last executing test programs: 4m10.529363412s ago: executing program 1 (id=57): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a010300000000"], 0x130}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000007010400000000000000000008000009ec000073"], 0x20}}, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, 0x5, 0x4, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x800, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xc1fb}]}}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4m8.992894693s ago: executing program 1 (id=63): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000006000000000000000100000d040000000d00000000000000000000000400001004000000000000000000000402000000000000002e"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4m8.861859539s ago: executing program 3 (id=65): openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4m8.756381544s ago: executing program 1 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000104f0ffffff000500000000fdff", @ANYRES32=r2, @ANYBLOB="00000069ad44000024001a8020000a80140007"], 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1}, 0x40050) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r7 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r7, &(0x7f0000001b00)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000480)=""/252, 0xfc}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000700)=""/208, 0xd0}, {&(0x7f0000000880)=""/127, 0x7f}], 0x6, &(0x7f0000000980)=""/74, 0x4a}, 0x4}, {{&(0x7f0000000a00)=@caif=@dbg, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000c80)=""/195, 0xc3}], 0x3, &(0x7f0000000400)=""/38, 0x26}, 0x81}, {{&(0x7f0000000bc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d80)=""/195, 0xc3}, {&(0x7f0000000e80)=""/201, 0xc9}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f0000000f80)=""/117, 0x75}, {&(0x7f0000001000)=""/172, 0xac}, {&(0x7f00000010c0)=""/114, 0x72}, {&(0x7f0000000680)=""/37, 0x25}], 0x7}}, {{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000000800)=[{&(0x7f0000001240)=""/160, 0xa0}, {&(0x7f0000001300)=""/199, 0xc7}], 0x2, &(0x7f0000001400)=""/25, 0x19}, 0x401}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001f80)=""/177, 0xb1}, {&(0x7f0000001500)=""/186, 0xba}, {&(0x7f00000015c0)=""/52, 0x34}], 0x3, &(0x7f0000001640)=""/120, 0x78}, 0x1}, {{&(0x7f00000016c0)=@isdn, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001740)=""/78, 0x4e}, {&(0x7f00000017c0)=""/175, 0xaf}, {&(0x7f0000001880)=""/2, 0x2}, {&(0x7f00000018c0)=""/139, 0x8b}, {&(0x7f0000001980)=""/29, 0x1d}], 0x5, &(0x7f0000001a40)=""/184, 0xb8}, 0x3ff}], 0x6, 0x10031, &(0x7f0000001c80)={0x0, 0x989680}) connect$inet(r3, &(0x7f0000001cc0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x1, 0x3}, 0x10) bind$tipc(r7, 0x0, 0x0) bind$tipc(r8, 0x0, 0x0) close(r8) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x2, r6, 0xb6}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000200)=0xa, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0137014010ff"}) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x11, 0x18, &(0x7f0000001d80)=ANY=[@ANYBLOB="18000000ffffff7f00000000ffff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018250000", @ANYRES32=r9, @ANYBLOB="000000000800000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018260000", @ANYRES32, @ANYBLOB="00000000020000008d542000f0ffffff8510000006000000183800000300000000000000000000000000000000000006"], &(0x7f0000001e40)='syzkaller\x00', 0x2, 0x90, &(0x7f0000001e80)=""/144, 0x40f00, 0x20, '\x00', r6, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002100), 0x10, 0x2000000, @void, @value}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000140)=0x5, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0x0, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_TABLE={0x0, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) 4m8.641751013s ago: executing program 3 (id=68): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x16, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x0, 0xc, 0x3, 0x6, 0xfffffffffffffff4, 0x10}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m8.013840973s ago: executing program 3 (id=71): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 4m7.705847867s ago: executing program 3 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500"], 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4m7.609296042s ago: executing program 1 (id=75): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="8e", @ANYRES8=r0], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, r1}) r4 = socket(0xa, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000240)={0xffffffffffff0000, 0xa, 0x4, 0x0, 0x7, 0x0, [{0x1, 0x3ff, 0x16, '\x00', 0x1}, {0x0, 0x1, 0x9, '\x00', 0x1002}, {0x8c, 0x4, 0x1, '\x00', 0x900}, {0xfffffffffffffffd, 0x8, 0x2}, {0x0, 0xffffffffffffffff, 0x6, '\x00', 0x3}, {0x2, 0x6, 0x6, '\x00', 0x2003}, {0x8, 0x5, 0xd7, '\x00', 0x180}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x8d) (async) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="8e", @ANYRES8=r0], 0x1) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) socket$inet6(0xa, 0x40000080806, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, r1}) (async) socket(0xa, 0x1, 0x0) (async) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000240)={0xffffffffffff0000, 0xa, 0x4, 0x0, 0x7, 0x0, [{0x1, 0x3ff, 0x16, '\x00', 0x1}, {0x0, 0x1, 0x9, '\x00', 0x1002}, {0x8c, 0x4, 0x1, '\x00', 0x900}, {0xfffffffffffffffd, 0x8, 0x2}, {0x0, 0xffffffffffffffff, 0x6, '\x00', 0x3}, {0x2, 0x6, 0x6, '\x00', 0x2003}, {0x8, 0x5, 0xd7, '\x00', 0x180}]}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) (async) ioctl(r3, 0x8916, &(0x7f0000000000)) (async) ioctl(r4, 0x8936, &(0x7f0000000000)) (async) 4m7.499504782s ago: executing program 3 (id=76): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m7.401776478s ago: executing program 1 (id=77): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000004000400850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 4m7.04670975s ago: executing program 3 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000600900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000"], 0x7c}}, 0x0) 4m6.851404181s ago: executing program 32 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000600900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000"], 0x7c}}, 0x0) 4m6.613721645s ago: executing program 1 (id=84): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 4m6.181092359s ago: executing program 33 (id=84): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 1m5.140123178s ago: executing program 0 (id=1328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x7, 0x6}, &(0x7f0000000240)=0x8) 1m4.002863919s ago: executing program 2 (id=1227): socket(0xa, 0x40000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e00000a000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 51.692008338s ago: executing program 2 (id=1227): socket(0xa, 0x40000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e00000a000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 50.783833363s ago: executing program 0 (id=1328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x7, 0x6}, &(0x7f0000000240)=0x8) 41.009014586s ago: executing program 2 (id=1227): socket(0xa, 0x40000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e00000a000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 39.330582752s ago: executing program 0 (id=1328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x7, 0x6}, &(0x7f0000000240)=0x8) 28.11653111s ago: executing program 2 (id=1227): socket(0xa, 0x40000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e00000a000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 27.139301924s ago: executing program 0 (id=1328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x7, 0x6}, &(0x7f0000000240)=0x8) 17.23662266s ago: executing program 2 (id=1227): socket(0xa, 0x40000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e00000a000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 15.277001401s ago: executing program 0 (id=1328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x7, 0x6}, &(0x7f0000000240)=0x8) 4.839544864s ago: executing program 2 (id=1227): socket(0xa, 0x40000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e00000a000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 3.522856462s ago: executing program 0 (id=1328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x7, 0x6}, &(0x7f0000000240)=0x8) 2.296802994s ago: executing program 4 (id=2264): socket(0xa, 0x40000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001ffef00000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 1.504320659s ago: executing program 4 (id=2270): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private2, 0x0, 0xfffc, 0x4e23, 0xfffe, 0x0, 0x80, 0x20}, {0x0, 0x0, 0xddcf, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@private=0xa010101}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ppoll(&(0x7f0000001080)=[{r2}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0xffffffffffffff6b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @mcast1}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x37, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@generic={0x7, 0x2, 0x7, 0x360, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @jmp={0x5, 0x0, 0xc, 0x0, 0x3, 0xfffffffffffffff8}, @cb_func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @exit, @func, @tail_call, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x1}, @func, @exit, @call={0x85, 0x0, 0x0, 0xbb}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000340)={0x3, 0x1, "d019d3", 0x9, 0x5}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@deltaction={0x30, 0x31, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}]}, 0x30}}, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet6(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="b58a724783aeef5bde80094ece9dd98b2542636375ff0d60", 0x18}], 0x1}, 0x20000000) recvmmsg(r7, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) socket$kcm(0x29, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000007c0)=""/166, 0xa6}], 0x6, &(0x7f0000000980)=""/254, 0xfe}, 0x8}, {{&(0x7f0000000880)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000cc0)=""/250, 0xfa}, {&(0x7f0000000dc0)=""/121, 0x79}, {&(0x7f0000000e40)=""/173, 0xad}, {&(0x7f0000000f00)=""/68, 0x44}], 0x5, &(0x7f0000001000)=""/77, 0x4d}, 0x5}, {{&(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000000480)=""/3, 0x3}, {&(0x7f00000005c0)=""/35, 0x23}, {&(0x7f0000001140)=""/88, 0x58}, {&(0x7f00000011c0)=""/134, 0x86}, {&(0x7f0000001280)=""/90, 0x5a}, {&(0x7f0000001300)=""/4, 0x4}, {&(0x7f0000001340)=""/201, 0xc9}], 0x7, &(0x7f0000003500)=""/183, 0xb7}, 0xd}, {{&(0x7f00000035c0)=@hci, 0x80, &(0x7f0000003640), 0x0, &(0x7f0000003680)=""/253, 0xfd}}, {{&(0x7f0000003780)=@generic, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003800)=""/114, 0x72}, {&(0x7f0000003880)=""/196, 0xc4}, {&(0x7f0000003980)=""/17, 0x11}, {&(0x7f00000039c0)=""/62, 0x3e}], 0x4, &(0x7f0000003a40)=""/26, 0x1a}, 0xec0}], 0x5, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) connect$rds(r7, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.333655191s ago: executing program 6 (id=2271): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071109100000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.220179996s ago: executing program 6 (id=2273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3f}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x40008000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x1a, 0x0, &(0x7f0000004e00)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r6, 0x0, 0x3, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x8, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd4}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="010000000000eaffffff430000000800030003e77f9232508682cb7a3de496ef15d90df20e6845130bd17ff295d002d38a2e2224590ea8fd976fcdfa246e91ed65f1d01f447b68615a3d552a56ee7f60e66530a209c6f4fbece1afdd02c0236713642601627d1a50be4dc20000000000008907a36f8a4399c725c4efb9ee9e46e2460c", @ANYRES32=r4, @ANYBLOB="1400238006dac3734108000000"], 0x30}}, 0x0) 1.038839744s ago: executing program 5 (id=2274): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="650a00000000000061119a00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006c00000095", @ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) (async) connect$can_bcm(r3, &(0x7f0000000100), 0x10) (async) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x124, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0x24, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_USERDATA={0x2b, 0xd, 0x1, 0x0, "c6b7a9cf5b98a25b9d0f90fb2c5b17bc0209a4f952cdcd97754b6147c3299101e6e8c764a36762"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3f}]}, 0x124}, 0x1, 0x0, 0x0, 0x8080}, 0x20004810) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_fc_track_range\x00', r2, 0x0, 0x7}, 0x18) 968.144964ms ago: executing program 5 (id=2275): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x1f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@broadcast}]}, @rr={0x7, 0x3, 0xf6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_key={0x1, 0x8}]}, 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xd, 0x6, 0x5, 0x20090, r0, 0xdf07, '\x00', 0x0, r0, 0x1, 0x4, 0x1, 0x3, @void, @value, @void, @value}, 0x50) 836.699549ms ago: executing program 5 (id=2276): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="d4000000051860d86d6b83b4e18f5cf43566dd1c0bd2ddf00be135e9fc8d1839a580d1c355a5e60e411c3fc7bb97a9518f80b23329ce4e5cc4bfc08aa61d65e5bd03c7edd759f87a9a74431af8cab69b7b70703c2591d2d1cf05985e3db47a23fe151d041a34215b4ed8b3acd7e5158c1c71a01505524826f54b20f06001000000000000007876a8dcb52981f03516d33dd0b7729c2ab8f3104c0444a247f731de408092e4ffabcbd32a72a539f207c5e0c55962f168b449b6faec4182fcc79e6e592b89fba8969919d4e4abc9543beb5e47134b6a8bdead93e4c76e5d7824f1df9242", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYBLOB="8d000ad03750d76b319ab58b497ce028bd3d19c77c1a2ba8ebd61800b115de19dc5c2f7679f19de466", @ANYRES8=r3], 0xd4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xd652b1761703fa52}, 0xc, &(0x7f00000008c0)={&(0x7f0000000380)={0x4c, r3, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, "c8"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r3, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r6], 0x24}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x23) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000005"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c000c"], 0x24}}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x33}, 0x0, @in=@multicast2, 0x1, 0x2, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x0, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x0, @local, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000280)="03614cb024ec637015379e575e076661479de20f2eee02cb73c2727b550e685521b7ad4955a3707b343b49745f65dde2c7f2c9fdf86ac170d5ef0c6d3abd09dd28205e1c509153a962ece443b9b21faeaae298def1f604d28d90c486e8ce854fe3a76852e6373e6ff825490aaa875fb49546c9", 0x73}, {&(0x7f0000000640)="170602248a57dcba94b499beeb2e3e4e090b40ef167bcb351cc028a7752ddddf7fa2d23d6ce10a35f4043b2c1d6940bde250390172702774f04b1764270caef4d35b943edf59bf19773e2788ed5a1e84d55658f12719b4aa59e380dc2ffac87184bd1c0b32936abcb89348704faf86bb395f448ba3f51036d8e30fc2626af25e1b3981622b099c48d11bb6e0f449aba92caa03bcfc8d259b574eebaf3fa3fc4f6c3af285d7c9efc450bc959e931ab2b1604a1364e93cbd9f4d3bf873dada96472d6f81fbfc2bc17bcbea8f2463970ef0606c3c7648063bf06505a31f65adc03a5ddddded1cdb9290110dd7b6ad27667979d0eadbdf415978cb8408861aceca644d6816f07fbb87ed3e8c40f5e19403becbf8e011a0fde1503e451fd65614feb4046eb826cfb3933d564bc9a809fab30d576de3a4961bf718c3d106d1a0047111805099578c66bc4611ba4143ecea096e08952ce47070c18232febe30d591d6de7f631ec1f0f00f9aff6617d9c4bb70602ac3a341e30ba21c03ba8c402eb9f0fe19412c3c70b0415e1435b0d636e12935f473c1d00c8fafe879978d66a0430b94f0f9c0502c6c679ba5c9594663b6d0ae8f49213873b3a787051aae58abbdc6425be194089713f3ca0dd8bb20263c87f7411e8b7cacb75fce0c562116ec48bd76d9b24c8899d9b933646967efcf899923aa73147c457ae2f9f259abbac6db156944ed925c57344fc1cded3bb6d070723ae082a46064de2165cf057e09f3d9ffc42fa0e8ed7fdabaeb2d66667df3a6a6515e675a9c6a8866b3eb012d6287faf0b8e0e5fda82b7fe97c68a6796f24863cb0817875e36237ee1bfba6010a55737521740abab63b4d2a5536ccbdaa5e14e0dfe9bf53353dbb262b5b270d8d07a29bf002fd001022ed4196203fe6a9aa6e77d34f53429ead982532a92c9ad7e3e5d6fc9089b2a12acba92727a1207ac1bec8e1ea49eae76ae017c07e25a689412c27556cab5454cbdd70601a4d8bfe073179ffa19f6d38fea849cbae1d9b1e8b189ba231c281b78648ff31e9c337165f98f2ea20dc6e4915be7510814f18a692ccd8065d9df9eb45353e33b687f83ed4788d75b358517c9814d39cfdc661159066b79faa617da08c255aed4f5f2ae2a101ca5f306b1631f3bbcb20f0d185cb2ab3e0032e3b557777fc1878c0c3b8db89ed746989cac0dde984f7b501702d933eeeea89189768f59ee9242ca73b9ce29f59324019551c5bb41c9d689b55a213bf5dc9e54da2e622e9d0f87d7724d01687baaff25de6a1972b19060468271186ae1c7ff823e8aacf056ade36eceb6f86c1ed53de92bc6e2211eb4edc25e6d1f60c979d4744080adad7797b162696ff6b45b28c51190fed375f6df9741aa68eb9b8f8309241cddcdee940065e015ff4d2ffb44d9016f2938d47353179c97729d75a6b2de2e3e02d9ab67d591bdadb967c5c637b684f7fd56c9fecbc444e64dfa3fc9bbae8574861e8908bdfe175b9e78752175ef8be36dd2958ebf466437175172a5f77a4117df4b00aacee2f8957c05554c4d78b7742b79af25af60ad16c7d7eb79e57b9561b2717113946c4a23c26fd03b028ca0bbdf8cdd4bf4ef43226448fbc9e1d62e002429b356e07cbcf01d396ba65ae274ca83e50aa5084e47ea586571178738fd75b8fcd1615966eabe196350deacc017098cc0c06f385d9dceef5c5fa360ec7e84c73a96f3c4085a8e290300aed768707983d4796fda5d63e3423060de0a28f4f19201025a10419b3015038272fcb7fe6846c8a770e72b08a9b36d7b7d5b1de19c893bd58f05c581aeaf1eb95234c172bcdc8977bcd3dd8408165d7a884b9e714a4d3a04a104cd792d963e6d4769a5c88c5815f90da578efe11d772a0edba8fbb3fed6372571dde2a7a88d4b01c49988080c70a6e80bd707fa1fe53212dcb3528712efccf318eac92c9ab52f644140a11a897bf2ce5d6438a0352b764bb50d22b895e84f32eac9e535d08e69186fe4ecef7333657008ff89c54ccfd4a9b69dd62a120b64dc3c845a73680104585e2fc5a983978510dca97dfd875d523f774e598d98e6af62b202d1479d0951e2c77281d04a827c60da5dcda4bf64f8ed3d2c429edba27188e7a1cfb0e4aaac1bcd30076f1b14b2a2ca66c40c487fe55a727ee68905372f455455f9bfa22f8c40ab3439b87eba5a8a7cd813eece0fd83336a912036a89f11f6e4636e40ecaa8a35d5d2f702db330e4384667e20931bdf0409db2965a46aa0973859edf3e3d727ed7dd1814ecd3499a4d0e7555452e23fddff2d79ae1a7d87c89b984b151e5bb69d951bb5fedecee98c75dc11716da7edb12d6c537290284b0cc64cfc718ba4cfc2b30e0809b3b670e795f010c8743345092a10ccc2a73ee24530184f5daa21c22226e01f1a3c121143cd9ab125b538af9c3e391881b04bb297d26dd406d679854bc280a391a6622a451f535359088c343c8e572a60a0dd96ced974ddaee1b0b43cfa1e6d673e64779c72f9c182665c23344caa5c05bec760c19b514ed7f994e921a89887349d5a667a2f214d91c01c2fd3d29c8f0e315be1e92c7563cf1cebeaf9ba71295e7d3e9db6cd22979146f98a2cc525ec171200d5135d3868ce59bb4baa84ef5f96ef1b781247c3f524ca9aacd8cc979a150b2625f5fdebd1463fe7058cf52bfa4146964bc4a0dc1ab1edc7df6f84aabf889e28de356407b67458411e870db532d4d22102a39ac55dd3e42b9289526f4ef66d260e8dc5bf6b989c25508fa1ab9094cc15bea0b6afba4eb0cc4e8d574f524e170c449ff05f645c77ac7cc3a74fe1b041dd3088da5c7127bd3a34d51eee0a01159990d7e472b05c409913328b5d4e5d96f7de25c676c9aaab2c4b1e195dbf8e1e8c273fe21a304292ace10531a643967d0fd42b597a2ac4ac1d8c5e074171159f948686a7449b1e26de49a6fbf0a03836f76986c507c05a1eaabebdbee35fe38596cd17d2c931e23c07b65d2d3b169d623d2c7b809efcefcdae627299ed80b308e471bd72e3be171d8fa5601b671e86bab4cdf2773bd7b144c21a701d1661a3e1578d30280f1c065b77fcb5427cac9bbcad6c629ce228498f37462763371bd73e72b93afc88b840aa0c19105bd4bd1b2b06cadf741a13bd7bdc0250bc1b5aab1154de593902c4d8a96669e4a90c4d301c0099b97b01d1d104655daa30fac272d88ce9f7d4d6cefccc8cfde8e427f7bdb8858026c7f43a259086a23e42571ff59b793c0e3e16d373cb6e4e72ff3978fca02fd0f5d99340e57a4148203f4a28f3e130a6a7992e80003e32684edeaad21877c9daa5dafb9da3ab5a1ad8fe25504016cdc643faa3b5a20ad3e7b9db2c4b9e48fc333f11944b983e5f3c03088a40d464c3fec8ccce76f684b6d00b0b20211e0e6f5ea0dfc0747e344c6378fdab764fe29b9df968db0bf49c2fbcd5e24675dfe17e0e5a52c0a16200e5a4c1da2e93bf9c91c0c99a04b18104dae2ca17c3ce0af2b68501fef2ac83db57e5e5a7f5e9c84151fcc7ca466153a58169f87bb75ca0415d187e3553b3b29f89d6ed8f6895ec58fa36fdc131762a1222ed6a6062ce9494da2f84bc32aab3285e165057331e65e3c61245e5338dd74ae01544e9d2ebec0b5a19f3bef864833f1afca5c251878f08e5cec0553df0b791f705f07020fa69d111b981040a553e3b7208873de8ace7b108a1be178a57de3dbe8da5354d83e637f4f28cb9c44d61ce56f101179bba692b6f3c155a41d7de4420656eaa4b20bee339ef5742f79323131114d84d7d36c0b394f506e57ade9b5d7ef35e689ee3ac474b22630129352a9f5bec7bb8422afa75af96e12484a2dd6ab743d1fcf0cbf6fcc90c406897f47e30674d7bb79777d6ee6474f7e4bd09c91381b8004cc67ba37d0f447303a1f7a515c0f2860edd5a3ef8ce8d418e515a0e2a9c3e18693b04529ac45cd2e0e97b0662594a50a27b390d074d152c0c757255c0416f7124144f496caea68760f9f008b44c31d25f437dfd40e9b352f583d10eeaa8ffa5b20f81a48fa19e4ac2270ef41deea236ea3293d3f5ba098e58d20721cb395becaf35a6646d322e69b352afe864e0fccffd55421f5f740330a38d3719cf1dc9f03a8f975b98fb6516a99a2652208c40a5b8d23f01ee8ae08885c3f8d1557c60f3831f95ae8a8d3ad001821e8af67857f284b9dff9790d8f1c06b6cc40fd8615c8a703e072f7a9eea7756f1ce13da6ba4b5c3dc530b9fb91d90fde8e79350172599bd9b586454d0553b7583c3e1676f9b5acc3155d3f1a09ac4e0f9594d5d295d4cd84bc3cbd0629e0012fb45af4ce5d1947fdfba0e35a8ef7d7916b7fe14424611470852cc48c4e141eb8f84eada52616670ddd919a687670cec14c968a1d45ac89bce4bf5b5868e9a6a8357197c1968e0e48fcd99ec69e607b395121160a590298b9c727ae253fc6c003862f80e189b220cd9a8a2b8078149c4029f9c87924e6a2e9414e797967c12907107734ccc38b42c21f9f4067bcba539952b849257cb0c6b33b1013a70be492db0133445d049ddb2f0747b62b4c515a59615b48831e8d3f07a017ee6c9a48e154179b96ef882c63626d0be234be49e94d4d6001a31564977cfba86aa853d3d1a202a28a4ad9c0d6d19a681b3b53eace96f499bc09d56253906f5da9617d0ad6833934efc24d4e16f77f32eb53e74d64a30d1e1137a05a0913f3f769f09bf68ecb109ce72fbfdbf88c477491388433d128820ccf65a673dce2b15aa0dedc7a11c56761567ca45489e4fbdc8de999f63a00b75f0dd6da00c9129a969efb987e4af73fb37b605afb7dd2c6ce75c4514c3b32584670f053adc76f160638d108d80d8d49de46fa4c842a1fe781372ccc5d44fb16fb1f3371759bc366af40dfb17fe1628d6fa7ec5b67e3598631cb1c3564b799fdcd6d9f4ab3d28294747ae594ffa40a41c53c45521be28226ff8bf29d3dd5186ee7b860e0c3bcfbbd0607474a68e40f9f6ded4148cd36d77dea334a30d997c974571fea3d5ce06c7f25f6550b546dec20ea1114fb591c328ae96b387e83c0a2c437bb058af552f76a77dbdafb5dbd81854ac5cc83fc97cf43adf3facaabd51d44459d5a885bb5ae128dc2968c3b8c0d669882c91b5236f240f175a98b2a89a75a3c34ec5171d84621b8e3b7c99b26ef5aab2d6bef21fec4b27ef12df26f10b57720f79fc16f6c02ff8a5bc4d87004348005eb9706bbbba500b16faf42d69a5923d3fb8ba6d5410ede43daa01572067a6caebcb6c180be979d0575df3f2db83384a47900eef420aa8135570be2f6673ec97daef6526a806d0cbff4f2f93140cd030a3e612cf40523d09f79f3b4c645e68fa2b37beb2285db9afe6dc3029e0136c8e9936af10e8072e891923f2fc3b499fdb8b52388198ce7b4365142a766adce48696d30a13b60bc49795505805fd8d83d5a274332ed57bf034cab9a24e4aa0ae186eeda301a789277ad5646ce9b4dd7bfcf8f771a5f2c4f172dc915815ad180a723a2572c6ee3a650e952f2b361aec2dc49ff813a676957780d0cca052e3f330d6ce3cec5f934f1bc1c6e8c23813b20525e4fb77abafbb37790c3dff8aa988740506a910be39e6d00a1904b29539b01bb7a509fdf30ba3cea6c2c74975072bdd9798496b78a92582e3b000d5e8a24f8e6ff05d4fc6bc7e779f7f9a9571e28bf85396e02a41ada96744591fcca06be89ab4a048ae55614eda508cc4551f9c15be1afd525f187e6ec8bdbdd1e43e4008fa66fd5efd1d46807", 0x1000}, {&(0x7f0000000440)="c8a3e75db1666a5800d65a9b205c2e1be6424b70ef9384afc04c83bd87bcd56bf342567846c0f6bb0706efe915c50b94f50208f44a78cfc737a867f1f67dabf8871f6565c22fdebacdd3facbac740d83d56aee47f26ab9379db148a16d8fbb22d176740472fa974f89768d5fd3ce54e80728c2afc47ed33966ca5cc8779eb0163938f89e7f66f0b8d81230680e4039274f1a84b8ff1fc31986e441d6de5e754a1b76b3fbf53eef67a111b877dc", 0xad}], 0x3, 0x0, 0x0, 0xc080}, 0x24004040) socket$inet_sctp(0x2, 0x1, 0x84) r11 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e24, 0x8, 0x4e21, 0x3, 0x95d6c88a1ab1da9c, 0xa0, 0x0, 0x0, r10, r11}, {0x7f, 0x3, 0x8, 0xa, 0x3, 0x7f, 0x10, 0x5}, {0x100, 0xac, 0x7, 0xf1a}, 0x9, 0x6e6bb9, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private0, 0x4d5, 0xff}, 0xa, @in=@empty, 0x3501, 0x1, 0x3, 0x8, 0x4, 0x4, 0x8098}}, 0xe8) 823.316967ms ago: executing program 6 (id=2277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000030000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x800d0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r1, 0x503, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48891}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) 577.49528ms ago: executing program 6 (id=2278): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0xc0000000, 0x240, 0x1158, 0x0, 0x148, 0x0, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="922f51c2652f6ebeb647ba19a7f202a8e9581eee20d85e47931757ced80465193b100f4661504be508b7065d2f6645766dc27d58a5b95c59b6347e126556a5485fb463cd253f62db7af4f59c7c64c64e9b22b1a210fe3a6653b2f8d7da5d347d61279c22300fe0fd9b2e297c578ccf41", 0x70}], 0x1, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0xc050) recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/149, 0x95}], 0x2}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x272}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x121}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x45}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44881}, 0x4004000) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986625f44e4ce2d715f2828da0a9423debbb86f9dba4a2dba4dbe076c292c286d"], 0xe0}], 0x1}, 0x0) r10 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) 536.043571ms ago: executing program 5 (id=2279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x74}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0) 425.985966ms ago: executing program 4 (id=2280): socket(0xa, 0x40000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c0002800600010ffe00000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 407.900726ms ago: executing program 6 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x124, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x107, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b87594b3f"}, 0x0, 0x0, @default, @val={0x1, 0x5, [{0xab91b652d320a200, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0x60, 0x1}, {0x3}]}, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x5a, "d8a062cc132f8c370f255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946289e"}, {0xdd, 0x70, "be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c9237"}, {0xdd, 0x6, "8554a53b4220"}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 285.694141ms ago: executing program 4 (id=2282): syz_emit_ethernet(0x46, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "f06df6", 0x10, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[], {0x4e24, 0x4e24, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x7f, 0x100, @val=0x80}}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r1, @in={{0x2, 0x0, @dev}}, [0x0, 0x4e5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xa53]}, &(0x7f0000000140)=0x100) 267.099008ms ago: executing program 4 (id=2283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0009000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaafd00000a000400aaaaaaaaaaaa0000080003000300000008000500", @ANYRES32=r2], 0x68}}, 0x0) 193.559951ms ago: executing program 5 (id=2284): syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c000000000002907800000000000000001100907800000000e7792f30b44b49b92f8c80beb41f3a8c32c8d3958d97a525397a4be2cc4c0b7b3baef8f6d8ffbb23cb01f8d77388af665a5f24c6ca1a91e4c90a36e536517816d2b5c0a66d97"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 184.606752ms ago: executing program 6 (id=2285): syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000100)=@default_ibss_ssid, 0x6, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 53.334434ms ago: executing program 5 (id=2286): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8], [0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x54) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x20ffffff, r6}, 0x13) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000680000020000000000000000000004000000000014000c80080002004d0cf73d000004000200"], 0x30}}, 0x40000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000000051ed736e95f6ae3be7249e01e5a68849c734eceedea0c71d7200000000d935af8f4c061f7579696bc6b9be5179e6b0eed511e8346fd5b4aa71b40998cc71c05634c7875e078c81c0e9c2b33080e22fa752c9745364ea0910614d777097e9fd7d0c7e9517606a07d11691ad1bbd71b1a416c39ecf3ffcaa886f15cb2e5c4e", @ANYRES16=r11, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r12) r14 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000140)={0x34, r13, 0xc01, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000900)=ANY=[@ANYRESDEC=r12, @ANYRES32, @ANYRESOCT], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r16, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r17, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) sendmsg$netlink(r8, &(0x7f0000000540)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x40, 0x36, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@generic="6b36c402d39bf0b5b5eb7b8180fee1909cd0692c77093e1b9fecb9c3fae25a886d2356ee8e3021309f5ef7c0db242983"]}, 0x40}], 0x1, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r5]}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0xa8, 0x20004080}, 0x0) 0s ago: executing program 4 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="1400238006000400"], 0x30}}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x8, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x11) kernel console output (not intermixed with test programs): d: batadv_slave_0 [ 255.541471][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.552545][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.564563][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.612295][ T6872] veth1_macvtap: left promiscuous mode [ 255.617942][ T6872] veth0_macvtap: left promiscuous mode [ 255.634863][ T6872] veth1_vlan: left promiscuous mode [ 255.646993][ T6872] veth0_vlan: left promiscuous mode [ 255.717940][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1820'. [ 255.891657][ T5846] Bluetooth: hci2: command tx timeout [ 256.055181][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.410027][ T6872] team0 (unregistering): Port device team_slave_1 removed [ 256.458415][ T6872] team0 (unregistering): Port device team_slave_0 removed [ 256.841562][T11625] sch_fq: defrate 511 ignored. [ 257.096741][ T5846] Bluetooth: hci0: command tx timeout [ 257.143091][T11432] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.155053][T11432] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.213797][T11432] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.265744][T11432] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.326077][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1826'. [ 257.381782][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1826'. [ 257.420911][T11652] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1829'. [ 257.444659][T11412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.660878][T11412] veth0_vlan: entered promiscuous mode [ 257.710792][T11412] veth1_vlan: entered promiscuous mode [ 257.769196][T11432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.818338][T11432] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.837860][T11412] veth0_macvtap: entered promiscuous mode [ 257.850383][T11412] veth1_macvtap: entered promiscuous mode [ 257.872973][T11669] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 257.894445][T11669] netlink: 'syz.6.1837': attribute type 4 has an invalid length. [ 257.913512][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.916107][T11669] netlink: 'syz.6.1837': attribute type 1 has an invalid length. [ 257.920619][ T6823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.934257][T11669] netlink: 'syz.6.1837': attribute type 1 has an invalid length. [ 257.946533][T11669] netlink: 'syz.6.1837': attribute type 1 has an invalid length. [ 257.954451][T11669] netlink: 'syz.6.1837': attribute type 2 has an invalid length. [ 257.962748][T11669] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1837'. [ 257.970548][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.978836][ T6823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.989137][ T5846] Bluetooth: hci2: command tx timeout [ 258.006159][T11412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.016707][T11412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.027358][T11412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.037986][T11412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.049601][T11412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.083458][T11412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.104140][T11412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.123154][T11412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.144287][T11412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.168177][T11412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.239129][T11412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.278706][T11412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.308265][T11412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.327423][T11412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.513874][ T6871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.531728][ T6871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.583532][ T6875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.595185][ T6875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.759170][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.925059][T11432] veth0_vlan: entered promiscuous mode [ 258.966525][T11432] veth1_vlan: entered promiscuous mode [ 259.047138][T11432] veth0_macvtap: entered promiscuous mode [ 259.077412][T11432] veth1_macvtap: entered promiscuous mode [ 259.096148][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.126913][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.160654][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.181396][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.191849][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.202429][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.223146][T11432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.244364][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.257818][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.269660][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.281121][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.302490][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.315283][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.327896][T11432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.340354][T11432] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.359735][T11432] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.389363][T11432] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.411372][T11432] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.538804][ T6871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.663887][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1848'. [ 259.727380][ T6871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.789096][ T6871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.864515][ T6823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.882305][ T6823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.908210][ T6825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.916568][ T6825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.013640][ T6871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.435674][T11726] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.1852'. [ 260.511676][ T6871] bridge_slave_1: left allmulticast mode [ 260.517380][ T6871] bridge_slave_1: left promiscuous mode [ 260.581512][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.641951][ T6871] bridge_slave_0: left allmulticast mode [ 260.648798][ T6871] bridge_slave_0: left promiscuous mode [ 260.671811][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.703346][T11739] sctp: [Deprecated]: syz.5.1855 (pid 11739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.703346][T11739] Use struct sctp_sack_info instead [ 260.971715][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.989759][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.998936][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.007866][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.027402][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 261.034865][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.537065][ T6871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.554634][ T6871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.577587][ T6871] bond0 (unregistering): Released all slaves [ 261.886263][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1857'. [ 261.989728][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.000063][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.011900][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.063418][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.101723][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 262.120745][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.160893][T11743] syzkaller0 speed is unknown, defaulting to 1000 [ 262.293456][T11763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1863'. [ 262.326633][T11764] netlink: 'syz.5.1862': attribute type 2 has an invalid length. [ 262.356626][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 262.430756][T11752] syzkaller0 speed is unknown, defaulting to 1000 [ 262.476148][ T6871] hsr_slave_0: left promiscuous mode [ 262.484175][ T6871] hsr_slave_1: left promiscuous mode [ 262.490779][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.498652][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.523696][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.532306][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.567789][ T6871] veth1_macvtap: left promiscuous mode [ 262.581700][ T6871] veth0_macvtap: left promiscuous mode [ 262.597539][ T6871] veth1_vlan: left promiscuous mode [ 262.606760][ T6871] veth0_vlan: left promiscuous mode [ 263.011783][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1866'. [ 263.092976][ T5841] Bluetooth: hci0: command tx timeout [ 263.211016][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1866'. [ 263.221292][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 263.235272][ T6871] team0 (unregistering): Port device team_slave_1 removed [ 263.276135][ T6871] team0 (unregistering): Port device team_slave_0 removed [ 263.672022][T11782] gretap0: entered promiscuous mode [ 263.776445][T11743] chnl_net:caif_netlink_parms(): no params data found [ 264.169219][T11752] chnl_net:caif_netlink_parms(): no params data found [ 264.217835][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1872'. [ 264.285363][T11743] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.291889][ T5841] Bluetooth: hci2: command tx timeout [ 264.312923][T11743] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.341857][T11743] bridge_slave_0: entered allmulticast mode [ 264.349163][T11743] bridge_slave_0: entered promiscuous mode [ 264.357594][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.366077][T11743] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.374094][T11743] bridge_slave_1: entered allmulticast mode [ 264.381701][T11743] bridge_slave_1: entered promiscuous mode [ 264.490050][T11743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.505673][T11752] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.513798][T11752] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.521066][T11752] bridge_slave_0: entered allmulticast mode [ 264.559272][T11752] bridge_slave_0: entered promiscuous mode [ 264.614122][T11743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.664278][T11752] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.679440][T11752] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.690780][T11752] bridge_slave_1: entered allmulticast mode [ 264.708492][T11752] bridge_slave_1: entered promiscuous mode [ 264.786691][T11743] team0: Port device team_slave_0 added [ 264.808403][T11829] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1878'. [ 264.818093][T11824] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1878'. [ 264.859803][T11752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.893027][T11831] netlink: 'syz.4.1878': attribute type 12 has an invalid length. [ 264.908230][T11743] team0: Port device team_slave_1 added [ 264.932639][T11752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.171796][ T5841] Bluetooth: hci0: command tx timeout [ 265.327309][T11752] team0: Port device team_slave_0 added [ 265.362634][T11743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.369622][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.430271][T11743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.446652][T11752] team0: Port device team_slave_1 added [ 265.489540][T11743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.501727][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.542126][T11743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.599402][T11752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.607331][T11752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.635028][T11752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.790281][ T6871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.854002][T11752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.863409][T11870] netlink: 'syz.5.1890': attribute type 10 has an invalid length. [ 265.881782][T11752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.951416][T11752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.088096][ T6871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.133303][T11743] hsr_slave_0: entered promiscuous mode [ 266.152267][T11743] hsr_slave_1: entered promiscuous mode [ 266.175636][T11743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.186123][T11743] Cannot create hsr debugfs directory [ 266.333572][ T6871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.371371][ T5841] Bluetooth: hci2: command tx timeout [ 266.580384][ T6871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.654916][T11752] hsr_slave_0: entered promiscuous mode [ 266.665006][T11752] hsr_slave_1: entered promiscuous mode [ 266.675108][T11752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.691687][T11752] Cannot create hsr debugfs directory [ 267.062557][T11891] bridge0: entered promiscuous mode [ 267.078204][ T6871] bridge_slave_1: left allmulticast mode [ 267.097490][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1898'. [ 267.105071][ T6871] bridge_slave_1: left promiscuous mode [ 267.132045][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.145162][ T6871] bridge_slave_0: left allmulticast mode [ 267.150896][ T6871] bridge_slave_0: left promiscuous mode [ 267.158099][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.252544][ T5841] Bluetooth: hci0: command tx timeout [ 267.647185][ T6871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.660276][ T6871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.671846][ T6871] bond0 (unregistering): Released all slaves [ 267.720742][T11891] bridge0 (unregistering): left promiscuous mode [ 267.798465][T11909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1902'. [ 267.837695][T11905] syzkaller0 speed is unknown, defaulting to 1000 [ 267.950422][T11914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1903'. [ 268.004281][T11911] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.047552][T11916] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1904'. [ 268.161414][ T6871] hsr_slave_0: left promiscuous mode [ 268.173602][ T6871] hsr_slave_1: left promiscuous mode [ 268.183422][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.190873][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.209470][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.217750][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.260714][ T6871] veth1_macvtap: left promiscuous mode [ 268.274714][ T6871] veth0_macvtap: left promiscuous mode [ 268.282396][ T6871] veth1_vlan: left promiscuous mode [ 268.287800][ T6871] veth0_vlan: left promiscuous mode [ 268.437841][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1905'. [ 268.447710][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1905'. [ 268.458661][ T5841] Bluetooth: hci2: command tx timeout [ 268.472391][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1905'. [ 268.835904][ T6871] team0 (unregistering): Port device team_slave_1 removed [ 268.883205][ T6871] team0 (unregistering): Port device team_slave_0 removed [ 269.268681][T11922] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1906'. [ 269.288466][T11923] vlan4: entered allmulticast mode [ 269.300187][T11923] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 269.323484][T11923] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 269.331765][ T5841] Bluetooth: hci0: command tx timeout [ 269.633475][T11743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.693644][T11743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.725972][T11743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.791159][T11743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.858836][T11752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.916926][T11752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.928534][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1916'. [ 269.948865][T11752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.965583][T11956] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 270.000591][T11752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.181012][T11743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.267825][T11963] netlink: 'syz.4.1919': attribute type 39 has an invalid length. [ 270.292509][T11743] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.312935][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.320067][ T6864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.343537][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.350681][ T6864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.368409][T11752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.466442][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 270.479868][T11752] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.507368][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.514576][ T6824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.531943][ T5841] Bluetooth: hci2: command tx timeout [ 270.549027][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.556221][ T6824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.785942][T11752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.853983][T11752] veth0_vlan: entered promiscuous mode [ 270.884627][T11752] veth1_vlan: entered promiscuous mode [ 270.939441][T11743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.003523][T11752] veth0_macvtap: entered promiscuous mode [ 271.056704][T11752] veth1_macvtap: entered promiscuous mode [ 271.124291][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.144355][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.154640][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.165203][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.176517][T11752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.202710][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.214136][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.224734][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.236418][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.262435][T11752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.273970][T11743] veth0_vlan: entered promiscuous mode [ 271.285765][T11743] veth1_vlan: entered promiscuous mode [ 271.318759][T11752] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.332004][T11752] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.348527][T11752] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.362266][T11752] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.448784][T11743] veth0_macvtap: entered promiscuous mode [ 271.492281][T11743] veth1_macvtap: entered promiscuous mode [ 271.562493][T12000] dummy0: entered promiscuous mode [ 271.574956][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.586630][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.597645][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.622664][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.632683][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.643803][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.656784][T11743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.665118][ T6870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.673549][ T6870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.690898][T11999] dummy0: left promiscuous mode [ 271.715545][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.726342][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.736466][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.747076][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.757303][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.768271][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.779302][T11743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.802010][T12007] xt_socket: unknown flags 0x4 [ 271.805505][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.815140][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.880884][T11743] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.882903][T12013] xt_bpf: check failed: parse error [ 271.891170][T11743] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.905992][T11743] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.923556][T11743] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.942200][T12016] netlink: 'syz.4.1933': attribute type 10 has an invalid length. [ 272.008001][T12016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.040470][T12016] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 272.120659][T12005] bond0: entered promiscuous mode [ 272.134315][T12005] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 272.146972][T12005] batadv0: entered promiscuous mode [ 272.156796][T12026] __nla_validate_parse: 3 callbacks suppressed [ 272.156816][T12026] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1937'. [ 272.299664][ T6824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.328113][ T6824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.409050][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1938'. [ 272.433660][ T6824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.444006][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1938'. [ 272.455146][ T6824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.926272][ T6824] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.715302][ T6824] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.880641][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.890989][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.900209][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.912868][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.926834][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.934555][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.962844][T12051] syzkaller0 speed is unknown, defaulting to 1000 [ 274.053672][T12051] chnl_net:caif_netlink_parms(): no params data found [ 274.104666][T12051] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.112077][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.119284][T12051] bridge_slave_0: entered allmulticast mode [ 274.126411][T12051] bridge_slave_0: entered promiscuous mode [ 274.135976][T12051] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.143754][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.151244][T12051] bridge_slave_1: entered allmulticast mode [ 274.158212][T12051] bridge_slave_1: entered promiscuous mode [ 274.182157][T12051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.197445][T12051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.230813][T12051] team0: Port device team_slave_0 added [ 274.238765][T12051] team0: Port device team_slave_1 added [ 274.259944][T12051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.267706][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.294784][T12051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.311850][T12051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.318816][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.346433][T12051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.383120][T12051] hsr_slave_0: entered promiscuous mode [ 274.389966][T12051] hsr_slave_1: entered promiscuous mode [ 274.399837][T12051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.407564][T12051] Cannot create hsr debugfs directory [ 274.427517][ T6824] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.510001][ T6824] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.631925][T12064] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1946'. [ 274.944729][ T6824] bridge_slave_1: left allmulticast mode [ 274.963182][ T6824] bridge_slave_1: left promiscuous mode [ 274.968940][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.014497][ T6824] bridge_slave_0: left allmulticast mode [ 275.020371][ T6824] bridge_slave_0: left promiscuous mode [ 275.028828][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.238495][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.249224][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.259239][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.268223][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.277982][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.287762][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.621190][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.640132][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.651672][ T6824] bond0 (unregistering): Released all slaves [ 275.664627][T12081] IPVS: Error connecting to the multicast addr [ 275.776700][T12090] syzkaller0 speed is unknown, defaulting to 1000 [ 275.830027][T12092] syzkaller0 speed is unknown, defaulting to 1000 [ 275.933448][T12084] syzkaller0 speed is unknown, defaulting to 1000 [ 275.981054][ T5841] Bluetooth: hci0: command tx timeout [ 276.202738][ T6824] hsr_slave_0: left promiscuous mode [ 276.213133][ T6824] hsr_slave_1: left promiscuous mode [ 276.241919][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.257026][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.269852][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.290395][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.320757][ T6824] veth1_macvtap: left promiscuous mode [ 276.327723][ T6824] veth0_macvtap: left promiscuous mode [ 276.333729][ T6824] veth1_vlan: left promiscuous mode [ 276.339692][ T6824] veth0_vlan: left promiscuous mode [ 276.862551][ T6824] team0 (unregistering): Port device team_slave_1 removed [ 276.910541][ T6824] team0 (unregistering): Port device team_slave_0 removed [ 277.334339][ T5841] Bluetooth: hci2: command tx timeout [ 277.452988][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1959'. [ 277.569836][T12121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 277.682072][T12051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.736480][T12051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.777761][T12127] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1963'. [ 277.793105][T12084] chnl_net:caif_netlink_parms(): no params data found [ 277.833964][T12051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.849696][T12051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.859252][T12130] netlink: 'syz.4.1962': attribute type 39 has an invalid length. [ 278.032500][T12084] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.039633][T12084] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.047077][T12084] bridge_slave_0: entered allmulticast mode [ 278.055427][T12084] bridge_slave_0: entered promiscuous mode [ 278.063277][T12084] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.070387][T12084] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.077654][T12084] bridge_slave_1: entered allmulticast mode [ 278.086136][T12084] bridge_slave_1: entered promiscuous mode [ 278.087493][ T5841] Bluetooth: hci0: command tx timeout [ 278.191543][ T6824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.214852][T12084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.237124][T12084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.298072][ T6824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.353066][T12084] team0: Port device team_slave_0 added [ 278.378137][ T6824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.398730][T12051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.417405][T12084] team0: Port device team_slave_1 added [ 278.449440][T12084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.460469][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.520939][T12084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.569650][ T6824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.612953][T12084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.620019][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.650599][T12084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.693049][T12051] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.801837][T12084] hsr_slave_0: entered promiscuous mode [ 278.821726][T12155] netlink: 'syz.5.1970': attribute type 39 has an invalid length. [ 278.829983][T12084] hsr_slave_1: entered promiscuous mode [ 278.839811][T12084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.855554][T12084] Cannot create hsr debugfs directory [ 278.857732][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1972'. [ 278.865769][T12154] tipc: Enabling of bearer rejected, already enabled [ 278.990555][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.997766][ T6870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.012682][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.019846][ T6870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.068461][T12167] netlink: 'syz.6.1974': attribute type 1 has an invalid length. [ 279.207273][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1975'. [ 279.329829][ T6824] bridge_slave_1: left allmulticast mode [ 279.341841][ T6824] bridge_slave_1: left promiscuous mode [ 279.347588][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.384053][ T6824] bridge_slave_0: left allmulticast mode [ 279.405060][ T6824] bridge_slave_0: left promiscuous mode [ 279.411470][ T5841] Bluetooth: hci2: command tx timeout [ 279.426134][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.878534][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.891841][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.905311][ T6824] bond0 (unregistering): Released all slaves [ 279.939433][T12180] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 279.961665][T12180] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.070939][T12180] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.090898][T12180] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.131449][ T5841] Bluetooth: hci0: command tx timeout [ 280.175869][T12051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.199374][T12051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.245776][T12180] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.255947][T12180] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.330256][T12180] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.340464][T12180] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.409588][T12202] netlink: 'syz.5.1983': attribute type 2 has an invalid length. [ 280.497414][ T6824] hsr_slave_0: left promiscuous mode [ 280.509205][ T6824] hsr_slave_1: left promiscuous mode [ 280.519766][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.529334][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.541071][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.549150][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.556650][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1985'. [ 280.591158][T12212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1984'. [ 280.605355][ T6824] veth1_macvtap: left promiscuous mode [ 280.610913][ T6824] veth0_macvtap: left promiscuous mode [ 280.617301][ T6824] veth1_vlan: left promiscuous mode [ 280.621752][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 280.623112][ T6824] veth0_vlan: left promiscuous mode [ 281.059490][ T6824] team0 (unregistering): Port device team_slave_1 removed [ 281.100034][ T6824] team0 (unregistering): Port device team_slave_0 removed [ 281.491457][ T5841] Bluetooth: hci2: command tx timeout [ 281.596652][T12051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.609026][T12180] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.645193][T12180] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.689931][T12180] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.708759][T12180] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.743352][T12180] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.763420][T12180] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.840227][T12180] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.863337][T12180] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.944353][T12225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1991'. [ 281.995654][T12051] veth0_vlan: entered promiscuous mode [ 282.098274][T12084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.113699][T12084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.160166][T12084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.185532][T12051] veth1_vlan: entered promiscuous mode [ 282.212064][ T5841] Bluetooth: hci0: command tx timeout [ 282.228096][T12084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.308677][T12247] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1998'. [ 282.332011][T12051] veth0_macvtap: entered promiscuous mode [ 282.356500][T12051] veth1_macvtap: entered promiscuous mode [ 282.403773][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.414967][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.425837][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.436615][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.463011][T12051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.489214][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.509976][T12084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.519422][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.540372][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.550832][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.566608][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.579855][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.602973][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.610220][T12051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.631857][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.634492][T12051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.650210][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.654700][T12051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.664243][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.665661][T12051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.679877][T12051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.699580][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.706361][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.721980][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.731926][T12252] xt_TCPMSS: Only works on TCP SYN packets [ 282.755765][T12264] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 282.766555][T12262] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 282.795978][T12084] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.818582][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2002'. [ 282.832019][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'. [ 282.855501][T12262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2002'. [ 282.890532][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.897710][ T6874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.924105][ T6864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.939353][ T6864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.948073][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.955215][ T6870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.004043][T12084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.095744][ T6874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.106063][ T6874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.207866][T12278] netlink: 'syz.4.2008': attribute type 4 has an invalid length. [ 283.242684][T12280] netlink: 'syz.6.2007': attribute type 4 has an invalid length. [ 283.302989][T12278] gretap1: entered promiscuous mode [ 283.318684][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2009'. [ 283.342695][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2009'. [ 283.573093][ T5841] Bluetooth: hci2: command tx timeout [ 283.645551][ T6874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.669624][T12084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.755691][ T6874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.780093][T12084] veth0_vlan: entered promiscuous mode [ 283.795455][T12084] veth1_vlan: entered promiscuous mode [ 283.824363][T12084] veth0_macvtap: entered promiscuous mode [ 283.833097][T12084] veth1_macvtap: entered promiscuous mode [ 283.848912][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.859425][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.870077][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.880548][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.891371][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.903126][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.913896][T12084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.924226][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.935448][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.945379][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.956219][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.966136][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.977297][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.988272][T12084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.014831][ T6874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.035456][T12084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.044731][T12084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.053805][T12084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.067497][T12084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.108700][ T6874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.177109][ T6871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.190320][ T6871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.213827][ T6871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.222355][ T6871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.271150][ T6874] bridge_slave_1: left allmulticast mode [ 284.277830][ T6874] bridge_slave_1: left promiscuous mode [ 284.284249][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.298589][ T6874] bridge_slave_0: left allmulticast mode [ 284.306272][ T6874] bridge_slave_0: left promiscuous mode [ 284.313224][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.659588][ T6874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.670694][ T6874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.683315][ T6874] bond0 (unregistering): Released all slaves [ 285.056963][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.073542][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.087904][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.098833][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.111759][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.119925][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.127618][T12314] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 285.274562][T12309] syzkaller0 speed is unknown, defaulting to 1000 [ 285.303243][T12316] vlan4: entered promiscuous mode [ 285.308328][T12316] veth0: entered promiscuous mode [ 285.328109][T12316] veth0: left promiscuous mode [ 285.388554][ T6874] hsr_slave_0: left promiscuous mode [ 285.396165][ T6874] hsr_slave_1: left promiscuous mode [ 285.409020][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.438586][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.448680][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.456744][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.477593][ T6874] veth1_macvtap: left promiscuous mode [ 285.483783][ T6874] veth0_macvtap: left promiscuous mode [ 285.489382][ T6874] veth1_vlan: left promiscuous mode [ 285.495174][ T6874] veth0_vlan: left promiscuous mode [ 285.916776][ T6874] team0 (unregistering): Port device team_slave_1 removed [ 285.960922][ T6874] team0 (unregistering): Port device team_slave_0 removed [ 286.533474][T12309] chnl_net:caif_netlink_parms(): no params data found [ 286.823716][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.833109][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.842287][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.882256][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.889987][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.897948][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.899099][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.948888][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.963925][T12309] bridge_slave_0: entered allmulticast mode [ 286.990750][T12309] bridge_slave_0: entered promiscuous mode [ 287.028272][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.055045][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.063268][T12309] bridge_slave_1: entered allmulticast mode [ 287.071727][T12309] bridge_slave_1: entered promiscuous mode [ 287.118881][T12356] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 287.183096][T12309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.206662][T12309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.231356][T12343] syzkaller0 speed is unknown, defaulting to 1000 [ 287.352974][T12309] team0: Port device team_slave_0 added [ 287.386240][T12309] team0: Port device team_slave_1 added [ 287.430392][T12371] x_tables: duplicate underflow at hook 2 [ 287.490401][T12309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.521611][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.573092][T12309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.620278][T12378] x_tables: duplicate underflow at hook 1 [ 287.643024][T12382] netlink: 'syz.4.2037': attribute type 24 has an invalid length. [ 287.672753][T12309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.680368][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.711866][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 287.750101][T12309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.854208][ T6874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.983279][ T6874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.003198][T12388] netlink: 'syz.4.2039': attribute type 4 has an invalid length. [ 288.011117][T12388] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2039'. [ 288.034995][T12309] hsr_slave_0: entered promiscuous mode [ 288.050267][T12309] hsr_slave_1: entered promiscuous mode [ 288.058723][T12309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.067739][T12309] Cannot create hsr debugfs directory [ 288.124475][ T6874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.220287][T12398] FAULT_INJECTION: forcing a failure. [ 288.220287][T12398] name failslab, interval 1, probability 0, space 0, times 0 [ 288.251820][T12400] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 288.254834][T12398] CPU: 0 UID: 0 PID: 12398 Comm: syz.6.2041 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 288.269925][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.279990][T12398] Call Trace: [ 288.283274][T12398] [ 288.286206][T12398] dump_stack_lvl+0x241/0x360 [ 288.290903][T12398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.296108][T12398] ? __pfx__printk+0x10/0x10 [ 288.300700][T12398] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 288.306619][T12398] ? __pfx___might_resched+0x10/0x10 [ 288.311904][T12398] should_fail_ex+0x3b0/0x4e0 [ 288.316588][T12398] should_failslab+0xac/0x100 [ 288.321292][T12398] ? __get_vm_area_node+0x132/0x2d0 [ 288.326490][T12398] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 288.332210][T12398] __get_vm_area_node+0x132/0x2d0 [ 288.337229][T12398] __vmalloc_node_range_noprof+0x344/0x1380 [ 288.343116][T12398] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 288.348655][T12398] ? mark_lock+0x9a/0x360 [ 288.352997][T12398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.359327][T12398] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 288.364867][T12398] __vmalloc_noprof+0x79/0x90 [ 288.369542][T12398] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 288.375083][T12398] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 288.380620][T12398] ? bpf_prog_alloc+0x28/0x1b0 [ 288.385379][T12398] bpf_prog_alloc+0x3a/0x1b0 [ 288.389962][T12398] bpf_prog_load+0x7f7/0x20f0 [ 288.394644][T12398] ? __pfx_bpf_prog_load+0x10/0x10 [ 288.399752][T12398] ? __pfx___might_resched+0x10/0x10 [ 288.405049][T12398] ? __might_fault+0xc6/0x120 [ 288.409725][T12398] __sys_bpf+0x4ee/0x810 [ 288.413966][T12398] ? __pfx___sys_bpf+0x10/0x10 [ 288.418734][T12398] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.424800][T12398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.431121][T12398] ? do_syscall_64+0x100/0x230 [ 288.435884][T12398] __x64_sys_bpf+0x7c/0x90 [ 288.440299][T12398] do_syscall_64+0xf3/0x230 [ 288.444799][T12398] ? clear_bhb_loop+0x35/0x90 [ 288.449472][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.455369][T12398] RIP: 0033:0x7f86d1d7ff19 [ 288.459782][T12398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.479382][T12398] RSP: 002b:00007f86d2b30058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.487791][T12398] RAX: ffffffffffffffda RBX: 00007f86d1f45fa0 RCX: 00007f86d1d7ff19 [ 288.495754][T12398] RDX: 0000000000000094 RSI: 0000000020000240 RDI: 0000000000000005 [ 288.503733][T12398] RBP: 00007f86d2b300a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.511706][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.519668][T12398] R13: 0000000000000001 R14: 00007f86d1f45fa0 R15: 00007ffdadd78848 [ 288.527645][T12398] [ 288.591142][ T6874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.647428][T12398] syz.6.2041: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.710094][T12398] CPU: 0 UID: 0 PID: 12398 Comm: syz.6.2041 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 288.720912][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.730984][T12398] Call Trace: [ 288.734279][T12398] [ 288.737222][T12398] dump_stack_lvl+0x241/0x360 [ 288.741929][T12398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.747150][T12398] ? __pfx__printk+0x10/0x10 [ 288.751769][T12398] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 288.758209][T12398] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 288.764746][T12398] warn_alloc+0x278/0x410 [ 288.769105][T12398] ? __pfx_warn_alloc+0x10/0x10 [ 288.773979][T12398] ? __kasan_kmalloc+0x23/0xb0 [ 288.778775][T12398] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 288.784782][T12398] ? __get_vm_area_node+0x280/0x2d0 [ 288.790007][T12398] __vmalloc_node_range_noprof+0x369/0x1380 [ 288.795927][T12398] ? mark_lock+0x9a/0x360 [ 288.800302][T12398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.806659][T12398] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 288.812223][T12398] __vmalloc_noprof+0x79/0x90 [ 288.816914][T12398] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 288.822462][T12398] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 288.827825][T12398] ? bpf_prog_alloc+0x28/0x1b0 [ 288.832613][T12398] bpf_prog_alloc+0x3a/0x1b0 [ 288.837219][T12398] bpf_prog_load+0x7f7/0x20f0 [ 288.841910][T12398] ? __pfx_bpf_prog_load+0x10/0x10 [ 288.847022][T12398] ? __pfx___might_resched+0x10/0x10 [ 288.852322][T12398] ? __might_fault+0xc6/0x120 [ 288.857006][T12398] __sys_bpf+0x4ee/0x810 [ 288.861256][T12398] ? __pfx___sys_bpf+0x10/0x10 [ 288.866033][T12398] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.872103][T12398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.878427][T12398] ? do_syscall_64+0x100/0x230 [ 288.883193][T12398] __x64_sys_bpf+0x7c/0x90 [ 288.887610][T12398] do_syscall_64+0xf3/0x230 [ 288.892110][T12398] ? clear_bhb_loop+0x35/0x90 [ 288.896786][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.902680][T12398] RIP: 0033:0x7f86d1d7ff19 [ 288.907089][T12398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.926696][T12398] RSP: 002b:00007f86d2b30058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.935120][T12398] RAX: ffffffffffffffda RBX: 00007f86d1f45fa0 RCX: 00007f86d1d7ff19 [ 288.943086][T12398] RDX: 0000000000000094 RSI: 0000000020000240 RDI: 0000000000000005 [ 288.951046][T12398] RBP: 00007f86d2b300a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.959013][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.966977][T12398] R13: 0000000000000001 R14: 00007f86d1f45fa0 R15: 00007ffdadd78848 [ 288.974955][T12398] [ 289.013285][ T5846] Bluetooth: hci2: command tx timeout [ 289.020784][T12398] Mem-Info: [ 289.026070][T12398] active_anon:4788 inactive_anon:0 isolated_anon:0 [ 289.026070][T12398] active_file:1686 inactive_file:38327 isolated_file:0 [ 289.026070][T12398] unevictable:768 dirty:85 writeback:0 [ 289.026070][T12398] slab_reclaimable:11719 slab_unreclaimable:107700 [ 289.026070][T12398] mapped:28573 shmem:1455 pagetables:571 [ 289.026070][T12398] sec_pagetables:0 bounce:0 [ 289.026070][T12398] kernel_misc_reclaimable:0 [ 289.026070][T12398] free:1329761 free_pcp:429 free_cma:0 [ 289.071837][T12398] Node 0 active_anon:19252kB inactive_anon:0kB active_file:6744kB inactive_file:153228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114292kB dirty:340kB writeback:0kB shmem:4284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12676kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no [ 289.105040][T12398] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 289.143685][T12398] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.178309][T12398] lowmem_reserve[]: 0 2465 2466 0 0 [ 289.184694][T12398] Node 0 DMA32 free:1395928kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19256kB inactive_anon:0kB active_file:6744kB inactive_file:152392kB unevictable:1536kB writepending:412kB present:3129332kB managed:2552848kB mlocked:0kB bounce:0kB free_pcp:964kB local_pcp:760kB free_cma:0kB [ 289.215861][T12398] lowmem_reserve[]: 0 0 0 0 0 [ 289.220705][T12398] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.248317][T12398] lowmem_reserve[]: 0 0 0 0 0 [ 289.273068][T12398] Node 1 Normal free:3907796kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.388985][T12398] lowmem_reserve[]: 0 0 0 0 0 [ 289.410736][T12398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.423831][ T6874] bridge_slave_1: left allmulticast mode [ 289.423858][ T6874] bridge_slave_1: left promiscuous mode [ 289.424003][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.449915][T12398] Node 0 DMA32: 4*4kB (ME) 32*8kB (UME) 23*16kB (UME) 45*32kB (UME) 145*64kB (UME) 182*128kB (UME) 139*256kB (UME) 152*512kB (UM) 155*1024kB (UME) 15*2048kB (UM) 258*4096kB (UM) = 1394272kB [ 289.475732][T12417] netlink: 'syz.5.2047': attribute type 1 has an invalid length. [ 289.491858][ T6874] bridge_slave_0: left allmulticast mode [ 289.493446][T12398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 289.500022][ T6874] bridge_slave_0: left promiscuous mode [ 289.509277][T12398] Node 1 Normal: 218*4kB (UE) 67*8kB (UME) 56*16kB (UME) 218*32kB (UME) [ 289.515137][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.536463][T12398] 91*64kB (UME) 30*128kB (UME) 11*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 5*2048kB (UE) 944*4096kB (M) = 3907840kB [ 289.556631][T12398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.578984][T12398] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.596859][T12398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.611004][T12398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.627011][T12398] 41450 total pagecache pages [ 289.634428][T12398] 0 pages in swap cache [ 289.638734][T12398] Free swap = 124996kB [ 289.649551][T12398] Total swap = 124996kB [ 289.669222][T12398] 2097051 pages RAM [ 289.673987][T12398] 0 pages HighMem/MovableOnly [ 289.678880][T12398] 426989 pages reserved [ 289.689399][T12398] 0 pages cma reserved [ 290.048869][ T6874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.066155][ T6874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.076286][ T6874] bond0 (unregistering): Released all slaves [ 290.088545][T12343] chnl_net:caif_netlink_parms(): no params data found [ 290.114212][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 290.301858][T12343] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.311612][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.318876][T12343] bridge_slave_0: entered allmulticast mode [ 290.330528][T12343] bridge_slave_0: entered promiscuous mode [ 290.423386][T12343] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.431423][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.438643][T12343] bridge_slave_1: entered allmulticast mode [ 290.463849][T12343] bridge_slave_1: entered promiscuous mode [ 290.550767][T12343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.600436][T12343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.641950][ T6874] hsr_slave_0: left promiscuous mode [ 290.647991][ T6874] hsr_slave_1: left promiscuous mode [ 290.659528][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.667440][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.675962][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.691299][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.731975][ T6874] veth1_macvtap: left promiscuous mode [ 290.737539][ T6874] veth0_macvtap: left promiscuous mode [ 290.743983][ T6874] veth1_vlan: left promiscuous mode [ 290.749812][ T6874] veth0_vlan: left promiscuous mode [ 290.836424][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2056'. [ 290.852877][T12453] nbd: must specify an index to disconnect [ 291.091702][ T5846] Bluetooth: hci2: command tx timeout [ 291.297877][ T6874] team0 (unregistering): Port device team_slave_1 removed [ 291.342405][ T6874] team0 (unregistering): Port device team_slave_0 removed [ 291.750622][T12343] team0: Port device team_slave_0 added [ 291.856861][T12343] team0: Port device team_slave_1 added [ 291.972889][T12343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.988958][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.028105][T12343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.048604][T12343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.057056][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.098852][T12343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.123644][T12309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.191016][T12309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.215504][T12309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.245152][T12309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.288137][T12343] hsr_slave_0: entered promiscuous mode [ 292.299769][T12343] hsr_slave_1: entered promiscuous mode [ 292.310417][T12343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.310867][T12481] netlink: 'syz.6.2065': attribute type 1 has an invalid length. [ 292.338470][T12343] Cannot create hsr debugfs directory [ 292.576633][T12309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.658382][T12309] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.710973][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.718159][ T6823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.785890][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.793060][ T6823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.868210][T12309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.935070][T12493] syzkaller0 speed is unknown, defaulting to 1000 [ 293.064553][T12501] sctp: [Deprecated]: syz.6.2071 (pid 12501) Use of int in maxseg socket option. [ 293.064553][T12501] Use struct sctp_assoc_value instead [ 293.086822][T12501] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2071'. [ 293.101749][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2071'. [ 293.112161][T12343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.131971][T12343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.147070][T12343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.172120][ T5846] Bluetooth: hci2: command tx timeout [ 293.181078][T12343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.327769][T12309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.395850][T12343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.434789][T12343] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.493383][T12309] veth0_vlan: entered promiscuous mode [ 293.517318][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.524527][ T6871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.570027][T12309] veth1_vlan: entered promiscuous mode [ 293.572167][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2074'. [ 293.587925][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.595094][ T6823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.603774][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 293.884504][T12309] veth0_macvtap: entered promiscuous mode [ 293.894362][T12343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.931039][T12343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.972094][T12309] veth1_macvtap: entered promiscuous mode [ 294.098322][T12309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.143003][T12309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.171704][T12309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.191819][T12309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.213200][T12309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.233550][T12309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.264818][T12309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.289905][T12309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.309941][T12309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.333809][T12309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.568225][T12309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.591873][T12309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.600616][T12309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.629849][T12309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.698545][T12343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.727635][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2085'. [ 294.755775][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2085'. [ 294.778073][T12525] delete_channel: no stack [ 294.851162][ T6824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.861882][ T6824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.887654][T12343] veth0_vlan: entered promiscuous mode [ 294.912541][T12343] veth1_vlan: entered promiscuous mode [ 294.962518][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.976432][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.992723][T12343] veth0_macvtap: entered promiscuous mode [ 295.010856][T12343] veth1_macvtap: entered promiscuous mode [ 295.070446][T12343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.084697][T12343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.104663][T12343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.128774][T12343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.145621][T12343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.158560][T12343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.193235][T12343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.230499][T12343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.251950][ T5846] Bluetooth: hci2: command tx timeout [ 295.252349][T12343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.268424][T12343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.279181][T12343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.289314][T12343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.299771][T12343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.310840][T12343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.340324][T12343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.349496][T12343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.358589][T12343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.367869][T12343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.525212][T12574] FAULT_INJECTION: forcing a failure. [ 295.525212][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.528599][ T6871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.546640][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.4.2095 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 295.546670][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.546682][T12574] Call Trace: [ 295.567458][T12574] [ 295.567470][T12574] dump_stack_lvl+0x241/0x360 [ 295.567502][T12574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.567525][T12574] ? __pfx__printk+0x10/0x10 [ 295.567549][T12574] ? __pfx_lock_release+0x10/0x10 [ 295.567576][T12574] should_fail_ex+0x3b0/0x4e0 [ 295.567598][T12574] _copy_from_user+0x2f/0xc0 [ 295.567624][T12574] copy_msghdr_from_user+0xae/0x680 [ 295.567655][T12574] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 295.567677][T12574] ? __fget_files+0x2a/0x410 [ 295.567699][T12574] ? __fget_files+0x2a/0x410 [ 295.567726][T12574] __sys_sendmsg+0x209/0x350 [ 295.567747][T12574] ? __pfx_lock_release+0x10/0x10 [ 295.567772][T12574] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.567804][T12574] ? __pfx_vfs_write+0x10/0x10 [ 295.567852][T12574] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.567881][T12574] ? do_syscall_64+0x100/0x230 [ 295.567908][T12574] ? do_syscall_64+0xb6/0x230 [ 295.567933][T12574] do_syscall_64+0xf3/0x230 [ 295.579563][ T6871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.583992][T12574] ? clear_bhb_loop+0x35/0x90 [ 295.584018][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.584043][T12574] RIP: 0033:0x7f0d10b7ff19 [ 295.604299][ T6871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.608055][T12574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.608075][T12574] RSP: 002b:00007f0d0e9f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.614426][ T6871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.618441][T12574] RAX: ffffffffffffffda RBX: 00007f0d10d45fa0 RCX: 00007f0d10b7ff19 [ 295.618459][T12574] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 295.618472][T12574] RBP: 00007f0d0e9f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 295.618486][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.759709][T12574] R13: 0000000000000000 R14: 00007f0d10d45fa0 R15: 00007ffe2517bb38 [ 295.767684][T12574] [ 295.879972][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2097'. [ 295.908093][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2097'. [ 295.938402][T12579] FAULT_INJECTION: forcing a failure. [ 295.938402][T12579] name failslab, interval 1, probability 0, space 0, times 0 [ 295.974553][T12579] CPU: 1 UID: 0 PID: 12579 Comm: syz.6.2097 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 295.985379][T12579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.995475][T12579] Call Trace: [ 295.998774][T12579] [ 296.001724][T12579] dump_stack_lvl+0x241/0x360 [ 296.006521][T12579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.011745][T12579] ? __pfx__printk+0x10/0x10 [ 296.016364][T12579] ? ref_tracker_alloc+0x332/0x490 [ 296.021499][T12579] should_fail_ex+0x3b0/0x4e0 [ 296.026183][T12579] should_failslab+0xac/0x100 [ 296.030864][T12579] ? skb_clone+0x20c/0x390 [ 296.035276][T12579] kmem_cache_alloc_noprof+0x70/0x380 [ 296.040656][T12579] skb_clone+0x20c/0x390 [ 296.044905][T12579] __netlink_deliver_tap+0x3cc/0x7f0 [ 296.050190][T12579] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.055388][T12579] netlink_deliver_tap+0x19d/0x1b0 [ 296.060511][T12579] netlink_sendskb+0x68/0x140 [ 296.065191][T12579] netlink_unicast+0x39d/0x990 [ 296.069960][T12579] ? __pfx_netlink_unicast+0x10/0x10 [ 296.075250][T12579] netlink_rcv_skb+0x262/0x430 [ 296.080012][T12579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.085475][T12579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.090769][T12579] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.095974][T12579] netlink_unicast+0x7f6/0x990 [ 296.100758][T12579] ? __pfx_netlink_unicast+0x10/0x10 [ 296.106041][T12579] ? __virt_addr_valid+0x183/0x530 [ 296.111153][T12579] ? __check_object_size+0x48e/0x900 [ 296.116449][T12579] netlink_sendmsg+0x8e4/0xcb0 [ 296.121223][T12579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.126508][T12579] ? aa_sock_msg_perm+0x91/0x160 [ 296.131451][T12579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.136733][T12579] __sock_sendmsg+0x221/0x270 [ 296.141416][T12579] ____sys_sendmsg+0x52a/0x7e0 [ 296.146188][T12579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.151465][T12579] ? __fget_files+0x2a/0x410 [ 296.156052][T12579] ? __fget_files+0x2a/0x410 [ 296.160648][T12579] __sys_sendmsg+0x269/0x350 [ 296.165235][T12579] ? __pfx_lock_release+0x10/0x10 [ 296.170261][T12579] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.175381][T12579] ? __pfx_vfs_write+0x10/0x10 [ 296.180167][T12579] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.186493][T12579] ? do_syscall_64+0x100/0x230 [ 296.191265][T12579] ? do_syscall_64+0xb6/0x230 [ 296.195947][T12579] do_syscall_64+0xf3/0x230 [ 296.200450][T12579] ? clear_bhb_loop+0x35/0x90 [ 296.205132][T12579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.211029][T12579] RIP: 0033:0x7f86d1d7ff19 [ 296.215442][T12579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.235044][T12579] RSP: 002b:00007f86d2b30058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.243457][T12579] RAX: ffffffffffffffda RBX: 00007f86d1f45fa0 RCX: 00007f86d1d7ff19 [ 296.251426][T12579] RDX: 0000000000000840 RSI: 0000000020000140 RDI: 000000000000000d [ 296.259393][T12579] RBP: 00007f86d2b300a0 R08: 0000000000000000 R09: 0000000000000000 [ 296.267358][T12579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.275323][T12579] R13: 0000000000000000 R14: 00007f86d1f45fa0 R15: 00007ffdadd78848 [ 296.283308][T12579] [ 296.515278][ T6871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.883279][ T6871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.977627][ T6871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.037972][ T6871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.118657][ T6871] bridge_slave_1: left allmulticast mode [ 297.124644][ T6871] bridge_slave_1: left promiscuous mode [ 297.130305][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.139374][ T6871] bridge_slave_0: left allmulticast mode [ 297.145349][ T6871] bridge_slave_0: left promiscuous mode [ 297.151027][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.617677][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.640927][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.656178][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.667583][ T6871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.669695][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.684693][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.695118][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.702908][ T6871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.716135][ T6871] bond0 (unregistering): Released all slaves [ 297.744324][T12591] syzkaller0 speed is unknown, defaulting to 1000 [ 297.883204][T12591] chnl_net:caif_netlink_parms(): no params data found [ 297.964978][T12591] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.972944][T12591] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.980124][T12591] bridge_slave_0: entered allmulticast mode [ 297.987225][T12591] bridge_slave_0: entered promiscuous mode [ 298.009925][ T6871] hsr_slave_0: left promiscuous mode [ 298.015948][ T6871] hsr_slave_1: left promiscuous mode [ 298.022912][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.030335][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.038684][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.051071][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.069566][ T6871] veth1_macvtap: left promiscuous mode [ 298.075753][ T6871] veth0_macvtap: left promiscuous mode [ 298.081407][ T6871] veth1_vlan: left promiscuous mode [ 298.086668][ T6871] veth0_vlan: left promiscuous mode [ 298.748115][ T6871] team0 (unregistering): Port device team_slave_1 removed [ 298.810590][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.824972][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.841914][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.857263][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.868335][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 298.876013][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.884884][ T6871] team0 (unregistering): Port device team_slave_0 removed [ 299.387191][T12591] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.396960][T12591] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.404421][T12591] bridge_slave_1: entered allmulticast mode [ 299.412771][T12591] bridge_slave_1: entered promiscuous mode [ 299.440544][T12608] caif0: Master is either lo or non-ether device [ 299.524481][T12591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.568877][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'. [ 299.607131][T12591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.622209][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2108'. [ 299.732201][ T5846] Bluetooth: hci0: command tx timeout [ 299.777723][T12612] syzkaller0 speed is unknown, defaulting to 1000 [ 299.783814][T12591] team0: Port device team_slave_0 added [ 299.813232][T12591] team0: Port device team_slave_1 added [ 299.985982][T12591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.010179][T12650] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2115'. [ 300.014327][T12591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.019542][T12650] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2115'. [ 300.120659][T12591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.139815][T12591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.147172][T12591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.174189][T12591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.305074][T12591] hsr_slave_0: entered promiscuous mode [ 300.341734][T12591] hsr_slave_1: entered promiscuous mode [ 300.353152][T12591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.360738][T12591] Cannot create hsr debugfs directory [ 300.597973][ T6871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.680848][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2122'. [ 300.724175][T12661] syzkaller0 speed is unknown, defaulting to 1000 [ 300.854882][ T6871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.931466][ T5846] Bluetooth: hci2: command tx timeout [ 300.945606][ T6871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.010809][T12612] chnl_net:caif_netlink_parms(): no params data found [ 301.137146][ T6871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.653513][T12716] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2134'. [ 301.675770][T12718] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2135'. [ 301.717201][T12712] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2134'. [ 301.756048][T12612] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.779995][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.798068][T12612] bridge_slave_0: entered allmulticast mode [ 301.811908][ T5846] Bluetooth: hci0: command tx timeout [ 301.821159][T12612] bridge_slave_0: entered promiscuous mode [ 301.876974][T12715] syzkaller0 speed is unknown, defaulting to 1000 [ 301.983064][T12612] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.990197][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.027578][T12612] bridge_slave_1: entered allmulticast mode [ 302.052128][T12612] bridge_slave_1: entered promiscuous mode [ 302.093511][ T6871] bridge_slave_1: left allmulticast mode [ 302.099212][ T6871] bridge_slave_1: left promiscuous mode [ 302.105504][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.144346][ T6871] bridge_slave_0: left allmulticast mode [ 302.150042][ T6871] bridge_slave_0: left promiscuous mode [ 302.166120][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.199364][T12723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2137'. [ 302.226717][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2137'. [ 302.730916][ T6871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.744182][ T6871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.758834][ T6871] bond0 (unregistering): Released all slaves [ 302.886586][T12612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.916544][T12612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.011445][ T5846] Bluetooth: hci2: command tx timeout [ 303.062223][T12612] team0: Port device team_slave_0 added [ 303.124154][T12612] team0: Port device team_slave_1 added [ 303.141099][T12591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 303.231028][ T6871] hsr_slave_0: left promiscuous mode [ 303.252163][ T6871] hsr_slave_1: left promiscuous mode [ 303.262550][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.269995][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.279276][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.287221][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.327535][ T6871] veth1_macvtap: left promiscuous mode [ 303.352126][ T6871] veth0_macvtap: left promiscuous mode [ 303.357738][ T6871] veth1_vlan: left promiscuous mode [ 303.363344][ T6871] veth0_vlan: left promiscuous mode [ 303.891802][ T5846] Bluetooth: hci0: command tx timeout [ 303.928800][ T6871] team0 (unregistering): Port device team_slave_1 removed [ 303.969760][ T6871] team0 (unregistering): Port device team_slave_0 removed [ 304.364169][T12591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.374311][T12612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.382117][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.408713][T12612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.435593][T12747] vlan4: entered allmulticast mode [ 304.440744][T12747] hsr0: entered allmulticast mode [ 304.446527][T12747] hsr_slave_0: entered allmulticast mode [ 304.452243][T12747] hsr_slave_1: entered allmulticast mode [ 304.460113][T12747] hsr0: left allmulticast mode [ 304.465773][T12747] hsr_slave_0: left allmulticast mode [ 304.471185][T12747] hsr_slave_1: left allmulticast mode [ 304.506600][T12591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 304.525162][T12612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.545956][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.573585][T12612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.587077][T12591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 304.727022][T12612] hsr_slave_0: entered promiscuous mode [ 304.760511][T12612] hsr_slave_1: entered promiscuous mode [ 304.766783][T12760] __nla_validate_parse: 3 callbacks suppressed [ 304.766800][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2152'. [ 304.797199][T12612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.806794][T12612] Cannot create hsr debugfs directory [ 304.835620][T12762] netlink: 508 bytes leftover after parsing attributes in process `syz.4.2153'. [ 304.899079][T12762] netlink: 'syz.4.2153': attribute type 39 has an invalid length. [ 305.077971][T12766] Bluetooth: MGMT ver 1.23 [ 305.080468][T12591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.102230][ T5846] Bluetooth: hci2: command tx timeout [ 305.278263][T12591] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.384703][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.391922][ T6874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.465703][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.472877][ T6874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.505309][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'. [ 305.788420][T12591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.862738][T12591] veth0_vlan: entered promiscuous mode [ 305.887625][T12591] veth1_vlan: entered promiscuous mode [ 305.923334][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2166'. [ 305.927242][T12591] veth0_macvtap: entered promiscuous mode [ 305.943115][T12591] veth1_macvtap: entered promiscuous mode [ 305.958361][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.968912][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.978971][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.989464][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.000511][T12591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.011684][ T5846] Bluetooth: hci0: command tx timeout [ 306.012216][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.027578][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.037432][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.047948][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.058930][T12591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.069741][T12591] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.078492][T12591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.087291][T12591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.096643][T12591] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.270294][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2169'. [ 306.441438][T12818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2170'. [ 306.450677][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 306.464807][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.480259][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.540935][T12612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.563787][T12612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.586791][T12612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.612402][T12612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.622359][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.630741][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.849275][T12612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.920030][T12612] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.940010][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.947184][ T6871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.962737][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.969890][ T6871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.054087][T12837] syzkaller0 speed is unknown, defaulting to 1000 [ 307.054541][T12840] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 307.172556][ T5841] Bluetooth: hci2: command tx timeout [ 307.200367][T12846] netlink: 'syz.6.2179': attribute type 39 has an invalid length. [ 307.424604][ T6841] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.531745][T12612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.640578][T12612] veth0_vlan: entered promiscuous mode [ 307.654261][T12612] veth1_vlan: entered promiscuous mode [ 307.679198][T12612] veth0_macvtap: entered promiscuous mode [ 307.688600][T12612] veth1_macvtap: entered promiscuous mode [ 307.708998][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.725227][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.735980][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.747042][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.757521][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.768878][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.780276][T12612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.812943][ T6841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.835552][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.846710][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.857033][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.867750][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.878749][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.889242][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.900702][T12612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.919092][T12612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.928470][T12612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.937825][T12612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.947121][T12612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.009221][ T6867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.018498][ T6867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.039950][ T6867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.048825][ T6867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.307540][ T6841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.629733][ T6841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.705209][ T6841] bridge_slave_1: left allmulticast mode [ 308.710874][ T6841] bridge_slave_1: left promiscuous mode [ 308.716970][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.725782][ T6841] bridge_slave_0: left allmulticast mode [ 308.731901][ T6841] bridge_slave_0: left promiscuous mode [ 308.737577][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.222637][T12873] netlink: 'syz.4.2183': attribute type 10 has an invalid length. [ 309.247400][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.269809][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.280609][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.290719][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.291780][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2185'. [ 309.308948][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 309.317106][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.435127][ T6841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.447748][ T6841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.458903][ T6841] bond0 (unregistering): Released all slaves [ 309.526391][T12873] hsr0: entered promiscuous mode [ 309.545644][T12873] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 309.581994][T12873] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 309.607604][T12873] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 309.733055][T12877] syzkaller0 speed is unknown, defaulting to 1000 [ 309.942160][ T6841] hsr_slave_0: left promiscuous mode [ 309.948314][ T6841] hsr_slave_1: left promiscuous mode [ 309.954555][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.962090][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.969819][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.977588][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.999755][ T6841] veth1_macvtap: left promiscuous mode [ 310.006436][ T6841] veth0_macvtap: left promiscuous mode [ 310.012143][ T6841] veth1_vlan: left promiscuous mode [ 310.017404][ T6841] veth0_vlan: left promiscuous mode [ 310.417949][ T6841] team0 (unregistering): Port device team_slave_1 removed [ 310.468204][ T6841] team0 (unregistering): Port device team_slave_0 removed [ 311.055945][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.077907][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.096060][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.106157][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.114198][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 311.123448][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.205925][T12877] chnl_net:caif_netlink_parms(): no params data found [ 311.268489][T12896] syzkaller0 speed is unknown, defaulting to 1000 [ 311.299693][T12903] netlink: 'syz.5.2192': attribute type 39 has an invalid length. [ 311.412239][ T5841] Bluetooth: hci0: command tx timeout [ 311.572216][T12877] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.579549][T12877] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.587931][T12877] bridge_slave_0: entered allmulticast mode [ 311.626232][T12919] netlink: 'syz.6.2196': attribute type 4 has an invalid length. [ 311.631691][T12877] bridge_slave_0: entered promiscuous mode [ 311.635617][T12919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.659055][T12877] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.666683][T12877] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.675073][T12877] bridge_slave_1: entered allmulticast mode [ 311.682742][T12877] bridge_slave_1: entered promiscuous mode [ 311.788467][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2198'. [ 311.800969][T12877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.813273][T12877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.823499][T12923] FAULT_INJECTION: forcing a failure. [ 311.823499][T12923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.858037][T12923] CPU: 0 UID: 0 PID: 12923 Comm: syz.6.2198 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 311.868862][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 311.878966][T12923] Call Trace: [ 311.882272][T12923] [ 311.885227][T12923] dump_stack_lvl+0x241/0x360 [ 311.889939][T12923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.895167][T12923] ? __pfx__printk+0x10/0x10 [ 311.899808][T12923] ? snprintf+0xda/0x120 [ 311.904089][T12923] should_fail_ex+0x3b0/0x4e0 [ 311.908801][T12923] _copy_to_user+0x31/0xb0 [ 311.913229][T12923] simple_read_from_buffer+0xca/0x150 [ 311.918606][T12923] proc_fail_nth_read+0x1e9/0x250 [ 311.923627][T12923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.929168][T12923] ? rw_verify_area+0x55e/0x6f0 [ 311.934016][T12923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.939563][T12923] vfs_read+0x1fc/0xb70 [ 311.943718][T12923] ? __pfx___mutex_lock+0x10/0x10 [ 311.948751][T12923] ? __pfx_vfs_read+0x10/0x10 [ 311.953449][T12923] ? __fget_files+0x2a/0x410 [ 311.958033][T12923] ? __fget_files+0x395/0x410 [ 311.962703][T12923] ? __fget_files+0x2a/0x410 [ 311.967304][T12923] ksys_read+0x18f/0x2b0 [ 311.971551][T12923] ? __pfx_ksys_read+0x10/0x10 [ 311.976313][T12923] ? do_syscall_64+0x100/0x230 [ 311.981083][T12923] ? do_syscall_64+0xb6/0x230 [ 311.985759][T12923] do_syscall_64+0xf3/0x230 [ 311.990264][T12923] ? clear_bhb_loop+0x35/0x90 [ 311.994960][T12923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.000871][T12923] RIP: 0033:0x7f86d1d7e92c [ 312.005295][T12923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 312.024997][T12923] RSP: 002b:00007f86d2b30050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.033415][T12923] RAX: ffffffffffffffda RBX: 00007f86d1f45fa0 RCX: 00007f86d1d7e92c [ 312.041383][T12923] RDX: 000000000000000f RSI: 00007f86d2b300b0 RDI: 000000000000000d [ 312.049355][T12923] RBP: 00007f86d2b300a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.057332][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.065308][T12923] R13: 0000000000000000 R14: 00007f86d1f45fa0 R15: 00007ffdadd78848 [ 312.073293][T12923] [ 312.104071][T12877] team0: Port device team_slave_0 added [ 312.122947][T12877] team0: Port device team_slave_1 added [ 312.227965][T12877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.258162][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.303022][T12911] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 312.338943][T12877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.377881][T12877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.391635][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.428928][T12877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.513131][T12896] chnl_net:caif_netlink_parms(): no params data found [ 312.587100][T12956] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2205'. [ 312.755115][T12877] hsr_slave_0: entered promiscuous mode [ 312.762302][T12877] hsr_slave_1: entered promiscuous mode [ 312.786088][T12877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.797102][T12877] Cannot create hsr debugfs directory [ 313.099025][ T6841] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.172072][ T5841] Bluetooth: hci2: command tx timeout [ 313.274802][ T6841] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.406729][T12896] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.426049][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.441947][T12896] bridge_slave_0: entered allmulticast mode [ 313.456990][T12896] bridge_slave_0: entered promiscuous mode [ 313.502193][ T6841] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.533515][T12896] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.544009][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.553793][T12896] bridge_slave_1: entered allmulticast mode [ 313.560837][T12896] bridge_slave_1: entered promiscuous mode [ 313.621152][ T6841] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.644041][T12996] netlink: 'syz.4.2217': attribute type 13 has an invalid length. [ 313.671717][T12996] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2217'. [ 313.773718][T12896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.837647][T12896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.920693][T12896] team0: Port device team_slave_0 added [ 313.967254][T12896] team0: Port device team_slave_1 added [ 314.039039][T12896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.058732][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.090116][T12896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.108224][T12896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.115575][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.142948][T12896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.159158][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 314.187813][ T6841] bridge_slave_1: left allmulticast mode [ 314.199549][ T6841] bridge_slave_1: left promiscuous mode [ 314.223011][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.253716][ T6841] bridge_slave_0: left allmulticast mode [ 314.265849][ T6841] bridge_slave_0: left promiscuous mode [ 314.277258][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.370858][T13021] netlink: 'syz.6.2226': attribute type 11 has an invalid length. [ 314.409446][T13021] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2226'. [ 314.487403][T13025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2227'. [ 314.734636][ T6841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.747017][ T6841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.757374][ T6841] bond0 (unregistering): Released all slaves [ 315.002522][T12896] hsr_slave_0: entered promiscuous mode [ 315.022108][T12896] hsr_slave_1: entered promiscuous mode [ 315.028473][T12896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.045281][T12896] Cannot create hsr debugfs directory [ 315.158692][T13037] netlink: 'syz.5.2231': attribute type 3 has an invalid length. [ 315.198452][T13037] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2231'. [ 315.200816][T12877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.244923][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2231'. [ 315.254687][ T5841] Bluetooth: hci2: command tx timeout [ 315.260626][T13037] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2231'. [ 315.276169][T12877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.299033][T12877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.319372][T13037] netlink: 'syz.5.2231': attribute type 11 has an invalid length. [ 315.332647][T12877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.379760][ T6841] hsr_slave_0: left promiscuous mode [ 315.386026][ T6841] hsr_slave_1: left promiscuous mode [ 315.402726][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.421732][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.437049][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.444798][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.457028][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2233'. [ 315.497283][ T6841] veth1_macvtap: left promiscuous mode [ 315.509444][ T6841] veth0_macvtap: left promiscuous mode [ 315.515806][ T6841] veth1_vlan: left promiscuous mode [ 315.521131][ T6841] veth0_vlan: left promiscuous mode [ 316.048260][ T6841] team0 (unregistering): Port device team_slave_1 removed [ 316.116338][ T6841] team0 (unregistering): Port device team_slave_0 removed [ 316.886721][T13074] netlink: zone id is out of range [ 316.903487][T13074] netlink: zone id is out of range [ 316.918899][T13074] netlink: zone id is out of range [ 316.946510][T13074] netlink: zone id is out of range [ 316.952432][T13074] netlink: zone id is out of range [ 316.959588][T13074] netlink: zone id is out of range [ 316.964892][T13074] netlink: zone id is out of range [ 316.971703][T13074] netlink: zone id is out of range [ 316.997573][T13074] netlink: zone id is out of range [ 317.018938][T13074] netlink: zone id is out of range [ 317.026948][T12877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.071012][T12877] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.100262][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.107443][ T6867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.126997][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.134123][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.332114][ T5841] Bluetooth: hci2: command tx timeout [ 317.382773][T12896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.398207][T12896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.418830][T12896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.433235][T12896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.495700][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.543230][T12877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.587155][T12896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.626919][T12896] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.674621][T12877] veth0_vlan: entered promiscuous mode [ 317.688999][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.696229][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.716860][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.724087][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.760903][T12877] veth1_vlan: entered promiscuous mode [ 317.867841][T12877] veth0_macvtap: entered promiscuous mode [ 317.888219][T12877] veth1_macvtap: entered promiscuous mode [ 317.929288][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.959283][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.990802][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.012217][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.046788][T12877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.086938][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.123322][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.152228][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.171242][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.195269][T12877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.237228][T12877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.281787][T12877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.290541][T12877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.321630][T12877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.489168][T12896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.509144][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.522817][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.550190][T13097] netlink: 'syz.6.2250': attribute type 6 has an invalid length. [ 318.581130][T13099] Bluetooth: MGMT ver 1.23 [ 318.620423][ T6867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.639034][ T6867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.659868][T12896] veth0_vlan: entered promiscuous mode [ 318.716204][T12896] veth1_vlan: entered promiscuous mode [ 318.813885][T12896] veth0_macvtap: entered promiscuous mode [ 318.892949][T12896] veth1_macvtap: entered promiscuous mode [ 318.939161][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.959875][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.971083][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.982987][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.993341][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.005827][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.020519][T12896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.036415][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.048234][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.058397][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.070280][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.080680][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.101546][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.123458][T12896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.136234][T12896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.145239][T12896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.154636][T12896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.166454][T12896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.293979][ T6841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.306153][ T6841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.369184][ T6847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.412219][ T5846] Bluetooth: hci2: command tx timeout [ 319.434372][ T6847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.467999][T13121] syzkaller0 speed is unknown, defaulting to 1000 [ 319.571413][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 319.590521][T13130] sch_fq: defrate 117 ignored. [ 319.704261][T13132] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2261'. [ 319.789337][ T6867] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.218118][ T6867] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.383387][ T6867] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.520582][ T6867] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.616316][ T6867] bridge_slave_1: left allmulticast mode [ 320.623446][ T6867] bridge_slave_1: left promiscuous mode [ 320.629119][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.637740][ T6867] bridge_slave_0: left allmulticast mode [ 320.643863][ T6867] bridge_slave_0: left promiscuous mode [ 320.649517][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.116433][ T6867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.128543][ T6867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.147323][ T6867] bond0 (unregistering): Released all slaves [ 321.235138][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.244855][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.254830][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.262824][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.271069][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.278460][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.309689][T13135] syzkaller0 speed is unknown, defaulting to 1000 [ 321.435811][ T6867] hsr_slave_0: left promiscuous mode [ 321.442215][ T6867] hsr_slave_1: left promiscuous mode [ 321.448105][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.455707][ T6867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.464829][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.473704][ T6867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.495572][ T6867] veth1_macvtap: left promiscuous mode [ 321.501110][ T6867] veth0_macvtap: left promiscuous mode [ 321.506935][ T6867] veth1_vlan: left promiscuous mode [ 321.512703][ T6867] veth0_vlan: left promiscuous mode [ 321.917982][ T6867] team0 (unregistering): Port device team_slave_1 removed [ 321.964184][ T6867] team0 (unregistering): Port device team_slave_0 removed [ 322.492828][T13147] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2262'. [ 322.518782][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.533643][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.542575][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.551445][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.559717][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 322.576049][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.022439][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2262'. [ 323.058659][T13160] macvlan9: entered promiscuous mode [ 323.108441][T13160] macvlan9: entered allmulticast mode [ 323.165587][T13148] syzkaller0 speed is unknown, defaulting to 1000 [ 323.205021][T13135] chnl_net:caif_netlink_parms(): no params data found [ 323.341546][ T5841] Bluetooth: hci0: command tx timeout [ 323.350216][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 323.436218][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 323.494983][T13135] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.508707][T13135] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.519515][T13135] bridge_slave_0: entered allmulticast mode [ 323.535309][T13135] bridge_slave_0: entered promiscuous mode [ 323.557013][T13135] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.569310][T13135] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.580153][T13135] bridge_slave_1: entered allmulticast mode [ 323.595964][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 323.610611][T13135] bridge_slave_1: entered promiscuous mode [ 323.697063][T13135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.716485][T13148] chnl_net:caif_netlink_parms(): no params data found [ 323.742407][T13135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.895850][T13135] team0: Port device team_slave_0 added [ 324.024588][T13135] team0: Port device team_slave_1 added [ 324.211095][ T6867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.242102][T13135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.249368][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.276284][T13135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.289015][T13135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.321629][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.353849][T13135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.429382][ T6867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.453597][T13223] macvlan11: entered promiscuous mode [ 324.463539][T13148] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.470657][T13148] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.479183][T13148] bridge_slave_0: entered allmulticast mode [ 324.496868][T13148] bridge_slave_0: entered promiscuous mode [ 324.513239][T13231] netlink: 'syz.5.2286': attribute type 1 has an invalid length. [ 324.537166][T13227] ------------[ cut here ]------------ [ 324.543303][T13227] WARNING: CPU: 0 PID: 13227 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 324.556418][T13227] Modules linked in: [ 324.560505][T13227] CPU: 0 UID: 0 PID: 13227 Comm: syz.6.2285 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 324.571409][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 324.581583][T13227] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 324.588292][T13227] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 a6 65 87 fa eb 05 e8 9f 65 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 324.608092][T13227] RSP: 0018:ffffc90003e9f6b0 EFLAGS: 00010293 [ 324.614896][T13227] RAX: ffffffff87180c81 RBX: 0000000000000000 RCX: ffff88805335da00 [ 324.623194][T13227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 324.631191][T13227] RBP: 0000000000000000 R08: ffffffff87180a8d R09: 1ffffffff20329b6 [ 324.631716][ T5841] Bluetooth: hci2: command tx timeout [ 324.639321][T13227] R10: dffffc0000000000 R11: ffffffff87177ad0 R12: ffff888026de6e32 [ 324.639379][T13227] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888024e3b0a0 [ 324.661439][T13227] FS: 00007f86d2b306c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 324.670484][T13227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.677151][T13227] CR2: 000000110c26d394 CR3: 000000004c8ec000 CR4: 00000000003526f0 [ 324.685197][T13227] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.693328][T13227] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.701366][T13227] Call Trace: [ 324.704672][T13227] [ 324.707626][T13227] ? __warn+0x165/0x4d0 [ 324.711860][T13227] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 324.717957][T13227] ? report_bug+0x2b3/0x500 [ 324.722613][T13227] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 324.728975][T13227] ? handle_bug+0x60/0x90 [ 324.733389][T13227] ? exc_invalid_op+0x1a/0x50 [ 324.738076][T13227] ? asm_exc_invalid_op+0x1a/0x20 [ 324.743208][T13227] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 324.749808][T13227] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 324.756144][T13227] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 324.762311][T13227] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 324.768408][T13227] ? mac80211_hwsim_add_interface+0x86/0x320 [ 324.774699][T13227] mac80211_hwsim_add_interface+0x9a/0x320 [ 324.780542][T13227] drv_add_interface+0x2f8/0x8e0 [ 324.785828][T13227] ieee80211_do_open+0x73d/0x2420 [ 324.790883][T13227] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 324.797522][T13227] ieee80211_open+0x192/0x200 [ 324.802490][T13227] __dev_open+0x2d3/0x450 [ 324.806856][T13227] ? __pfx___dev_open+0x10/0x10 [ 324.811854][T13227] ? dev_set_rx_mode+0xb8/0x2e0 [ 324.816737][T13227] __dev_change_flags+0x1e2/0x6f0 [ 324.821848][T13227] ? __pfx___mutex_lock+0x10/0x10 [ 324.826901][T13227] ? __pfx___dev_change_flags+0x10/0x10 [ 324.832560][T13227] ? apparmor_capable+0x13b/0x1b0 [ 324.837612][T13227] dev_change_flags+0x8b/0x1a0 [ 324.842828][T13227] devinet_ioctl+0xcce/0x1ac0 [ 324.847555][T13227] inet_ioctl+0x3d7/0x4f0 [ 324.852148][T13227] ? __pfx_inet_ioctl+0x10/0x10 [ 324.857186][T13227] ? tomoyo_path_number_perm+0x679/0x860 [ 324.862919][T13227] ? __lock_acquire+0x1397/0x2100 [ 324.867970][T13227] ? tomoyo_path_number_perm+0x206/0x860 [ 324.873697][T13227] sock_do_ioctl+0x158/0x460 [ 324.878339][T13227] ? __pfx_sock_do_ioctl+0x10/0x10 [ 324.883562][T13227] sock_ioctl+0x626/0x8e0 [ 324.887918][T13227] ? __pfx_sock_ioctl+0x10/0x10 [ 324.892891][T13227] ? __fget_files+0x2a/0x410 [ 324.897504][T13227] ? __fget_files+0x2a/0x410 [ 324.902160][T13227] ? __pfx_sock_ioctl+0x10/0x10 [ 324.907039][T13227] __se_sys_ioctl+0xf5/0x170 [ 324.911741][T13227] do_syscall_64+0xf3/0x230 [ 324.916279][T13227] ? clear_bhb_loop+0x35/0x90 [ 324.920983][T13227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.926959][T13227] RIP: 0033:0x7f86d1d7fb1b [ 324.931857][T13227] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 324.951632][T13227] RSP: 002b:00007f86d2b2ee80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.960241][T13227] RAX: ffffffffffffffda RBX: 00007f86d2b2efa0 RCX: 00007f86d1d7fb1b [ 324.968485][T13227] RDX: 00007f86d2b2ef00 RSI: 0000000000008914 RDI: 0000000000000004 [ 324.976612][T13227] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 324.984672][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 324.992712][T13227] R13: 0000000000000048 R14: 00007f86d2b2efc0 R15: 00007f86d2b2ef00 [ 325.000709][T13227] [ 325.003815][T13227] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 325.011080][T13227] CPU: 0 UID: 0 PID: 13227 Comm: syz.6.2285 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 325.021832][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.031881][T13227] Call Trace: [ 325.035151][T13227] [ 325.038072][T13227] dump_stack_lvl+0x241/0x360 [ 325.042749][T13227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.047941][T13227] ? __pfx__printk+0x10/0x10 [ 325.052531][T13227] ? vscnprintf+0x5d/0x90 [ 325.056858][T13227] panic+0x349/0x880 [ 325.060745][T13227] ? __warn+0x174/0x4d0 [ 325.064901][T13227] ? __pfx_panic+0x10/0x10 [ 325.069357][T13227] __warn+0x344/0x4d0 [ 325.073353][T13227] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 325.079430][T13227] report_bug+0x2b3/0x500 [ 325.083749][T13227] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 325.089802][T13227] handle_bug+0x60/0x90 [ 325.093942][T13227] exc_invalid_op+0x1a/0x50 [ 325.098427][T13227] asm_exc_invalid_op+0x1a/0x20 [ 325.103269][T13227] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 325.109935][T13227] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 a6 65 87 fa eb 05 e8 9f 65 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 325.129539][T13227] RSP: 0018:ffffc90003e9f6b0 EFLAGS: 00010293 [ 325.135606][T13227] RAX: ffffffff87180c81 RBX: 0000000000000000 RCX: ffff88805335da00 [ 325.143581][T13227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.151568][T13227] RBP: 0000000000000000 R08: ffffffff87180a8d R09: 1ffffffff20329b6 [ 325.159535][T13227] R10: dffffc0000000000 R11: ffffffff87177ad0 R12: ffff888026de6e32 [ 325.167509][T13227] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888024e3b0a0 [ 325.175483][T13227] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 325.181992][T13227] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 325.187990][T13227] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 325.194055][T13227] ? mac80211_hwsim_add_interface+0x86/0x320 [ 325.200032][T13227] mac80211_hwsim_add_interface+0x9a/0x320 [ 325.205842][T13227] drv_add_interface+0x2f8/0x8e0 [ 325.210781][T13227] ieee80211_do_open+0x73d/0x2420 [ 325.215804][T13227] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 325.222222][T13227] ieee80211_open+0x192/0x200 [ 325.226894][T13227] __dev_open+0x2d3/0x450 [ 325.231229][T13227] ? __pfx___dev_open+0x10/0x10 [ 325.236082][T13227] ? dev_set_rx_mode+0xb8/0x2e0 [ 325.240936][T13227] __dev_change_flags+0x1e2/0x6f0 [ 325.245956][T13227] ? __pfx___mutex_lock+0x10/0x10 [ 325.250979][T13227] ? __pfx___dev_change_flags+0x10/0x10 [ 325.256522][T13227] ? apparmor_capable+0x13b/0x1b0 [ 325.261559][T13227] dev_change_flags+0x8b/0x1a0 [ 325.266334][T13227] devinet_ioctl+0xcce/0x1ac0 [ 325.271016][T13227] inet_ioctl+0x3d7/0x4f0 [ 325.275343][T13227] ? __pfx_inet_ioctl+0x10/0x10 [ 325.280195][T13227] ? tomoyo_path_number_perm+0x679/0x860 [ 325.285836][T13227] ? __lock_acquire+0x1397/0x2100 [ 325.290856][T13227] ? tomoyo_path_number_perm+0x206/0x860 [ 325.296494][T13227] sock_do_ioctl+0x158/0x460 [ 325.301089][T13227] ? __pfx_sock_do_ioctl+0x10/0x10 [ 325.306212][T13227] sock_ioctl+0x626/0x8e0 [ 325.310539][T13227] ? __pfx_sock_ioctl+0x10/0x10 [ 325.315388][T13227] ? __fget_files+0x2a/0x410 [ 325.319973][T13227] ? __fget_files+0x2a/0x410 [ 325.324559][T13227] ? __pfx_sock_ioctl+0x10/0x10 [ 325.329407][T13227] __se_sys_ioctl+0xf5/0x170 [ 325.333996][T13227] do_syscall_64+0xf3/0x230 [ 325.338497][T13227] ? clear_bhb_loop+0x35/0x90 [ 325.343169][T13227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.349060][T13227] RIP: 0033:0x7f86d1d7fb1b [ 325.353468][T13227] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 325.373075][T13227] RSP: 002b:00007f86d2b2ee80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.381490][T13227] RAX: ffffffffffffffda RBX: 00007f86d2b2efa0 RCX: 00007f86d1d7fb1b [ 325.389457][T13227] RDX: 00007f86d2b2ef00 RSI: 0000000000008914 RDI: 0000000000000004 [ 325.397430][T13227] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 325.405397][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 325.413363][T13227] R13: 0000000000000048 R14: 00007f86d2b2efc0 R15: 00007f86d2b2ef00 [ 325.421346][T13227] [ 325.424625][T13227] Kernel Offset: disabled [ 325.429013][T13227] Rebooting in 86400 seconds..