last executing test programs: 3.53951417s ago: executing program 0 (id=1912): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000004c0)={0x2, 0x4e22, @empty=0x4}, 0x10) 3.439347236s ago: executing program 0 (id=1914): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaabbffffb57f6b70445ea35f87ffffffff88a8400088ca00000a05000000"], 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaabbffffb57f6b70445ea35f87ffffffff88a8400088ca00000a05000000"], 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000000)=""/31, &(0x7f0000000240)=0x1f) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000000)=""/31, &(0x7f0000000240)=0x1f) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {0x4}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0xd, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {0x4}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0xd, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e1c, 0x0, @private2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000007200a143000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 3.182120238s ago: executing program 0 (id=1920): syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r6, &(0x7f0000000200)=[{&(0x7f0000003540)=""/4096, 0x38}], 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='svcrdma_decode_short_err\x00'}, 0x10) 2.971762667s ago: executing program 0 (id=1923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x3b, 0x0, "6606ca7ce41b346a5a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f01b00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "a0aad30a8b1350f2461250f9e5b2fc536fd0861c38349b6f6ad8c6f78a18d8576ba9bcd139acd078c1207e7b717cd1c8e723c17364efbae56931f838ecf65aba7e990fe8a4a01b3302b27fe7c991a9cb"}, 0xd8) 2.827114089s ago: executing program 0 (id=1926): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) splice(r1, &(0x7f0000000140), r4, &(0x7f0000000240)=0x2, 0x1f, 0xd) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 2.457331226s ago: executing program 0 (id=1932): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/0\x00\xff\xff\xff\xd9_,\xae\xf4t\x00AE\xf44'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r2}, 0x18) preadv(r4, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/11, 0xb}, {&(0x7f00000004c0)=""/241, 0xf1}], 0x2, 0x8001, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x101, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x3, 0x2}, 0x48) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000a40)="2e9b3d0006e03dd65193dfb6c575963f86ddf06712e9232f06238c4686c98db0049d90491ceaebfd26f4eef232b916039af858dbb8a19052343f", 0x3a}], 0x1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000ec92883e745fd2795e009b00230d00000e00005ec29012e1f72fd091c2ef1a765594adcc5084ddd2f6163b2d2068feb5c4c4ad5318c272af5a8ff54c7f7dc10e7892a184d0cc9e5d3ffb855b2e3648e255db52ea2792b209d49c96624b10c1378637f273184dffe0c2ed091a57"], 0x1c}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 1.794635218s ago: executing program 2 (id=1944): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000380)="dad3771f053e18552f2e40d9f9cfdadf042bcf36c55f80209e65f17ae852c3944a677fb7298968b3a260a83c72b4b42d01180fcb92c1ca653b6dfb9a7e0cff11c1a313c3a25d13cb82b5188478e53852f2fc929a31a11fe5c6dfde135313eac783aa13cfe39859a96d8d483edcaf8f34e03d7d6b1e30d8b83592564a4957c9913f29df1f1b9a54905370bba5967d7d7b0cc35cc5f4daa17a294355704441a4cb99de4f272364c1690c91eef53a36d86fd2ce4a7e3b0d7fd29ea4273ffd69f1eba90a9ea50fe7727a3f1f2829c548d9", &(0x7f0000000480)=@udp=r2, 0x4}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x20}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket(0xa, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x282001, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000d80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b00)={0x218, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf73}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3216}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8c07}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x37d5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40810}, 0x20042081) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r9 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x1}}]}, {0x0, [0x61, 0x5f, 0x61, 0x61, 0xebd74d729aba4160, 0x0, 0x30, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000600)=""/72, 0x3c, 0x48, 0x0, 0xfffffffe}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/382], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fbac141411e0000001be3e7d2a182fff", 0x0, 0x9, 0x6000000000000000, 0x85, 0x6a, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747b07a00bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da62", &(0x7f0000000880)="062d300391a06bd0cdb6492a80f8d8dbf1929539cf9b4c8f234026e9b3e7f348494f6acda1f090ff9a22bf2502b8abf0c75e7137349581e0223e99fa1c31233461da715715bfd1a59d4484f3d8c1afc4f7805f65205790187fbc792c31c79c78c3f57c4676109aa310cc"}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@ifindex, 0xe, 0x0, 0x8, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@ifindex, r11, 0x0, 0x3, r11, @link_fd, r12}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0xd, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x1, 0xb, 0x2, 0x6, 0xffffffffffffffff, 0x10}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x28, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x8, 0x0, 0x6}, 0x10, 0x0, r11, 0x5, &(0x7f0000000780)=[r13, r1, r14, r1, r3], &(0x7f00000007c0)=[{0x1, 0x4, 0x1, 0x1}, {0x2, 0x3, 0xb, 0x3}, {0x3, 0x2, 0x6, 0x5}, {0x0, 0x5, 0xa, 0x8}, {0x1, 0x2, 0x3, 0x3}], 0x10, 0x2}, 0x90) write$cgroup_int(r9, &(0x7f00000000c0)=0xecd, 0x12) 1.655904206s ago: executing program 2 (id=1947): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000230000009500000000000000fed023000000c71adb30be7d75fa1f32f08a23ce3220b0cc9505d72768b8242dd90d17e4c5250575dfdb362bd87184446d165ae3939bbca322a415a98c8801000000000000800859362ed862b3c47fa8ce7c69adfd2f16af3a00000000000000000000009a317aa34f0c50f99eedac26048ab915e1be5aa845be9d20e5a011e966388cd0bb39f45d6c508b8a0f7f2d48be0e2a8137c6741775428abf2ddfd2a473f5b271701e22f8cb42198906e110323838727a606495803509f84729f3e8a2fbfb995f99b82df3b307000000000000005a3dd0dde49b414e59b57f2d9a7d72b1359a8adb8fd09792165674dd93520e5e946687634c04000000000000bfbcd911eba0dee5e5ce6434f86fe82ee02f0e8e3173a97d85e232e584ace13387693614f3a7ef88709f4d552c7b3a7903e14dc418818f3e98933b2c93fae25ec2dd190231e2531e1ffeff33676a4383a918cba3ad8318ea29f164563a42cdb596f255a251add2d2ae2fac0a0e7428e4bf07fc884be5721bdffe58c6a4b57014ce976ce8b9cddfa50075c53253d7659f0e885f6c677c24b226ab337fada4363c0698510730725e23bdad60ceaeecfeeccc397565f204b82d6d4458d77a1b4abe050050c21027d314237a9d448b82827ff3f29cc9b46c8fcfbb30d1fc18707c252b596cdbf4e77836adc1f59f9d1280333d135fdcdcee8eb817388666e02ff1b148b6bc3c283e71c0ad9c683c6bb6fea2d2d54af3ad488f0cc2e54a70c19ceac518adbe917652c34019d7478c716ab23d4a863b4dcd08d89f6cec674e9fd379d71ebcc202c1328006357d207984e885ace8a0dbd5affef403aff01d5f2f0e644b61cd8bd72a59f2d7cf67815aeb8761412d68c40dbed08b7eeda96b3856a519a71b83c19b2e8f88d92b66abec165663819a87e7cd8c082cb0110517010100000000000099f6c7023353b6d3af7177d6b565490b1784b53238b39c0db1da864e593d45fd297e4d34e76bd649bc737e0bcf36fd955a40125c00d40c3f25d26e6e2761521c4284ecf52dc416bb2d7463a93ee6c0b20c5749a44677a3c3a7aa9a47c7cd7bb52fbb2c8de3166f4ad1038f33258736b2224a66726f1fd4dce0eb6043a55fbdd341baba95cc5838a860068e0f3e73d992403455b03b25bd5414628d73c623c405bf608d4bd9347c83cb693aebab072be479705b0c6c9bb9728d131f8320b966898de1a16407692b57b6f7333eac0d2ed0a7a4457d9c70089fcf9aa553929a65777f3bbf6d0bdc6a11371a138c6d4b0fefc655716e4486f5c7a88e80b2fb0efb579333bef98ded75abfb982b1fb92f003a6aefb8bf25eacb848d8ed1c1162d000000000000000000000000000000000000000000000000724097bc0656ddd362d1b80b4d2c176e28db5e6a205dc6cc9d1c37bb15d630a7e217090676938e5a9563047a5b94155d3790a8707fe64143493064a5520909ff9e700a02fcfa1641b534a5e44b37df7027cbacc4dc6acbe08c7e0ce31ad6c80d7e57c41a1a8eae3d5027a758e4f509d3776e9c8ac8945bb831ed1f68cd774e3622756c5f171777d2d3a7a7084202ffbccf8dd099980000000000000000000000ac6e7a0c392aff039fd475d1e59d320b5fa07ba22f668c5a7494098c95fb3a552aeafd7b050caf1f091a759a6f40a5f8d58b24ff72ce97bdad3501177bc1dec331c7e707455b8645ebcb9b463fc990e2877b8bcb00de62694dcf2c8021478e5d05e671039ef1526005f4e4e0532b5260e4610653bebe655c06ef8b4e74afc6b8ef1fa5733fd7274bfd4a7493df7817071c204bb3d41d40312ea0fd1c672ad9a9d817ff9beda85d5d09c5008ed83509"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="c3a88969eeddda9913392cd3633e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800053000000007287fa0800000000000000ad41"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000d1}, 0x84000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x40040) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)={[{0x2b, 'net_cls'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'rlimit'}, {0x2d, 'hugetlb'}, {0xe4a5af1f383b6232, 'cpuset'}, {0x2b, 'memory'}]}, 0x41) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000440)=ANY=[@ANYBLOB="85100000faffffff8500000026000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000fdff84000000860000001860b300", @ANYRES32=0x1, @ANYBLOB="000000000000000018140000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b70800007f0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185200000600"/40], &(0x7f0000000580)='syzkaller\x00', 0x4eff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x5, 0x5, 0xffffffff}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000640)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000680)=[{0x3, 0x1, 0x4, 0x2}, {0x3, 0x4, 0xa, 0x5}], 0x10, 0x20}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r6}, &(0x7f0000000400), &(0x7f0000000780)=r7}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000011000010000000000000000000000000a58000000060a09040000000000000000020000002c00048028000180080001006e6174faf40002800800055113d14a8f1b034000000016080001400000000008000240000000020900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0x80}}, 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1.53668149s ago: executing program 2 (id=1950): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x83, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000f51f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000730000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff64000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) unshare(0x22020400) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r6, 0xffffffffffffffff, 0x2c}, 0x20) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @private=0xa010100}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x24, 0xa51f}}], 0x18}}, {{&(0x7f00000001c0)=@ll={0x11, 0x6, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="a3d2f5bf29b8ca5c90a062b92637db855bf822e093c16ae63c42bada99787113d29057b1bb633461474da1341b58c33debb6307c941bbcee655bec4db2aafa74e710c84963b0df4c6fca8527293fa88277cc2a25dc8ca8e4340f865d6b2530d64c0c5d78ac4f30247059c2c73c6b773bfeb97ca65e5296811db5d81b0b08f6304a33b98ab090df6db7e6a4dbb7bf2a6108ea70f41d4ff2fec63aca56306d97753f7d97a1599591a81b9a078bb652862c746a780bcde5b9541e932c5821516c796f5d41221b99b711cdbe202beb182781dc162bfbb6", 0xd5}], 0x1, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xc6dc}}, @timestamping={{0x14, 0x1, 0x25, 0xc0}}], 0x78}}, {{&(0x7f0000000400)=@hci={0x1f, 0x3, 0x1}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)="6643e3848201eaee507fbdbd10760abe66dfd4b9516ab3308cf20521eddb0e3d723cf982537ad3137874d5a7264c6d9700fa840de179c22d99bc3058f593012a432c26345cae5058fcbf8dae2a3000c9f5034710ec98265b873ed44be0c0b30ea9edd0f25deaa88ee6aaf5e85aba1da0d5d8abc3ea768abe7ddb15ae8e2d4062adf1373a71a935981092ea4156c48c0fa9f508180562ecae83ef436132be18c7d548a0ded2c1b5928536a6cd20a4db99da187472fb8859c73e87cf8096d9699e6aa70741641f54369d27bc4c181f8623dbcbabb1", 0xd4}, {&(0x7f0000000580)="79a6dfb4a5cebac9e21d698dcbcd4c9ee4510bfa61b4f2c45e9d86782d3344bd5c61b1a0fd0ddd20249a4951d9e965a75a056bdd1849df967bdda0325e13acbbb2d354a704e89e7b334efc4928fb00df129ea5a6d7dbc289712323af7dac778a878c9e010e28c1a1d8a76f9094f8d3d88f51cab022ebed75a30bec72fbd82ea41082b489ea3ecb92b9f02ddfcd6ce5bb06ee49a9ba88227b8da7225ee4c5ee42594a4adf562fa85c51bc2e9ce8afa0a7065399970313ea198d1458ecac2181727ffcc17137b1214ab438e99e8a90d18c118b0f97289541447532fa79772bdf1e2e3ed566cb3e7a66a3d54590af71b504ff2690", 0xf3}, {&(0x7f0000000680)="4cb284aa739d378c97d9dee72d072903ffc461db9af50dba7719e797f5d2b36c098520128a00020a4ae33f3ee79da27d4ef94f14f00ca5a19ebdc92a476af51ba10a7946ebb5cb4846a6c9769e22efe607ffc266f6c7b33b2ad8b769a72b9387105e984c276c7841cc6b4dc604a4242a437f04035753609f72cd02423df97ffd79f7e998a499a24bf30c8f3bce400b6a48c1dce6ee70f4fdc21df58f3f72", 0x9e}, {&(0x7f0000000740)="8af898c4e63038201547f9f46a96959660edcaa1a5b25e9802bbce1ff205a39d3f5c4c403c7d6171cd40c384f28c9615155dba3a8c485a72da6f3e8a6f9c67b1eb3fb780fa8a23b6", 0x48}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="e94950ee6303edd662d36e05d834bdc1855b1b3c7c81097a26fb7482da3b3fac7edeae6076e2ad0fe1c230ea71d16f5eed900f6e57e4b2fa6fa6269cd6da56057184d05a69b369d3c4c0dc6875e5b4bd4758e8d3688962082dfa65fb50f9c700cf854075204e2d19eb9c7c44f132eb3b0f6c2bda8d12a754", 0x78}, {&(0x7f0000000880)="7e971d4cfa4d51f27c01d9f23ac4dfb1bc59c1665816efa11c8a7c8487a45dce2eb4e23a075d1e9d9232e97e8208f34e11fa19e789eb00c39f7c184c84a1b975f04937445b39db7cd8f5e2ede1301732b3eca0cc46591f0883117a1f512ae91f8e5acf2e1bc74475e6ccddd434503a011f0a73a6dd7a0cb820492c356477ff825c23c874ae67f96adc6c974d6770debd1b5df919e39b64d7f711c2e7b2c4a52cb84fb78b", 0xa4}], 0x7}}, {{&(0x7f00000009c0)=@can, 0x80, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000e00)="aa01c1d85d40e8375a9c4276956d233590da637ca3af276c95344144938fb17a3c0974af56f543fd277408773b9746df45db875e54d5bae08f45a8ca7f3cc7774eb0d442f7c05aed9cec63429ac7b4c43f06ed4d9d96dcc575726ca96c72cd490ebc9b3f44b18c2113d8138f37f0deb40103e7670d67a05c461fe09615", 0x7d}, {&(0x7f0000000e80)="fe9a0bdf2e2dae6152eba757afb8a537e00fdb4518691e8b4d1ead83d6c325576ac93f1fcfcd2172e4faa49c3eb97cdadec539ecf19d487a4c4e33f72a7e32bb3b78dc221a", 0x45}], 0x3, &(0x7f0000000f80)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x45a}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14}}], 0x60}}], 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) close(0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 1.38209421s ago: executing program 3 (id=1952): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000500000002"], 0x0, 0x69}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/227, 0x4}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.215665245s ago: executing program 3 (id=1953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480200001800700010063740000140002800800024000000000080001400000001724000180090001006d6574610000000014000280080002400000000008000340000000000900010073797a30000000000900000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaac134865d6867844000140600fc010000000000000000000000000000ff01000000000000000057de79164c7c00000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x80, 0x4) 1.036668156s ago: executing program 1 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x208, 0x208, 0x408, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff, 0x0, 0xff000000], [0xad7d1e7693b65118, 0x0, 0x0, 0xffffff00], 'veth1_vlan\x00', 'sit0\x00', {}, {0xff}, 0xc4, 0x1, 0x0, 0x7c}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private2, @private1, [0xff], [0xff, 0x0, 0x0, 0xffffffff], 'veth0_vlan\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x11, 0x9, 0x2, 0x8}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"c32e"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff000000, 0x7c79520d2d063a78], 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x2, 0x0, 0x9, 0x5, 0x29b323d8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f00000001c0)={0x1, 0x800, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b149ee107433665bb48fbd913fa29d2f250b2b8ba3ca5c6853f779501a483834d2a61a441e6af5172038ca7213c46dc9c130c3fa49fd1670cbd0c2af54468830"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a2129beebeea225f"}}, 0x48}}, 0x0) close(r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newchain={0xaf0, 0x64, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xd, 0xfff3}, {0xfff3, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x7c4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xfff1}}, @TCA_BASIC_EMATCHES={0x490, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x4}, {0xffff, 0x8001, 0x800, 0x8, 0xf}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x101}, {0xfff, 0x6, 0x1, "6bec2e7fce19"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xd0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x31}, {0x1, 0x2, 0x2, "46dc"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x8001, 0x2, 0x1}, {0x401, 0x3, 0x0, "4c84b2"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x400}, {0x5, 0x6, 0x7, 0x0, 0x0, 0x2, 0x3}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x2, 0x1}, {0x9, 0xa, 0x2, "30bab97efe22f4341b4a"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x2000}, {0xffffffffffffffff, 0x2, 0x5}}}, @TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0xff, 0x0, 0x2}, "6419c3bf66694bf255782bc0a9eec6087f72f65064fb684ae31f2402e04f12680ea995cb4aeae3506dce1b2f8b227cda2b30a63089462fe1d2cab13da8242a818e37fa6d76a273440f997a180baadebd059d"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x3, 0x0, 0x0, {{0x400, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="c7687bc1", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="cbf20800be985b", @TCF_META_TYPE_VAR="45c320310c0b", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="b542e3"]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x538, 0x7, 0x9}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7f, 0x3, 0x8}, {0x7, 0x9, 0xcc, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x4}, {0x2, 0x5, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x9}, {0x7, 0x4, 0x1, "c2895ea6"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5b, 0x1, 0x6}, {0x40, 0x24, 0x1, 0x3, 0x8}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x6}, {0x800, 0x4, 0x9}}}]}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x1f, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x0, 0x2}, {0x3, 0x81, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x800, 0x1, 0x65cd}, {0x20, 0x1, 0x0, 0x4, 0x1, 0x1, 0x3}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x7ff}, {0x8000, 0x3, 0x8001, 0x2, 0x3, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xff, 0x3, 0x88}, {0x4, 0x9, 0x20, 0x1}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8a}, {0x7, 0x40, 0x1}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="1c", @TCF_META_TYPE_VAR="6f92e8fd34756b4a34dc"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="cd9255d8aa27d3f8628a"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="05f8", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='y', @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x5}, {0x1, 0x2, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0xe9}, {0xffff4855, 0x200, 0x8800, 0x3, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x1dc, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xcb70, 0x2, 0x800}, {0x7e8, 0x7, 0x0, "6eb9d0dab969c2"}}}, @TCF_EM_CANID={0x14, 0x3fff, 0x0, 0x0, {{0xfff8}, {{0x4}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x2}, {0x7, 0xa181, 0x7, 0x200}}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x6a6, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="80adb07c", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="651db13266ee4ea3", @TCF_META_TYPE_VAR="a7b75777187825dd", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bb3fc9934d5908"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1f, 0x2, 0x2}, {0x8, 0x7f, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8080, 0xe1}, {0x4d5e, 0x5}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0xf0}, {0xb4, 0x3, 0x20, 0x2}}}, @TCF_EM_IPT={0x128, 0x1, 0x0, 0x0, {{0x81, 0x9, 0xfe01}, [@TCA_EM_IPT_MATCH_DATA={0xdd, 0x5, "a03dcf86c1adfe745d888bdb54b1b79f273e5d356d3973a5479017c65942d16582179725766a1426e4ab9bc9a28d1cec1c8320604f2d80df3a2ac5242f29491fa6e8b56742c394cadaa1b34cd55e06c32b98f4d9c430421a5e7caf813ec7d199c10fc63b65e8ff7fd263af738529be41595dc079a03551cabb26d99bc5e0b422fffa8b37bf83dd28f65876b2525249ee345dc1a2478b706961947130fb415ef5f7b314fdbf3a4f5099b071667929c0caad608ef839e995812b534e3621b16848716b50c76f728b513ea67ae9ea23a636da4fe04917976e4897"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x80}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5d}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}, @TCA_BASIC_EMATCHES={0x328, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x220, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x20}, {0x1, 0x3}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x81}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x7}, {0x3ff}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="a7e1a2d114e19e3a", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="f9", @TCF_META_TYPE_VAR="3a015cf5919cac"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x8}, {0x1, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x0, 0x1}, {0xe43b, 0xa2, 0x2}}}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x200, 0x2, 0x200}, {0x200, 0x9, 0x1, "93917fa2655fdcc7bf"}}}, @TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0x49b, 0x0, 0x401}, "1e79d9477fde615034c564d445533cfa6edea5c0ef92a936eeca503ac23123450dd7428dea6b41e68f2671ef16c3f5743c7c67ce3df196993ff254c68a8675d1c2dd556a8e95e53e6a468b078a82be021eeb799a237d3b6ce66f1d861ccc973811c883fd346fe4c0b4e2439383a669fbb13346972b925fa4127f7c1bbb72411debeb67b1b3a02220679f2c708d3fa7c48e133d32a8fb8b38f504f90e5d826fb409ea2a0e44b02db28dff8f4d6742c0d80bf21cf573e24e5fbce090f9504b85f2e005bfb67b60e0bc3401a16394366b3e5eea4e36670f7d7c2563ba19e641a6e2180c75a21cc05af9abd2dbe4cf261d4f49006df5932e31fa"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x77e2}, {0x3, 0x9, 0xe18b, 0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0xffff, 0xff, 0xcc6, 0x6, 0x4, 0x1, 0x2}}}, @TCF_EM_META={0x54, 0x1, 0x0, 0x0, {{0x40, 0x4, 0xac}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5}, {0x9, 0xd2, 0x1}}}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="0e", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="9617def21560", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="87f8f75012", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x40, 0x2}, {0x1, 0xc8, 0x2}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="609514edf9afaf3c8f40"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x1}, {0x400, 0x47, 0x9, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x8, 0x6, 0x1, "9673fc0bb8af"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0xf7}, [@TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR='<', @TCF_META_TYPE_VAR="3df32303", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="d52fa4e82c39"]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0xb205}, {{0x4, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb456}}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xca56, 0x4, 0x2}, {0x7, 0x81}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x20, 0x1}, {0xb10, 0x1, 0x1}}}]}}, @TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x6}, "959ca1861a0196d473584e719eebfb733eb8413c64d81485df905596913d1d78267afd5591f10a6b8b6f2ed1b1e0d52803e41fad5a63c9d40207733aea2254415e7f"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xce, 0x3, 0x9}, {0x3b44, 0x6, 0x0, 0x9}}}]}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x2b8, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xba}, @TCA_ROUTE4_ACT={0x29c, 0x6, [@m_skbmod={0xc4, 0x1a, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x4, 0x2, 0xfffffffd}, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x5b, 0x6, "5dba491aca143694f84b9380d1a41a35abc14269b52d3635720bb1ce1861df622f4a7dd77472f64c4e9de9dcad91dd9ba0dda6a2705588c2a688cb6ec8f19428dec1dd5fc2b5e4acedd6e96241bb05d6528023120102ff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x11c, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xd6, 0x6, "5b16d1cf90356c5b2290918266705785883b750407c20e28401883995a4fc6d73206820b8f90a10fd862d30d56e299f702579b4ce9b35930de99533a46448d4c286047317842b471c98d875611bfa783de785f0094efbe34eda4a197bd7ec50b37c7ca79cb357587fb25be0e5cbeb915df624a41f4c613dfb92f3715cb9fc6f2bc955326e1cb31377c27fe6358a9250f090c01e56eb8fb5dd358eb025a81832415b0728f6c8d602ebdb1ad3ea727c6d178e613fc1a8baa799c9a0b18feb37ff886c5431e99ca660cab2bc94a50ac8065ee2a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xb8, 0x19, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x8bb6, 0x7, 0x949, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff80, 0x200, 0x8, 0x80000000, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xb, 0x3, 0x10000000, 0x20, 0x4}}, @TCA_DEF_DATA={0x7, 0x3, 'rt\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x12, 0x3, 'veth1_to_bond\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'rt\x00'}]}, {0xe, 0x6, "be2c90475ab2bf8e42f7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5f}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xffffc0ac}]}, 0xaf0}}, 0x0) 1.013403209s ago: executing program 3 (id=1959): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) splice(r1, &(0x7f0000000140)=0x6, 0xffffffffffffffff, &(0x7f0000000240)=0x2, 0x1f, 0xd) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 958.976552ms ago: executing program 1 (id=1960): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x5}, {0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0xffffffff) write$ppp(r1, &(0x7f00000001c0)="38d5", 0x2) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) 896.911318ms ago: executing program 4 (id=1961): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000200)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x90) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="3f030e00f0e812002c001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x8847, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x5, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x23) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@local}, 0x20) unshare(0x22020600) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xde, &(0x7f0000000240)=""/222}, 0x90) socket$packet(0x11, 0x3, 0x300) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001d40)={0x30, r5, 0x405, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000024003a8020000a"], 0x4c}}, 0x0) 808.272636ms ago: executing program 1 (id=1962): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [], 0x0, 0x0, 0x0}, 0xa08) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x22, 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x5}, 0x5f) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280), 0x10) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r8], 0x4c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 760.139552ms ago: executing program 4 (id=1963): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000500000002"], 0x0, 0x69}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/227, 0x4}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 721.519969ms ago: executing program 3 (id=1964): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00'}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r5, 0x11e, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff16) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008", @ANYRES32], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3], 0x1c}}, 0x20044805) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) accept4(r6, 0x0, &(0x7f0000000700), 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x18, 0x18, 0x2, [@fwd={0x8}, @struct]}}, 0x0, 0x32}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) sendmmsg$inet6(r0, &(0x7f0000007e40), 0x4000000000000aa, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) socket$netlink(0x10, 0x3, 0x0) 550.466935ms ago: executing program 1 (id=1965): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x9) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) r3 = socket$netlink(0x10, 0x3, 0x12) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14006900", @ANYRES16=r4, @ANYBLOB="000426bd7000fcdbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000003c0)=@bpq0, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000000c0)={0x2, 0x401}) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x40) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="506f946d3a709996dafff7ee80a00000000c14080027bd7000fddbc225080001000000000008003d000300000008003d000200000008003d00030000000800030004000000080003000400000008003d"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x0, 0x2}, 0x6) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netdev_private(r6, 0x89f7, &(0x7f0000000680)="ecfb3a4f3bfaf8c9fa9269373e269cbec35cc3eece26eca22ff5ee8d6b77ed2932486c7122fcb84ff20711a1970e841b149392929924a9657fe50e404525d02c7a90ae98d48de9b7f3bfe124a6f6f646bb913a5170fccdd765193f36aa53bb4b27273da54ac75af9e4339b5f735534b65959c499b6f9f7219a0072e42c80de9fa5f138bd0f699ffef59bb096613e2c94e158b8c6eb0f73682b2e5ab96f95dfa1d25c28246229e0367edd9401e85cfb477a1d3ae152fc474ce0814042ebc60b97ec81e6d2d9b50bdd7fcea957031f590a5a8c7f848775b8a602b41711a08f") r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000900)={0x1f, 0x2}, 0x6) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r10, &(0x7f0000000940)="16339586cabd14edb85ee054abb54bcc008513072d97b952c07829e60ce773bf33ee6711e0a536c1ec07ba7c4310c9a6d6fb421e25f3be299bd0bae011", 0x3d, 0x8000, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x6) 549.028969ms ago: executing program 4 (id=1966): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) listen(r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7fd}, 0xe) 538.117657ms ago: executing program 2 (id=1967): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3) ioctl$TUNSETLINK(r1, 0x400454d1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) 424.371778ms ago: executing program 4 (id=1968): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8", 0xf}, {&(0x7f0000000300)="56ef", 0x2}], 0x2}, 0x8010) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/212, 0xd4}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x4000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000030e8d5000000010000001400000500242c108035d320d98a61a90021c9bf", 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x22) r4 = socket(0x200000100000011, 0x803, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r7, 0x100, 0x81, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) r8 = socket$phonet(0x23, 0x2, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r11, @ANYBLOB="0a00180003030303030300001c005a8018000180140003000000000000000000e900000000000000"], 0x44}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r12, &(0x7f0000003700)={0x0, 0x7000003, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r14, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x38, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000030000008500000086000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="90030ee7ff072d2200000e210806000108000604"], 0x120) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480100001800c0001006e6f747261636b0020000180070001007274000014000280080001400000000f08000240000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 377.022307ms ago: executing program 2 (id=1969): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [], 0x0, 0x0, 0x0}, 0xa08) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x22, 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x5}, 0x5f) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280), 0x10) getsockname$packet(r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32], 0x4c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 375.088013ms ago: executing program 3 (id=1970): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0xffc0, 0x0, @loopback=0x7f000002}, 0x10) 219.577672ms ago: executing program 3 (id=1971): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000001e80)={0x0, 0xc00, 0x0}, 0x0) 193.90771ms ago: executing program 4 (id=1972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xe5}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x81, '\x00', r3, r5, 0x1, 0x1, 0x2}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000003340)={0x0, 0x0, 0x0}, 0x41) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001700), r6) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11], 0x14}}, 0x0) 164.758565ms ago: executing program 1 (id=1973): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x2d, 0x0, "85d3e7de1285f2376b2e569b17c330b99e81250c78b83bc8ef09b9f351c02db2ba462fbf5ed175678e3a73bfa7f66c696535074b4ff5e8042f5fe963d2ed46d6f881e3040278d763b88397265470af67"}, 0xd8) 89.941575ms ago: executing program 4 (id=1974): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) splice(r1, &(0x7f0000000140)=0x6, 0xffffffffffffffff, &(0x7f0000000240)=0x2, 0x1f, 0xd) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 77.177614ms ago: executing program 1 (id=1975): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) sendmsg$unix(r3, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002b40)='@', 0x1}, {&(0x7f0000000440)='>', 0x1}], 0x2}, 0x2000c095) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r6}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, 0x0, 0x48803) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x54}}, 0x0) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x2011) recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/78, 0x4e}], 0x1}, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005001d00fc0000000500010004"], 0x44}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x2}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x3, 0x0, 0x20001f00) 0s ago: executing program 2 (id=1976): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [], 0x0, 0x0, 0x0}, 0xa08) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x22, 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x5}, 0x5f) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280), 0x10) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) kernel console output (not intermixed with test programs): [ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.826960][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.838201][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.848721][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.858629][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.869212][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.879189][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.900213][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.913658][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.923206][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.925833][ T5103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.931950][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.940684][ T5103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.957032][ T5103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.965865][ T5103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.028939][ T2846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.043530][ T2846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.211119][ T53] Bluetooth: hci2: command tx timeout [ 80.216633][ T5108] Bluetooth: hci0: command tx timeout [ 80.239990][ T2812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.249230][ T5188] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.272599][ T2812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.275788][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.293347][ T5108] Bluetooth: hci1: command tx timeout [ 80.299838][ T5108] Bluetooth: hci3: command tx timeout [ 80.305531][ T53] Bluetooth: hci4: command tx timeout [ 80.324003][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.438968][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.480311][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.556590][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.592626][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.704867][ T2812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.762387][ T5202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10'. [ 80.779297][ T2812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.886930][ T5244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.998308][ T5242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.020790][ T5235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.124438][ T5242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.247405][ T29] audit: type=1804 audit(1719443541.182:2): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.21" name="/root/syzkaller.TyZEmU/2/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 82.335027][ T29] audit: type=1804 audit(1719443541.242:3): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.22" name="/root/syzkaller.dnVPq4/5/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 82.667079][ T5260] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 82.692246][ T5260] syzkaller1: entered promiscuous mode [ 82.707768][ T5260] syzkaller1: entered allmulticast mode [ 83.207527][ T5279] netlink: 'syz.2.35': attribute type 7 has an invalid length. [ 83.269429][ T5279] netlink: 'syz.2.35': attribute type 39 has an invalid length. [ 83.388985][ T5272] netlink: 'syz.2.35': attribute type 7 has an invalid length. [ 83.402229][ T5272] netlink: 'syz.2.35': attribute type 39 has an invalid length. [ 83.866264][ T5305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.962889][ T5305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.037735][ T29] audit: type=1804 audit(1719443542.982:4): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.45" name="/root/syzkaller.dnVPq4/8/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 84.086029][ T5311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.114812][ T5309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.129531][ T5218] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 84.165680][ T5218] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 84.170743][ T5311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.182294][ T35] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 2) transact 2 (expected 2) [ 84.197833][ T5309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.262441][ T29] audit: type=1804 audit(1719443543.212:5): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.46" name="/root/syzkaller.3bLztD/9/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 84.364861][ T29] audit: type=1804 audit(1719443543.302:6): pid=5311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.49" name="/root/syzkaller.TyZEmU/6/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 85.197704][ T5346] syzkaller1: entered promiscuous mode [ 85.212826][ T5346] syzkaller1: entered allmulticast mode [ 85.370612][ T5352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.418314][ T2846] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 85.471971][ T5355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.472082][ T12] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 2) transact 2 (expected 2) [ 85.559287][ T29] audit: type=1804 audit(1719443544.502:7): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.66" name="/root/syzkaller.TyZEmU/8/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 85.596278][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 85.669164][ T5358] syzkaller1: entered promiscuous mode [ 85.690954][ T5358] syzkaller1: entered allmulticast mode [ 85.741995][ T12] wlan1: authentication with 08:02:11:00:00:00 timed out [ 85.974852][ T5365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.052710][ T5361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.100926][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.117240][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.129454][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.144029][ T5098] syz-executor (5098) used greatest stack depth: 18864 bytes left [ 86.162966][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.187611][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.202416][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.313620][ T29] audit: type=1804 audit(1719443545.252:8): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.70" name="/root/syzkaller.BRhHV8/19/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 86.385643][ T2420] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.498980][ T5376] netlink: 'syz.2.72': attribute type 58 has an invalid length. [ 86.652558][ T2420] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.827002][ T2420] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.937374][ T5390] syzkaller1: entered promiscuous mode [ 86.949423][ T5390] syzkaller1: entered allmulticast mode [ 87.048564][ T2420] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.162157][ T5404] tipc: Can't bind to reserved service type 2 [ 87.642000][ T2420] bridge_slave_1: left allmulticast mode [ 87.648039][ T2420] bridge_slave_1: left promiscuous mode [ 87.683349][ T2420] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.712383][ T2420] bridge_slave_0: left allmulticast mode [ 87.724775][ T2420] bridge_slave_0: left promiscuous mode [ 87.734418][ T2420] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.290393][ T53] Bluetooth: hci1: command tx timeout [ 88.524833][ T2420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.538864][ T2420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.551236][ T2420] bond0 (unregistering): Released all slaves [ 88.576141][ T5367] chnl_net:caif_netlink_parms(): no params data found [ 88.758316][ T5447] syzkaller1: entered promiscuous mode [ 88.790217][ T5447] syzkaller1: entered allmulticast mode [ 88.845092][ T5452] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.524666][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.539637][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.557868][ T5367] bridge_slave_0: entered allmulticast mode [ 89.575117][ T5367] bridge_slave_0: entered promiscuous mode [ 89.597776][ T5472] netlink: 'syz.1.99': attribute type 58 has an invalid length. [ 89.665311][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.687917][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.718521][ T5367] bridge_slave_1: entered allmulticast mode [ 89.738351][ T5367] bridge_slave_1: entered promiscuous mode [ 89.802621][ T2420] hsr_slave_0: left promiscuous mode [ 89.838135][ T2420] hsr_slave_1: left promiscuous mode [ 89.849287][ T2420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.866986][ T2420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.887283][ T2420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.906608][ T2420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.970459][ T2420] veth1_macvtap: left promiscuous mode [ 89.989849][ T2420] veth0_macvtap: left promiscuous mode [ 90.000766][ T2420] veth1_vlan: left promiscuous mode [ 90.006731][ T2420] veth0_vlan: left promiscuous mode [ 90.371970][ T53] Bluetooth: hci1: command tx timeout [ 90.733781][ T2420] team0 (unregistering): Port device team_slave_1 removed [ 90.778211][ T2420] team0 (unregistering): Port device team_slave_0 removed [ 91.226638][ T5367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.324400][ T5519] syzkaller1: entered promiscuous mode [ 91.330125][ T5519] syzkaller1: entered allmulticast mode [ 91.381460][ T5367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.673961][ T5367] team0: Port device team_slave_0 added [ 91.712724][ T5367] team0: Port device team_slave_1 added [ 91.930720][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.949117][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.033088][ T5367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.067554][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.074918][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.102464][ T5367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.374392][ T5367] hsr_slave_0: entered promiscuous mode [ 92.399497][ T5367] hsr_slave_1: entered promiscuous mode [ 92.454336][ T53] Bluetooth: hci1: command tx timeout [ 92.462491][ T45] cfg80211: failed to load regulatory.db [ 92.750412][ T5561] syzkaller1: entered promiscuous mode [ 92.782239][ T5561] syzkaller1: entered allmulticast mode [ 93.012634][ T5575] netlink: 6 bytes leftover after parsing attributes in process `syz.2.127'. [ 93.065263][ T5575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.117873][ T5584] netlink: 'syz.4.131': attribute type 3 has an invalid length. [ 93.171636][ T5584] netlink: 'syz.4.131': attribute type 3 has an invalid length. [ 93.184054][ T5584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 93.848167][ T5598] netlink: 'syz.4.136': attribute type 58 has an invalid length. [ 93.867080][ T5608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'. [ 94.146443][ T5613] syzkaller1: entered promiscuous mode [ 94.169651][ T5613] syzkaller1: entered allmulticast mode [ 94.397888][ T5625] Illegal XDP return value 4294967274 on prog (id 45) dev N/A, expect packet loss! [ 94.480213][ T5627] netlink: 'syz.4.147': attribute type 11 has an invalid length. [ 94.533127][ T5629] netlink: 'syz.4.147': attribute type 11 has an invalid length. [ 94.542053][ T53] Bluetooth: hci1: command tx timeout [ 94.651521][ T5634] netlink: 'syz.4.147': attribute type 11 has an invalid length. [ 94.675871][ T5629] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 94.775714][ T5636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.786311][ T5367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.808923][ T5218] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 94.839778][ T5218] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 94.867594][ T5367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.892363][ T5636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.902723][ T12] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 2) transact 2 (expected 2) [ 94.919928][ T5367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.939175][ T5641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.152'. [ 94.958120][ T29] audit: type=1804 audit(1719443553.902:9): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.150" name="/root/syzkaller.TyZEmU/34/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 94.993780][ T5367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.328599][ T5647] netlink: 'syz.1.153': attribute type 58 has an invalid length. [ 95.387899][ T5367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.469291][ T5367] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.538784][ T5662] Cannot find del_set index 0 as target [ 95.555820][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.563134][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.629741][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.637083][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.735933][ T5668] syzkaller1: entered promiscuous mode [ 95.755805][ T5668] syzkaller1: entered allmulticast mode [ 96.216338][ T5687] netlink: 6 bytes leftover after parsing attributes in process `syz.4.163'. [ 96.258058][ T5687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.287294][ T5689] netlink: 60 bytes leftover after parsing attributes in process `syz.1.164'. [ 96.392454][ T5367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.400666][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807c215800: rx timeout, send abort [ 96.411786][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807c215800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 96.471431][ T2812] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 96.508138][ T2812] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 96.537703][ T2812] wlan1: authentication with 08:02:11:00:00:00 timed out [ 96.679371][ T5704] netlink: 'syz.2.167': attribute type 7 has an invalid length. [ 96.738955][ T5704] netlink: 'syz.2.167': attribute type 39 has an invalid length. [ 96.818872][ T5708] bridge1: port 1(gretap1) entered blocking state [ 96.826155][ T5708] bridge1: port 1(gretap1) entered disabled state [ 96.855337][ T5708] gretap1: entered allmulticast mode [ 96.881693][ T5708] gretap1: entered promiscuous mode [ 96.895780][ T5712] netlink: 'syz.2.167': attribute type 7 has an invalid length. [ 96.909672][ T5712] netlink: 'syz.2.167': attribute type 39 has an invalid length. [ 96.919274][ T5707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.946161][ T5711] netlink: 'syz.1.169': attribute type 22 has an invalid length. [ 96.965025][ T5701] netlink: 'syz.4.166': attribute type 58 has an invalid length. [ 96.981713][ T5716] netlink: 2 bytes leftover after parsing attributes in process `syz.1.169'. [ 97.000859][ T5713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.061083][ T29] audit: type=1804 audit(1719443556.002:10): pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.168" name="/root/syzkaller.TyZEmU/36/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 97.065327][ T5367] veth0_vlan: entered promiscuous mode [ 97.231497][ T5367] veth1_vlan: entered promiscuous mode [ 97.320921][ T5729] syzkaller1: entered promiscuous mode [ 97.326459][ T5729] syzkaller1: entered allmulticast mode [ 97.540947][ T5367] veth0_macvtap: entered promiscuous mode [ 97.561289][ T5738] netlink: 6 bytes leftover after parsing attributes in process `syz.2.175'. [ 97.570390][ T5738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.614901][ T5367] veth1_macvtap: entered promiscuous mode [ 97.720449][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.774901][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.804673][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.849847][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.874184][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.915117][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.940244][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.009164][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.033490][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.081097][ T5757] netlink: 'syz.2.180': attribute type 7 has an invalid length. [ 98.088820][ T5757] netlink: 'syz.2.180': attribute type 39 has an invalid length. [ 98.157598][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.195354][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.218766][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.234620][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.255081][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.268034][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.284541][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.301395][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.323424][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.339151][ T5757] netlink: 'syz.2.180': attribute type 7 has an invalid length. [ 98.373340][ T5367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.397683][ T5367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.407271][ T5367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.429286][ T5367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.854797][ T2487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.875311][ T2487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.008415][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.051703][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.549441][ T5808] bridge1: port 1(gretap1) entered blocking state [ 99.606063][ T5808] bridge1: port 1(gretap1) entered disabled state [ 99.618669][ T5808] gretap1: entered allmulticast mode [ 99.654591][ T5808] gretap1: entered promiscuous mode [ 99.857137][ T5838] syzkaller1: entered promiscuous mode [ 99.873751][ T5838] syzkaller1: entered allmulticast mode [ 100.461269][ T5866] validate_nla: 6 callbacks suppressed [ 100.461293][ T5866] netlink: 'syz.3.207': attribute type 7 has an invalid length. [ 100.516222][ T5866] netlink: 'syz.3.207': attribute type 39 has an invalid length. [ 100.599015][ T5871] netlink: 'syz.3.207': attribute type 7 has an invalid length. [ 100.650102][ T5871] netlink: 'syz.3.207': attribute type 39 has an invalid length. [ 100.782223][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802cc00400: rx timeout, send abort [ 100.791018][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802cc00400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 101.464024][ T5909] syzkaller1: entered promiscuous mode [ 101.477166][ T5909] syzkaller1: entered allmulticast mode [ 101.678192][ T5920] netlink: 'syz.1.224': attribute type 7 has an invalid length. [ 101.686223][ T5920] netlink: 'syz.1.224': attribute type 39 has an invalid length. [ 101.731364][ T5920] bridge1: port 1(gretap1) entered blocking state [ 101.770687][ T5920] bridge1: port 1(gretap1) entered disabled state [ 101.797361][ T5920] gretap1: entered allmulticast mode [ 101.841918][ T5920] gretap1: entered promiscuous mode [ 101.860406][ T5916] netlink: 'syz.1.224': attribute type 7 has an invalid length. [ 101.898874][ T5925] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 101.900532][ T5916] netlink: 'syz.1.224': attribute type 39 has an invalid length. [ 101.926805][ T5925] netlink: 113592 bytes leftover after parsing attributes in process `syz.0.226'. [ 102.148447][ T5936] netlink: 'syz.2.228': attribute type 58 has an invalid length. [ 102.698777][ T5955] syzkaller1: entered promiscuous mode [ 102.712928][ T5955] syzkaller1: entered allmulticast mode [ 103.947343][ T6003] syzkaller1: entered promiscuous mode [ 103.960423][ T6003] syzkaller1: entered allmulticast mode [ 104.000052][ T6010] bridge1: port 1(gretap1) entered blocking state [ 104.017975][ T6010] bridge1: port 1(gretap1) entered disabled state [ 104.049611][ T6010] gretap1: entered allmulticast mode [ 104.068852][ T6010] gretap1: entered promiscuous mode [ 104.550373][ T6027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.259'. [ 104.710246][ T6037] bridge_slave_0: left allmulticast mode [ 104.715999][ T6037] bridge_slave_0: left promiscuous mode [ 104.790037][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.881536][ T6037] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.779884][ T6066] validate_nla: 10 callbacks suppressed [ 105.779917][ T6066] netlink: 'syz.2.272': attribute type 58 has an invalid length. [ 106.605187][ T6101] netlink: 'syz.4.286': attribute type 58 has an invalid length. [ 106.786963][ T6106] netlink: 'syz.4.288': attribute type 21 has an invalid length. [ 106.799665][ T6106] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.811964][ T6106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.819844][ T6106] IPv6: NLM_F_CREATE should be set when creating new route [ 106.827256][ T6106] IPv6: NLM_F_CREATE should be set when creating new route [ 106.834673][ T6106] IPv6: NLM_F_CREATE should be set when creating new route [ 106.849327][ T6103] netlink: 'syz.3.287': attribute type 58 has an invalid length. [ 107.903666][ T6141] syzkaller1: entered promiscuous mode [ 107.925179][ T6141] syzkaller1: entered allmulticast mode [ 108.049804][ T6138] netlink: 'syz.3.301': attribute type 58 has an invalid length. [ 108.056709][ T6132] netlink: 'syz.0.298': attribute type 9 has an invalid length. [ 108.678699][ T6163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.755158][ T6163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.807040][ T29] audit: type=1804 audit(1719443567.752:11): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.310" name="/root/syzkaller.dnVPq4/57/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 109.044363][ T6173] netlink: 'syz.1.313': attribute type 58 has an invalid length. [ 109.667961][ T6189] syzkaller1: entered promiscuous mode [ 109.685478][ T6189] syzkaller1: entered allmulticast mode [ 109.903744][ T6202] sctp: [Deprecated]: syz.3.322 (pid 6202) Use of int in maxseg socket option. [ 109.903744][ T6202] Use struct sctp_assoc_value instead [ 110.288705][ T6216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.323140][ T6217] netlink: 'syz.0.326': attribute type 58 has an invalid length. [ 110.405674][ T6216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.479300][ T29] audit: type=1804 audit(1719443569.422:12): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.328" name="/root/syzkaller.3bLztD/79/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 110.506935][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 110.951950][ T6237] xt_CONNSECMARK: invalid mode: 0 [ 111.000072][ T6237] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.067003][ T6237] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 111.136235][ T6242] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.262682][ T6251] netlink: 'syz.1.340': attribute type 58 has an invalid length. [ 111.302849][ T6253] netlink: 'syz.4.342': attribute type 23 has an invalid length. [ 111.398600][ T6256] syzkaller1: entered promiscuous mode [ 111.404380][ T6256] syzkaller1: entered allmulticast mode [ 111.549297][ T6268] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.906151][ T6281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.985506][ T6281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.036618][ T6287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.039235][ T29] audit: type=1804 audit(1719443570.982:13): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.350" name="/root/syzkaller.BRhHV8/74/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 112.128545][ T6279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.220353][ T29] audit: type=1804 audit(1719443571.162:14): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.351" name="/root/syzkaller.8jCy6Z/39/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 [ 112.295213][ T6292] netlink: 'syz.1.355': attribute type 7 has an invalid length. [ 112.321069][ T6292] netlink: 'syz.1.355': attribute type 39 has an invalid length. [ 112.356688][ T6292] netlink: 'syz.1.355': attribute type 7 has an invalid length. [ 112.366275][ T6292] netlink: 'syz.1.355': attribute type 39 has an invalid length. [ 112.640006][ T6305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.694319][ T6307] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.750399][ T6310] trusted_key: syz.4.362 sent an empty control message without MSG_MORE. [ 112.769250][ T6307] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 112.834614][ T6314] syzkaller1: entered promiscuous mode [ 112.848338][ T6314] syzkaller1: entered allmulticast mode [ 113.162806][ T6331] netlink: 'syz.4.368': attribute type 7 has an invalid length. [ 113.227139][ T6331] netlink: 'syz.4.368': attribute type 39 has an invalid length. [ 113.253697][ T6335] netlink: 'syz.1.370': attribute type 15 has an invalid length. [ 113.262051][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'. [ 113.290806][ T6328] netlink: 'syz.4.368': attribute type 7 has an invalid length. [ 113.472964][ T6343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.498902][ T5149] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 113.550110][ T6343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.553695][ T5149] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 113.613820][ T2846] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 2) transact 2 (expected 2) [ 113.636154][ T29] audit: type=1804 audit(1719443572.562:15): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.372" name="/root/syzkaller.8jCy6Z/41/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 113.672602][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.744041][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.785492][ T35] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 113.816301][ T29] audit: type=1804 audit(1719443572.762:16): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.376" name="/root/syzkaller.dnVPq4/72/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 113.922357][ T2846] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 113.969973][ T6366] syzkaller1: entered promiscuous mode [ 113.987313][ T6366] syzkaller1: entered allmulticast mode [ 114.040464][ T2846] wlan1: authentication with 08:02:11:00:00:00 timed out [ 114.933963][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.971146][ T6409] syzkaller1: entered promiscuous mode [ 114.976680][ T6409] syzkaller1: entered allmulticast mode [ 115.001762][ T6406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.018036][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.072352][ T29] audit: type=1804 audit(1719443574.022:17): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.396" name="/root/syzkaller.TyZEmU/84/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 115.249634][ T6418] openvswitch: netlink: Missing key (keys=40, expected=80) [ 115.848380][ T6442] syzkaller1: entered promiscuous mode [ 115.858438][ T6443] netlink: 52 bytes leftover after parsing attributes in process `syz.0.410'. [ 115.858877][ T6442] syzkaller1: entered allmulticast mode [ 115.927397][ T29] audit: type=1800 audit(1719443574.872:18): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.413" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 115.974548][ T29] audit: type=1804 audit(1719443574.912:19): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.413" name="/root/syzkaller.TyZEmU/87/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 116.058462][ T29] audit: type=1804 audit(1719443575.002:20): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.413" name="/root/syzkaller.TyZEmU/87/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 116.090532][ T6450] openvswitch: netlink: Missing key (keys=40, expected=80) [ 116.103441][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 116.971106][ T6467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.099202][ T6467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.233531][ T29] audit: type=1804 audit(1719443576.182:21): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.420" name="/root/syzkaller.3bLztD/96/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 117.735685][ T6482] validate_nla: 2 callbacks suppressed [ 117.735709][ T6482] netlink: 'syz.2.426': attribute type 58 has an invalid length. [ 117.758708][ T6485] openvswitch: netlink: Missing key (keys=40, expected=80) [ 118.285291][ T6506] tipc: Started in network mode [ 118.295307][ T6506] tipc: Node identity 1, cluster identity 4711 [ 118.303420][ T6506] tipc: Node number set to 1 [ 118.350640][ T6506] tipc: Cannot configure node identity twice [ 118.527410][ T6513] openvswitch: netlink: Missing key (keys=40, expected=80) [ 118.582972][ T6517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.663169][ T6522] netlink: 'syz.2.441': attribute type 58 has an invalid length. [ 118.700657][ T6523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.736368][ T6525] batadv_slave_1: entered allmulticast mode [ 118.779753][ T6525] batadv_slave_1: left allmulticast mode [ 118.780827][ T29] audit: type=1804 audit(1719443577.722:22): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.442" name="/root/syzkaller.8jCy6Z/53/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 119.694493][ T6561] netlink: 'syz.1.458': attribute type 58 has an invalid length. [ 119.991850][ T6576] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 120.261164][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.275126][ T6583] netlink: 134312 bytes leftover after parsing attributes in process `syz.2.470'. [ 120.322356][ T6583] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.359847][ T6583] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 120.386043][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.400569][ T6588] Can't find ip_set type hasŠ:ip,mac [ 120.407795][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 120.422202][ T6590] Can't find ip_set type hasŠ:ip,mac [ 120.469157][ T29] audit: type=1804 audit(1719443579.412:23): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.468" name="/root/syzkaller.3bLztD/109/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 120.711295][ T6603] netlink: 'syz.3.476': attribute type 58 has an invalid length. [ 120.949514][ T6614] netlink: 'syz.3.481': attribute type 21 has an invalid length. [ 120.958261][ T6614] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.967453][ T6614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.974912][ T6614] IPv6: NLM_F_CREATE should be set when creating new route [ 120.982333][ T6614] IPv6: NLM_F_CREATE should be set when creating new route [ 120.989624][ T6614] IPv6: NLM_F_CREATE should be set when creating new route [ 121.063089][ T6614] netlink: 'syz.3.481': attribute type 21 has an invalid length. [ 121.098994][ T6614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.369699][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 121.551869][ T6638] netlink: 'syz.1.488': attribute type 58 has an invalid length. [ 121.648597][ T6639] pim6reg: entered allmulticast mode [ 121.698122][ T6646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.776955][ T6649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.802667][ T6646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.853345][ T6653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.862777][ T29] audit: type=1804 audit(1719443580.802:24): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.492" name="/root/syzkaller.BRhHV8/107/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 121.943144][ T29] audit: type=1804 audit(1719443580.892:25): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.493" name="/root/syzkaller.dnVPq4/92/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 122.106784][ T6658] netlink: 134312 bytes leftover after parsing attributes in process `syz.1.496'. [ 122.123841][ T6658] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 122.136061][ T6658] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.158659][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 122.778736][ T6679] netlink: 'syz.2.504': attribute type 58 has an invalid length. [ 122.959498][ T6686] syzkaller1: entered promiscuous mode [ 122.970332][ T6686] syzkaller1: entered allmulticast mode [ 123.350570][ T6699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.471834][ T6701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.505713][ T6705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.542377][ T29] audit: type=1804 audit(1719443582.482:26): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.513" name="/root/syzkaller.TyZEmU/107/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 123.632673][ T6705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.637239][ T6711] syzkaller1: entered promiscuous mode [ 123.648394][ T6711] syzkaller1: entered allmulticast mode [ 123.689519][ T29] audit: type=1804 audit(1719443582.632:27): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.515" name="/root/syzkaller.BRhHV8/112/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 123.826086][ T6720] netlink: 134312 bytes leftover after parsing attributes in process `syz.0.521'. [ 123.837305][ T6720] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 123.871280][ T6720] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 123.895893][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 125.266055][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.329838][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.359564][ T29] audit: type=1804 audit(1719443584.302:28): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.537" name="/root/syzkaller.8jCy6Z/73/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 126.368735][ T6761] netlink: 'syz.2.534': attribute type 58 has an invalid length. [ 126.803882][ T6784] syzkaller1: entered promiscuous mode [ 126.809471][ T6784] syzkaller1: entered allmulticast mode [ 127.149680][ T6792] can: request_module (can-proto-0) failed. [ 127.197076][ T6802] netlink: 'syz.3.549': attribute type 58 has an invalid length. [ 127.341183][ T6798] netlink: 'syz.2.550': attribute type 58 has an invalid length. [ 127.363954][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 127.829354][ T6826] syzkaller1: entered promiscuous mode [ 127.860971][ T6826] syzkaller1: entered allmulticast mode [ 127.868875][ T6828] netlink: 'syz.0.561': attribute type 7 has an invalid length. [ 127.898548][ T6828] netlink: 'syz.0.561': attribute type 39 has an invalid length. [ 127.965291][ T6832] bridge1: port 1(gretap1) entered blocking state [ 127.978614][ T6832] bridge1: port 1(gretap1) entered disabled state [ 127.987384][ T6832] gretap1: entered allmulticast mode [ 128.031093][ T6832] gretap1: entered promiscuous mode [ 128.106994][ T6825] netlink: 'syz.0.561': attribute type 7 has an invalid length. [ 128.128964][ T6825] netlink: 'syz.0.561': attribute type 39 has an invalid length. [ 128.155389][ T6838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.565'. [ 128.173559][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 128.190539][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.212047][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.242378][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.250116][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.423892][ T6845] netlink: 'syz.2.568': attribute type 58 has an invalid length. [ 129.075408][ T6876] syzkaller1: entered promiscuous mode [ 129.081174][ T6876] syzkaller1: entered allmulticast mode [ 129.088152][ T6880] netlink: 'syz.2.579': attribute type 4 has an invalid length. [ 129.111921][ T6880] syz.2.579 (6880) used greatest stack depth: 18288 bytes left [ 129.457736][ T6889] netlink: 'syz.2.583': attribute type 58 has an invalid length. [ 130.165727][ T6923] syzkaller1: entered promiscuous mode [ 130.185756][ T6923] syzkaller1: entered allmulticast mode [ 130.364719][ T6933] team0: Port device wlan1 added [ 130.599451][ T6944] x_tables: duplicate underflow at hook 4 [ 130.953067][ T6958] netlink: 'syz.0.608': attribute type 33 has an invalid length. [ 131.053023][ T6958] netlink: 72 bytes leftover after parsing attributes in process `syz.0.608'. [ 131.110777][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 131.155541][ T6971] syzkaller1: entered promiscuous mode [ 131.172732][ T6971] syzkaller1: entered allmulticast mode [ 131.277661][ T6978] x_tables: duplicate underflow at hook 2 [ 131.658642][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.620'. [ 131.882566][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 132.249035][ T7025] syzkaller1: entered promiscuous mode [ 132.255205][ T7025] syzkaller1: entered allmulticast mode [ 132.843937][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 132.929648][ T7063] bridge0: entered promiscuous mode [ 133.413628][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.421812][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.579694][ T7088] syzkaller1: entered promiscuous mode [ 133.591016][ T7088] syzkaller1: entered allmulticast mode [ 133.819186][ T7100] bridge: RTM_NEWNEIGH with invalid ether address [ 134.015325][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 134.169700][ T7106] team1: Mode changed to "loadbalance" [ 134.234190][ T7119] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.662'. [ 134.254003][ T7119] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 134.280328][ T7119] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 134.336748][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.659'. [ 134.589129][ T7135] team0: entered promiscuous mode [ 134.610531][ T7135] team_slave_0: entered promiscuous mode [ 134.625613][ T7135] team_slave_1: entered promiscuous mode [ 134.645060][ T7135] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 134.675529][ T7138] team_slave_0: entered allmulticast mode [ 134.729310][ T7138] team0: Port device team_slave_0 removed [ 134.750336][ T7132] team0: left promiscuous mode [ 134.755493][ T7132] team_slave_1: left promiscuous mode [ 134.765549][ T7132] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 134.828731][ T7140] syzkaller1: entered promiscuous mode [ 134.857329][ T7140] syzkaller1: entered allmulticast mode [ 135.305327][ T7165] vlan0: entered promiscuous mode [ 135.313372][ T7165] vlan0: entered allmulticast mode [ 135.344392][ T7165] veth0_vlan: entered allmulticast mode [ 135.408640][ T7165] team0: Port device vlan0 added [ 135.440961][ T7173] netlink: 'syz.1.677': attribute type 7 has an invalid length. [ 135.468265][ T7173] netlink: 'syz.1.677': attribute type 39 has an invalid length. [ 135.695125][ T7182] team0: entered promiscuous mode [ 135.710425][ T7182] team_slave_0: entered promiscuous mode [ 135.723264][ T7182] team_slave_1: entered promiscuous mode [ 135.786855][ T7182] team_slave_0: entered allmulticast mode [ 135.836695][ T7182] team0: Port device team_slave_0 removed [ 135.895621][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 135.944880][ T7179] team0: left promiscuous mode [ 135.963911][ T7179] team_slave_1: left promiscuous mode [ 135.995756][ T7197] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 136.048953][ T7195] syzkaller1: entered promiscuous mode [ 136.058839][ T7195] syzkaller1: entered allmulticast mode [ 136.215548][ T7206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.351786][ T7209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.388023][ T29] audit: type=1804 audit(1719443595.332:29): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.686" name="/root/syzkaller.TyZEmU/143/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 136.694174][ T7221] netlink: 'syz.1.692': attribute type 58 has an invalid length. [ 136.705213][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.724349][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.961297][ T7234] syzkaller1: entered promiscuous mode [ 136.976098][ T7234] syzkaller1: entered allmulticast mode [ 137.258955][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'. [ 137.288208][ T7252] pim6reg: entered allmulticast mode [ 137.536720][ T7257] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.609642][ T7260] x_tables: unsorted entry at hook 2 [ 138.379294][ T7287] syzkaller1: entered promiscuous mode [ 138.388730][ T7287] syzkaller1: entered allmulticast mode [ 138.449601][ T2846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.649872][ T2846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.733343][ T7291] team0: entered promiscuous mode [ 138.749317][ T7291] team_slave_1: entered promiscuous mode [ 138.780662][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.791255][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.804558][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.813900][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.822572][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.832948][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.883576][ T2846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.941105][ T7290] team0: left promiscuous mode [ 138.960330][ T7290] team_slave_1: left promiscuous mode [ 139.084409][ T2846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.162181][ T7310] netlink: 'syz.3.722': attribute type 11 has an invalid length. [ 139.521461][ T2846] bridge_slave_1: left allmulticast mode [ 139.549132][ T2846] bridge_slave_1: left promiscuous mode [ 139.562277][ T2846] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.594492][ T2846] bridge_slave_0: left allmulticast mode [ 139.608527][ T2846] bridge_slave_0: left promiscuous mode [ 139.633931][ T2846] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.667953][ T2846] gretap1: left allmulticast mode [ 139.691871][ T2846] gretap1: left promiscuous mode [ 139.707409][ T2846] bridge1: port 1(gretap1) entered disabled state [ 140.204360][ T2846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.219857][ T2846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.232681][ T2846] bond0 (unregistering): Released all slaves [ 140.255843][ T7340] netlink: 'syz.1.730': attribute type 58 has an invalid length. [ 140.310373][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 140.472338][ T29] audit: type=1804 audit(1719443599.422:30): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.733" name="/root/syzkaller.TyZEmU/149/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 140.860734][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 140.930491][ T53] Bluetooth: hci1: command tx timeout [ 141.043029][ T2846] hsr_slave_0: left promiscuous mode [ 141.059585][ T2846] hsr_slave_1: left promiscuous mode [ 141.067466][ T2846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.078784][ T2846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.087967][ T2846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.101501][ T2846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.122111][ T2846] veth1_macvtap: left promiscuous mode [ 141.127728][ T2846] veth0_macvtap: left promiscuous mode [ 141.134484][ T2846] veth1_vlan: left promiscuous mode [ 141.140064][ T2846] veth0_vlan: left promiscuous mode [ 141.297274][ T2846] pim6reg (unregistering): left allmulticast mode [ 141.690286][ T2846] team0 (unregistering): Port device team_slave_1 removed [ 141.755889][ T2846] team0 (unregistering): Port device team_slave_0 removed [ 142.385691][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.408059][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.429703][ T7298] bridge_slave_0: entered allmulticast mode [ 142.457963][ T7298] bridge_slave_0: entered promiscuous mode [ 142.486573][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.510483][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.526700][ T7298] bridge_slave_1: entered allmulticast mode [ 142.536901][ T7298] bridge_slave_1: entered promiscuous mode [ 142.544273][ T7392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.746'. [ 142.557280][ T7395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.746'. [ 142.692743][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.724894][ T7406] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 142.739677][ T7406] netlink: 160 bytes leftover after parsing attributes in process `syz.2.752'. [ 142.765544][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.863861][ T7298] team0: Port device team_slave_0 added [ 142.889336][ T7298] team0: Port device team_slave_1 added [ 142.978375][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.988961][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.018904][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.022211][ T53] Bluetooth: hci1: command tx timeout [ 143.043280][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.050616][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.076955][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.164771][ T7420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.235123][ T7298] hsr_slave_0: entered promiscuous mode [ 143.260906][ T7298] hsr_slave_1: entered promiscuous mode [ 143.341151][ T7420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.487177][ T7420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.668922][ T7420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.004193][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'. [ 144.105972][ T7452] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 144.131983][ T7452] netlink: 'syz.4.769': attribute type 10 has an invalid length. [ 144.160012][ T7452] hsr0: entered promiscuous mode [ 144.203561][ T7452] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.260079][ T7452] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 144.279709][ T7452] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 144.309850][ T7452] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 144.640434][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 144.825208][ T7298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.906384][ T7482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.974773][ T7298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.002357][ T7298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.033964][ T7298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.090906][ T53] Bluetooth: hci1: command tx timeout [ 145.105761][ T7482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.221543][ T7482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.349252][ T7482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.462541][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.537762][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.559093][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.567335][ T5184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.628398][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.635663][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.708420][ T7482] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.734638][ T7482] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.782406][ T7482] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.849305][ T7482] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.871691][ T7520] netlink: 'syz.3.795': attribute type 12 has an invalid length. [ 146.044759][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.797'. [ 146.148457][ T7539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.798'. [ 146.184555][ T7539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.798'. [ 146.268326][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.401995][ T7298] veth0_vlan: entered promiscuous mode [ 146.437752][ T7298] veth1_vlan: entered promiscuous mode [ 146.529569][ T7298] veth0_macvtap: entered promiscuous mode [ 146.557267][ T7559] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.601798][ T7298] veth1_macvtap: entered promiscuous mode [ 146.646912][ T7559] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.703331][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.714562][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.728979][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.745614][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.756397][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.772251][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.788397][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.834826][ T7559] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.865456][ T7571] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 146.873632][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.873660][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.873673][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.873688][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.873700][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.873715][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.875564][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.944116][ T7569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.812'. [ 146.961721][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.813'. [ 146.985833][ T7298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.003022][ T7298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.013756][ T7298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.033808][ T7298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.057991][ T7559] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.086241][ T7567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.812'. [ 147.172831][ T53] Bluetooth: hci1: command tx timeout [ 147.312552][ T7582] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 147.321288][ T7582] netlink: 'syz.3.818': attribute type 2 has an invalid length. [ 147.321751][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 147.353527][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.368033][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.427176][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.441858][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.564665][ T7596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.595964][ T7599] netlink: 'syz.1.824': attribute type 33 has an invalid length. [ 147.634253][ T7600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.656243][ T7599] netlink: 72 bytes leftover after parsing attributes in process `syz.1.824'. [ 147.666349][ T29] audit: type=1804 audit(1719443606.602:31): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.710" name="/root/syzkaller.sy583x/0/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 147.690448][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 147.843653][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.1.827'. [ 148.585368][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 149.222705][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.329276][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.397670][ T29] audit: type=1804 audit(1719443608.342:32): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.841" name="/root/syzkaller.3bLztD/207/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 149.838264][ T7712] bridge0: entered promiscuous mode [ 150.326366][ T7740] Bluetooth: MGMT ver 1.22 [ 150.518472][ T7753] team1: Mode changed to "loadbalance" [ 150.544346][ T7753] xt_cluster: node mask cannot exceed total number of nodes [ 150.866264][ T7777] netlink: 'syz.1.877': attribute type 8 has an invalid length. [ 150.879402][ T7777] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 151.064575][ T7783] __nla_validate_parse: 16 callbacks suppressed [ 151.064599][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'. [ 151.151882][ T7559] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.196143][ T7559] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.256112][ T7559] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.291229][ T7559] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.329014][ T7801] netlink: 'syz.1.885': attribute type 1 has an invalid length. [ 151.348279][ T7801] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.885'. [ 151.552571][ T7814] netlink: 3 bytes leftover after parsing attributes in process `syz.3.889'. [ 151.862709][ T7835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.882816][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.896'. [ 151.914191][ T7835] bridge_slave_0: left allmulticast mode [ 151.922426][ T7835] bridge_slave_0: left promiscuous mode [ 151.928504][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.945459][ T7835] bridge_slave_1: left allmulticast mode [ 151.951703][ T7835] bridge_slave_1: left promiscuous mode [ 151.958394][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.979810][ T7835] bond0: (slave bond_slave_0): Releasing backup interface [ 152.006125][ T7835] bond0: (slave bond_slave_1): Releasing backup interface [ 152.072159][ T7835] team0: Port device team_slave_0 removed [ 152.099498][ T7835] team0: Port device team_slave_1 removed [ 152.111475][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.129473][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.149941][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.157800][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.216693][ T7835] gretap1: left allmulticast mode [ 152.230286][ T7835] gretap1: left promiscuous mode [ 152.240567][ T7835] bridge1: port 1(gretap1) entered disabled state [ 152.300101][ T7851] netlink: 3 bytes leftover after parsing attributes in process `syz.1.902'. [ 153.011067][ T7893] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 153.246235][ T11] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.318415][ T11] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.434699][ T11] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.527545][ T11] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.849791][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.859975][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.877137][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.896628][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.911835][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.920042][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.259495][ T7920] chnl_net:caif_netlink_parms(): no params data found [ 154.405531][ T7946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.468845][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.479773][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.484362][ T7946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.487360][ T7920] bridge_slave_0: entered allmulticast mode [ 154.508914][ T7920] bridge_slave_0: entered promiscuous mode [ 154.519146][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.519191][ T7951] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 154.526756][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.558406][ T7920] bridge_slave_1: entered allmulticast mode [ 154.569133][ T7920] bridge_slave_1: entered promiscuous mode [ 154.580613][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 154.608257][ T29] audit: type=1804 audit(1719443613.552:33): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.934" name="/root/syzkaller.sy583x/27/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 154.622138][ T7951] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 154.709441][ T7920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.730023][ T7920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.819617][ T7920] team0: Port device team_slave_0 added [ 154.858313][ T7920] team0: Port device team_slave_1 added [ 154.920768][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.927791][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.968395][ T7920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.994855][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.010625][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.070385][ T7920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.248087][ T7920] hsr_slave_0: entered promiscuous mode [ 155.255774][ T7979] ip6t_srh: unknown srh match flags 4001 [ 155.279370][ T7920] hsr_slave_1: entered promiscuous mode [ 155.300969][ T7920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.309485][ T7920] Cannot create hsr debugfs directory [ 155.334042][ T7979] netlink: 'syz.1.945': attribute type 11 has an invalid length. [ 155.434594][ T7984] Cannot find del_set index 0 as target [ 155.906939][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 155.954824][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 155.970394][ T53] Bluetooth: hci4: command tx timeout [ 156.063121][ T8017] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 156.079659][ T8017] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 156.089696][ T8017] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 156.098704][ T8017] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 156.774465][ T11] bridge_slave_1: left allmulticast mode [ 156.798512][ T11] bridge_slave_1: left promiscuous mode [ 156.816442][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.833534][ T11] bridge_slave_0: left allmulticast mode [ 156.839329][ T11] bridge_slave_0: left promiscuous mode [ 156.848274][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.868702][ T11] gretap1: left allmulticast mode [ 156.874802][ T11] gretap1: left promiscuous mode [ 156.879985][ T11] bridge1: port 1(gretap1) entered disabled state [ 157.479262][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.497851][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.510544][ T11] bond0 (unregistering): Released all slaves [ 157.893391][ T8082] netlink: 'syz.0.977': attribute type 19 has an invalid length. [ 157.926182][ T8082] netlink: 1 bytes leftover after parsing attributes in process `syz.0.977'. [ 158.060361][ T53] Bluetooth: hci4: command tx timeout [ 158.206182][ T8097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.302950][ T8097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.350000][ T11] hsr_slave_0: left promiscuous mode [ 158.364175][ T11] hsr_slave_1: left promiscuous mode [ 158.380070][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.386253][ T29] audit: type=1804 audit(1719443617.332:34): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.981" name="/root/syzkaller.sy583x/37/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 158.390820][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.420102][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.429221][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.461034][ T11] veth1_macvtap: left promiscuous mode [ 158.466794][ T11] veth0_macvtap: left promiscuous mode [ 158.473264][ T11] veth1_vlan: left promiscuous mode [ 158.478889][ T11] veth0_vlan: left allmulticast mode [ 158.484870][ T11] veth0_vlan: left promiscuous mode [ 158.779993][ T11] team0 (unregistering): Port device vlan0 removed [ 159.106863][ T11] team0 (unregistering): Port device team_slave_1 removed [ 159.176634][ T11] team0 (unregistering): Port device team_slave_0 removed [ 159.759652][ T7920] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.835747][ T7920] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.898672][ T7920] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.955902][ T7920] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.106859][ T8143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.130439][ T53] Bluetooth: hci4: command tx timeout [ 160.193337][ T8143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.296591][ T29] audit: type=1804 audit(1719443619.232:35): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.996" name="/root/syzkaller.sy583x/44/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 160.345987][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.406379][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.452189][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.459405][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.513863][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.521223][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.794177][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1008'. [ 160.817878][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 161.118448][ T7920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.420769][ T8211] ip6t_srh: unknown srh match flags 4001 [ 161.446548][ T8211] netlink: 'syz.0.1021': attribute type 11 has an invalid length. [ 161.632411][ T7920] veth0_vlan: entered promiscuous mode [ 161.674546][ T7920] veth1_vlan: entered promiscuous mode [ 161.796009][ T7920] veth0_macvtap: entered promiscuous mode [ 161.824076][ T7920] veth1_macvtap: entered promiscuous mode [ 161.939256][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.957038][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.967149][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.978425][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.992930][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.015806][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.042040][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.062714][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.076029][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.102780][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.135297][ T7920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.148318][ T7920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.163867][ T7920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.186317][ T7920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.211594][ T53] Bluetooth: hci4: command tx timeout [ 162.479822][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.501228][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.542207][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.573074][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.833886][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 163.031256][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1039'. [ 163.054129][ T8279] ip6t_srh: unknown srh match flags 4001 [ 163.060287][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'. [ 163.069067][ T8279] netlink: 'syz.1.1041': attribute type 11 has an invalid length. [ 163.587521][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 163.869696][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1056'. [ 163.907738][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 164.107051][ T8339] netlink: 'syz.4.1058': attribute type 7 has an invalid length. [ 164.156825][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 164.286988][ T8336] netlink: 'syz.4.1058': attribute type 7 has an invalid length. [ 164.300393][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 164.999072][ T8377] ip6t_srh: unknown srh match flags 4001 [ 165.007819][ T8377] netlink: 'syz.0.1070': attribute type 11 has an invalid length. [ 165.592523][ T8392] netlink: 'syz.1.1075': attribute type 7 has an invalid length. [ 165.610450][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 165.673670][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 165.674835][ T8392] netlink: 'syz.1.1075': attribute type 7 has an invalid length. [ 165.695048][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 165.709718][ T8402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.777181][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.818219][ T29] audit: type=1804 audit(1719443624.762:36): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1077" name="/root/syzkaller.wkDQMz/8/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 166.328322][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.592383][ T8434] netlink: 'syz.4.1088': attribute type 7 has an invalid length. [ 166.655838][ T8438] netlink: 'syz.4.1088': attribute type 7 has an invalid length. [ 166.831448][ T8446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.040023][ T8448] bridge: RTM_NEWNEIGH with invalid ether address [ 167.147409][ T8451] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.334477][ T8456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.399649][ T8456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.451997][ T29] audit: type=1804 audit(1719443626.392:37): pid=8456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1097" name="/root/syzkaller.sy583x/65/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 167.564208][ T8469] netlink: 'syz.3.1101': attribute type 7 has an invalid length. [ 167.613132][ T8462] netlink: 'syz.3.1101': attribute type 7 has an invalid length. [ 167.828601][ T8484] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 167.844959][ T8480] team_slave_1: entered promiscuous mode [ 167.874429][ T8480] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.891369][ T8480] team_slave_1: left promiscuous mode [ 167.947453][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 168.211967][ T8496] batman_adv: batadv0: Adding interface: ipvlan3 [ 168.218573][ T8496] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.248963][ T8496] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 168.418825][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.655289][ T8511] pimreg: entered allmulticast mode [ 168.706333][ T8518] pimreg: left allmulticast mode [ 168.814948][ T8517] __nla_validate_parse: 6 callbacks suppressed [ 168.814969][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 168.855129][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 168.989899][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 169.024453][ T8527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.111567][ T8527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.192152][ T29] audit: type=1804 audit(1719443628.142:38): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1119" name="/root/syzkaller.3bLztD/268/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 169.485157][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 169.819705][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.969351][ T8579] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1130'. [ 170.034721][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 170.073473][ T8585] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1133'. [ 170.265553][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 170.357253][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 170.725944][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 170.757619][ T8622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.835058][ T8630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.889104][ T29] audit: type=1804 audit(1719443629.832:39): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1141" name="/root/syzkaller.dnVPq4/228/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 [ 171.743857][ T8673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.067194][ T8700] pim6reg: left allmulticast mode [ 172.093229][ T8699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.197249][ T8706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.281750][ T29] audit: type=1804 audit(1719443631.222:40): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1167" name="/root/syzkaller.sy583x/80/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 [ 172.307382][ T29] audit: type=1804 audit(1719443631.222:41): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1166" name="/root/syzkaller.wkDQMz/31/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 173.276839][ T8759] tun0: tun_chr_ioctl cmd 1074812117 [ 173.481279][ T8765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.590667][ T8775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.655594][ T29] audit: type=1804 audit(1719443632.602:42): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1191" name="/root/syzkaller.wkDQMz/34/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 173.666434][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.687014][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.722022][ T8771] bridge0: entered promiscuous mode [ 175.111150][ T8835] __nla_validate_parse: 7 callbacks suppressed [ 175.111172][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1217'. [ 175.580790][ T8854] netlink: 'syz.1.1224': attribute type 4 has an invalid length. [ 175.672547][ T8858] netlink: 'syz.1.1224': attribute type 4 has an invalid length. [ 175.751218][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 176.166975][ T8880] netlink: 'syz.0.1231': attribute type 29 has an invalid length. [ 176.549389][ T8893] xt_policy: neither incoming nor outgoing policy selected [ 176.688330][ T8900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.692283][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1243'. [ 176.719840][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 176.780460][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.810045][ T29] audit: type=1804 audit(1719443635.752:43): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1241" name="/root/syzkaller.TyZEmU/260/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 176.839025][ T8915] netlink: 'syz.4.1243': attribute type 3 has an invalid length. [ 176.887780][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 177.107133][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 177.359770][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 177.439406][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 177.658718][ T8944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.774975][ T8958] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1261'. [ 178.014735][ T8971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.041266][ T8968] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1266'. [ 178.087125][ T8971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.145424][ T29] audit: type=1804 audit(1719443637.092:44): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1267" name="/root/syzkaller.3bLztD/290/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 178.169960][ T8977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1268'. [ 178.227760][ T8981] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 178.467287][ T8994] netlink: 'syz.0.1273': attribute type 10 has an invalid length. [ 178.561551][ T8994] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.954653][ T9021] xt_policy: neither incoming nor outgoing policy selected [ 179.253422][ T9039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.329225][ T9039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.366459][ T29] audit: type=1804 audit(1719443638.312:45): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1294" name="/root/syzkaller.dnVPq4/264/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 179.847177][ T9068] syzkaller1: entered promiscuous mode [ 179.854268][ T9068] syzkaller1: entered allmulticast mode [ 180.559554][ T9114] __nla_validate_parse: 6 callbacks suppressed [ 180.559578][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1321'. [ 180.643877][ T9108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.741820][ T9108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.753477][ T9123] syzkaller1: entered promiscuous mode [ 180.759038][ T9123] syzkaller1: entered allmulticast mode [ 180.810481][ T29] audit: type=1804 audit(1719443639.752:46): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1320" name="/root/syzkaller.dnVPq4/268/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 181.295127][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1336'. [ 181.488748][ T9171] netlink: 'syz.1.1342': attribute type 4 has an invalid length. [ 181.619762][ T9180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.691758][ T9180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.728712][ T29] audit: type=1804 audit(1719443640.672:47): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1344" name="/root/syzkaller.dnVPq4/270/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 181.785929][ T9190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 181.873368][ T9192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.937101][ T9192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.955972][ T29] audit: type=1804 audit(1719443640.902:48): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1350" name="/root/syzkaller.TyZEmU/282/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0 [ 182.321692][ T9209] netlink: 'syz.1.1357': attribute type 10 has an invalid length. [ 182.352850][ T9209] team0: Port device wlan1 removed [ 182.404165][ T9209] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.051341][ T9255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.090868][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1374'. [ 183.139096][ T9255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.200256][ T29] audit: type=1804 audit(1719443642.142:49): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1372" name="/root/syzkaller.dnVPq4/274/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 183.283150][ T9263] syzkaller1: entered promiscuous mode [ 183.288843][ T9263] syzkaller1: entered allmulticast mode [ 183.299528][ T29] audit: type=1804 audit(1719443642.202:50): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1371" name="/root/syzkaller.TyZEmU/285/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 183.466209][ T9266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.562862][ T9266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.608033][ T29] audit: type=1804 audit(1719443642.552:51): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1377" name="/root/syzkaller.3bLztD/308/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 183.932018][ T9293] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 184.092771][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1386'. [ 184.153753][ T9304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1388'. [ 184.237403][ T9307] syzkaller1: entered promiscuous mode [ 184.244534][ T9307] syzkaller1: entered allmulticast mode [ 185.045753][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1398'. [ 185.138272][ T9335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.181529][ T9337] syzkaller1: entered promiscuous mode [ 185.188404][ T9337] syzkaller1: entered allmulticast mode [ 185.230829][ T9342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.264157][ T29] audit: type=1804 audit(1719443644.212:52): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1399" name="/root/syzkaller.dnVPq4/277/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 185.466352][ T9357] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 185.594868][ T9363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1411'. [ 185.691003][ T9359] netlink: 'syz.3.1409': attribute type 58 has an invalid length. [ 185.942211][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 186.091109][ T9376] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.120620][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 186.159247][ T9383] syzkaller1: entered promiscuous mode [ 186.166118][ T9383] syzkaller1: entered allmulticast mode [ 186.391715][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1423'. [ 186.513359][ T9399] netlink: 'syz.1.1424': attribute type 58 has an invalid length. [ 186.516785][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.554712][ T5147] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 186.564940][ T5147] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 186.595246][ T2434] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 2) transact 2 (expected 2) [ 186.612172][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.622490][ T9406] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 186.623347][ T2434] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 186.647135][ T2434] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 186.662320][ T29] audit: type=1804 audit(1719443645.602:53): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1425" name="/root/syzkaller.wkDQMz/94/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 186.692455][ T2434] wlan1: authentication with 08:02:11:00:00:00 timed out [ 186.693752][ T9408] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 186.710308][ T9408] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.1427'. [ 186.719778][ T9408] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 186.728920][ T9408] netlink: 'syz.1.1427': attribute type 2 has an invalid length. [ 186.739376][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 187.059214][ T9426] IPVS: length: 96 != 8 [ 187.067858][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 187.308474][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1435'. [ 187.321273][ T9436] syzkaller1: entered promiscuous mode [ 187.335008][ T9436] syzkaller1: entered allmulticast mode [ 187.444519][ T9433] netlink: 'syz.4.1437': attribute type 58 has an invalid length. [ 187.962136][ T9472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.983390][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1446'. [ 188.066176][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 188.157646][ T9478] syzkaller1: entered promiscuous mode [ 188.165531][ T9478] syzkaller1: entered allmulticast mode [ 188.300597][ T9490] netlink: 'syz.1.1450': attribute type 58 has an invalid length. [ 188.672052][ T9504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.767339][ T9504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.840077][ T29] audit: type=1804 audit(1719443647.782:54): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1456" name="/root/syzkaller.TyZEmU/300/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 189.218021][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 189.425612][ T9532] netlink: 'syz.0.1467': attribute type 58 has an invalid length. [ 189.567231][ T9545] erspan0: entered promiscuous mode [ 189.579352][ T9545] batadv_slave_0: entered promiscuous mode [ 190.602630][ T9593] __nla_validate_parse: 6 callbacks suppressed [ 190.602655][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 190.865997][ T9602] bond_slave_0: entered promiscuous mode [ 190.872271][ T9602] bond_slave_1: entered promiscuous mode [ 190.878134][ T9602] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 190.895611][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 190.945782][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 191.004162][ T9597] bond_slave_0: left promiscuous mode [ 191.010079][ T9597] bond_slave_1: left promiscuous mode [ 191.015894][ T9597] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 191.216633][ T9626] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1496'. [ 191.231122][ T29] audit: type=1800 audit(1719443650.182:55): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1495" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 191.246108][ T9629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1497'. [ 191.304098][ T29] audit: type=1804 audit(1719443650.252:56): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1495" name="/root/syzkaller.dnVPq4/292/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 191.475111][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'. [ 191.555424][ T9637] bond0: entered promiscuous mode [ 191.679379][ T9647] bond_slave_0: entered promiscuous mode [ 191.686218][ T9647] bond_slave_1: entered promiscuous mode [ 191.855571][ T9645] bond_slave_0: left promiscuous mode [ 191.861251][ T9645] bond_slave_1: left promiscuous mode [ 191.867102][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 191.929731][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 192.004851][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 192.149875][ T9668] syzkaller1: entered promiscuous mode [ 192.167053][ T9668] syzkaller1: entered allmulticast mode [ 192.187957][ T9665] netlink: 'syz.2.1511': attribute type 58 has an invalid length. [ 192.263135][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1513'. [ 192.405718][ T9673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.917260][ T9705] netlink: 'syz.1.1525': attribute type 1 has an invalid length. [ 193.112727][ T9712] syzkaller1: entered promiscuous mode [ 193.118407][ T9712] syzkaller1: entered allmulticast mode [ 193.185870][ T9718] syzkaller1: entered promiscuous mode [ 193.213758][ T9718] syzkaller1: entered allmulticast mode [ 193.477234][ T9738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.484635][ T9738] IPv6: NLM_F_CREATE should be set when creating new route [ 193.492054][ T9738] IPv6: NLM_F_CREATE should be set when creating new route [ 193.499323][ T9738] IPv6: NLM_F_CREATE should be set when creating new route [ 193.618976][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.660007][ T9746] netlink: 'syz.4.1540': attribute type 13 has an invalid length. [ 193.691498][ T9746] erspan0: refused to change device tx_queue_len [ 193.693772][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.708286][ T9746] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 193.767303][ T29] audit: type=1804 audit(1719443652.712:57): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1539" name="/root/syzkaller.dnVPq4/302/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 194.324598][ T9773] syzkaller1: entered promiscuous mode [ 194.343050][ T9773] syzkaller1: entered allmulticast mode [ 194.838964][ T9795] netlink: 'syz.2.1560': attribute type 21 has an invalid length. [ 194.862827][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.869403][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.042527][ T9803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.120584][ T9803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.167531][ T29] audit: type=1804 audit(1719443654.112:58): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1563" name="/root/syzkaller.dnVPq4/306/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 195.225730][ T9813] syzkaller1: entered promiscuous mode [ 195.233598][ T9813] syzkaller1: entered allmulticast mode [ 195.265742][ T9817] batman_adv: batadv0: Adding interface: ipvlan4 [ 195.272594][ T9817] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.299309][ T9817] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 195.685420][ T9829] syzkaller1: entered promiscuous mode [ 195.715405][ T9829] syzkaller1: entered allmulticast mode [ 195.869416][ T9841] __nla_validate_parse: 19 callbacks suppressed [ 195.869438][ T9841] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1579'. [ 196.046373][ T9852] netlink: 'syz.0.1581': attribute type 58 has an invalid length. [ 196.165019][ T9857] batman_adv: batadv0: Adding interface: ipvlan5 [ 196.190451][ T9857] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.229037][ T9857] batman_adv: batadv0: Not using interface ipvlan5 (retrying later): interface not active [ 196.535745][ T9871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1589'. [ 196.547667][ T9871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1589'. [ 196.634202][ T9877] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1590'. [ 196.773447][ T29] audit: type=1800 audit(1719443655.722:59): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1594" name="memory.events" dev="sda1" ino=1976 res=0 errno=0 [ 196.814700][ T29] audit: type=1804 audit(1719443655.752:60): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1594" name="/root/syzkaller.3bLztD/350/memory.events" dev="sda1" ino=1976 res=1 errno=0 [ 196.845390][ T29] audit: type=1804 audit(1719443655.752:61): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1594" name="/root/syzkaller.3bLztD/350/memory.events" dev="sda1" ino=1976 res=1 errno=0 [ 196.876564][ T9888] netlink: 872 bytes leftover after parsing attributes in process `syz.1.1594'. [ 196.932896][ T5110] Bluetooth: hci2: command 0x0406 tx timeout [ 196.934090][ T5111] Bluetooth: hci0: command 0x0406 tx timeout [ 196.942618][ T5110] Bluetooth: hci3: command 0x0406 tx timeout [ 196.999948][ T29] audit: type=1804 audit(1719443655.942:62): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1594" name="/root/syzkaller.3bLztD/350/memory.events" dev="sda1" ino=1976 res=1 errno=0 [ 197.133074][ T9892] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 197.133948][ T29] audit: type=1804 audit(1719443656.082:63): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1598" name="/root/syzkaller.3bLztD/351/cgroup.controllers" dev="sda1" ino=1982 res=1 errno=0 [ 197.225901][ T9900] netlink: 'syz.2.1597': attribute type 58 has an invalid length. [ 197.458998][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1600'. [ 197.468682][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1601'. [ 197.504403][ T9911] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1602'. [ 197.573605][ T9915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1602'. [ 197.636947][ T9922] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1604'. [ 197.743360][ T9917] dccp_close: ABORT with 190 bytes unread [ 197.830298][ T9927] netlink: 'syz.0.1608': attribute type 4 has an invalid length. [ 197.911282][ T29] audit: type=1800 audit(1719443656.852:64): pid=9936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1610" name="memory.events" dev="sda1" ino=1976 res=0 errno=0 [ 198.023987][ T29] audit: type=1804 audit(1719443656.972:65): pid=9936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1610" name="/root/syzkaller.TyZEmU/332/memory.events" dev="sda1" ino=1976 res=1 errno=0 [ 198.089862][ T29] audit: type=1804 audit(1719443657.002:66): pid=9936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1610" name="/root/syzkaller.TyZEmU/332/memory.events" dev="sda1" ino=1976 res=1 errno=0 [ 198.230763][ T9952] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.238265][ T9952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.246013][ T9952] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.253380][ T9952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.399647][ T29] audit: type=1804 audit(1719443657.342:67): pid=9946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1610" name="/root/syzkaller.TyZEmU/332/memory.events" dev="sda1" ino=1976 res=1 errno=0 [ 199.998087][T10037] netlink: 'syz.1.1641': attribute type 58 has an invalid length. [ 200.817693][T10073] netlink: 'syz.2.1652': attribute type 29 has an invalid length. [ 200.835713][T10073] netlink: 'syz.2.1652': attribute type 29 has an invalid length. [ 201.126840][T10089] netlink: 'syz.0.1656': attribute type 58 has an invalid length. [ 201.298132][T10099] __nla_validate_parse: 16 callbacks suppressed [ 201.298156][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 201.409737][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 201.429892][T10107] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1661'. [ 201.451546][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 201.891205][ T5108] Bluetooth: hci0: command 0x0406 tx timeout [ 202.457699][T10156] netlink: 'syz.4.1672': attribute type 58 has an invalid length. [ 202.507926][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1675'. [ 202.563661][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1674'. [ 202.588612][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1674'. [ 202.979425][ T29] audit: type=1804 audit(1719443661.922:68): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1682" name="/root/syzkaller.sy583x/189/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 203.415134][T10205] netlink: 'syz.0.1687': attribute type 58 has an invalid length. [ 203.450704][T10207] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.457955][T10207] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 203.493565][T10206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1688'. [ 203.539815][T10207] hsr_slave_0: left promiscuous mode [ 203.550949][T10207] hsr_slave_1: left promiscuous mode [ 203.611092][T10206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1688'. [ 203.640851][T10212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.722033][T10212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.882121][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'. [ 203.993757][ T29] audit: type=1804 audit(1719443662.932:69): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1697" name="/root/syzkaller.wkDQMz/145/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 204.466828][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.480015][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.489726][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.506868][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.521736][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.529550][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.495512][ T12] bond0 (unregistering): Released all slaves [ 205.514367][ T12] bond1 (unregistering): Released all slaves [ 205.600275][T10255] netlink: 'syz.3.1703': attribute type 58 has an invalid length. [ 205.902086][T10267] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 205.908760][T10267] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 205.945633][T10267] hsr_slave_0: left promiscuous mode [ 205.956148][T10267] hsr_slave_1: left promiscuous mode [ 206.371601][ T12] hsr_slave_0: left promiscuous mode [ 206.392772][ T12] hsr_slave_1: left promiscuous mode [ 206.446949][ T12] veth1_macvtap: left promiscuous mode [ 206.454647][ T12] veth0_macvtap: left promiscuous mode [ 206.462164][ T12] veth1_vlan: left promiscuous mode [ 206.467816][ T12] veth0_vlan: left promiscuous mode [ 206.611923][ T5106] Bluetooth: hci2: command tx timeout [ 206.674986][T10296] __nla_validate_parse: 5 callbacks suppressed [ 206.675009][T10296] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1711'. [ 206.714549][T10296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.788121][T10298] netlink: 'syz.0.1714': attribute type 58 has an invalid length. [ 208.158234][T10316] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 208.158933][T10243] chnl_net:caif_netlink_parms(): no params data found [ 208.199027][T10317] netlink: 'syz.4.1718': attribute type 7 has an invalid length. [ 208.219202][T10317] netlink: 'syz.4.1718': attribute type 39 has an invalid length. [ 208.346256][T10319] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 208.353037][T10319] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 208.378007][T10310] bridge4: port 1(gretap1) entered blocking state [ 208.389632][T10310] bridge4: port 1(gretap1) entered disabled state [ 208.398702][T10310] gretap1: entered allmulticast mode [ 208.409441][T10310] gretap1: entered promiscuous mode [ 208.423973][T10317] netlink: 'syz.4.1718': attribute type 7 has an invalid length. [ 208.433160][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1723'. [ 208.439807][T10317] netlink: 'syz.4.1718': attribute type 39 has an invalid length. [ 208.501982][T10319] hsr_slave_0: left promiscuous mode [ 208.552983][T10319] hsr_slave_1: left promiscuous mode [ 208.692121][ T5106] Bluetooth: hci2: command tx timeout [ 208.803245][T10243] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.811629][T10243] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.819023][T10243] bridge_slave_0: entered allmulticast mode [ 208.827649][T10243] bridge_slave_0: entered promiscuous mode [ 208.843478][T10336] netlink: 'syz.1.1726': attribute type 58 has an invalid length. [ 208.964865][T10243] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.990452][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.009228][T10243] bridge_slave_1: entered allmulticast mode [ 209.032280][T10243] bridge_slave_1: entered promiscuous mode [ 209.075860][T10348] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1727'. [ 209.094091][T10351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.135236][T10351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.223258][T10243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.275157][T10243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.439897][T10243] team0: Port device team_slave_0 added [ 209.478415][T10243] team0: Port device team_slave_1 added [ 209.507523][T10372] netlink: 'syz.1.1734': attribute type 7 has an invalid length. [ 209.518655][T10372] netlink: 'syz.1.1734': attribute type 39 has an invalid length. [ 209.557007][T10243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.589897][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.617728][T10243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.635368][T10370] netlink: 'syz.1.1734': attribute type 7 has an invalid length. [ 209.643472][T10370] netlink: 'syz.1.1734': attribute type 39 has an invalid length. [ 209.656792][T10243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.664117][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.695151][T10243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.811198][T10243] hsr_slave_0: entered promiscuous mode [ 209.820953][T10243] hsr_slave_1: entered promiscuous mode [ 209.862588][T10243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.880268][T10243] Cannot create hsr debugfs directory [ 210.159764][T10400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1742'. [ 210.169173][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 210.376704][T10407] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1745'. [ 210.589382][T10417] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 210.629785][T10411] bridge3: port 1(gretap1) entered blocking state [ 210.637588][T10411] bridge3: port 1(gretap1) entered disabled state [ 210.644476][T10411] gretap1: entered allmulticast mode [ 210.652598][T10411] gretap1: entered promiscuous mode [ 210.770795][ T5106] Bluetooth: hci2: command tx timeout [ 210.986393][T10433] batadv0: entered promiscuous mode [ 211.014452][T10243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.030929][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1755'. [ 211.065182][T10243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.105335][T10243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.128310][T10243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.181310][T10431] team0: Device batadv0 is up. Set it down before adding it as a team port [ 211.399625][T10454] openvswitch: netlink: Missing key (keys=40, expected=80) [ 211.494833][T10449] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1762'. [ 211.565800][T10243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.594304][T10463] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1766'. [ 211.645272][T10243] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.759622][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.767021][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.876062][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.883334][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.182639][T10478] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1771'. [ 212.315437][T10484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1773'. [ 212.451866][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1774'. [ 212.486297][T10494] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1775'. [ 212.499688][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1774'. [ 212.554252][T10494] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 212.567113][T10496] team0: Device batadv0 is up. Set it down before adding it as a team port [ 212.691567][T10488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.834912][T10506] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1777'. [ 212.853390][ T5106] Bluetooth: hci2: command tx timeout [ 212.921923][T10243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.086998][T10243] veth0_vlan: entered promiscuous mode [ 213.125521][T10243] veth1_vlan: entered promiscuous mode [ 213.154774][T10514] syzkaller1: entered promiscuous mode [ 213.167354][T10514] syzkaller1: entered allmulticast mode [ 213.243828][T10243] veth0_macvtap: entered promiscuous mode [ 213.274420][T10519] validate_nla: 6 callbacks suppressed [ 213.274443][T10519] netlink: 'syz.1.1783': attribute type 58 has an invalid length. [ 213.398478][T10243] veth1_macvtap: entered promiscuous mode [ 213.459805][T10522] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1784'. [ 213.538861][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.557475][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.573390][T10243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.585767][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.609085][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.627229][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.656508][T10535] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1789'. [ 213.665816][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.690032][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.703973][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.717596][T10243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.879875][T10243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.903320][T10243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.917062][T10243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.926244][T10243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.102225][ T2434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.126461][ T2434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.204481][T10555] netlink: 'syz.0.1794': attribute type 58 has an invalid length. [ 214.310428][ T2434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.331454][ T2434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.498619][T10563] syzkaller1: entered promiscuous mode [ 214.512804][T10563] syzkaller1: entered allmulticast mode [ 214.625718][T10579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1800'. [ 215.150301][T10604] netlink: 'syz.3.1808': attribute type 58 has an invalid length. [ 215.473394][T10612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1811'. [ 215.610357][T10615] syzkaller1: entered promiscuous mode [ 215.616151][T10615] syzkaller1: entered allmulticast mode [ 215.948225][T10634] netlink: 'syz.0.1821': attribute type 13 has an invalid length. [ 215.982546][T10634] veth0_macvtap: left promiscuous mode [ 215.993489][T10634] macvtap0: entered promiscuous mode [ 216.038307][T10634] macvtap0: refused to change device tx_queue_len [ 216.250677][T10650] netlink: 'syz.0.1826': attribute type 58 has an invalid length. [ 216.516403][T10662] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 216.648406][T10667] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:0 [ 216.664893][T10672] syzkaller1: entered promiscuous mode [ 216.670790][T10672] syzkaller1: entered allmulticast mode [ 216.981372][T10686] netlink: 'syz.4.1839': attribute type 58 has an invalid length. [ 217.056872][T10691] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.064831][T10691] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.117058][T10691] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.124831][T10691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.133992][T10691] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.142560][T10691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.198424][T10691] team0: Port device bridge0 added [ 217.376971][T10698] __nla_validate_parse: 1 callbacks suppressed [ 217.376994][T10698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1844'. [ 217.515649][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 217.837203][T10724] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1852'. [ 217.900489][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 218.118753][T10737] syzkaller1: entered promiscuous mode [ 218.137519][T10737] syzkaller1: entered allmulticast mode [ 218.285957][T10740] syzkaller1: entered promiscuous mode [ 218.299232][T10740] syzkaller1: entered allmulticast mode [ 218.502584][T10756] netlink: 'syz.2.1861': attribute type 58 has an invalid length. [ 218.520629][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 218.803078][T10764] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1865'. [ 218.834440][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 218.892955][T10768] netlink: 'syz.0.1867': attribute type 27 has an invalid length. [ 219.273521][ T29] audit: type=1804 audit(1719443678.222:70): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1873" name="/root/syzkaller.wkDQMz/187/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 219.329191][T10789] syzkaller1: entered promiscuous mode [ 219.337309][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 219.339297][T10789] syzkaller1: entered allmulticast mode [ 219.791961][T10813] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1881'. [ 219.876927][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'. [ 220.338739][T10842] netlink: 'syz.2.1890': attribute type 7 has an invalid length. [ 220.359083][T10842] netlink: 'syz.2.1890': attribute type 39 has an invalid length. [ 220.427794][T10838] netlink: 'syz.2.1890': attribute type 7 has an invalid length. [ 220.443099][T10838] netlink: 'syz.2.1890': attribute type 39 has an invalid length. [ 220.710680][ T29] audit: type=1804 audit(1719443679.662:71): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1896" name="/root/syzkaller.3bLztD/416/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 221.085574][T10885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.278600][T10895] netlink: 'syz.4.1905': attribute type 7 has an invalid length. [ 221.304606][T10895] netlink: 'syz.4.1905': attribute type 39 has an invalid length. [ 221.356832][T10891] netlink: 'syz.4.1905': attribute type 7 has an invalid length. [ 221.372522][T10891] netlink: 'syz.4.1905': attribute type 39 has an invalid length. [ 221.388840][T10901] syzkaller1: entered promiscuous mode [ 221.408917][T10901] syzkaller1: entered allmulticast mode [ 221.790834][T10922] Cannot find add_set index 0 as target [ 221.927675][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.108091][T10945] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 222.269076][T10949] syzkaller1: entered promiscuous mode [ 222.285257][T10949] syzkaller1: entered allmulticast mode [ 222.453036][T10964] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 222.572099][T10969] __nla_validate_parse: 7 callbacks suppressed [ 222.572125][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 222.603685][T10970] netlink: 'syz.4.1933': attribute type 11 has an invalid length. [ 223.146903][T10998] syzkaller1: entered promiscuous mode [ 223.163256][T10998] syzkaller1: entered allmulticast mode [ 223.848672][T11037] validate_nla: 16 callbacks suppressed [ 223.848694][T11037] netlink: 'syz.1.1955': attribute type 33 has an invalid length. [ 224.009878][T11048] syzkaller1: entered promiscuous mode [ 224.016670][T11048] syzkaller1: entered allmulticast mode [ 224.168078][T11053] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1961'. [ 224.260005][T11060] netlink: 'syz.1.1962': attribute type 7 has an invalid length. [ 224.269728][T11060] netlink: 'syz.1.1962': attribute type 39 has an invalid length. [ 224.308772][T11056] netlink: 'syz.1.1962': attribute type 7 has an invalid length. [ 224.344942][T11056] netlink: 'syz.1.1962': attribute type 39 has an invalid length. [ 224.695719][T11084] netlink: 'syz.2.1969': attribute type 7 has an invalid length. [ 224.704338][T11084] netlink: 'syz.2.1969': attribute type 39 has an invalid length. [ 224.816453][T11084] netlink: 'syz.2.1969': attribute type 7 has an invalid length. [ 224.839118][T11084] netlink: 'syz.2.1969': attribute type 39 has an invalid length. [ 224.962915][T11092] syzkaller1: entered promiscuous mode [ 224.968479][T11092] syzkaller1: entered allmulticast mode [ 225.000465][T11095] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 225.034705][T11095] (unnamed net_device) (uninitialized): option lacp_active: invalid value (252) [ 225.105486][T11101] netlink: 'syz.2.1976': attribute type 7 has an invalid length. [ 225.110342][ T12] ================================================================== [ 225.121401][ T12] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 225.129554][ T12] Read of size 8 at addr ffff8880587508b8 by task kworker/u8:1/12 [ 225.137391][ T12] [ 225.139749][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc4-syzkaller-00937-ga6a6a9809411 #0 [ 225.149840][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 225.160021][ T12] Workqueue: l2tp l2tp_tunnel_del_work [ 225.165574][ T12] Call Trace: [ 225.168894][ T12] [ 225.171855][ T12] dump_stack_lvl+0x241/0x360 [ 225.176582][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.181832][ T12] ? __pfx__printk+0x10/0x10 [ 225.186475][ T12] ? _printk+0xd5/0x120 [ 225.190677][ T12] ? __virt_addr_valid+0x183/0x520 [ 225.195844][ T12] ? __virt_addr_valid+0x183/0x520 [ 225.201011][ T12] print_report+0x169/0x550 [ 225.205558][ T12] ? __virt_addr_valid+0x183/0x520 [ 225.210804][ T12] ? __virt_addr_valid+0x183/0x520 [ 225.215971][ T12] ? __virt_addr_valid+0x44e/0x520 [ 225.221128][ T12] ? __phys_addr+0xba/0x170 [ 225.225680][ T12] ? l2tp_tunnel_del_work+0xe5/0x330 [ 225.231036][ T12] kasan_report+0x143/0x180 [ 225.235616][ T12] ? l2tp_tunnel_del_work+0xe5/0x330 [ 225.240965][ T12] l2tp_tunnel_del_work+0xe5/0x330 [ 225.246170][ T12] ? process_scheduled_works+0x945/0x1830 [ 225.252034][ T12] process_scheduled_works+0xa2c/0x1830 [ 225.257787][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 225.263827][ T12] ? assign_work+0x364/0x3d0 [ 225.268470][ T12] worker_thread+0x86d/0xd70 [ 225.273120][ T12] ? __kthread_parkme+0x169/0x1d0 [ 225.278192][ T12] ? __pfx_worker_thread+0x10/0x10 [ 225.283344][ T12] kthread+0x2f0/0x390 [ 225.287461][ T12] ? __pfx_worker_thread+0x10/0x10 [ 225.292705][ T12] ? __pfx_kthread+0x10/0x10 [ 225.297346][ T12] ret_from_fork+0x4b/0x80 [ 225.301817][ T12] ? __pfx_kthread+0x10/0x10 [ 225.306451][ T12] ret_from_fork_asm+0x1a/0x30 [ 225.311278][ T12] [ 225.314320][ T12] [ 225.316665][ T12] Allocated by task 11095: [ 225.321119][ T12] kasan_save_track+0x3f/0x80 [ 225.325882][ T12] __kasan_kmalloc+0x98/0xb0 [ 225.330607][ T12] __kmalloc_noprof+0x1f9/0x400 [ 225.335503][ T12] l2tp_session_create+0x3b/0xc20 [ 225.340582][ T12] pppol2tp_connect+0xca3/0x17a0 [ 225.345647][ T12] __sys_connect+0x2df/0x310 [ 225.350280][ T12] __x64_sys_connect+0x7a/0x90 [ 225.355091][ T12] do_syscall_64+0xf3/0x230 [ 225.359653][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.365600][ T12] [ 225.367942][ T12] Freed by task 11097: [ 225.372029][ T12] kasan_save_track+0x3f/0x80 [ 225.376745][ T12] kasan_save_free_info+0x40/0x50 [ 225.381823][ T12] poison_slab_object+0xe0/0x150 [ 225.386898][ T12] __kasan_slab_free+0x37/0x60 [ 225.391717][ T12] kfree+0x149/0x360 [ 225.395672][ T12] __sk_destruct+0x58/0x5f0 [ 225.400226][ T12] rcu_core+0xafd/0x1830 [ 225.404511][ T12] handle_softirqs+0x2c4/0x970 [ 225.409323][ T12] __irq_exit_rcu+0xf4/0x1c0 [ 225.413959][ T12] irq_exit_rcu+0x9/0x30 [ 225.418248][ T12] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 225.423941][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.429977][ T12] [ 225.432325][ T12] Last potentially related work creation: [ 225.438071][ T12] kasan_save_stack+0x3f/0x60 [ 225.442793][ T12] __kasan_record_aux_stack+0xac/0xc0 [ 225.448208][ T12] call_rcu+0x167/0xa70 [ 225.452398][ T12] pppol2tp_release+0x24b/0x350 [ 225.457258][ T12] sock_close+0xbc/0x240 [ 225.461519][ T12] __fput+0x406/0x8b0 [ 225.465528][ T12] task_work_run+0x24f/0x310 [ 225.470137][ T12] syscall_exit_to_user_mode+0x168/0x370 [ 225.475788][ T12] do_syscall_64+0x100/0x230 [ 225.480396][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.486303][ T12] [ 225.488622][ T12] The buggy address belongs to the object at ffff888058750800 [ 225.488622][ T12] which belongs to the cache kmalloc-1k of size 1024 [ 225.502689][ T12] The buggy address is located 184 bytes inside of [ 225.502689][ T12] freed 1024-byte region [ffff888058750800, ffff888058750c00) [ 225.516599][ T12] [ 225.518949][ T12] The buggy address belongs to the physical page: [ 225.525481][ T12] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58750 [ 225.534268][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 225.542778][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 225.550346][ T12] page_type: 0xffffefff(slab) [ 225.555063][ T12] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 225.563668][ T12] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 225.572280][ T12] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 225.580991][ T12] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 225.589733][ T12] head: 00fff00000000003 ffffea000161d401 ffffffffffffffff 0000000000000000 [ 225.598412][ T12] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 225.607115][ T12] page dumped because: kasan: bad access detected [ 225.613626][ T12] page_owner tracks the page as allocated [ 225.619471][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4920, tgid 4920 (dhcpcd), ts 55953200745, free_ts 53117067371 [ 225.640344][ T12] post_alloc_hook+0x1f3/0x230 [ 225.645153][ T12] get_page_from_freelist+0x2e43/0x2f00 [ 225.650736][ T12] __alloc_pages_noprof+0x256/0x6c0 [ 225.655968][ T12] alloc_slab_page+0x5f/0x120 [ 225.660664][ T12] allocate_slab+0x5a/0x2f0 [ 225.665202][ T12] ___slab_alloc+0xcd1/0x14b0 [ 225.669991][ T12] __slab_alloc+0x58/0xa0 [ 225.674337][ T12] kmalloc_node_track_caller_noprof+0x281/0x440 [ 225.680616][ T12] kmemdup_noprof+0x2a/0x60 [ 225.685129][ T12] bpf_prog_create_from_user+0x270/0x3e0 [ 225.690860][ T12] do_seccomp+0x90d/0xf90 [ 225.695235][ T12] __se_sys_prctl+0xb49/0x3990 [ 225.700034][ T12] do_syscall_64+0xf3/0x230 [ 225.704554][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.710474][ T12] page last free pid 785 tgid 785 stack trace: [ 225.716668][ T12] free_unref_page+0xd22/0xea0 [ 225.721455][ T12] __put_partials+0xeb/0x130 [ 225.726077][ T12] put_cpu_partial+0x17c/0x250 [ 225.730857][ T12] __slab_free+0x2ea/0x3d0 [ 225.735297][ T12] qlist_free_all+0x9e/0x140 [ 225.739922][ T12] kasan_quarantine_reduce+0x14f/0x170 [ 225.745428][ T12] __kasan_slab_alloc+0x23/0x80 [ 225.750290][ T12] __kmalloc_node_noprof+0x1d2/0x440 [ 225.755596][ T12] kvmalloc_node_noprof+0x72/0x190 [ 225.760742][ T12] rhashtable_rehash_alloc+0x9e/0x290 [ 225.766185][ T12] rht_deferred_worker+0x2075/0x23f0 [ 225.771491][ T12] process_scheduled_works+0xa2c/0x1830 [ 225.777067][ T12] worker_thread+0x86d/0xd70 [ 225.781697][ T12] kthread+0x2f0/0x390 [ 225.785807][ T12] ret_from_fork+0x4b/0x80 [ 225.790268][ T12] ret_from_fork_asm+0x1a/0x30 [ 225.795083][ T12] [ 225.797435][ T12] Memory state around the buggy address: [ 225.803098][ T12] ffff888058750780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.811201][ T12] ffff888058750800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.819303][ T12] >ffff888058750880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.827392][ T12] ^ [ 225.833342][ T12] ffff888058750900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.841422][ T12] ffff888058750980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.849520][ T12] ================================================================== [ 225.857708][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 225.864938][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc4-syzkaller-00937-ga6a6a9809411 #0 [ 225.875038][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 225.885125][ T12] Workqueue: l2tp l2tp_tunnel_del_work [ 225.890621][ T12] Call Trace: [ 225.893913][ T12] [ 225.896942][ T12] dump_stack_lvl+0x241/0x360 [ 225.901641][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.906861][ T12] ? __pfx__printk+0x10/0x10 [ 225.911474][ T12] ? vscnprintf+0x5d/0x90 [ 225.915828][ T12] panic+0x349/0x860 [ 225.919739][ T12] ? check_panic_on_warn+0x21/0xb0 [ 225.924872][ T12] ? __pfx_panic+0x10/0x10 [ 225.929306][ T12] ? mark_lock+0x9a/0x350 [ 225.933649][ T12] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 225.939585][ T12] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 225.945494][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 225.951829][ T12] ? print_report+0x502/0x550 [ 225.956569][ T12] check_panic_on_warn+0x86/0xb0 [ 225.961540][ T12] ? l2tp_tunnel_del_work+0xe5/0x330 [ 225.966880][ T12] end_report+0x77/0x160 [ 225.971151][ T12] kasan_report+0x154/0x180 [ 225.975677][ T12] ? l2tp_tunnel_del_work+0xe5/0x330 [ 225.980989][ T12] l2tp_tunnel_del_work+0xe5/0x330 [ 225.986117][ T12] ? process_scheduled_works+0x945/0x1830 [ 225.991888][ T12] process_scheduled_works+0xa2c/0x1830 [ 225.997466][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.003552][ T12] ? assign_work+0x364/0x3d0 [ 226.008155][ T12] worker_thread+0x86d/0xd70 [ 226.012775][ T12] ? __kthread_parkme+0x169/0x1d0 [ 226.017820][ T12] ? __pfx_worker_thread+0x10/0x10 [ 226.022942][ T12] kthread+0x2f0/0x390 [ 226.027027][ T12] ? __pfx_worker_thread+0x10/0x10 [ 226.032146][ T12] ? __pfx_kthread+0x10/0x10 [ 226.036749][ T12] ret_from_fork+0x4b/0x80 [ 226.041184][ T12] ? __pfx_kthread+0x10/0x10 [ 226.045804][ T12] ret_from_fork_asm+0x1a/0x30 [ 226.050608][ T12] [ 226.053934][ T12] Kernel Offset: disabled [ 226.058325][ T12] Rebooting in 86400 seconds..