0000000000000001 RSI: 0000200000007180 RDI: 0000000000000003 [ 82.787330][ T6047] RBP: 00007fbabb337090 R08: 0000000000000000 R09: 0000000000000000 [ 82.787342][ T6047] R10: 0000000004004800 R11: 0000000000000246 R12: 0000000000000001 [ 82.787354][ T6047] R13: 0000000000000000 R14: 00007fbaba7a5fa0 R15: 00007ffd7f7a89e8 [ 82.787383][ T6047] [ 83.076304][ T6050] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 83.085228][ T6050] netlink: 224 bytes leftover after parsing attributes in process `syz.0.32'. [ 83.171980][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.33'. [ 83.370665][ T6060] netlink: 44 bytes leftover after parsing attributes in process `syz.2.35'. [ 83.535018][ T6048] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET) [ 83.737364][ T6077] Zero length message leads to an empty skb [ 83.839152][ T6048] team0 (unregistering): Port device team_slave_0 removed [ 83.855792][ T6048] team0 (unregistering): Port device team_slave_1 removed [ 83.938571][ T6082] netlink: 'syz.2.43': attribute type 1 has an invalid length. [ 83.971230][ T6082] netlink: 224 bytes leftover after parsing attributes in process `syz.2.43'. [ 84.053661][ T6087] Bluetooth: MGMT ver 1.23 [ 84.266220][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 84.397569][ T6107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.53'. [ 84.944418][ T6125] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 85.134576][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.64'. [ 85.174449][ T6134] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 85.185522][ T6134] netlink: 'syz.2.64': attribute type 2 has an invalid length. [ 85.198686][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.64'. [ 85.237950][ T6140] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.606187][ T6157] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 85.656105][ T6157] netlink: 224 bytes leftover after parsing attributes in process `syz.0.71'. [ 85.718813][ T6153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.737439][ T6160] netlink: 168 bytes leftover after parsing attributes in process `syz.1.74'. [ 85.906881][ T5917] IPVS: starting estimator thread 0... [ 85.972476][ T6153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.984937][ T6178] netlink: 'syz.3.78': attribute type 4 has an invalid length. [ 86.015311][ T6173] IPVS: using max 31 ests per chain, 74400 per kthread [ 86.043197][ T6157] netlink: 288 bytes leftover after parsing attributes in process `syz.0.71'. [ 86.219359][ T6153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.383009][ T6153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.405637][ T6195] netlink: 'syz.4.80': attribute type 17 has an invalid length. [ 86.877883][ T6203] FAULT_INJECTION: forcing a failure. [ 86.877883][ T6203] name failslab, interval 1, probability 0, space 0, times 1 [ 86.906155][ T24] cfg80211: failed to load regulatory.db [ 86.945130][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.3.84 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 86.945158][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.945170][ T6203] Call Trace: [ 86.945177][ T6203] [ 86.945186][ T6203] dump_stack_lvl+0x241/0x360 [ 86.945219][ T6203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.945246][ T6203] ? __pfx__printk+0x10/0x10 [ 86.945274][ T6203] ? __pfx___might_resched+0x10/0x10 [ 86.945299][ T6203] should_fail_ex+0x424/0x570 [ 86.945331][ T6203] should_failslab+0xac/0x100 [ 86.945359][ T6203] __kvmalloc_node_noprof+0x170/0x5a0 [ 86.945388][ T6203] ? alloc_netdev_mqs+0xac6/0x1210 [ 86.945422][ T6203] alloc_netdev_mqs+0xac6/0x1210 [ 86.945467][ T6203] l2tp_eth_create+0x1cb/0xc30 [ 86.945486][ T6203] ? __asan_memcpy+0x40/0x70 [ 86.945523][ T6203] ? nla_memcpy+0x88/0xb0 [ 86.945543][ T6203] ? __msecs_to_jiffies+0x1e/0x50 [ 86.945579][ T6203] ? __pfx_l2tp_eth_create+0x10/0x10 [ 86.945605][ T6203] l2tp_nl_cmd_session_create+0x838/0xf40 [ 86.945643][ T6203] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 86.945679][ T6203] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 86.945712][ T6203] genl_rcv_msg+0xb38/0xf00 [ 86.945744][ T6203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.945769][ T6203] ? __dev_queue_xmit+0x1780/0x3f60 [ 86.945795][ T6203] ? kasan_save_track+0x3f/0x80 [ 86.945815][ T6203] ? __kasan_slab_alloc+0x66/0x80 [ 86.945842][ T6203] ? do_syscall_64+0xf3/0x230 [ 86.945878][ T6203] ? __lock_acquire+0xad5/0xd80 [ 86.945907][ T6203] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 86.945948][ T6203] netlink_rcv_skb+0x208/0x480 [ 86.945968][ T6203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.945995][ T6203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.946029][ T6203] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.946054][ T6203] genl_rcv+0x28/0x40 [ 86.946077][ T6203] netlink_unicast+0x7f8/0x9a0 [ 86.946112][ T6203] ? __pfx_netlink_unicast+0x10/0x10 [ 86.946142][ T6203] ? skb_put+0x114/0x1f0 [ 86.946169][ T6203] netlink_sendmsg+0x8c3/0xcd0 [ 86.946196][ T6203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.946214][ T6153] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.946219][ T6203] ? aa_sock_msg_perm+0x91/0x160 [ 86.946250][ T6203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.946269][ T6203] __sock_sendmsg+0x221/0x270 [ 86.946288][ T6203] ____sys_sendmsg+0x523/0x860 [ 86.946319][ T6203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.946339][ T6203] ? __fget_files+0x2a/0x420 [ 86.946370][ T6203] ? __fget_files+0x2a/0x420 [ 86.946406][ T6203] __sys_sendmsg+0x271/0x360 [ 86.946440][ T6203] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.946507][ T6203] ? do_syscall_64+0xb6/0x230 [ 86.946539][ T6203] do_syscall_64+0xf3/0x230 [ 86.946568][ T6203] ? clear_bhb_loop+0x45/0xa0 [ 86.946602][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.946622][ T6203] RIP: 0033:0x7f753f98d169 [ 86.946641][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.946657][ T6203] RSP: 002b:00007f75407bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.946680][ T6203] RAX: ffffffffffffffda RBX: 00007f753fba5fa0 RCX: 00007f753f98d169 [ 86.946695][ T6203] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000006 [ 86.946709][ T6203] RBP: 00007f75407bf090 R08: 0000000000000000 R09: 0000000000000000 [ 86.946722][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.946733][ T6203] R13: 0000000000000000 R14: 00007f753fba5fa0 R15: 00007ffef7925bb8 [ 86.946761][ T6203] [ 87.443949][ T6153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.483513][ T6153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.521097][ T6153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.632224][ T6225] FAULT_INJECTION: forcing a failure. [ 87.632224][ T6225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.658403][ T6225] CPU: 0 UID: 0 PID: 6225 Comm: syz.4.88 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 87.658431][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.658443][ T6225] Call Trace: [ 87.658450][ T6225] [ 87.658458][ T6225] dump_stack_lvl+0x241/0x360 [ 87.658510][ T6225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.658537][ T6225] ? __pfx__printk+0x10/0x10 [ 87.658572][ T6225] should_fail_ex+0x424/0x570 [ 87.658605][ T6225] _copy_from_user+0x2d/0xb0 [ 87.658632][ T6225] copy_msghdr_from_user+0xb3/0x580 [ 87.658656][ T6225] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 87.658675][ T6225] ? __fget_files+0x2a/0x420 [ 87.658706][ T6225] ? __fget_files+0x2a/0x420 [ 87.658741][ T6225] __sys_sendmsg+0x20a/0x360 [ 87.658773][ T6225] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.658846][ T6225] ? do_syscall_64+0xb6/0x230 [ 87.658878][ T6225] do_syscall_64+0xf3/0x230 [ 87.658906][ T6225] ? clear_bhb_loop+0x45/0xa0 [ 87.658929][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.658949][ T6225] RIP: 0033:0x7f40bb78d169 [ 87.658967][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.658984][ T6225] RSP: 002b:00007f40bc6ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.659006][ T6225] RAX: ffffffffffffffda RBX: 00007f40bb9a5fa0 RCX: 00007f40bb78d169 [ 87.659021][ T6225] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 87.659034][ T6225] RBP: 00007f40bc6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 87.659047][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.659059][ T6225] R13: 0000000000000000 R14: 00007f40bb9a5fa0 R15: 00007ffd4beb4eb8 [ 87.659084][ T6225] [ 88.294619][ T6241] netlink: 'syz.4.94': attribute type 15 has an invalid length. [ 88.410671][ T6249] __nla_validate_parse: 6 callbacks suppressed [ 88.410692][ T6249] netlink: 48 bytes leftover after parsing attributes in process `syz.3.97'. [ 88.452589][ T6252] sctp: [Deprecated]: syz.2.98 (pid 6252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.452589][ T6252] Use struct sctp_sack_info instead [ 88.516093][ T6248] netlink: 'syz.0.96': attribute type 16 has an invalid length. [ 88.524998][ T6248] netlink: 'syz.0.96': attribute type 17 has an invalid length. [ 88.589367][ T6248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.676538][ T6256] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 88.691991][ T6256] netlink: 224 bytes leftover after parsing attributes in process `syz.4.99'. [ 88.787527][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.3.100'. [ 88.807912][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.3.100'. [ 88.847178][ T6267] netlink: 148 bytes leftover after parsing attributes in process `syz.1.101'. [ 88.869594][ T6267] netlink: 148 bytes leftover after parsing attributes in process `syz.1.101'. [ 89.094938][ T24] hid-generic 0005:07C0:0007.0001: item fetching failed at offset 0/1 [ 89.112866][ T24] hid-generic 0005:07C0:0007.0001: probe with driver hid-generic failed with error -22 [ 89.309467][ T6286] dummy0: entered promiscuous mode [ 89.318440][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 89.330597][ T6285] dummy0: left promiscuous mode [ 89.547739][ T6299] netlink: 'syz.3.115': attribute type 3 has an invalid length. [ 89.562294][ T6299] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.115'. [ 89.629536][ T6299] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 89.810693][ T6308] tun0: tun_chr_ioctl cmd 1074025675 [ 89.823278][ T6308] tun0: persist disabled [ 89.993266][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 90.314872][ T6296] syz.4.114 (6296) used greatest stack depth: 18224 bytes left [ 90.652992][ T6325] FAULT_INJECTION: forcing a failure. [ 90.652992][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.682004][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.0.124 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 90.682035][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.682048][ T6325] Call Trace: [ 90.682055][ T6325] [ 90.682063][ T6325] dump_stack_lvl+0x241/0x360 [ 90.682098][ T6325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.682126][ T6325] ? __pfx__printk+0x10/0x10 [ 90.682159][ T6325] should_fail_ex+0x424/0x570 [ 90.682192][ T6325] _copy_to_user+0x31/0xb0 [ 90.682219][ T6325] simple_read_from_buffer+0xc4/0x170 [ 90.682248][ T6325] proc_fail_nth_read+0x1ef/0x260 [ 90.682281][ T6325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.682314][ T6325] ? rw_verify_area+0x246/0x630 [ 90.682334][ T6325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.682366][ T6325] vfs_read+0x21f/0xb90 [ 90.682390][ T6325] ? __pfx___mutex_lock+0x10/0x10 [ 90.682419][ T6325] ? __pfx_vfs_read+0x10/0x10 [ 90.682442][ T6325] ? __fget_files+0x2a/0x420 [ 90.682472][ T6325] ? __fget_files+0x39d/0x420 [ 90.682499][ T6325] ? __fget_files+0x2a/0x420 [ 90.682534][ T6325] ksys_read+0x19d/0x2d0 [ 90.682557][ T6325] ? __pfx_ksys_read+0x10/0x10 [ 90.682588][ T6325] ? do_syscall_64+0xb6/0x230 [ 90.682619][ T6325] do_syscall_64+0xf3/0x230 [ 90.682647][ T6325] ? clear_bhb_loop+0x45/0xa0 [ 90.682670][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.682690][ T6325] RIP: 0033:0x7f446b78bb7c [ 90.682707][ T6325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.682723][ T6325] RSP: 002b:00007f446c618030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.682745][ T6325] RAX: ffffffffffffffda RBX: 00007f446b9a5fa0 RCX: 00007f446b78bb7c [ 90.682760][ T6325] RDX: 000000000000000f RSI: 00007f446c6180a0 RDI: 0000000000000004 [ 90.682772][ T6325] RBP: 00007f446c618090 R08: 0000000000000000 R09: 0000000000000031 [ 90.682785][ T6325] R10: 0000000089100121 R11: 0000000000000246 R12: 0000000000000001 [ 90.682797][ T6325] R13: 0000000000000000 R14: 00007f446b9a5fa0 R15: 00007ffddae5e218 [ 90.682822][ T6325] [ 91.230394][ T6334] FAULT_INJECTION: forcing a failure. [ 91.230394][ T6334] name failslab, interval 1, probability 0, space 0, times 0 [ 91.250495][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.2.128 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 91.250524][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.250536][ T6334] Call Trace: [ 91.250543][ T6334] [ 91.250551][ T6334] dump_stack_lvl+0x241/0x360 [ 91.250584][ T6334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.250612][ T6334] ? __pfx__printk+0x10/0x10 [ 91.250640][ T6334] ? __pfx___might_resched+0x10/0x10 [ 91.250666][ T6334] should_fail_ex+0x424/0x570 [ 91.250699][ T6334] should_failslab+0xac/0x100 [ 91.250727][ T6334] __kvmalloc_node_noprof+0x170/0x5a0 [ 91.250756][ T6334] ? nf_hook_entries_grow+0x290/0x740 [ 91.250786][ T6334] ? nf_defrag_ipv4_enable+0xc9/0x110 [ 91.250815][ T6334] nf_hook_entries_grow+0x290/0x740 [ 91.250853][ T6334] __nf_register_net_hook+0x278/0x8e0 [ 91.250892][ T6334] nf_register_net_hook+0xb0/0x190 [ 91.250926][ T6334] nf_register_net_hooks+0x41/0x1a0 [ 91.250959][ T6334] nf_ct_netns_do_get+0x3d0/0x680 [ 91.250980][ T6334] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 91.251005][ T6334] ? synproxy_pernet+0x45/0x280 [ 91.251030][ T6334] nf_ct_netns_inet_get+0x1f/0x150 [ 91.251051][ T6334] nft_synproxy_do_init+0x1ca/0x4a0 [ 91.251078][ T6334] nf_tables_newrule+0x1861/0x2980 [ 91.251111][ T6334] ? __pfx_nf_tables_newrule+0x10/0x10 [ 91.251163][ T6334] ? __nla_parse+0x40/0x60 [ 91.251187][ T6334] nfnetlink_rcv+0x12eb/0x28f0 [ 91.251239][ T6334] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 91.251309][ T6334] ? skb_clone+0x240/0x390 [ 91.251347][ T6334] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.251370][ T6334] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.251392][ T6334] netlink_unicast+0x7f8/0x9a0 [ 91.251429][ T6334] ? __pfx_netlink_unicast+0x10/0x10 [ 91.251461][ T6334] ? skb_put+0x114/0x1f0 [ 91.251489][ T6334] netlink_sendmsg+0x8c3/0xcd0 [ 91.251520][ T6334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.251545][ T6334] ? aa_sock_msg_perm+0x91/0x160 [ 91.251577][ T6334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.251597][ T6334] __sock_sendmsg+0x221/0x270 [ 91.251619][ T6334] ____sys_sendmsg+0x523/0x860 [ 91.251652][ T6334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.251678][ T6334] ? __fget_files+0x2a/0x420 [ 91.251709][ T6334] ? __fget_files+0x2a/0x420 [ 91.251744][ T6334] __sys_sendmsg+0x271/0x360 [ 91.251776][ T6334] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.251842][ T6334] ? do_syscall_64+0xb6/0x230 [ 91.251875][ T6334] do_syscall_64+0xf3/0x230 [ 91.251903][ T6334] ? clear_bhb_loop+0x45/0xa0 [ 91.251926][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.251946][ T6334] RIP: 0033:0x7fbaba58d169 [ 91.251963][ T6334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.251980][ T6334] RSP: 002b:00007fbabb337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.252001][ T6334] RAX: ffffffffffffffda RBX: 00007fbaba7a5fa0 RCX: 00007fbaba58d169 [ 91.252016][ T6334] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 91.252029][ T6334] RBP: 00007fbabb337090 R08: 0000000000000000 R09: 0000000000000000 [ 91.252041][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.252053][ T6334] R13: 0000000000000000 R14: 00007fbaba7a5fa0 R15: 00007ffd7f7a89e8 [ 91.252079][ T6334] [ 91.890638][ T6343] netlink: 64 bytes leftover after parsing attributes in process `syz.2.132'. [ 92.687626][ T6352] xt_hashlimit: max too large, truncated to 1048576 [ 92.695777][ T6352] No such timeout policy "syz1" [ 92.900439][ T6359] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.929452][ T6367] FAULT_INJECTION: forcing a failure. [ 92.929452][ T6367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.947370][ T6359] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.968543][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.1.140 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 92.968573][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.968585][ T6367] Call Trace: [ 92.968593][ T6367] [ 92.968601][ T6367] dump_stack_lvl+0x241/0x360 [ 92.968637][ T6367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.968665][ T6367] ? __pfx__printk+0x10/0x10 [ 92.968701][ T6367] should_fail_ex+0x424/0x570 [ 92.968734][ T6367] _copy_from_iter+0x211/0x1c70 [ 92.968762][ T6367] ? alloc_pages_mpol+0x4e6/0x690 [ 92.968795][ T6367] ? __pfx__copy_from_iter+0x10/0x10 [ 92.968822][ T6367] ? set_page_refcounted+0xa1/0x1e0 [ 92.968851][ T6367] ? alloc_pages_noprof+0x136/0x190 [ 92.968878][ T6367] ? page_copy_sane+0x46/0x260 [ 92.968901][ T6367] copy_page_from_iter+0x7a/0x100 [ 92.968926][ T6367] tun_get_user+0x1f6c/0x47c0 [ 92.968956][ T6367] ? tun_get_user+0x852/0x47c0 [ 92.968995][ T6367] ? aa_file_perm+0x139/0xf60 [ 92.969025][ T6367] ? aa_file_perm+0x3f1/0xf60 [ 92.969052][ T6367] ? __pfx_tun_get_user+0x10/0x10 [ 92.969093][ T6367] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 92.969137][ T6367] ? tun_get+0x1e/0x2f0 [ 92.969164][ T6367] ? tun_get+0x1e/0x2f0 [ 92.969189][ T6367] ? tun_get+0x27d/0x2f0 [ 92.969216][ T6367] tun_chr_write_iter+0x10d/0x1f0 [ 92.969245][ T6367] vfs_write+0x70f/0xd10 [ 92.969271][ T6367] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 92.969300][ T6367] ? __pfx_vfs_write+0x10/0x10 [ 92.969334][ T6367] ? __fget_files+0x2a/0x420 [ 92.969371][ T6367] ? __fget_files+0x2a/0x420 [ 92.969405][ T6367] ksys_write+0x19d/0x2d0 [ 92.969427][ T6367] ? __pfx_ksys_write+0x10/0x10 [ 92.969452][ T6367] ? do_syscall_64+0xb6/0x230 [ 92.969482][ T6367] do_syscall_64+0xf3/0x230 [ 92.969510][ T6367] ? clear_bhb_loop+0x45/0xa0 [ 92.969532][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.969552][ T6367] RIP: 0033:0x7f07c5d8bc1f [ 92.969569][ T6367] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 92.969586][ T6367] RSP: 002b:00007f07c6be3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 92.969607][ T6367] RAX: ffffffffffffffda RBX: 00007f07c5fa5fa0 RCX: 00007f07c5d8bc1f [ 92.969622][ T6367] RDX: 000000000000003a RSI: 0000200000000540 RDI: 00000000000000c8 [ 92.969634][ T6367] RBP: 00007f07c6be3090 R08: 0000000000000000 R09: 0000000000000000 [ 92.969647][ T6367] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 92.969658][ T6367] R13: 0000000000000000 R14: 00007f07c5fa5fa0 R15: 00007ffcbf6f38a8 [ 92.969683][ T6367] [ 93.906184][ T6392] bridge0: port 3(vlan2) entered blocking state [ 93.914357][ T6392] bridge0: port 3(vlan2) entered disabled state [ 93.920781][ T6392] vlan2: entered allmulticast mode [ 93.928273][ T6392] erspan0: entered allmulticast mode [ 93.937778][ T6395] __nla_validate_parse: 1 callbacks suppressed [ 93.937796][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 93.942568][ T6392] vlan2: entered promiscuous mode [ 93.980098][ T6392] erspan0: entered promiscuous mode [ 93.997349][ T6392] bridge0: port 3(vlan2) entered blocking state [ 94.004020][ T6392] bridge0: port 3(vlan2) entered forwarding state [ 94.239931][ T6409] netlink: 48 bytes leftover after parsing attributes in process `syz.0.150'. [ 94.296404][ T6409] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 94.320554][ T6409] netlink: 'syz.0.150': attribute type 4 has an invalid length. [ 94.341841][ T6411] netlink: 156 bytes leftover after parsing attributes in process `syz.1.151'. [ 94.364574][ T6409] netlink: 188 bytes leftover after parsing attributes in process `syz.0.150'. [ 94.424671][ T6409] NCSI netlink: No device for ifindex 458760 [ 94.580266][ T6422] lo speed is unknown, defaulting to 1000 [ 94.586880][ T6422] lo speed is unknown, defaulting to 1000 [ 94.598561][ T6422] lo speed is unknown, defaulting to 1000 [ 94.606303][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'. [ 94.615491][ T6420] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 94.628137][ T6420] netlink: 'syz.0.155': attribute type 2 has an invalid length. [ 94.648986][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 94.655682][ T6422] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.699111][ T6422] [ 94.701512][ T6422] ====================================================== [ 94.708553][ T6422] WARNING: possible circular locking dependency detected [ 94.715593][ T6422] 6.14.0-syzkaller-05877-g1a9239bb4253 #0 Not tainted [ 94.722424][ T6422] ------------------------------------------------------ [ 94.729459][ T6422] syz.2.154/6422 is trying to acquire lock: [ 94.735360][ T6422] ffff88807b7e3558 (sk_lock-AF_INET){+.+.}-{0:0}, at: sock_set_reuseaddr+0x17/0x60 [ 94.744691][ T6422] [ 94.744691][ T6422] but task is already holding lock: [ 94.752070][ T6422] ffffffff8fe6e248 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6c1/0xce0 [ 94.760192][ T6422] [ 94.760192][ T6422] which lock already depends on the new lock. [ 94.760192][ T6422] [ 94.770593][ T6422] [ 94.770593][ T6422] the existing dependency chain (in reverse order) is: [ 94.779606][ T6422] [ 94.779606][ T6422] -> #3 (lock#7){+.+.}-{4:4}: [ 94.786493][ T6422] lock_acquire+0x116/0x2f0 [ 94.791536][ T6422] __mutex_lock+0x1bf/0x1000 [ 94.796668][ T6422] cma_init+0x1e/0x140 [ 94.801281][ T6422] do_one_initcall+0x24a/0x940 [ 94.806577][ T6422] do_initcall_level+0x157/0x210 [ 94.812042][ T6422] do_initcalls+0x71/0xd0 [ 94.816910][ T6422] kernel_init_freeable+0x432/0x5d0 [ 94.822638][ T6422] kernel_init+0x1d/0x2b0 [ 94.827484][ T6422] ret_from_fork+0x4b/0x80 [ 94.832416][ T6422] ret_from_fork_asm+0x1a/0x30 [ 94.837695][ T6422] [ 94.837695][ T6422] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 94.844918][ T6422] lock_acquire+0x116/0x2f0 [ 94.849947][ T6422] __mutex_lock+0x1bf/0x1000 [ 94.855065][ T6422] ip_mroute_setsockopt+0x161/0x11f0 [ 94.860868][ T6422] do_ip_setsockopt+0x1114/0x39c0 [ 94.866423][ T6422] ip_setsockopt+0x63/0x100 [ 94.871453][ T6422] smc_setsockopt+0x25c/0xd50 [ 94.876675][ T6422] do_sock_setsockopt+0x3b1/0x710 [ 94.882247][ T6422] __x64_sys_setsockopt+0x1ee/0x280 [ 94.887997][ T6422] do_syscall_64+0xf3/0x230 [ 94.893036][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.899453][ T6422] [ 94.899453][ T6422] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 94.908068][ T6422] lock_acquire+0x116/0x2f0 [ 94.913105][ T6422] __mutex_lock+0x1bf/0x1000 [ 94.918234][ T6422] smc_switch_to_fallback+0x35/0xda0 [ 94.924039][ T6422] smc_sendmsg+0x11f/0x530 [ 94.928980][ T6422] __sock_sendmsg+0x221/0x270 [ 94.934181][ T6422] __sys_sendto+0x365/0x4c0 [ 94.939201][ T6422] __x64_sys_sendto+0xde/0x100 [ 94.944485][ T6422] do_syscall_64+0xf3/0x230 [ 94.949515][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.955935][ T6422] [ 94.955935][ T6422] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 94.963587][ T6422] validate_chain+0xa69/0x24e0 [ 94.968969][ T6422] __lock_acquire+0xad5/0xd80 [ 94.974178][ T6422] lock_acquire+0x116/0x2f0 [ 94.979295][ T6422] lock_sock_nested+0x48/0x100 [ 94.984582][ T6422] sock_set_reuseaddr+0x17/0x60 [ 94.989959][ T6422] siw_create_listen+0x19f/0x1250 [ 94.995514][ T6422] iw_cm_listen+0x15e/0x230 [ 95.000541][ T6422] rdma_listen+0xb51/0xe40 [ 95.005499][ T6422] cma_listen_on_dev+0x3e0/0x6f0 [ 95.010972][ T6422] cma_add_one+0x7dc/0xce0 [ 95.015920][ T6422] add_client_context+0x53e/0x8b0 [ 95.021494][ T6422] enable_device_and_get+0x1de/0x450 [ 95.027328][ T6422] ib_register_device+0x1138/0x1460 [ 95.033062][ T6422] siw_newlink+0x938/0xda0 [ 95.038028][ T6422] nldev_newlink+0x5ee/0x680 [ 95.043147][ T6422] rdma_nl_rcv+0x6e5/0x9e0 [ 95.048095][ T6422] netlink_unicast+0x7f8/0x9a0 [ 95.053397][ T6422] netlink_sendmsg+0x8c3/0xcd0 [ 95.058695][ T6422] __sock_sendmsg+0x221/0x270 [ 95.063891][ T6422] ____sys_sendmsg+0x523/0x860 [ 95.069200][ T6422] __sys_sendmsg+0x271/0x360 [ 95.074330][ T6422] do_syscall_64+0xf3/0x230 [ 95.079376][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.085799][ T6422] [ 95.085799][ T6422] other info that might help us debug this: [ 95.085799][ T6422] [ 95.096032][ T6422] Chain exists of: [ 95.096032][ T6422] sk_lock-AF_INET --> rtnl_mutex --> lock#7 [ 95.096032][ T6422] [ 95.107902][ T6422] Possible unsafe locking scenario: [ 95.107902][ T6422] [ 95.115375][ T6422] CPU0 CPU1 [ 95.120754][ T6422] ---- ---- [ 95.126131][ T6422] lock(lock#7); [ 95.129781][ T6422] lock(rtnl_mutex); [ 95.136289][ T6422] lock(lock#7); [ 95.142472][ T6422] lock(sk_lock-AF_INET); [ 95.146914][ T6422] [ 95.146914][ T6422] *** DEADLOCK *** [ 95.146914][ T6422] [ 95.155059][ T6422] 6 locks held by syz.2.154/6422: [ 95.160081][ T6422] #0: ffffffff9aaa62b8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32f/0x9e0 [ 95.170112][ T6422] #1: ffffffff8fe5a410 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x458/0x680 [ 95.179535][ T6422] #2: ffffffff8fe4d0b0 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x130/0x450 [ 95.189585][ T6422] #3: ffffffff8fe4d3b0 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x18e/0x450 [ 95.199614][ T6422] #4: ffff8880599d85e0 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x4fa/0x8b0 [ 95.210510][ T6422] #5: ffffffff8fe6e248 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6c1/0xce0 [ 95.219066][ T6422] [ 95.219066][ T6422] stack backtrace: [ 95.224956][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: syz.2.154 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 95.224977][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.224987][ T6422] Call Trace: [ 95.224993][ T6422] [ 95.224999][ T6422] dump_stack_lvl+0x241/0x360 [ 95.225025][ T6422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.225047][ T6422] ? __pfx__printk+0x10/0x10 [ 95.225068][ T6422] ? print_lock+0x171/0x1a0 [ 95.225085][ T6422] print_circular_bug+0x2e1/0x300 [ 95.225104][ T6422] check_noncircular+0x142/0x160 [ 95.225125][ T6422] validate_chain+0xa69/0x24e0 [ 95.225146][ T6422] ? look_up_lock_class+0x7b/0x170 [ 95.225170][ T6422] ? register_lock_class+0x54/0x330 [ 95.225200][ T6422] __lock_acquire+0xad5/0xd80 [ 95.225226][ T6422] lock_acquire+0x116/0x2f0 [ 95.225249][ T6422] ? sock_set_reuseaddr+0x17/0x60 [ 95.225271][ T6422] lock_sock_nested+0x48/0x100 [ 95.225287][ T6422] ? sock_set_reuseaddr+0x17/0x60 [ 95.225305][ T6422] sock_set_reuseaddr+0x17/0x60 [ 95.225322][ T6422] siw_create_listen+0x19f/0x1250 [ 95.225343][ T6422] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 95.225365][ T6422] ? __pfx_siw_create_listen+0x10/0x10 [ 95.225388][ T6422] iw_cm_listen+0x15e/0x230 [ 95.225407][ T6422] rdma_listen+0xb51/0xe40 [ 95.225432][ T6422] ? __pfx_rdma_listen+0x10/0x10 [ 95.225458][ T6422] ? rdma_restrack_add+0x28a/0x7b0 [ 95.225491][ T6422] ? _cma_attach_to_dev+0x295/0x490 [ 95.225510][ T6422] cma_listen_on_dev+0x3e0/0x6f0 [ 95.225530][ T6422] cma_add_one+0x7dc/0xce0 [ 95.225552][ T6422] ? __pfx_cma_add_one+0x10/0x10 [ 95.225572][ T6422] ? _raw_spin_unlock+0x28/0x50 [ 95.225591][ T6422] add_client_context+0x53e/0x8b0 [ 95.225618][ T6422] ? __pfx_add_client_context+0x10/0x10 [ 95.225643][ T6422] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 95.225663][ T6422] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.225689][ T6422] enable_device_and_get+0x1de/0x450 [ 95.225714][ T6422] ? __pfx_enable_device_and_get+0x10/0x10 [ 95.225739][ T6422] ? device_add+0x460/0xbf0 [ 95.225756][ T6422] ib_register_device+0x1138/0x1460 [ 95.225783][ T6422] ? __pfx_ib_register_device+0x10/0x10 [ 95.225808][ T6422] ? xa_load+0x2df/0x350 [ 95.225831][ T6422] ? xa_load+0x149/0x350 [ 95.225855][ T6422] ? __pfx_xa_load+0x10/0x10 [ 95.225890][ T6422] ? ib_device_set_netdev+0x5c5/0x6c0 [ 95.225916][ T6422] ? __raw_spin_lock_init+0x45/0x100 [ 95.225937][ T6422] siw_newlink+0x938/0xda0 [ 95.225961][ T6422] nldev_newlink+0x5ee/0x680 [ 95.225982][ T6422] ? __pfx_nldev_newlink+0x10/0x10 [ 95.226029][ T6422] ? __pfx_aa_get_newest_label+0x10/0x10 [ 95.226052][ T6422] ? __pfx_aa_get_newest_label+0x10/0x10 [ 95.226079][ T6422] ? bpf_lsm_capable+0x9/0x10 [ 95.226104][ T6422] ? security_capable+0x7e/0x2d0 [ 95.226128][ T6422] ? __pfx_nldev_newlink+0x10/0x10 [ 95.226148][ T6422] rdma_nl_rcv+0x6e5/0x9e0 [ 95.226174][ T6422] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 95.226197][ T6422] ? __lock_acquire+0xad5/0xd80 [ 95.226226][ T6422] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.226245][ T6422] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.226262][ T6422] netlink_unicast+0x7f8/0x9a0 [ 95.226290][ T6422] ? __pfx_netlink_unicast+0x10/0x10 [ 95.226315][ T6422] ? skb_put+0x114/0x1f0 [ 95.226336][ T6422] netlink_sendmsg+0x8c3/0xcd0 [ 95.226357][ T6422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.226376][ T6422] ? aa_sock_msg_perm+0x91/0x160 [ 95.226400][ T6422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.226417][ T6422] __sock_sendmsg+0x221/0x270 [ 95.226433][ T6422] ____sys_sendmsg+0x523/0x860 [ 95.226458][ T6422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.226479][ T6422] ? __fget_files+0x2a/0x420 [ 95.226504][ T6422] ? __fget_files+0x2a/0x420 [ 95.226530][ T6422] __sys_sendmsg+0x271/0x360 [ 95.226551][ T6422] ? __pfx_futex_wake+0x10/0x10 [ 95.226576][ T6422] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.226615][ T6422] ? do_syscall_64+0xb6/0x230 [ 95.226639][ T6422] do_syscall_64+0xf3/0x230 [ 95.226663][ T6422] ? clear_bhb_loop+0x45/0xa0 [ 95.226681][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.226698][ T6422] RIP: 0033:0x7fbaba58d169 [ 95.226713][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.226727][ T6422] RSP: 002b:00007fbabb337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.226744][ T6422] RAX: ffffffffffffffda RBX: 00007fbaba7a5fa0 RCX: 00007fbaba58d169 [ 95.226756][ T6422] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 95.226767][ T6422] RBP: 00007fbaba60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.226777][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.226787][ T6422] R13: 0000000000000000 R14: 00007fbaba7a5fa0 R15: 00007ffd7f7a89e8 [ 95.226803][ T6422] [ 95.761749][ T6422] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.809609][ T6422] lo speed is unknown, defaulting to 1000 [ 95.817419][ T6422] lo speed is unknown, defaulting to 1000 [ 95.826804][ T6422] lo speed is unknown, defaulting to 1000 [ 95.835216][ T6422] lo speed is unknown, defaulting to 1000 [ 95.843017][ T6422] lo speed is unknown, defaulting to 1000 [ 95.849320][ T6422] lo speed is unknown, defaulting to 1000