last executing test programs: 59.154499405s ago: executing program 1 (id=248): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000003000000000000000200000000000000ffffffffffff00"/67], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 49.171071152s ago: executing program 1 (id=248): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000003000000000000000200000000000000ffffffffffff00"/67], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 38.533399859s ago: executing program 1 (id=248): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000003000000000000000200000000000000ffffffffffff00"/67], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 28.028824674s ago: executing program 1 (id=248): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000003000000000000000200000000000000ffffffffffff00"/67], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17.095120192s ago: executing program 1 (id=248): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000003000000000000000200000000000000ffffffffffff00"/67], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.448109144s ago: executing program 3 (id=830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000", 0x17}], 0x1}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) close(r5) pipe(&(0x7f0000000100)) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x3, 0x5b}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x3}}}}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x88a8ffad}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) pipe(0x0) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 7.591189802s ago: executing program 3 (id=836): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x2, @private0, 0x3ff}], 0x1c) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r3, 0x80047441, 0x20000000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}]}, &(0x7f0000000100)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r4 = socket(0x10, 0x5, 0x200) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000280)={0x8, 'netpci0\x00', {'wlan0\x00'}, 0x3}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$netlink(0x10, 0x3, 0x8) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000004c00", @ANYRES8, @ANYRES64], 0x44}, 0x1, 0xffffa888, 0x0, 0x48010}, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000131401010000000000000000080001"], 0x18}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) (async) sendmmsg$inet6(r2, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) 7.325996285s ago: executing program 3 (id=841): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='neigh_create\x00', r0, 0x0, 0x100}, 0x18) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000290000000018"], 0x28}, 0x0) 7.100222496s ago: executing program 3 (id=844): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x20008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)="b970f6aa2bfdc9d7afbfe5c81e0b9b00b49015199ee375d7bd1e9a044aead3faf4a0f39154893e76f7c07b1ef464add3dac1272dfb540106eff5d18585394f8978a2a6e597b9479e904e68cfe4474d047fbd2a138da70c600c760ce32fdd162b9866cd8b1d2908ea2599011aba31a4b1193250944e602609300cbbb8f2bd89acef5fd0471e96cd071c31f8", 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) shutdown(r4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) 5.854073935s ago: executing program 0 (id=847): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00ad8430d600fbdfdf250200c40f26e041000008003f889f659d8aa6199400f8b71157efa3b5858d88592d05d0b15cc9a439c76b1de1eabf6d2665"], 0x1c}, 0x1, 0x0, 0x0, 0x24048c44}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0x470, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x36, 0x6c, 0x4, 0x2, 0x12, 0x74, 0x9, 0x18, 0x36, 0x48, 0x5, 0x36, 0x5, 0x6c, 0x19, 0x48, 0x4, 0x3, 0xc, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8e2, 0x3, 0x2, 0xcf, 0x75, 0x100, 0xe645, 0x9ce]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x3}, {0x6, 0x9}, {0x5, 0xa}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x9}, {0x6, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x4}, {}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x6c, 0x48, 0x2, 0x5f, 0x48, 0x6c, 0x16, 0x60, 0x60, 0x4, 0x30, 0x2, 0xeba22538a4f1373e, 0x9, 0x2, 0x1, 0x24, 0x2, 0x1, 0x36, 0x8caa879988a30c0e, 0x16, 0xc, 0x6c, 0x9e53fc02fc192517]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x4, 0x6, 0x9, 0x1, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x1, 0x3, 0x92, 0x2, 0x1ff, 0xf001, 0x86]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8a6, 0xd, 0x5, 0x1, 0x9, 0x6, 0x0, 0x8]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ac3, 0x1, 0x2, 0x3, 0x8, 0x5, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x4, 0x36, 0x60, 0x4, 0x3, 0x3, 0xb, 0xb, 0x59, 0x4, 0xb, 0xb, 0xc, 0xc, 0x1f, 0x18, 0x0, 0x1b, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x6, 0x0, 0x1, 0xc, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x11bb, 0x0, 0x1, 0x39eb, 0x4, 0xffff, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xb8ea, 0xd, 0xf, 0x8, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x12, 0x8, 0x2, 0x6, 0x200, 0x8]}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x46e, 0x7, 0x5, 0x1, 0x3, 0x7ff, 0x6, 0x7ff]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x80, 0x8001, 0x9, 0x0, 0x40, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x5}, {0x4, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x4}, {0x4, 0x7}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0x5}, {0x1}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0xa}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x0, 0xa}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0xa}, {0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x5, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x4, 0x7}, {0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x7, 0x3}, {}, {0x4, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x8}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x7}, {0x1}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x6}, {0x7, 0x8}, {0x3, 0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x2}, {0x3, 0x7}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x3}, {0x4, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x3}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc, 0x7, 0x8, 0x9, 0x3, 0x6, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffbf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4e2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc14}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x470}}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.747231143s ago: executing program 1 (id=248): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000003000000000000000200000000000000ffffffffffff00"/67], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.592438859s ago: executing program 0 (id=848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x200000000000011, 0x2, 0x1) socket$kcm(0x2, 0xa, 0x2) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x20, 0x15, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0xa8, 0x2, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair(0x23, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x24}}, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 4.591971055s ago: executing program 2 (id=849): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.364120514s ago: executing program 0 (id=851): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x14) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004e00004c0000000000069078ac141400ac1e0001440708e00000018917d70000000000000000ffffffffac1e01017f00000189030000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x61842, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x6}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000580)="781fd1169bc02decbd902949dd5be7d0", 0x10}], 0x1) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRESHEX], 0xffdd) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x894b, &(0x7f0000000180)) 3.786357603s ago: executing program 4 (id=853): r0 = socket$inet(0x2b, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x43010}, 0x10) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f00000001c0)=0xfd, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x400000000040, 0x400000000070, 0x4000000000a0], 0x0, 0x0, 0x0}, 0x138) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, r4, 0x0, 0x20, &(0x7f0000000200)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\xbc\xbe\xc1\xb3`\xd8\xc7\xb0!W\xf6\x04$\xc1:\xeb\xdc\xf5\a\xa3;\xc5\xb6\x01\x90\xc7wYs\xefW\xf6/\xfc\xf7\x98z$\xda\xb6w\x1b\xba=\xbf\x17\xde-m\x1b\xdb\xaaQr$\x10\xab\x03u7\x92\xca\xb24\xfcz\t\xfe\b\xb7\x166\xb8\"\x803\x88\xca\xf8\xb0Dx\xec?\xda\xf5\xc9\xb5f_\xa7\xf9\xadb\xdd'}, 0x9b) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'dvmrp1\x00', 0x400}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$inet(0x10, 0xa, 0x200) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000240)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) sendfile(r0, r5, &(0x7f0000000040)=0x2, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'gretap0\x00'}) 3.684139463s ago: executing program 2 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FLAGS={0xa}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200005e1800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x6c}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x1, @local}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000001040)="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", 0x5bf}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f0000000500)="8700144add194dc92e62bfdc1de91e98227f67410fae0aa2958eeb11856055f582d7ed3b9ca5", 0x26}, {&(0x7f0000000540)="00b0c57375c4be8a5dc75923f273fc78cdd1d3de274094944c6960ca883ad270a21a3dec93c99db00a83e62334e76819555b50fd4c921a8ec4dd9b1e9300596433deaf0daca4322aa0c6e846045f1b7b9c263a9914d30ae1e361a07e4e8f4a9240f1", 0x62}], 0x8}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FLAGS={0xa}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200005e1800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x6c}}, 0x0) (async) socket$kcm(0x2, 0x3, 0x84) (async) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x1, @local}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000001040)="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", 0x5bf}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f0000000500)="8700144add194dc92e62bfdc1de91e98227f67410fae0aa2958eeb11856055f582d7ed3b9ca5", 0x26}, {&(0x7f0000000540)="00b0c57375c4be8a5dc75923f273fc78cdd1d3de274094944c6960ca883ad270a21a3dec93c99db00a83e62334e76819555b50fd4c921a8ec4dd9b1e9300596433deaf0daca4322aa0c6e846045f1b7b9c263a9914d30ae1e361a07e4e8f4a9240f1", 0x62}], 0x8}, 0x0) (async) 3.574853505s ago: executing program 2 (id=855): socket(0x2a, 0x4, 0x80000001) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfe3, &(0x7f0000001e00)=""/4067, 0x100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3.522260507s ago: executing program 4 (id=856): unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYRES8], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x200000, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500007c0000000000069078ac1414bbac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a400000090780000010100020405009940eb739563a3c52b43aee4b2052600000009ffffff4c0000c40000081312625fbe96fc9782524d8a397b7b0000000000"], 0x0) r5 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000001740)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x1ff) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWSETELEM={0x544, 0xc, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x518, 0x3, 0x0, 0x1, [{0x3f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xa9, 0x6, 0x1, 0x0, "5cd5929a7bd5277c2eb50299260b9e479b240277af68b6a313e34d72927118f57a23150c5697dc0ad948a780f55adc9336eecd79e047e71b8b07a257b27737aa43569f831069f8716d61e2c9dc079f9a1eda3105eaaea54f61d845da7ea92caed1cbbc57fee70e21371b515c28f45abe2e8be1840e0dee41a921bcfa1268abe758a8ec38090af92365785ae6faeb1e2115c614819b88f4d0f127fb3b4aa75154c958c1ec08"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x2c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbb, 0x1, "f78d79923b1ea27bebab928c7862af802dd0e0d7fa4e0a61ad4df9fedf64663af2e1b87e0e3e051d0f8dc820ad3d9f6d5517c634a7c829d91e1d6db3abd3aaff45d7658668317a438a1ac03532cf0c920d72c2d284925e7b1fa24ffc01d36735e661d0b4163b53d21ccc1ecc319010b30482e3132b364642428d849f919c1acdc0fb360fac12ecd1eba57311c6212f54fd07fa50ce543c7677e9f41515b7907ec1dd3ef17f8f90b59af38a9e946d1f9d7d026b3917d57c"}, @NFTA_DATA_VALUE={0xaa, 0x1, "a9e7b0a973d1ec8f09472dd672b03f76d69081d6252197030d4ca5fb2a693c3af2d8cfae6962c2201cba09bc31779735051ed95caf46f2f7aa62566b78159640b5143166e7c0d1b400447205117562e0b45ab459ba309e7c865847e99a0c8fb6c0327ad86afbe8903a472d4e320c79a62922dbb6e8c76bcaae9870b51170c72e383d37b421c16febc76616f064bf53526b745d4f52254f1c546f397884701c12d6029f5d56de"}, @NFTA_DATA_VALUE={0xdc, 0x1, "fb1e05adea1ee8271f2fa0a62c09f0b32ade98f8ddddef662b567d6ff1a0558014c8313536d576a25296b2e4d38e1a87ee3e991c6569cb79ff7eaab884f74f59c45b86872dac0ba1d6ea95895c9969fe42747ff97001558b4b7b4b81fef108fde30047fbde542a0748f6e155887bb48eb93b8c461570ae5c072a0c45a95dae7e4104e8e567a0a99a6bc160a92e3ef2240e8ea08b8fc44d653e3355ffe5ec0b78277328ffec9c6dda5320c9dcae24a9ea5ff86f4effd5707b6e3ccb2771564a6ee4d657360715fbd39a56041332993ab11bb66f91afcb4047"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3aab68fdfaee5ea4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x43, 0x9, 'syz0\x00'}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "175274d82011490fd7c365355c7621cd3c5e6c29b2eb74af8928f08e4246d9aeff35136af0a032db3726afba936aafc71583120759834e34da7c261b6761e8c706b8f5f19ac8a9b13d2f996c25be134ebc35aa814b9f278ceedaf9914b68ec771dff29ee4279c414cffe54c79d4bc5acafbb2232411bdf793d856e7457f5535498909d5788073ed71211ae6d4779d78ab69b12312ddacde3e015b50683eef84c414b8b6786408a38a510111dd7e06e0fbf08f36e8508a065d62ae900"/197}, @NFTA_SET_ELEM_USERDATA={0x43, 0x6, 0x1, 0x0, "1dc2485eb3b8c8b98d4e66bdf03c77825ce156989ce7681741e36e3401117d58d17a98f3f9dd474d818738726ee69d89a3e21b592fa6930f00b88dcb1cfa49"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x5, 0x0, 0x0, {0x9, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x640}, 0x1, 0x0, 0x0, 0x20004811}, 0x80) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r8, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) select(0x40, &(0x7f00000003c0)={0x1, 0x0, 0x9e, 0x8, 0x3ff, 0x4, 0x0, 0x3}, &(0x7f0000000400)={0x7, 0x9, 0xfff, 0x0, 0x94d, 0x7f, 0x5, 0x7}, &(0x7f0000000440)={0x1, 0x6, 0x4, 0xfffffffffffeffff, 0x7, 0x7, 0x8}, &(0x7f00000004c0)={0x0, 0x2710}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r7) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.364289878s ago: executing program 2 (id=857): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x5) unshare(0x24060400) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="05", 0x1}], 0x1}}], 0x1, 0x4000840) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x0, {0x2, 0x4e21, @loopback}, 'veth1_to_batadv\x00'}) 2.469002102s ago: executing program 3 (id=858): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)="e751dd8f06091c46b225d5c4870c12", 0xf}], 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xff, 0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0xf8, r8, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r7, &(0x7f0000000100)={0x11, 0x4, r8}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000620000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0xe, 0xfe3, &(0x7f0000001e00)=""/4067, 0x100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r5, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8983, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@exit, @generic={0x4, 0x2, 0x1, 0x6, 0x8}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffea}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.470375154s ago: executing program 4 (id=859): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16], 0x14}}, 0x2004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00b00029"], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, &(0x7f0000000080)) r5 = accept4(r3, 0x0, 0x0, 0x80800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000e00)={&(0x7f0000000540), 0xc, &(0x7f0000000dc0)={&(0x7f0000000640)={0x774, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1f}}}}, [@NL80211_ATTR_FRAME={0x72, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @from_mac=@broadcast, {0x6, 0x8}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1}}, 0xb062, 0x1000, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x6, 0x0, {0x0, 0x9, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x3, 0x8e}}, [{0xdd, 0x22, "110511b0a99267ced0cb54b42debaf5170753db2d5200006fc57d01b09af88aa3c76"}]}}, @NL80211_ATTR_FRAME={0x179, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x671a}, @device_b, @device_a, @initial, {0xb, 0xffd}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0xc000, 0xb, @random=0x3, @val={0x1, 0x4, [{0xc}, {0x1b}, {0x6, 0x1}, {0x6, 0x1}]}, @void, [{0xdd, 0x91, "fc6ee26d84da3f9be9cee25d9cb4d441d6ea867b13dd26e571967574f7bb5a72c11e3c37cf5c6f8ac801d51a0884bf4c73e9e1c701500e4f1764ba37f3e17c2b4f273b6de428e4b13949f309edfc4ba0f49f0355530dee7e364b8c6c453ef26a3c3a0c6cc056b8c992092f329cf1d221ba5f9c9c34b58f51d2a149ec88949665613822dd91f7d9322d06cf0ffef9b4003c"}, {0xdd, 0xb8, "72940148d78330ca4c3d911fa2272c19ab39b51068e45dd307a9549ca7bf6e7712a98803016599d8fb0ffe8740f2eaa92650abb6ac01f354940896cfcf2c94f71a05c16b6f8cb7f82424b6068cf24131c2692defa2ffb4b46463ef3fddb52263f4db42a033938822c96bf5dc0d5ace67428120c82a554e4b579a886e588c41debb5f0e80ca18861fb32930a648be1873e5c02f9fb9c9efe22058595d479fe9c9328bb2557aa14ee075180ebd8678b27e4fad1b7fe571bbf1"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x37c, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_a, @from_mac=@device_b, {0x1, 0x2f6}}, 0x402, 0x2c, @random=0x1, @void, @void, [{0xdd, 0x18, "e198c838573e04d4725da70e9d4312965271dfddd1c76f08"}, {0xdd, 0xb9, "9a091316426b63decf5394a61894d6a11c2ceab3c974950e93279f479ea7a3b0fde152e8f9d7f71427adc6bb5521fd7ea4fec78a706122c9c21fcb69b3619883e7f2196c299488aa78b4ab738fae13963a8d19056ea7204f36a00db5870c96efdde3ac6c92eccd7ace7e8e34d42441f97c275a4f11206de13feea1bfeee32d894a4af532a384bac90dc0b65d6d2093709cab8c4cf1525f5d8e0e26cccb033470ce14b8d3e6109794e5c6a3c722ba5d95aa2cc9340405ff901d"}, {0xdd, 0x7e, "27e9480543d951f1201b565483824a29f300cc51b7cfab68284bd64a50d8d004df57a5cda21f803c18e824361a4b7a4a290578143f747f8b481fd402057264abc42b2a273917cd75ae8824929a3d6e63a3bed8ee413b53ff9ed701c83f07757137106e08cf22fbf9b2c229954b0533a3ba32a8eb8881121c35376817b74e"}, {0xdd, 0x95, "8fd70ee7895c9a911ab5be70828d427b5cea9c844d8bf267389210ea6a9f549ae05aca433b816d9a773def1e633404d08dce025f6a9ba491b6a2d306c1c0bff73d52319c7cdc0eb3740fadbff41104b3ca25cebcddd218fc0f7a96d6678e1d9fef405c9bf2fad7a48cdbceb51a4f05872b11b53be69ad78710413edda3de17ace3e9fc4e731bab555d5f5cd7bd81da3bb29c9d80e5"}, {0xdd, 0x3f, "382a14dbfb34c979a01b4c36288a9d1ff6dd758fae1ffaf9b43beba31969dcfe6bf6ff53665a5780d93e0e680082ca30667b4dd7d6c9f18340a603a2102f64"}, {0xdd, 0x8c, "bcfbfd2e1d21a55e43df7170bd5abdd9b35dd602a53353794496024ee7d248e9d50c40db2c2d503bd1dea783f3fecdffa16ef653ae52c536e6ab2a9cf3ed03fa938f38f1968b19cc84a69863ce5dcb1761637f11b8e9708177f62def4ae22f86d116beaad3ab733ecbe4b152947c88cbca80cc7c15e1f4bbf73063064d70d53ed2cc8a5ec4664c4d0dc0d64a"}, {0xdd, 0x9d, "b9f24a82db1eccb3857be9b4f8687fc4dc126ec3d0d7121e1aef98e7532dc4548a0fbc6bd8b23ceedd6624a8c32dcbc33e9e4b787c70bd693be7e77518cbb5210137d49159a1e90d11b8f8c3757cf07f546b83b57bebfe2e2509ff5ced4fed9500dcc6f72d7d12de6ee93a313586d02ff698e5e7dff1dbcb46eaddf3024f80620a1b3e4627221eeef715138bda98083008298b2edbe2fcd9211b63173f"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1ec0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x1a8, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @initial, {0x0, 0x9}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x52, "e4672890d07c2acff08e1f7ae200b777a2db70fe935c7c303ae338f8c5ba8e14da30b8d89f63aef9902a69acaaf29b1909cb4d0a86d3bb031610e360f09a34745f2ed3dd7fa40fda60fcdbbd5c56dd8ae32f"}, {0xdd, 0x11, "66c21ba37869c6cf05246987aa77e51773"}, {0xdd, 0x19, "393a2e3e9d29fa8fe6a697d8ab28d59638c4c435cdf43dd2c6"}, {0xdd, 0xc8, "7ade0bde70b4ce7bc82962328e1fa7dbddc5245881808e812dddab0014cd9192ff1bbe3bb3a7e77f30b7f2bf7f12f02d6c7e249d429c0f54e8d9f9ebf6e1d111b2768fb640263e6dd0eacc55cc860e796c09ffa8dc9faecc1c7feb9a61b923e746f158f3edd58f6bbe1b267d4ca0f9236fa2bfe5809e74f6a6b504c2668ecab920767414a3ac052bacc8086db031a95d4d920cc3ac854fdde94d284de0ad3d89f120e27d88f0f8ce0fb63b9a9322035a7a827bac16a65360a25b1adde5debbcd56aacd2131ff7c47"}, {0xdd, 0x32, "c9e93e904858574cc83d62ff662084a84d22cdd746d2d68084df5f503ce7d1da8a88e24b777014faaed4f233f2b31a1979e3"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x774}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000000)="b09aad19b75e0438", 0x8}, {&(0x7f0000000340)="95fcf2b7fcb6c29e1587e58743feaabbfc43244a9cc4b94fc758bd0cd492f55582c22358865ecb432e1c85e2a49a42895f95edae43cbe5372e2b1983d613ef27e117a0cc5b62ceeefe92e65be88181f5da71539ed302b0c25b0bace798c33ad6", 0x60}, {&(0x7f00000001c0)="d861c57a0c9f917641502a7160d174d9a8a3758a4b59c7ea104abad451bb8450cd0a35a851be060791485dc20bfb4ccc66320a52a337525d3ff5ecc0849419043fb6e2aab38b760de069ec5cbafb645e96216f49733107ef8f", 0x59}], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0xc, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.469621021s ago: executing program 2 (id=860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e", 0x23}], 0x1}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) close(r5) pipe(&(0x7f0000000100)) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x3, 0x5b}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x3}}}}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x88a8ffad}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) pipe(0x0) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 1.359909406s ago: executing program 0 (id=861): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000018c0)=""/184, 0xb8}], 0x4}}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000400010002", 0x7) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0x42, 0x4, 0x13a0, 0xffffffff, 0x11c0, 0x0, 0x11c0, 0xffffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0xffffffff, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8000}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00', {0xff}, {}, 0x0, 0x0, 0x49}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[], 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1, 0x3}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00', {}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x4, 0x3, 0x4, 0x6, 0x1], 0x0, 0x2}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1400) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000001980)={{r4}, "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"}) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e0005000a"], 0x40}}, 0x0) r7 = accept(r3, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="ffffff7f00000000000000000100010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r7}, 0x47) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r9}, 0x18) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x48814}, 0x40810) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01003b000000080003000000000000000000", @ANYRESDEC=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$alg(0x26, 0x5, 0x0) 1.275675761s ago: executing program 4 (id=862): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x40) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 294.986816ms ago: executing program 3 (id=863): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0xfdef) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000001880)={@val={0x0, 0xc}, @val={0x1, 0x4, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "4966cd", 0x17, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1ff, 0x0, 0x1}, {"50f6d8"}}}}}}, 0x4d) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {0x6}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x20000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)=ANY=[@ANYBLOB="140100002d0001000000000000001000040100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bda0ffd46b0449ade68bf84b36ec72dd7126afc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae8200000000000000167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d54f33ba1f549c35817c8a66c29be82fd3f8cd1aedcdb5377546061ea5cff7fb5b0cf191ae3d690cd4a963b89a48f14db49c10b058a1016dfa74790de3e2a09c13ded5e2e329bbb872f93a6b987137302acf6db7d64e85be80680be0e773e6ccbeb626a4e80dd2f13005a70", @ANYRES32], 0x114}], 0x1, 0x0, 0x0, 0x20040840}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000fffe160003006873683a6e65742c706f72742c6e657400000005000400000000000900020073797a30000000000c0007800800"], 0x5c}}, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r11 = socket(0x15, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x2, 0x70bd2c, 0x25dfdbfb, {0x80, 0x10, 0x14, 0xb7, 0xfd, 0x1, 0xff, 0x6, 0x2100}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) getsockopt(r11, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 211.298112ms ago: executing program 4 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r0}, 0x38) unshare(0x400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r0, 0x5800000000000000}, 0x38) 208.877526ms ago: executing program 0 (id=865): socket(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (fail_nth: 20) 98.396171ms ago: executing program 2 (id=866): r0 = socket$inet(0x2b, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x43010}, 0x10) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f00000001c0)=0xfd, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x400000000040, 0x400000000070, 0x4000000000a0], 0x0, 0x0, 0x0}, 0x138) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, r4, 0x0, 0x20, &(0x7f0000000200)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\xbc\xbe\xc1\xb3`\xd8\xc7\xb0!W\xf6\x04$\xc1:\xeb\xdc\xf5\a\xa3;\xc5\xb6\x01\x90\xc7wYs\xefW\xf6/\xfc\xf7\x98z$\xda\xb6w\x1b\xba=\xbf\x17\xde-m\x1b\xdb\xaaQr$\x10\xab\x03u7\x92\xca\xb24\xfcz\t\xfe\b\xb7\x166\xb8\"\x803\x88\xca\xf8\xb0Dx\xec?\xda\xf5\xc9\xb5f_\xa7\xf9\xadb\xdd'}, 0x9b) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'dvmrp1\x00', 0x400}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$inet(0x10, 0xa, 0x200) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000240)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) sendfile(r0, r5, &(0x7f0000000040)=0x2, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'gretap0\x00'}) 284.133µs ago: executing program 0 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000004000000b7050000080000004608f0ff760000005e9200000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x17}]}}}]}, 0x44}}, 0x2000000) 0s ago: executing program 4 (id=868): syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) socket(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): ): Released all slaves [ 90.923263][ T51] bond3 (unregistering): Released all slaves [ 90.963372][ T6858] team0: Port device team_slave_0 added [ 90.989521][ T6858] team0: Port device team_slave_1 added [ 91.142313][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.156973][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.193679][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.210910][ T6928] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.217568][ T6926] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.270'. [ 91.318884][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.334846][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.402994][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.572689][ T5834] Bluetooth: hci0: command tx timeout [ 91.703474][ T6858] hsr_slave_0: entered promiscuous mode [ 91.704274][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 91.719035][ T6858] hsr_slave_1: entered promiscuous mode [ 91.734257][ T6858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.742897][ T6858] Cannot create hsr debugfs directory [ 91.881646][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.890719][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.970039][ T6944] batadv0: left promiscuous mode [ 92.117299][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.160212][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.290751][ T6944] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.302436][ T6944] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.324882][ T6944] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.333609][ T6944] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.386332][ T6944] vlan2: left promiscuous mode [ 92.436886][ T51] hsr_slave_0: left promiscuous mode [ 92.450321][ T51] hsr_slave_1: left promiscuous mode [ 92.457698][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.466019][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.491588][ T6978] netlink: 84 bytes leftover after parsing attributes in process `syz.2.282'. [ 92.498419][ T51] veth1_macvtap: left promiscuous mode [ 92.501742][ T6977] netlink: 84 bytes leftover after parsing attributes in process `syz.2.282'. [ 92.514127][ T51] veth0_macvtap: left promiscuous mode [ 92.888961][ T51] team0 (unregistering): Port device team_slave_1 removed [ 92.926005][ T51] team0 (unregistering): Port device team_slave_0 removed [ 93.463266][ T6989] FAULT_INJECTION: forcing a failure. [ 93.463266][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.515727][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.3.284 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 93.515750][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.515759][ T6989] Call Trace: [ 93.515765][ T6989] [ 93.515772][ T6989] dump_stack_lvl+0x241/0x360 [ 93.515798][ T6989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.515816][ T6989] ? __pfx__printk+0x10/0x10 [ 93.515834][ T6989] ? __pfx_lock_release+0x10/0x10 [ 93.515856][ T6989] ? validate_chain+0x11e/0x5920 [ 93.515878][ T6989] should_fail_ex+0x40a/0x550 [ 93.515904][ T6989] _copy_from_iter+0x1df/0x1c40 [ 93.515925][ T6989] ? __pfx_validate_chain+0x10/0x10 [ 93.515948][ T6989] ? __pfx__copy_from_iter+0x10/0x10 [ 93.515980][ T6989] tun_get_user+0x272/0x45b0 [ 93.516005][ T6989] ? mark_lock+0x9a/0x360 [ 93.516024][ T6989] ? __lock_acquire+0x1397/0x2100 [ 93.516051][ T6989] ? __pfx_tun_get_user+0x10/0x10 [ 93.516085][ T6989] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 93.516107][ T6989] ? tun_get+0x1e/0x2f0 [ 93.516124][ T6989] ? __pfx_lock_release+0x10/0x10 [ 93.516159][ T6989] ? tun_get+0x1e/0x2f0 [ 93.516175][ T6989] ? tun_get+0x27d/0x2f0 [ 93.516193][ T6989] tun_chr_write_iter+0x10d/0x1f0 [ 93.516214][ T6989] vfs_write+0xacf/0xd10 [ 93.516240][ T6989] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 93.516259][ T6989] ? __pfx_vfs_write+0x10/0x10 [ 93.516273][ T6989] ? do_sys_openat2+0x17a/0x1d0 [ 93.516296][ T6989] ? __fget_files+0x2a/0x410 [ 93.516321][ T6989] ? __fget_files+0x2a/0x410 [ 93.516349][ T6989] ksys_write+0x18f/0x2b0 [ 93.516367][ T6989] ? __pfx_ksys_write+0x10/0x10 [ 93.516384][ T6989] ? do_syscall_64+0x100/0x230 [ 93.516405][ T6989] ? do_syscall_64+0xb6/0x230 [ 93.516425][ T6989] do_syscall_64+0xf3/0x230 [ 93.516443][ T6989] ? clear_bhb_loop+0x35/0x90 [ 93.516466][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.516485][ T6989] RIP: 0033:0x7fed3e58d169 [ 93.516500][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.516513][ T6989] RSP: 002b:00007fed3c3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.516530][ T6989] RAX: ffffffffffffffda RBX: 00007fed3e7a6080 RCX: 00007fed3e58d169 [ 93.516542][ T6989] RDX: 0000000000000053 RSI: 0000400000000300 RDI: 0000000000000004 [ 93.516552][ T6989] RBP: 00007fed3c3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 93.516561][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.516570][ T6989] R13: 0000000000000000 R14: 00007fed3e7a6080 R15: 00007ffdf7a62808 [ 93.516595][ T6989] [ 93.797999][ T5834] Bluetooth: hci0: command tx timeout [ 93.877649][ T6993] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.287'. [ 94.506999][ T6858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.527435][ T6858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.549377][ T6858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.573390][ T6858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.583735][ T7012] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 94.700354][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.728883][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.746310][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.753504][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.778294][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.785543][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.821804][ T6858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.873102][ T6858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.883084][ T7022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 94.942389][ T7024] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.301'. [ 94.948110][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.300'. [ 95.208335][ T7034] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.302'. [ 95.258386][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.473602][ T6858] veth0_vlan: entered promiscuous mode [ 95.503481][ T6858] veth1_vlan: entered promiscuous mode [ 95.567711][ T6858] veth0_macvtap: entered promiscuous mode [ 95.577106][ T7055] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 95.588833][ T6858] veth1_macvtap: entered promiscuous mode [ 95.594198][ T7054] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.312'. [ 95.733069][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.791268][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.806296][ T5834] Bluetooth: hci0: command tx timeout [ 95.824452][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.840863][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.899578][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.938282][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.964223][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.010106][ T7068] batadv_slave_1: entered promiscuous mode [ 96.021123][ T7068] batadv_slave_1: entered allmulticast mode [ 96.032284][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.040888][ T7068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.053620][ T7068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.062576][ T7068] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 96.101355][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.112383][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.122989][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.136194][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.148068][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.196527][ T6858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.209567][ T6858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.220062][ T6858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.229263][ T6858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.458574][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.479656][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.572282][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.614899][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.794116][ T7102] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.327'. [ 97.064674][ T7114] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 97.157583][ T7119] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 97.361742][ T7126] Â: renamed from pim6reg1 [ 97.781161][ T7143] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.346'. [ 97.905413][ T7150] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 98.015544][ T6009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.023414][ T6009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.117750][ T3470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.395668][ T7166] FAULT_INJECTION: forcing a failure. [ 98.395668][ T7166] name failslab, interval 1, probability 0, space 0, times 0 [ 98.428744][ T7166] CPU: 0 UID: 0 PID: 7166 Comm: syz.3.352 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 98.428769][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.428779][ T7166] Call Trace: [ 98.428785][ T7166] [ 98.428792][ T7166] dump_stack_lvl+0x241/0x360 [ 98.428818][ T7166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.428836][ T7166] ? __pfx__printk+0x10/0x10 [ 98.428855][ T7166] ? __kmalloc_noprof+0xb5/0x4c0 [ 98.428877][ T7166] ? __pfx___might_resched+0x10/0x10 [ 98.428896][ T7166] ? arch_stack_walk+0xfd/0x150 [ 98.428915][ T7166] should_fail_ex+0x40a/0x550 [ 98.428942][ T7166] should_failslab+0xac/0x100 [ 98.428964][ T7166] __kmalloc_noprof+0xdd/0x4c0 [ 98.428983][ T7166] ? fib_create_info+0x1109/0x2cb0 [ 98.429007][ T7166] fib_create_info+0x1109/0x2cb0 [ 98.429049][ T7166] fib_table_insert+0x147/0x1d10 [ 98.429079][ T7166] ? __pfx_lock_acquire+0x10/0x10 [ 98.429104][ T7166] ? __pfx_lock_release+0x10/0x10 [ 98.429133][ T7166] ? __pfx_fib_table_insert+0x10/0x10 [ 98.429155][ T7166] ? fib_new_table+0x120/0x2d0 [ 98.429183][ T7166] fib_magic+0x3d8/0x620 [ 98.429199][ T7166] ? __pfx_lock_acquire+0x10/0x10 [ 98.429223][ T7166] ? __pfx_fib_magic+0x10/0x10 [ 98.429256][ T7166] ? addr_event+0x8c/0x460 [ 98.429279][ T7166] fib_add_ifaddr+0x14c/0x5e0 [ 98.429297][ T7166] ? __pfx_inetaddr_event+0x10/0x10 [ 98.429320][ T7166] fib_inetaddr_event+0x121/0x190 [ 98.429342][ T7166] notifier_call_chain+0x1a5/0x3f0 [ 98.429369][ T7166] blocking_notifier_call_chain+0x69/0x90 [ 98.429393][ T7166] __inet_insert_ifa+0xa68/0xc90 [ 98.429431][ T7166] ? __pfx___inet_insert_ifa+0x10/0x10 [ 98.429468][ T7166] inet_rtm_newaddr+0x1220/0x1bc0 [ 98.429510][ T7166] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 98.429549][ T7166] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 98.429573][ T7166] rtnetlink_rcv_msg+0x791/0xcf0 [ 98.429593][ T7166] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 98.429616][ T7166] ? rcu_preempt_deferred_qs_irqrestore+0x8c4/0xca0 [ 98.429639][ T7166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.429677][ T7166] netlink_rcv_skb+0x206/0x480 [ 98.429705][ T7166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.429729][ T7166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.429777][ T7166] ? __rcu_read_unlock+0xa1/0x110 [ 98.429800][ T7166] netlink_unicast+0x7f6/0x990 [ 98.429829][ T7166] ? __pfx_netlink_unicast+0x10/0x10 [ 98.429845][ T7166] ? __virt_addr_valid+0x45f/0x530 [ 98.429862][ T7166] ? __phys_addr_symbol+0x2f/0x70 [ 98.429877][ T7166] ? __check_object_size+0x47a/0x730 [ 98.429902][ T7166] netlink_sendmsg+0x8de/0xcb0 [ 98.429936][ T7166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.429961][ T7166] ? aa_sock_msg_perm+0x91/0x160 [ 98.429990][ T7166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.430008][ T7166] __sock_sendmsg+0x221/0x270 [ 98.430033][ T7166] ____sys_sendmsg+0x53a/0x860 [ 98.430059][ T7166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.430074][ T7166] ? __fget_files+0x2a/0x410 [ 98.430099][ T7166] ? __fget_files+0x2a/0x410 [ 98.430129][ T7166] __sys_sendmsg+0x269/0x350 [ 98.430152][ T7166] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.430183][ T7166] ? do_sys_openat2+0x17a/0x1d0 [ 98.430232][ T7166] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.430255][ T7166] ? do_syscall_64+0x100/0x230 [ 98.430276][ T7166] ? do_syscall_64+0xb6/0x230 [ 98.430295][ T7166] do_syscall_64+0xf3/0x230 [ 98.430311][ T7166] ? clear_bhb_loop+0x35/0x90 [ 98.430332][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.430350][ T7166] RIP: 0033:0x7fed3e58d169 [ 98.430365][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.430378][ T7166] RSP: 002b:00007fed3c3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.430395][ T7166] RAX: ffffffffffffffda RBX: 00007fed3e7a5fa0 RCX: 00007fed3e58d169 [ 98.430407][ T7166] RDX: 0000000000008000 RSI: 0000400000000100 RDI: 0000000000000003 [ 98.430417][ T7166] RBP: 00007fed3c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.430426][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.430435][ T7166] R13: 0000000000000000 R14: 00007fed3e7a5fa0 R15: 00007ffdf7a62808 [ 98.430462][ T7166] [ 99.056324][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.078232][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.087532][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.096369][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.104074][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.111821][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.240817][ T3470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.312546][ T7190] Cannot find set identified by id 0 to match [ 99.331523][ T7191] openvswitch: netlink: Actions may not be safe on all matching packets [ 99.347277][ T7192] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 99.357285][ T3470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.399384][ T7190] pim6reg: entered allmulticast mode [ 99.528429][ T3470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.672780][ T7198] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 99.965836][ T3470] bridge_slave_1: left allmulticast mode [ 99.987597][ T3470] bridge_slave_1: left promiscuous mode [ 99.994868][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.035726][ T3470] bridge_slave_0: left allmulticast mode [ 100.041411][ T3470] bridge_slave_0: left promiscuous mode [ 100.054283][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.446822][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.459903][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.470840][ T3470] bond0 (unregistering): Released all slaves [ 100.484290][ T7171] chnl_net:caif_netlink_parms(): no params data found [ 100.549983][ T7229] bond4 (unregistering): Released all slaves [ 100.761923][ T7243] FAULT_INJECTION: forcing a failure. [ 100.761923][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 100.798013][ T7243] CPU: 1 UID: 0 PID: 7243 Comm: syz.2.375 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 100.798039][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.798049][ T7243] Call Trace: [ 100.798055][ T7243] [ 100.798063][ T7243] dump_stack_lvl+0x241/0x360 [ 100.798089][ T7243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.798107][ T7243] ? __pfx__printk+0x10/0x10 [ 100.798125][ T7243] ? __kmalloc_cache_noprof+0x48/0x390 [ 100.798147][ T7243] ? __pfx___might_resched+0x10/0x10 [ 100.798166][ T7243] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 100.798187][ T7243] should_fail_ex+0x40a/0x550 [ 100.798213][ T7243] should_failslab+0xac/0x100 [ 100.798235][ T7243] __kmalloc_cache_noprof+0x70/0x390 [ 100.798254][ T7243] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 100.798279][ T7243] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 100.798314][ T7243] genl_rcv_msg+0xb1f/0xec0 [ 100.798341][ T7243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.798385][ T7243] ? __pfx_lock_acquire+0x10/0x10 [ 100.798407][ T7243] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 100.798428][ T7243] ? __pfx___might_resched+0x10/0x10 [ 100.798466][ T7243] netlink_rcv_skb+0x206/0x480 [ 100.798488][ T7243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.798506][ T7243] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.798557][ T7243] genl_rcv+0x28/0x40 [ 100.798572][ T7243] netlink_unicast+0x7f6/0x990 [ 100.798600][ T7243] ? __pfx_netlink_unicast+0x10/0x10 [ 100.798616][ T7243] ? __virt_addr_valid+0x45f/0x530 [ 100.798633][ T7243] ? __phys_addr_symbol+0x2f/0x70 [ 100.798648][ T7243] ? __check_object_size+0x47a/0x730 [ 100.798672][ T7243] netlink_sendmsg+0x8de/0xcb0 [ 100.798704][ T7243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.798730][ T7243] ? aa_sock_msg_perm+0x91/0x160 [ 100.798759][ T7243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.798778][ T7243] __sock_sendmsg+0x221/0x270 [ 100.798802][ T7243] ____sys_sendmsg+0x53a/0x860 [ 100.798828][ T7243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.798843][ T7243] ? __fget_files+0x2a/0x410 [ 100.798867][ T7243] ? __fget_files+0x2a/0x410 [ 100.798897][ T7243] __sys_sendmsg+0x269/0x350 [ 100.798919][ T7243] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.798950][ T7243] ? do_sys_openat2+0x17a/0x1d0 [ 100.798998][ T7243] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.799022][ T7243] ? do_syscall_64+0x100/0x230 [ 100.799044][ T7243] ? do_syscall_64+0xb6/0x230 [ 100.799065][ T7243] do_syscall_64+0xf3/0x230 [ 100.799083][ T7243] ? clear_bhb_loop+0x35/0x90 [ 100.799107][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.799126][ T7243] RIP: 0033:0x7f9ab9f8d169 [ 100.799142][ T7243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.799156][ T7243] RSP: 002b:00007f9abad60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.799174][ T7243] RAX: ffffffffffffffda RBX: 00007f9aba1a5fa0 RCX: 00007f9ab9f8d169 [ 100.799185][ T7243] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 100.799195][ T7243] RBP: 00007f9abad60090 R08: 0000000000000000 R09: 0000000000000000 [ 100.799205][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.799215][ T7243] R13: 0000000000000000 R14: 00007f9aba1a5fa0 R15: 00007fff18c6f708 [ 100.799242][ T7243] [ 101.185056][ T5834] Bluetooth: hci0: command tx timeout [ 101.226818][ T7255] netlink: 148 bytes leftover after parsing attributes in process `syz.2.380'. [ 101.242557][ T7255] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 101.307125][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.321871][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.329959][ T7171] bridge_slave_0: entered allmulticast mode [ 101.345325][ T7171] bridge_slave_0: entered promiscuous mode [ 101.411738][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.495048][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.502318][ T7171] bridge_slave_1: entered allmulticast mode [ 101.520493][ T7171] bridge_slave_1: entered promiscuous mode [ 101.720098][ T7263] batadv_slave_1: entered promiscuous mode [ 101.733645][ T7263] batadv_slave_1: entered allmulticast mode [ 101.771817][ T7263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.795493][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.829079][ T7263] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 101.853275][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.881531][ T3470] hsr_slave_0: left promiscuous mode [ 101.895440][ T3470] hsr_slave_1: left promiscuous mode [ 101.901534][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.928624][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.955407][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.973127][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.008584][ T3470] veth1_macvtap: left promiscuous mode [ 102.014201][ T3470] veth0_macvtap: left promiscuous mode [ 102.025028][ T3470] veth1_vlan: left promiscuous mode [ 102.030693][ T3470] veth0_vlan: left promiscuous mode [ 102.458119][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 102.502360][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 102.836652][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.032183][ T7171] team0: Port device team_slave_0 added [ 103.051898][ T7171] team0: Port device team_slave_1 added [ 103.244589][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.261513][ T5834] Bluetooth: hci0: command tx timeout [ 103.275043][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.312894][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.326186][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.333161][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.369942][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.382199][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 103.440254][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.390'. [ 103.471514][ T7289] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 103.493368][ T7171] hsr_slave_0: entered promiscuous mode [ 103.521627][ T7171] hsr_slave_1: entered promiscuous mode [ 103.535794][ T7171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.543436][ T7171] Cannot create hsr debugfs directory [ 103.631414][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 104.357088][ T7312] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 104.423123][ T7171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.485186][ T7171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.548099][ T7171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.618798][ T7317] FAULT_INJECTION: forcing a failure. [ 104.618798][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 104.638259][ T7314] netlink: 'syz.2.399': attribute type 10 has an invalid length. [ 104.689620][ T7320] netlink: 'syz.2.399': attribute type 10 has an invalid length. [ 104.704939][ T7320] netlink: 2 bytes leftover after parsing attributes in process `syz.2.399'. [ 104.774581][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.4.400 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 104.774607][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.774615][ T7317] Call Trace: [ 104.774620][ T7317] [ 104.774627][ T7317] dump_stack_lvl+0x241/0x360 [ 104.774653][ T7317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.774670][ T7317] ? __pfx__printk+0x10/0x10 [ 104.774688][ T7317] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 104.774709][ T7317] ? __pfx___might_resched+0x10/0x10 [ 104.774727][ T7317] ? lockdep_init_map_type+0xa1/0x910 [ 104.774751][ T7317] should_fail_ex+0x40a/0x550 [ 104.774778][ T7317] should_failslab+0xac/0x100 [ 104.774798][ T7317] ? __alloc_workqueue+0x8ed/0x1bb0 [ 104.774812][ T7317] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 104.774837][ T7317] __alloc_workqueue+0x8ed/0x1bb0 [ 104.774867][ T7317] alloc_workqueue+0xd6/0x210 [ 104.774887][ T7317] ? __pfx_alloc_workqueue+0x10/0x10 [ 104.774908][ T7317] ? net_generic+0x1f/0x240 [ 104.774930][ T7317] bond_init+0xd5/0x8e0 [ 104.774952][ T7317] ? __pfx_bond_init+0x10/0x10 [ 104.774968][ T7317] ? __kasan_kmalloc+0x98/0xb0 [ 104.774987][ T7317] ? __kmalloc_cache_noprof+0x243/0x390 [ 104.775012][ T7317] register_netdevice+0x6d7/0x1b70 [ 104.775035][ T7317] ? __pfx_bond_changelink+0x10/0x10 [ 104.775054][ T7317] ? validate_linkmsg+0x828/0xa40 [ 104.775077][ T7317] ? __pfx_register_netdevice+0x10/0x10 [ 104.775094][ T7317] ? alloc_netdev_mqs+0xe01/0x1210 [ 104.775118][ T7317] ? rtnl_create_link+0x95b/0xc90 [ 104.775139][ T7317] bond_newlink+0x5e/0xb0 [ 104.775156][ T7317] ? __pfx_bond_newlink+0x10/0x10 [ 104.775174][ T7317] rtnl_newlink_create+0x37b/0xbd0 [ 104.775201][ T7317] ? __mutex_lock+0x602/0x1010 [ 104.775223][ T7317] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 104.775248][ T7317] ? __pfx___mutex_lock+0x10/0x10 [ 104.775274][ T7317] ? ns_capable+0x8a/0xf0 [ 104.775295][ T7317] rtnl_newlink+0x167a/0x1d90 [ 104.775317][ T7317] ? stack_depot_save_flags+0x37/0x940 [ 104.775359][ T7317] ? __pfx_rtnl_newlink+0x10/0x10 [ 104.775377][ T7317] ? __netlink_deliver_tap+0x561/0x7f0 [ 104.775396][ T7317] ? __pfx_validate_chain+0x10/0x10 [ 104.775411][ T7317] ? __sock_sendmsg+0x221/0x270 [ 104.775428][ T7317] ? ____sys_sendmsg+0x53a/0x860 [ 104.775441][ T7317] ? __sys_sendmsg+0x269/0x350 [ 104.775454][ T7317] ? do_syscall_64+0xf3/0x230 [ 104.775467][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.775504][ T7317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.775529][ T7317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.775559][ T7317] ? mark_lock+0x9a/0x360 [ 104.775578][ T7317] ? __lock_acquire+0x1397/0x2100 [ 104.775632][ T7317] ? __pfx_lock_release+0x10/0x10 [ 104.775669][ T7317] ? __pfx_rtnl_newlink+0x10/0x10 [ 104.775691][ T7317] rtnetlink_rcv_msg+0x791/0xcf0 [ 104.775710][ T7317] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 104.775735][ T7317] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.775763][ T7317] ? ref_tracker_free+0x643/0x7e0 [ 104.775785][ T7317] netlink_rcv_skb+0x206/0x480 [ 104.775806][ T7317] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.775828][ T7317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.775873][ T7317] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.775895][ T7317] netlink_unicast+0x7f6/0x990 [ 104.775921][ T7317] ? __pfx_netlink_unicast+0x10/0x10 [ 104.775937][ T7317] ? __virt_addr_valid+0x45f/0x530 [ 104.775953][ T7317] ? __phys_addr_symbol+0x2f/0x70 [ 104.775967][ T7317] ? __check_object_size+0x47a/0x730 [ 104.775991][ T7317] netlink_sendmsg+0x8de/0xcb0 [ 104.776022][ T7317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.776046][ T7317] ? aa_sock_msg_perm+0x91/0x160 [ 104.776073][ T7317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.776091][ T7317] __sock_sendmsg+0x221/0x270 [ 104.776113][ T7317] ____sys_sendmsg+0x53a/0x860 [ 104.776137][ T7317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.776151][ T7317] ? __fget_files+0x2a/0x410 [ 104.776175][ T7317] ? __fget_files+0x2a/0x410 [ 104.776203][ T7317] __sys_sendmsg+0x269/0x350 [ 104.776225][ T7317] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.776253][ T7317] ? do_sys_openat2+0x17a/0x1d0 [ 104.776298][ T7317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.776320][ T7317] ? do_syscall_64+0x100/0x230 [ 104.776340][ T7317] ? do_syscall_64+0xb6/0x230 [ 104.776367][ T7317] do_syscall_64+0xf3/0x230 [ 104.776385][ T7317] ? clear_bhb_loop+0x35/0x90 [ 104.776407][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.776426][ T7317] RIP: 0033:0x7fb47358d169 [ 104.776441][ T7317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.776453][ T7317] RSP: 002b:00007fb4713f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.776470][ T7317] RAX: ffffffffffffffda RBX: 00007fb4737a5fa0 RCX: 00007fb47358d169 [ 104.776482][ T7317] RDX: 0000000000004000 RSI: 0000400000000280 RDI: 0000000000000003 [ 104.776491][ T7317] RBP: 00007fb4713f6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.776501][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.776510][ T7317] R13: 0000000000000000 R14: 00007fb4737a5fa0 R15: 00007ffe09256ca8 [ 104.776535][ T7317] [ 105.305364][ T7171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.317929][ T7315] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 105.336401][ T7320] team0: entered promiscuous mode [ 105.341473][ T7320] team_slave_0: entered promiscuous mode [ 105.342546][ T5834] Bluetooth: hci0: command tx timeout [ 105.365833][ T7320] team_slave_1: entered promiscuous mode [ 105.371777][ T7320] vlan2: entered promiscuous mode [ 105.406289][ T7320] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.431446][ T7320] bridge0: port 3(team0) entered blocking state [ 105.489545][ T7320] bridge0: port 3(team0) entered disabled state [ 105.496143][ T7320] team0: entered allmulticast mode [ 105.501604][ T7320] team_slave_0: entered allmulticast mode [ 105.507491][ T7320] team_slave_1: entered allmulticast mode [ 105.513256][ T7320] vlan2: entered allmulticast mode [ 105.842316][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.404'. [ 105.862073][ T7327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.878772][ T7327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.896548][ T7327] bond0 (unregistering): Released all slaves [ 105.940005][ T7334] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.399'. [ 105.967791][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 106.163833][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.213285][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.261977][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.269165][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.324575][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.329542][ T7353] netlink: 148 bytes leftover after parsing attributes in process `syz.0.409'. [ 106.331757][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.397286][ T7353] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 106.838607][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.983829][ T7171] veth0_vlan: entered promiscuous mode [ 107.040997][ T7171] veth1_vlan: entered promiscuous mode [ 107.114876][ T7171] veth0_macvtap: entered promiscuous mode [ 107.159935][ T7171] veth1_macvtap: entered promiscuous mode [ 107.236257][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.267385][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.293772][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.315456][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.345227][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.364941][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.396193][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.414232][ T5834] Bluetooth: hci0: command tx timeout [ 107.453307][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.474924][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.486593][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.510003][ T7171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.520078][ T7171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.531206][ T7171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.601199][ T7171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.766875][ T7375] batadv_slave_1: entered promiscuous mode [ 107.803324][ T7375] batadv_slave_1: entered allmulticast mode [ 107.831025][ T7375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.854015][ T7375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.870118][ T7375] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 108.180807][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.210033][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.347555][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.373464][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.700260][ T7395] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 108.739643][ T7395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 108.884467][ T7403] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 109.183099][ T7409] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 109.573533][ T6001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.107820][ T6001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.253050][ T6001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.406427][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.422588][ T6001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.443662][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.470081][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.482019][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.518130][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.545823][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.612630][ T6001] bridge_slave_1: left allmulticast mode [ 110.624986][ T6001] bridge_slave_1: left promiscuous mode [ 110.630787][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.649200][ T6001] bridge_slave_0: left allmulticast mode [ 110.658771][ T6001] bridge_slave_0: left promiscuous mode [ 110.664573][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.708333][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.720494][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.731583][ T6001] bond0 (unregistering): Released all slaves [ 111.765131][ T7455] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 112.266409][ T7482] netlink: 148 bytes leftover after parsing attributes in process `syz.3.450'. [ 112.285058][ T7482] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 112.312925][ T7435] chnl_net:caif_netlink_parms(): no params data found [ 112.605197][ T5838] Bluetooth: hci0: command tx timeout [ 112.635456][ T6001] hsr_slave_0: left promiscuous mode [ 112.684928][ T6001] hsr_slave_1: left promiscuous mode [ 112.693395][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.711447][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.737150][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.744623][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.821748][ T6001] veth1_macvtap: left promiscuous mode [ 112.833145][ T6001] veth0_macvtap: left promiscuous mode [ 112.843943][ T6001] veth1_vlan: left promiscuous mode [ 112.855299][ T6001] veth0_vlan: left promiscuous mode [ 113.583172][ T6001] team0 (unregistering): Port device team_slave_1 removed [ 113.621577][ T6001] team0 (unregistering): Port device team_slave_0 removed [ 114.067691][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.091757][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.115063][ T7435] bridge_slave_0: entered allmulticast mode [ 114.124560][ T7435] bridge_slave_0: entered promiscuous mode [ 114.191194][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.200971][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.224688][ T7435] bridge_slave_1: entered allmulticast mode [ 114.245545][ T7435] bridge_slave_1: entered promiscuous mode [ 114.346394][ T7435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.382178][ T7435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.492998][ T7435] team0: Port device team_slave_0 added [ 114.509475][ T7435] team0: Port device team_slave_1 added [ 114.569184][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.585145][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.643732][ T7435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.685225][ T5838] Bluetooth: hci0: command tx timeout [ 114.773565][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.780831][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.834032][ T7435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.939439][ T7540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.469'. [ 114.959448][ T7542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.470'. [ 114.976384][ T7435] hsr_slave_0: entered promiscuous mode [ 114.999602][ T7435] hsr_slave_1: entered promiscuous mode [ 115.015479][ T7435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.044894][ T7435] Cannot create hsr debugfs directory [ 116.066867][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 116.088045][ T7569] nbd: nbd0 already in use [ 116.103467][ T7435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.193823][ T7435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.218033][ T7435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.242674][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 116.251331][ T7435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 116.406703][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 116.454564][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.504534][ T7435] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.528202][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.535399][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.572857][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.580044][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.770533][ T5838] Bluetooth: hci0: command tx timeout [ 116.813702][ T7597] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa:0:40:0, load rds_tcp or rds_rdma? [ 116.818182][ T7595] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 116.841984][ T7597] Bluetooth: MGMT ver 1.23 [ 116.946993][ T7595] 8021q: adding VLAN 0 to HW filter on device bond5 [ 117.005092][ T7595] bond4: (slave bond5): making interface the new active one [ 117.032423][ T7595] bond4: (slave bond5): Enslaving as an active interface with an up link [ 117.058202][ T7600] dvmrp5: entered allmulticast mode [ 117.066805][ T7600] dvmrp5: left allmulticast mode [ 117.559153][ T7435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.692989][ T7621] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 117.696095][ T7435] veth0_vlan: entered promiscuous mode [ 117.751842][ T7435] veth1_vlan: entered promiscuous mode [ 117.835875][ T7435] veth0_macvtap: entered promiscuous mode [ 117.852412][ T7435] veth1_macvtap: entered promiscuous mode [ 117.904363][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.936768][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.956672][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.997391][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.017190][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.037178][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.058092][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.092003][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.128596][ T7435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.162421][ T7435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.189586][ T7435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.213211][ T7435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.434283][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.449580][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.513624][ T6004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.535083][ T6004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.845037][ T5834] Bluetooth: hci0: command tx timeout [ 118.862757][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 118.925332][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.234638][ T7681] ip6tnl1: entered promiscuous mode [ 119.486608][ T7693] netlink: 48 bytes leftover after parsing attributes in process `syz.3.518'. [ 119.723312][ T6009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.909641][ T6009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.171347][ T6009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.447479][ T6009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.577620][ T7710] 8021q: adding VLAN 0 to HW filter on device bond6 [ 120.633856][ T7710] team0: Port device bond6 added [ 120.761125][ T7717] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 120.895141][ T6009] bridge_slave_1: left allmulticast mode [ 120.900866][ T6009] bridge_slave_1: left promiscuous mode [ 120.916230][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.965582][ T6009] bridge_slave_0: left allmulticast mode [ 120.971286][ T6009] bridge_slave_0: left promiscuous mode [ 121.006760][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.045424][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.065155][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.078811][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.092986][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.101098][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.115612][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.488329][ T6009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.501041][ T6009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.511222][ T6009] bond0 (unregistering): Released all slaves [ 121.534301][ T7725] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 121.634565][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 121.918442][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 121.929541][ T6009] hsr_slave_0: left promiscuous mode [ 121.948407][ T6009] hsr_slave_1: left promiscuous mode [ 121.955753][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.963940][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.974034][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.982026][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.005925][ T6009] veth1_macvtap: left promiscuous mode [ 122.011648][ T6009] veth0_macvtap: left promiscuous mode [ 122.018463][ T6009] veth1_vlan: left promiscuous mode [ 122.023878][ T6009] veth0_vlan: left promiscuous mode [ 122.475790][ T6009] team0 (unregistering): Port device team_slave_1 removed [ 122.516785][ T6009] team0 (unregistering): Port device team_slave_0 removed [ 122.890447][ T7751] netlink: 288 bytes leftover after parsing attributes in process `syz.2.539'. [ 123.062621][ T7756] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 123.111286][ T7729] chnl_net:caif_netlink_parms(): no params data found [ 123.165758][ T5834] Bluetooth: hci0: command tx timeout [ 123.350795][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.373927][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.406008][ T7729] bridge_slave_0: entered allmulticast mode [ 123.413328][ T7729] bridge_slave_0: entered promiscuous mode [ 123.466392][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.486277][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.493540][ T7729] bridge_slave_1: entered allmulticast mode [ 123.531435][ T7729] bridge_slave_1: entered promiscuous mode [ 123.574634][ T7780] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 123.701090][ T7729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.766991][ T7729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.822741][ T7798] trusted_key: syz.0.553 sent an empty control message without MSG_MORE. [ 123.869268][ T7729] team0: Port device team_slave_0 added [ 123.888717][ T7729] team0: Port device team_slave_1 added [ 123.923366][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.938195][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.969826][ T7729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.018354][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.040757][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.089679][ T7729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.153150][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 124.178266][ T7729] hsr_slave_0: entered promiscuous mode [ 124.190961][ T7729] hsr_slave_1: entered promiscuous mode [ 124.197892][ T7729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.213387][ T7729] Cannot create hsr debugfs directory [ 124.794362][ T7729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.848901][ T7729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.873591][ T7729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.885875][ T7729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.037793][ T7836] FAULT_INJECTION: forcing a failure. [ 125.037793][ T7836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.065285][ T7836] CPU: 0 UID: 0 PID: 7836 Comm: syz.4.570 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 125.065311][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.065320][ T7836] Call Trace: [ 125.065327][ T7836] [ 125.065334][ T7836] dump_stack_lvl+0x241/0x360 [ 125.065359][ T7836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.065376][ T7836] ? __pfx__printk+0x10/0x10 [ 125.065395][ T7836] ? 0xffffffffa0001ad0 [ 125.065416][ T7836] should_fail_ex+0x40a/0x550 [ 125.065442][ T7836] _copy_to_user+0x31/0xb0 [ 125.065464][ T7836] bpf_test_finish+0x212/0x890 [ 125.065492][ T7836] ? __pfx_bpf_test_finish+0x10/0x10 [ 125.065516][ T7836] ? bpf_test_init+0x137/0x160 [ 125.065535][ T7836] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 125.065558][ T7836] ? __pfx_lock_release+0x10/0x10 [ 125.065585][ T7836] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.065605][ T7836] ? __fget_files+0x2a/0x410 [ 125.065628][ T7836] ? __fget_files+0x2a/0x410 [ 125.065650][ T7836] ? fput+0x21b/0x290 [ 125.065668][ T7836] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.065690][ T7836] bpf_prog_test_run+0x2e4/0x360 [ 125.065716][ T7836] __sys_bpf+0x487/0x820 [ 125.065738][ T7836] ? __pfx___sys_bpf+0x10/0x10 [ 125.065770][ T7836] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.065794][ T7836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.065818][ T7836] ? do_syscall_64+0x100/0x230 [ 125.065840][ T7836] __x64_sys_bpf+0x7c/0x90 [ 125.065860][ T7836] do_syscall_64+0xf3/0x230 [ 125.065875][ T7836] ? clear_bhb_loop+0x35/0x90 [ 125.065895][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.065912][ T7836] RIP: 0033:0x7fb47358d169 [ 125.065926][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.065938][ T7836] RSP: 002b:00007fb4713f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.065956][ T7836] RAX: ffffffffffffffda RBX: 00007fb4737a5fa0 RCX: 00007fb47358d169 [ 125.065967][ T7836] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 125.065978][ T7836] RBP: 00007fb4713f6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.065987][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.065997][ T7836] R13: 0000000000000000 R14: 00007fb4737a5fa0 R15: 00007ffe09256ca8 [ 125.066020][ T7836] [ 125.313263][ T5834] Bluetooth: hci0: command tx timeout [ 125.328841][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.344857][ T7729] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.404152][ T7729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.414985][ T7729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.447162][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.454304][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.464610][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.471788][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.754347][ T7848] syz.4.573: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 125.778596][ T7848] CPU: 1 UID: 0 PID: 7848 Comm: syz.4.573 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 125.778622][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.778632][ T7848] Call Trace: [ 125.778639][ T7848] [ 125.778647][ T7848] dump_stack_lvl+0x241/0x360 [ 125.778673][ T7848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.778691][ T7848] ? __pfx__printk+0x10/0x10 [ 125.778712][ T7848] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 125.778733][ T7848] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 125.778755][ T7848] warn_alloc+0x278/0x410 [ 125.778778][ T7848] ? __pfx_warn_alloc+0x10/0x10 [ 125.778801][ T7848] ? xskq_create+0xb6/0x170 [ 125.778822][ T7848] ? __get_vm_area_node+0x1c8/0x2d0 [ 125.778843][ T7848] ? __get_vm_area_node+0x25c/0x2d0 [ 125.778872][ T7848] __vmalloc_node_range_noprof+0x62f/0x1380 [ 125.778917][ T7848] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 125.778947][ T7848] ? __kasan_kmalloc+0x98/0xb0 [ 125.778970][ T7848] vmalloc_user_noprof+0x74/0x80 [ 125.778987][ T7848] ? xskq_create+0xb6/0x170 [ 125.779007][ T7848] xskq_create+0xb6/0x170 [ 125.779030][ T7848] xsk_init_queue+0xa1/0x100 [ 125.779055][ T7848] xsk_setsockopt+0x560/0x810 [ 125.779078][ T7848] ? __pfx_xsk_setsockopt+0x10/0x10 [ 125.779098][ T7848] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.779121][ T7848] ? __pfx_lock_acquire+0x10/0x10 [ 125.779140][ T7848] ? aa_sock_opt_perm+0x79/0x120 [ 125.779164][ T7848] ? __pfx_xsk_setsockopt+0x10/0x10 [ 125.779183][ T7848] do_sock_setsockopt+0x3af/0x720 [ 125.779204][ T7848] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 125.779224][ T7848] ? __fget_files+0x395/0x410 [ 125.779244][ T7848] ? __fget_files+0x2a/0x410 [ 125.779273][ T7848] __x64_sys_setsockopt+0x1ee/0x280 [ 125.779297][ T7848] do_syscall_64+0xf3/0x230 [ 125.779316][ T7848] ? clear_bhb_loop+0x35/0x90 [ 125.779340][ T7848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.779360][ T7848] RIP: 0033:0x7fb47358d169 [ 125.779374][ T7848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.779386][ T7848] RSP: 002b:00007fb4713b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.779403][ T7848] RAX: ffffffffffffffda RBX: 00007fb4737a6160 RCX: 00007fb47358d169 [ 125.779415][ T7848] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 125.779424][ T7848] RBP: 00007fb47360e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 125.779433][ T7848] R10: 0000400000001780 R11: 0000000000000246 R12: 0000000000000000 [ 125.779443][ T7848] R13: 0000000000000000 R14: 00007fb4737a6160 R15: 00007ffe09256ca8 [ 125.779468][ T7848] [ 125.779474][ T7848] Mem-Info: [ 125.853268][ T7859] netlink: 'syz.3.578': attribute type 10 has an invalid length. [ 125.854820][ T7848] active_anon:4935 inactive_anon:0 isolated_anon:0 [ 125.854820][ T7848] active_file:1564 inactive_file:38332 isolated_file:0 [ 125.854820][ T7848] unevictable:768 dirty:140 writeback:0 [ 125.854820][ T7848] slab_reclaimable:10305 slab_unreclaimable:99021 [ 125.854820][ T7848] mapped:28541 shmem:1407 pagetables:754 [ 125.854820][ T7848] sec_pagetables:0 bounce:0 [ 125.854820][ T7848] kernel_misc_reclaimable:0 [ 125.854820][ T7848] free:1340239 free_pcp:3890 free_cma:0 [ 125.976339][ T7861] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 125.995742][ T7848] Node 0 active_anon:19740kB inactive_anon:0kB active_file:6256kB inactive_file:153252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118164kB dirty:556kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11944kB pagetables:3016kB sec_pagetables:0kB all_unreclaimable? no [ 126.001021][ T7861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.578'. [ 126.011660][ T7848] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 126.063473][ T7862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.578'. [ 126.101265][ T7848] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.216821][ T7848] lowmem_reserve[]: 0 2489 2490 0 0 [ 126.222109][ T7848] Node 0 DMA32 free:1439900kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19684kB inactive_anon:0kB active_file:6256kB inactive_file:152924kB unevictable:1536kB writepending:524kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:15660kB local_pcp:14852kB free_cma:0kB [ 126.252776][ T7848] lowmem_reserve[]: 0 0 0 0 0 [ 126.257627][ T7848] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.285065][ T7848] lowmem_reserve[]: 0 0 0 0 0 [ 126.289962][ T7848] Node 1 Normal free:3904584kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.319402][ T7848] lowmem_reserve[]: 0 0 0 0 0 [ 126.324190][ T7848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.337254][ T7848] Node 0 DMA32: 6*4kB (UM) 106*8kB (UME) 196*16kB (UME) 112*32kB (UME) 63*64kB (UME) 124*128kB (UME) 247*256kB (UM) 174*512kB (UM) 117*1024kB (UME) 13*2048kB (UME) 272*4096kB (UM) = 1440360kB [ 126.356555][ T7848] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 126.374710][ T7848] Node 1 Normal: 180*4kB (UME) 49*8kB (UME) 39*16kB (UME) 200*32kB (UME) 86*64kB (UME) 26*128kB (UME) 14*256kB (UME) 10*512kB (UME) 6*1024kB (UME) 3*2048kB (U) 944*4096kB (M) = 3904584kB [ 126.393782][ T7848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.403457][ T7848] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.412866][ T7848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.422476][ T7848] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.432011][ T7848] 41306 total pagecache pages [ 126.436986][ T7848] 0 pages in swap cache [ 126.441150][ T7848] Free swap = 124996kB [ 126.446192][ T7848] Total swap = 124996kB [ 126.450365][ T7848] 2097051 pages RAM [ 126.454169][ T7848] 0 pages HighMem/MovableOnly [ 126.459194][ T7848] 427897 pages reserved [ 126.463354][ T7848] 0 pages cma reserved [ 126.530437][ T7859] team0: Port device veth1_macvtap added [ 126.680295][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.758722][ T7729] veth0_vlan: entered promiscuous mode [ 126.776690][ T7729] veth1_vlan: entered promiscuous mode [ 126.866494][ T7729] veth0_macvtap: entered promiscuous mode [ 126.903345][ T7729] veth1_macvtap: entered promiscuous mode [ 126.944567][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.967082][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.989606][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.020904][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.041110][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.069541][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.097742][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.134098][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.193937][ T7729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.224890][ T7729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.324944][ T5834] Bluetooth: hci0: command tx timeout [ 127.381081][ T7729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.396970][ T7729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.564465][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.573530][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.669400][ T7896] syzkaller0: entered promiscuous mode [ 127.675168][ T7896] syzkaller0: entered allmulticast mode [ 127.728341][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.590'. [ 127.790374][ T3586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.802199][ T3586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.404969][ T5834] Bluetooth: hci0: command tx timeout [ 130.087433][ T7956] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 130.229286][ T3470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.363707][ T3470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.484712][ T3470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.639911][ T3470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.712206][ T3470] bridge_slave_1: left allmulticast mode [ 130.718078][ T3470] bridge_slave_1: left promiscuous mode [ 130.723728][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.732810][ T3470] bridge_slave_0: left allmulticast mode [ 130.738956][ T3470] bridge_slave_0: left promiscuous mode [ 130.744739][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.020573][ T7969] FAULT_INJECTION: forcing a failure. [ 131.020573][ T7969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.059753][ T7969] CPU: 1 UID: 0 PID: 7969 Comm: syz.2.615 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 131.059793][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.059809][ T7969] Call Trace: [ 131.059819][ T7969] [ 131.059830][ T7969] dump_stack_lvl+0x241/0x360 [ 131.059872][ T7969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.059914][ T7969] ? __pfx__printk+0x10/0x10 [ 131.059959][ T7969] ? snprintf+0xda/0x120 [ 131.060008][ T7969] should_fail_ex+0x40a/0x550 [ 131.060070][ T7969] _copy_to_user+0x31/0xb0 [ 131.060122][ T7969] simple_read_from_buffer+0xca/0x150 [ 131.060151][ T7969] proc_fail_nth_read+0x1e9/0x250 [ 131.060174][ T7969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.060197][ T7969] ? rw_verify_area+0x243/0x630 [ 131.060214][ T7969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.060236][ T7969] vfs_read+0x1f8/0xb40 [ 131.060253][ T7969] ? fdget_pos+0x254/0x320 [ 131.060276][ T7969] ? __pfx___mutex_lock+0x10/0x10 [ 131.060294][ T7969] ? __pfx_vfs_read+0x10/0x10 [ 131.060314][ T7969] ? __fget_files+0x2a/0x410 [ 131.060336][ T7969] ? __fget_files+0x395/0x410 [ 131.060355][ T7969] ? __fget_files+0x2a/0x410 [ 131.060384][ T7969] ksys_read+0x18f/0x2b0 [ 131.060404][ T7969] ? __pfx_ksys_read+0x10/0x10 [ 131.060420][ T7969] ? do_syscall_64+0x100/0x230 [ 131.060442][ T7969] ? do_syscall_64+0xb6/0x230 [ 131.060474][ T7969] do_syscall_64+0xf3/0x230 [ 131.060491][ T7969] ? clear_bhb_loop+0x35/0x90 [ 131.060515][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.060534][ T7969] RIP: 0033:0x7f9ab9f8bb7c [ 131.060549][ T7969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 131.060563][ T7969] RSP: 002b:00007f9abad60030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.060581][ T7969] RAX: ffffffffffffffda RBX: 00007f9aba1a5fa0 RCX: 00007f9ab9f8bb7c [ 131.060593][ T7969] RDX: 000000000000000f RSI: 00007f9abad600a0 RDI: 0000000000000005 [ 131.060602][ T7969] RBP: 00007f9abad60090 R08: 0000000000000000 R09: 0000000000000000 [ 131.060612][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.060622][ T7969] R13: 0000000000000000 R14: 00007f9aba1a5fa0 R15: 00007fff18c6f708 [ 131.060648][ T7969] [ 131.353033][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.363375][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.376331][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.392457][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.407508][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 131.420956][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.442962][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.458744][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.469009][ T3470] bond0 (unregistering): Released all slaves [ 131.657215][ T7987] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.621'. [ 132.039249][ T7980] chnl_net:caif_netlink_parms(): no params data found [ 132.237420][ T3470] hsr_slave_0: left promiscuous mode [ 132.243601][ T3470] hsr_slave_1: left promiscuous mode [ 132.253577][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.275063][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.299116][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.308119][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.348437][ T3470] veth1_macvtap: left promiscuous mode [ 132.354024][ T3470] veth0_macvtap: left promiscuous mode [ 132.360151][ T3470] veth1_vlan: left promiscuous mode [ 132.365958][ T3470] veth0_vlan: left promiscuous mode [ 132.806739][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 132.846735][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 133.169791][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205540][ T8001] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 133.238809][ T8008] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 133.488317][ T5834] Bluetooth: hci0: command tx timeout [ 133.494578][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.501960][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.512170][ T7980] bridge_slave_0: entered allmulticast mode [ 133.519351][ T7980] bridge_slave_0: entered promiscuous mode [ 133.527563][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.535664][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.542899][ T7980] bridge_slave_1: entered allmulticast mode [ 133.550063][ T7980] bridge_slave_1: entered promiscuous mode [ 133.600061][ T8033] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.634'. [ 133.686106][ T7980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.759724][ T7980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.810773][ T8039] FAULT_INJECTION: forcing a failure. [ 133.810773][ T8039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.835441][ T8039] CPU: 1 UID: 0 PID: 8039 Comm: syz.2.636 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 133.835465][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.835475][ T8039] Call Trace: [ 133.835481][ T8039] [ 133.835488][ T8039] dump_stack_lvl+0x241/0x360 [ 133.835514][ T8039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.835531][ T8039] ? __pfx__printk+0x10/0x10 [ 133.835549][ T8039] ? __pfx_lock_release+0x10/0x10 [ 133.835579][ T8039] should_fail_ex+0x40a/0x550 [ 133.835606][ T8039] _copy_from_user+0x2d/0xb0 [ 133.835626][ T8039] copy_msghdr_from_user+0xae/0x680 [ 133.835654][ T8039] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 133.835672][ T8039] ? __fget_files+0x2a/0x410 [ 133.835696][ T8039] ? __fget_files+0x2a/0x410 [ 133.835725][ T8039] __sys_sendmsg+0x209/0x350 [ 133.835748][ T8039] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.835776][ T8039] ? do_sys_openat2+0x17a/0x1d0 [ 133.835821][ T8039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.835844][ T8039] ? do_syscall_64+0x100/0x230 [ 133.835865][ T8039] ? do_syscall_64+0xb6/0x230 [ 133.835886][ T8039] do_syscall_64+0xf3/0x230 [ 133.835903][ T8039] ? clear_bhb_loop+0x35/0x90 [ 133.835927][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.835946][ T8039] RIP: 0033:0x7f9ab9f8d169 [ 133.835960][ T8039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.835973][ T8039] RSP: 002b:00007f9abad60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.835991][ T8039] RAX: ffffffffffffffda RBX: 00007f9aba1a5fa0 RCX: 00007f9ab9f8d169 [ 133.836003][ T8039] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 000000000000000d [ 133.836013][ T8039] RBP: 00007f9abad60090 R08: 0000000000000000 R09: 0000000000000000 [ 133.836022][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.836032][ T8039] R13: 0000000000000000 R14: 00007f9aba1a5fa0 R15: 00007fff18c6f708 [ 133.836057][ T8039] [ 134.070803][ T7980] team0: Port device team_slave_0 added [ 134.079885][ T7980] team0: Port device team_slave_1 added [ 134.137830][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.158900][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.185161][ T7980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.257894][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.265234][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.291366][ T7980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.432371][ T7980] hsr_slave_0: entered promiscuous mode [ 134.439028][ T7980] hsr_slave_1: entered promiscuous mode [ 134.446813][ T7980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.454980][ T7980] Cannot create hsr debugfs directory [ 134.985395][ T8071] netlink: 'syz.4.646': attribute type 4 has an invalid length. [ 135.045722][ T8071] netlink: 'syz.4.646': attribute type 4 has an invalid length. [ 135.104185][ T8051] bridge_slave_0: invalid flags given to default FDB implementation [ 135.233140][ T8078] netlink: 'syz.0.650': attribute type 22 has an invalid length. [ 135.410459][ T7980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.441112][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 135.471786][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 135.550548][ T7980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.568088][ T5834] Bluetooth: hci0: command tx timeout [ 135.719106][ T7980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.762551][ T8091] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 135.841473][ T7980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.580534][ T7980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.652659][ T7980] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.699081][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.706286][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.758225][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.765422][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.857649][ T7980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.908997][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 137.139663][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 137.511579][ T8130] netlink: 148 bytes leftover after parsing attributes in process `syz.4.667'. [ 137.545127][ T8130] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 137.645251][ T5834] Bluetooth: hci0: command tx timeout [ 137.737447][ T7980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.004298][ T7980] veth0_vlan: entered promiscuous mode [ 138.035728][ T7980] veth1_vlan: entered promiscuous mode [ 138.123689][ T8133] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 138.269295][ T7980] veth0_macvtap: entered promiscuous mode [ 138.493308][ T7980] veth1_macvtap: entered promiscuous mode [ 138.513166][ T8144] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 138.603753][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.645820][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.683564][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.705029][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.730624][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.742383][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.761148][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.827541][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.888940][ T7980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.919503][ T7980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.944922][ T7980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.953673][ T7980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.262332][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.302893][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.379918][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.401387][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 139.412322][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.489922][ T8171] bridge0: port 3(syz_tun) entered disabled state [ 139.502398][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.511009][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.557878][ T8171] batadv0: left promiscuous mode [ 139.648593][ T8171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.669653][ T8171] batadv_slave_1: left promiscuous mode [ 139.681022][ T8171] batadv_slave_1: left allmulticast mode [ 139.725257][ T5834] Bluetooth: hci0: command tx timeout [ 139.768293][ T8171] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.865087][ T8171] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.883172][ T8171] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.893603][ T8171] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.976630][ T8171] vlan2: left promiscuous mode [ 139.986739][ T8171] ip6tnl1: left promiscuous mode [ 140.381170][ T8183] vlan2: entered allmulticast mode [ 140.460851][ T8187] vlan2: entered allmulticast mode [ 140.519603][ T8193] bond0: entered promiscuous mode [ 140.524694][ T8193] bond_slave_0: entered promiscuous mode [ 140.571417][ T8193] bond_slave_1: entered promiscuous mode [ 140.714734][ T8200] Cannot find add_set index 0 as target [ 140.759170][ T3449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.853134][ T3449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.912024][ T3449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.988430][ T3449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.072954][ T3449] bridge_slave_1: left allmulticast mode [ 141.078676][ T3449] bridge_slave_1: left promiscuous mode [ 141.084316][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.093218][ T3449] bridge_slave_0: left allmulticast mode [ 141.103048][ T3449] bridge_slave_0: left promiscuous mode [ 141.109026][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.390874][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.402090][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.412284][ T3449] bond0 (unregistering): Released all slaves [ 141.621508][ T8209] netlink: 148 bytes leftover after parsing attributes in process `syz.0.685'. [ 141.643314][ T8209] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 141.978346][ T8219] macvlan3: entered promiscuous mode [ 141.998622][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.008258][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.017870][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.028593][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.044574][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.053024][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.206123][ T3449] hsr_slave_0: left promiscuous mode [ 142.213471][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 142.249058][ T3449] hsr_slave_1: left promiscuous mode [ 142.255306][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.262740][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.270384][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 142.270898][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 142.305792][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.321670][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.384188][ T3449] veth1_macvtap: left promiscuous mode [ 142.412497][ T3449] veth0_macvtap: left promiscuous mode [ 142.423825][ T3449] veth1_vlan: left promiscuous mode [ 142.442122][ T3449] veth0_vlan: left promiscuous mode [ 142.474024][ T25] IPVS: starting estimator thread 0... [ 142.499512][ T8235] netlink: 56 bytes leftover after parsing attributes in process `syz.4.695'. [ 142.515609][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.695'. [ 142.595043][ T8238] IPVS: using max 23 ests per chain, 55200 per kthread [ 142.991098][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 143.028808][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 143.570479][ T8222] chnl_net:caif_netlink_parms(): no params data found [ 143.795492][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.802724][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.846490][ T8222] bridge_slave_0: entered allmulticast mode [ 143.853557][ T8222] bridge_slave_0: entered promiscuous mode [ 143.887972][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.914955][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.922243][ T8222] bridge_slave_1: entered allmulticast mode [ 143.938577][ T8222] bridge_slave_1: entered promiscuous mode [ 144.053647][ T8271] vlan2: entered promiscuous mode [ 144.065503][ T8271] batadv0: entered promiscuous mode [ 144.084005][ T8271] team0: Port device vlan2 added [ 144.106121][ T8222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.125081][ T5838] Bluetooth: hci0: command tx timeout [ 144.142050][ T8222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.241355][ T8268] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 144.463872][ T8222] team0: Port device team_slave_0 added [ 144.512404][ T8222] team0: Port device team_slave_1 added [ 145.259048][ T8306] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 146.088012][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.095363][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.123205][ T8222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.149181][ T8306] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 146.195762][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.234934][ T5838] Bluetooth: hci0: command tx timeout [ 146.245320][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.281711][ T8222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.298441][ T8312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.716'. [ 146.376000][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.4.718'. [ 146.401396][ T8222] hsr_slave_0: entered promiscuous mode [ 146.453486][ T8222] hsr_slave_1: entered promiscuous mode [ 146.485135][ T8222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.493190][ T8222] Cannot create hsr debugfs directory [ 146.605411][ T8329] netlink: 256 bytes leftover after parsing attributes in process `syz.0.719'. [ 146.639214][ T8329] netlink: 184 bytes leftover after parsing attributes in process `syz.0.719'. [ 146.843804][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 147.167294][ T8351] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 147.431811][ T8222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.454577][ T8222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.498043][ T8222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.565768][ T8222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.608974][ T8375] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 147.662671][ T8376] bond7 (unregistering): Released all slaves [ 147.771486][ T8386] netlink: 156 bytes leftover after parsing attributes in process `syz.0.740'. [ 147.829234][ T8386] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 147.864603][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 147.885477][ T8389] xt_TCPMSS: Only works on TCP SYN packets [ 147.907168][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.935156][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.010334][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.059312][ T8395] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.070708][ T8222] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.122948][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 148.126816][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.138918][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.177204][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.184390][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.285038][ T5838] Bluetooth: hci0: command tx timeout [ 148.290777][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 148.791889][ T8431] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 148.822403][ T8431] sctp: [Deprecated]: syz.0.751 (pid 8431) Use of int in maxseg socket option. [ 148.822403][ T8431] Use struct sctp_assoc_value instead [ 149.037405][ T8222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.110429][ T8222] veth0_vlan: entered promiscuous mode [ 149.142311][ T8222] veth1_vlan: entered promiscuous mode [ 149.166235][ T8442] bridge0: port 3(veth0_to_bridge) entered blocking state [ 149.173439][ T8442] bridge0: port 3(veth0_to_bridge) entered disabled state [ 149.228091][ T8442] veth0_to_bridge: entered allmulticast mode [ 149.276174][ T8442] veth0_to_bridge: entered promiscuous mode [ 149.439038][ T8222] veth0_macvtap: entered promiscuous mode [ 149.464074][ T8222] veth1_macvtap: entered promiscuous mode [ 149.523442][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.550760][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.576426][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.600399][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.615034][ T8456] FAULT_INJECTION: forcing a failure. [ 149.615034][ T8456] name failslab, interval 1, probability 0, space 0, times 0 [ 149.639266][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.653376][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.2.759 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 149.653401][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.653411][ T8456] Call Trace: [ 149.653417][ T8456] [ 149.653425][ T8456] dump_stack_lvl+0x241/0x360 [ 149.653451][ T8456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.653469][ T8456] ? __pfx__printk+0x10/0x10 [ 149.653489][ T8456] ? __kmalloc_cache_noprof+0x48/0x390 [ 149.653512][ T8456] ? __pfx___might_resched+0x10/0x10 [ 149.653530][ T8456] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 149.653552][ T8456] should_fail_ex+0x40a/0x550 [ 149.653579][ T8456] should_failslab+0xac/0x100 [ 149.653602][ T8456] __kmalloc_cache_noprof+0x70/0x390 [ 149.653622][ T8456] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 149.653646][ T8456] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 149.653681][ T8456] genl_rcv_msg+0xb1f/0xec0 [ 149.653706][ T8456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.653749][ T8456] ? __pfx_lock_acquire+0x10/0x10 [ 149.653770][ T8456] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 149.653792][ T8456] ? __pfx___might_resched+0x10/0x10 [ 149.653822][ T8456] netlink_rcv_skb+0x206/0x480 [ 149.653844][ T8456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.653862][ T8456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.653922][ T8456] genl_rcv+0x28/0x40 [ 149.653938][ T8456] netlink_unicast+0x7f6/0x990 [ 149.653969][ T8456] ? __pfx_netlink_unicast+0x10/0x10 [ 149.653986][ T8456] ? __virt_addr_valid+0x45f/0x530 [ 149.654003][ T8456] ? __phys_addr_symbol+0x2f/0x70 [ 149.654018][ T8456] ? __check_object_size+0x47a/0x730 [ 149.654044][ T8456] netlink_sendmsg+0x8de/0xcb0 [ 149.654077][ T8456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.654101][ T8456] ? aa_sock_msg_perm+0x91/0x160 [ 149.654130][ T8456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.654149][ T8456] __sock_sendmsg+0x221/0x270 [ 149.654173][ T8456] ____sys_sendmsg+0x53a/0x860 [ 149.654199][ T8456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.654215][ T8456] ? __fget_files+0x2a/0x410 [ 149.654238][ T8456] ? __fget_files+0x2a/0x410 [ 149.654269][ T8456] __sys_sendmsg+0x269/0x350 [ 149.654291][ T8456] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.654322][ T8456] ? do_sys_openat2+0x17a/0x1d0 [ 149.654370][ T8456] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.654395][ T8456] ? do_syscall_64+0x100/0x230 [ 149.654417][ T8456] ? do_syscall_64+0xb6/0x230 [ 149.654438][ T8456] do_syscall_64+0xf3/0x230 [ 149.654457][ T8456] ? clear_bhb_loop+0x35/0x90 [ 149.654480][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.654500][ T8456] RIP: 0033:0x7f9ab9f8d169 [ 149.654516][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.654530][ T8456] RSP: 002b:00007f9abad60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.654548][ T8456] RAX: ffffffffffffffda RBX: 00007f9aba1a5fa0 RCX: 00007f9ab9f8d169 [ 149.654560][ T8456] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 149.654570][ T8456] RBP: 00007f9abad60090 R08: 0000000000000000 R09: 0000000000000000 [ 149.654581][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.654591][ T8456] R13: 0000000000000000 R14: 00007f9aba1a5fa0 R15: 00007fff18c6f708 [ 149.654618][ T8456] [ 149.728110][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.028296][ T8222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.053599][ T8222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.071915][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 150.074789][ T8222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.106938][ T8222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.122402][ T8471] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 150.276709][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.303303][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.342731][ T8483] netlink: 'syz.0.765': attribute type 10 has an invalid length. [ 150.372520][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.381289][ T5838] Bluetooth: hci0: command tx timeout [ 150.394145][ T8483] netlink: 'syz.0.765': attribute type 10 has an invalid length. [ 150.407040][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.431180][ T8483] netlink: 2 bytes leftover after parsing attributes in process `syz.0.765'. [ 150.458394][ T8486] FAULT_INJECTION: forcing a failure. [ 150.458394][ T8486] name failslab, interval 1, probability 0, space 0, times 0 [ 150.488116][ T8486] CPU: 1 UID: 0 PID: 8486 Comm: syz.3.767 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 150.488141][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.488152][ T8486] Call Trace: [ 150.488158][ T8486] [ 150.488166][ T8486] dump_stack_lvl+0x241/0x360 [ 150.488193][ T8486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.488211][ T8486] ? __pfx__printk+0x10/0x10 [ 150.488230][ T8486] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 150.488254][ T8486] ? __pfx___might_resched+0x10/0x10 [ 150.488279][ T8486] should_fail_ex+0x40a/0x550 [ 150.488307][ T8486] should_failslab+0xac/0x100 [ 150.488330][ T8486] kmem_cache_alloc_node_noprof+0x77/0x380 [ 150.488350][ T8486] ? alloc_unbound_pwq+0xae7/0xe10 [ 150.488375][ T8486] alloc_unbound_pwq+0xae7/0xe10 [ 150.488407][ T8486] apply_wqattrs_prepare+0x481/0xef0 [ 150.488453][ T8486] apply_workqueue_attrs_locked+0x63/0x200 [ 150.488485][ T8486] __alloc_workqueue+0x10de/0x1bb0 [ 150.488520][ T8486] alloc_workqueue+0xd6/0x210 [ 150.488542][ T8486] ? __pfx_alloc_workqueue+0x10/0x10 [ 150.488566][ T8486] ? net_generic+0x1f/0x240 [ 150.488590][ T8486] bond_init+0xd5/0x8e0 [ 150.488614][ T8486] ? __pfx_bond_init+0x10/0x10 [ 150.488631][ T8486] ? __kasan_kmalloc+0x98/0xb0 [ 150.488650][ T8486] ? __kmalloc_cache_noprof+0x243/0x390 [ 150.488677][ T8486] register_netdevice+0x6d7/0x1b70 [ 150.488703][ T8486] ? __pfx_bond_changelink+0x10/0x10 [ 150.488722][ T8486] ? validate_linkmsg+0x828/0xa40 [ 150.488746][ T8486] ? __pfx_register_netdevice+0x10/0x10 [ 150.488765][ T8486] ? alloc_netdev_mqs+0xe01/0x1210 [ 150.488792][ T8486] ? rtnl_create_link+0x95b/0xc90 [ 150.488814][ T8486] bond_newlink+0x5e/0xb0 [ 150.488832][ T8486] ? __pfx_bond_newlink+0x10/0x10 [ 150.488851][ T8486] rtnl_newlink_create+0x37b/0xbd0 [ 150.488882][ T8486] ? __pfx_aa_get_newest_label+0x10/0x10 [ 150.488909][ T8486] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 150.488936][ T8486] ? __pfx___mutex_lock+0x10/0x10 [ 150.488966][ T8486] ? ns_capable+0x8a/0xf0 [ 150.488989][ T8486] rtnl_newlink+0x167a/0x1d90 [ 150.489012][ T8486] ? stack_depot_save_flags+0x37/0x940 [ 150.489049][ T8486] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.489068][ T8486] ? __netlink_deliver_tap+0x561/0x7f0 [ 150.489090][ T8486] ? __pfx_validate_chain+0x10/0x10 [ 150.489106][ T8486] ? __sock_sendmsg+0x221/0x270 [ 150.489123][ T8486] ? ____sys_sendmsg+0x53a/0x860 [ 150.489138][ T8486] ? __sys_sendmsg+0x269/0x350 [ 150.489152][ T8486] ? do_syscall_64+0xf3/0x230 [ 150.489169][ T8486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.489212][ T8486] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 150.489237][ T8486] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.489269][ T8486] ? mark_lock+0x9a/0x360 [ 150.489289][ T8486] ? __lock_acquire+0x1397/0x2100 [ 150.489374][ T8486] ? __pfx_lock_release+0x10/0x10 [ 150.489412][ T8486] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.489435][ T8486] rtnetlink_rcv_msg+0x791/0xcf0 [ 150.489454][ T8486] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 150.489485][ T8486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.489513][ T8486] ? ref_tracker_free+0x643/0x7e0 [ 150.489536][ T8486] netlink_rcv_skb+0x206/0x480 [ 150.489558][ T8486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.489581][ T8486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.489627][ T8486] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.489651][ T8486] netlink_unicast+0x7f6/0x990 [ 150.489680][ T8486] ? __pfx_netlink_unicast+0x10/0x10 [ 150.489696][ T8486] ? __virt_addr_valid+0x45f/0x530 [ 150.489714][ T8486] ? __phys_addr_symbol+0x2f/0x70 [ 150.489728][ T8486] ? __check_object_size+0x47a/0x730 [ 150.489753][ T8486] netlink_sendmsg+0x8de/0xcb0 [ 150.489788][ T8486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.489814][ T8486] ? aa_sock_msg_perm+0x91/0x160 [ 150.489841][ T8486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.489860][ T8486] __sock_sendmsg+0x221/0x270 [ 150.489884][ T8486] ____sys_sendmsg+0x53a/0x860 [ 150.489911][ T8486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.489927][ T8486] ? __fget_files+0x2a/0x410 [ 150.489952][ T8486] ? __fget_files+0x2a/0x410 [ 150.489983][ T8486] __sys_sendmsg+0x269/0x350 [ 150.490006][ T8486] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.490038][ T8486] ? do_sys_openat2+0x17a/0x1d0 [ 150.490088][ T8486] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.490112][ T8486] ? do_syscall_64+0x100/0x230 [ 150.490134][ T8486] ? do_syscall_64+0xb6/0x230 [ 150.490155][ T8486] do_syscall_64+0xf3/0x230 [ 150.490174][ T8486] ? clear_bhb_loop+0x35/0x90 [ 150.490197][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.490217][ T8486] RIP: 0033:0x7fed3e58d169 [ 150.490232][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.490247][ T8486] RSP: 002b:00007fed3c3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.490264][ T8486] RAX: ffffffffffffffda RBX: 00007fed3e7a5fa0 RCX: 00007fed3e58d169 [ 150.490277][ T8486] RDX: 0000000000004000 RSI: 0000400000000280 RDI: 0000000000000003 [ 150.490287][ T8486] RBP: 00007fed3c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.490297][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.490307][ T8486] R13: 0000000000000000 R14: 00007fed3e7a5fa0 R15: 00007ffdf7a62808 [ 150.490336][ T8486] [ 150.516885][ T8483] team0: entered promiscuous mode [ 150.648266][ T8494] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.765'. [ 150.705576][ T8483] team_slave_0: entered promiscuous mode [ 150.791488][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.769'. [ 150.795623][ T8483] team_slave_1: entered promiscuous mode [ 151.070112][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.077921][ T8483] bridge0: port 3(team0) entered blocking state [ 151.084355][ T8483] bridge0: port 3(team0) entered disabled state [ 151.101523][ T8483] team0: entered allmulticast mode [ 151.108440][ T8483] team_slave_0: entered allmulticast mode [ 151.114210][ T8483] team_slave_1: entered allmulticast mode [ 151.126483][ T8483] vlan2: entered allmulticast mode [ 151.131663][ T8483] batadv0: entered allmulticast mode [ 151.153564][ T8483] bridge0: port 3(team0) entered blocking state [ 151.160032][ T8483] bridge0: port 3(team0) entered forwarding state [ 151.193509][ T8501] ip6tnl1: entered promiscuous mode [ 151.202310][ T8501] ip6tnl1: entered allmulticast mode [ 151.293385][ T8507] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 151.318971][ T8507] netlink: 15382 bytes leftover after parsing attributes in process `syz.2.771'. [ 151.818732][ T3586] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.946210][ T3586] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.160422][ T3586] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.261778][ T3586] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.380270][ T3586] bridge_slave_1: left allmulticast mode [ 152.386197][ T3586] bridge_slave_1: left promiscuous mode [ 152.391985][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.409887][ T3586] bridge_slave_0: left allmulticast mode [ 152.417997][ T3586] bridge_slave_0: left promiscuous mode [ 152.424645][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.008667][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.032481][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.047424][ T3586] bond0 (unregistering): Released all slaves [ 153.192036][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.213969][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.226351][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.245470][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.276272][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.287540][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.422916][ T8594] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 153.462425][ T8594] team0: left allmulticast mode [ 153.469795][ T8594] team_slave_0: left allmulticast mode [ 153.490630][ T8594] team_slave_1: left allmulticast mode [ 153.491086][ T8599] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 153.506472][ T8594] vlan2: left allmulticast mode [ 153.511641][ T8594] team0: left promiscuous mode [ 153.519035][ T8599] netlink: 2 bytes leftover after parsing attributes in process `syz.2.782'. [ 153.519477][ T8594] team_slave_0: left promiscuous mode [ 153.536319][ T8594] team_slave_1: left promiscuous mode [ 153.542316][ T8594] vlan2: left promiscuous mode [ 153.548090][ T8594] bridge0: port 3(team0) entered disabled state [ 153.618634][ T8599] team0: entered promiscuous mode [ 153.624010][ T8599] team_slave_0: entered promiscuous mode [ 153.630233][ T8599] team_slave_1: entered promiscuous mode [ 153.636377][ T8599] vlan2: entered promiscuous mode [ 153.642982][ T8599] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.651476][ T8599] bridge0: port 3(team0) entered blocking state [ 153.658121][ T8599] bridge0: port 3(team0) entered disabled state [ 153.664659][ T8599] team0: entered allmulticast mode [ 153.669920][ T8599] team_slave_0: entered allmulticast mode [ 153.678871][ T8599] team_slave_1: entered allmulticast mode [ 153.688742][ T8599] vlan2: entered allmulticast mode [ 153.747290][ T8599] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.782'. [ 153.856499][ T3586] hsr_slave_0: left promiscuous mode [ 153.864377][ T3586] hsr_slave_1: left promiscuous mode [ 153.878056][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.890994][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.901333][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.914370][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.957979][ T3586] veth1_macvtap: left promiscuous mode [ 153.963687][ T3586] veth0_macvtap: left promiscuous mode [ 153.975930][ T3586] veth1_vlan: left promiscuous mode [ 153.981399][ T3586] veth0_vlan: left promiscuous mode [ 154.342416][ T8615] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 154.878233][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 154.937328][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 155.328761][ T5838] Bluetooth: hci0: command tx timeout [ 155.414383][ T8615] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 155.709376][ T8587] chnl_net:caif_netlink_parms(): no params data found [ 156.103858][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.114929][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.126818][ T8587] bridge_slave_0: entered allmulticast mode [ 156.143773][ T8587] bridge_slave_0: entered promiscuous mode [ 156.155458][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.162602][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.184561][ T8587] bridge_slave_1: entered allmulticast mode [ 156.202712][ T8587] bridge_slave_1: entered promiscuous mode [ 156.314580][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.363416][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.464604][ T8587] team0: Port device team_slave_0 added [ 156.496143][ T8587] team0: Port device team_slave_1 added [ 156.671451][ T8647] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 156.736190][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.743267][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.788894][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.810249][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.898841][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.956220][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.144240][ T8661] FAULT_INJECTION: forcing a failure. [ 157.144240][ T8661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.185015][ T8661] CPU: 1 UID: 0 PID: 8661 Comm: syz.4.801 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 157.185042][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.185052][ T8661] Call Trace: [ 157.185058][ T8661] [ 157.185066][ T8661] dump_stack_lvl+0x241/0x360 [ 157.185093][ T8661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.185110][ T8661] ? __pfx__printk+0x10/0x10 [ 157.185139][ T8661] ? snprintf+0xda/0x120 [ 157.185164][ T8661] should_fail_ex+0x40a/0x550 [ 157.185191][ T8661] _copy_to_user+0x31/0xb0 [ 157.185211][ T8661] simple_read_from_buffer+0xca/0x150 [ 157.185236][ T8661] proc_fail_nth_read+0x1e9/0x250 [ 157.185260][ T8661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.185284][ T8661] ? rw_verify_area+0x243/0x630 [ 157.185300][ T8661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.185322][ T8661] vfs_read+0x1f8/0xb40 [ 157.185337][ T8661] ? fdget_pos+0x254/0x320 [ 157.185358][ T8661] ? __pfx___mutex_lock+0x10/0x10 [ 157.185377][ T8661] ? __pfx_vfs_read+0x10/0x10 [ 157.185391][ T8661] ? do_sys_openat2+0x17a/0x1d0 [ 157.185415][ T8661] ? __fget_files+0x2a/0x410 [ 157.185436][ T8661] ? __fget_files+0x395/0x410 [ 157.185455][ T8661] ? __fget_files+0x2a/0x410 [ 157.185485][ T8661] ksys_read+0x18f/0x2b0 [ 157.185504][ T8661] ? __pfx_ksys_read+0x10/0x10 [ 157.185521][ T8661] ? do_syscall_64+0x100/0x230 [ 157.185543][ T8661] ? do_syscall_64+0xb6/0x230 [ 157.185564][ T8661] do_syscall_64+0xf3/0x230 [ 157.185583][ T8661] ? clear_bhb_loop+0x35/0x90 [ 157.185607][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.185626][ T8661] RIP: 0033:0x7fb47358bb7c [ 157.185642][ T8661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.185656][ T8661] RSP: 002b:00007fb4713f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.185674][ T8661] RAX: ffffffffffffffda RBX: 00007fb4737a5fa0 RCX: 00007fb47358bb7c [ 157.185686][ T8661] RDX: 000000000000000f RSI: 00007fb4713f60a0 RDI: 0000000000000004 [ 157.185696][ T8661] RBP: 00007fb4713f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.185706][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.185716][ T8661] R13: 0000000000000000 R14: 00007fb4737a5fa0 R15: 00007ffe09256ca8 [ 157.185744][ T8661] [ 157.195484][ T8587] hsr_slave_0: entered promiscuous mode [ 157.421075][ T5838] Bluetooth: hci0: command tx timeout [ 157.475576][ T8587] hsr_slave_1: entered promiscuous mode [ 157.481894][ T8587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.496830][ T8587] Cannot create hsr debugfs directory [ 158.314390][ T8587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.359921][ T8587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.390059][ T8587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.416159][ T8587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.543699][ T8702] batadv_slave_1: entered promiscuous mode [ 158.560451][ T8702] batadv_slave_1: entered allmulticast mode [ 158.586041][ T8702] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 158.796218][ T8705] netlink: 'syz.0.816': attribute type 10 has an invalid length. [ 158.811281][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.862329][ T8705] bridge0: port 3(team0) entered disabled state [ 158.874266][ T8707] netlink: 'syz.0.816': attribute type 10 has an invalid length. [ 158.881139][ T8705] team0: left allmulticast mode [ 158.882617][ T8707] netlink: 2 bytes leftover after parsing attributes in process `syz.0.816'. [ 158.896151][ T8705] team_slave_0: left allmulticast mode [ 158.924914][ T8705] team_slave_1: left allmulticast mode [ 158.938059][ T8705] vlan2: left allmulticast mode [ 158.943140][ T8705] batadv0: left allmulticast mode [ 158.948603][ T8705] team0: left promiscuous mode [ 158.953554][ T8705] team_slave_0: left promiscuous mode [ 158.960264][ T8705] team_slave_1: left promiscuous mode [ 158.967282][ T8705] bridge0: port 3(team0) entered disabled state [ 159.009128][ T8707] team0: entered promiscuous mode [ 159.014216][ T8707] team_slave_0: entered promiscuous mode [ 159.026575][ T8707] team_slave_1: entered promiscuous mode [ 159.034231][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.041951][ T8707] bridge0: port 3(team0) entered blocking state [ 159.048774][ T8707] bridge0: port 3(team0) entered disabled state [ 159.063911][ T8707] team0: entered allmulticast mode [ 159.069561][ T8707] team_slave_0: entered allmulticast mode [ 159.076601][ T8707] team_slave_1: entered allmulticast mode [ 159.082452][ T8707] vlan2: entered allmulticast mode [ 159.090470][ T8713] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.816'. [ 159.100023][ T8707] batadv0: entered allmulticast mode [ 159.107555][ T8707] bridge0: port 3(team0) entered blocking state [ 159.113928][ T8707] bridge0: port 3(team0) entered forwarding state [ 159.159163][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.193230][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.200423][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.233462][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.240651][ T7876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.485490][ T5838] Bluetooth: hci0: command tx timeout [ 159.611860][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.728309][ T8587] veth0_vlan: entered promiscuous mode [ 159.791219][ T8587] veth1_vlan: entered promiscuous mode [ 159.879229][ T8587] veth0_macvtap: entered promiscuous mode [ 159.910014][ T8587] veth1_macvtap: entered promiscuous mode [ 159.942119][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.984925][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.007887][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.030578][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 160.039483][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.056007][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.091593][ T8747] netlink: 'syz.0.828': attribute type 10 has an invalid length. [ 160.141170][ T8749] netlink: 'syz.0.828': attribute type 10 has an invalid length. [ 160.169139][ T8747] bridge0: port 3(team0) entered disabled state [ 160.210833][ T8749] netlink: 2 bytes leftover after parsing attributes in process `syz.0.828'. [ 160.259918][ T8747] team0: left allmulticast mode [ 160.292863][ T8747] team_slave_0: left allmulticast mode [ 160.355090][ T8747] team_slave_1: left allmulticast mode [ 160.373906][ T8747] vlan2: left allmulticast mode [ 160.391355][ T8747] batadv0: left allmulticast mode [ 160.407132][ T8747] team0: left promiscuous mode [ 160.459283][ T8758] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.828'. [ 160.497682][ T8747] team_slave_0: left promiscuous mode [ 160.520475][ T8747] team_slave_1: left promiscuous mode [ 160.543402][ T8747] bridge0: port 3(team0) entered disabled state [ 160.604023][ T8749] team0: entered promiscuous mode [ 160.609455][ T8749] team_slave_0: entered promiscuous mode [ 160.626348][ T8749] team_slave_1: entered promiscuous mode [ 160.647968][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.655222][ T8749] bridge0: port 3(team0) entered blocking state [ 160.661682][ T8749] bridge0: port 3(team0) entered disabled state [ 160.670079][ T8749] team0: entered allmulticast mode [ 160.676457][ T8749] team_slave_0: entered allmulticast mode [ 160.697239][ T8749] team_slave_1: entered allmulticast mode [ 160.714848][ T8749] vlan2: entered allmulticast mode [ 160.722394][ T8749] batadv0: entered allmulticast mode [ 160.744464][ T8749] bridge0: port 3(team0) entered blocking state [ 160.750979][ T8749] bridge0: port 3(team0) entered forwarding state [ 160.795410][ T8756] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 160.849391][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.914722][ T8587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.934880][ T8587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.954038][ T8587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.969812][ T8587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.146431][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.173394][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.183345][ T8775] netlink: 830 bytes leftover after parsing attributes in process `syz.3.836'. [ 161.236128][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.246367][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.248480][ T8781] netlink: 'syz.4.839': attribute type 10 has an invalid length. [ 161.300353][ T8781] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.337798][ T8781] bond0: (slave team0): Enslaving as an active interface with an up link [ 161.371260][ T8783] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:607d:a0ff:fe90:355f error=-28 [ 161.507113][ T8793] FAULT_INJECTION: forcing a failure. [ 161.507113][ T8793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.541176][ T8793] CPU: 0 UID: 0 PID: 8793 Comm: syz.2.842 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 161.541203][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.541213][ T8793] Call Trace: [ 161.541220][ T8793] [ 161.541226][ T8793] dump_stack_lvl+0x241/0x360 [ 161.541251][ T8793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.541268][ T8793] ? __pfx__printk+0x10/0x10 [ 161.541285][ T8793] ? __pfx_lock_release+0x10/0x10 [ 161.541315][ T8793] should_fail_ex+0x40a/0x550 [ 161.541342][ T8793] _copy_from_iter+0x1df/0x1c40 [ 161.541360][ T8793] ? __virt_addr_valid+0x183/0x530 [ 161.541378][ T8793] ? __pfx_lock_release+0x10/0x10 [ 161.541405][ T8793] ? __alloc_skb+0x28f/0x440 [ 161.541420][ T8793] ? __pfx__copy_from_iter+0x10/0x10 [ 161.541439][ T8793] ? __virt_addr_valid+0x183/0x530 [ 161.541453][ T8793] ? __virt_addr_valid+0x183/0x530 [ 161.541479][ T8793] ? __virt_addr_valid+0x45f/0x530 [ 161.541495][ T8793] ? __phys_addr_symbol+0x2f/0x70 [ 161.541510][ T8793] ? __check_object_size+0x47a/0x730 [ 161.541535][ T8793] netlink_sendmsg+0x742/0xcb0 [ 161.541568][ T8793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.541593][ T8793] ? aa_sock_msg_perm+0x91/0x160 [ 161.541620][ T8793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.541637][ T8793] __sock_sendmsg+0x221/0x270 [ 161.541658][ T8793] ____sys_sendmsg+0x53a/0x860 [ 161.541681][ T8793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.541695][ T8793] ? __fget_files+0x2a/0x410 [ 161.541719][ T8793] ? __fget_files+0x2a/0x410 [ 161.541745][ T8793] __sys_sendmsg+0x269/0x350 [ 161.541765][ T8793] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.541794][ T8793] ? do_sys_openat2+0x17a/0x1d0 [ 161.541839][ T8793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.541862][ T8793] ? do_syscall_64+0x100/0x230 [ 161.541884][ T8793] ? do_syscall_64+0xb6/0x230 [ 161.541905][ T8793] do_syscall_64+0xf3/0x230 [ 161.541923][ T8793] ? clear_bhb_loop+0x35/0x90 [ 161.541945][ T8793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.541964][ T8793] RIP: 0033:0x7f9ab9f8d169 [ 161.541979][ T8793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.541992][ T8793] RSP: 002b:00007f9abad60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.542011][ T8793] RAX: ffffffffffffffda RBX: 00007f9aba1a5fa0 RCX: 00007f9ab9f8d169 [ 161.542023][ T8793] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 161.542034][ T8793] RBP: 00007f9abad60090 R08: 0000000000000000 R09: 0000000000000000 [ 161.542044][ T8793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.542054][ T8793] R13: 0000000000000000 R14: 00007f9aba1a5fa0 R15: 00007fff18c6f708 [ 161.542080][ T8793] [ 161.810915][ T5838] Bluetooth: hci0: command tx timeout [ 161.854379][ T8783] infiniband syz1: set down [ 161.859402][ T8783] infiniband syz1: added team_slave_0 [ 161.902446][ T8783] RDS/IB: syz1: added [ 161.907116][ T8783] smc: adding ib device syz1 with port count 1 [ 161.914468][ T8783] smc: ib device syz1 port 1 has pnetid [ 161.931898][ T8797] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 161.983136][ T8800] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 161.994633][ T8800] netlink: 2 bytes leftover after parsing attributes in process `syz.3.844'. [ 162.167229][ T8797] batman_adv: batadv0: Adding interface: team0 [ 162.173441][ T8797] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.246096][ T8797] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 162.274979][ T8800] team0: entered promiscuous mode [ 162.280046][ T8800] team_slave_0: entered promiscuous mode [ 162.309047][ T8800] team_slave_1: entered promiscuous mode [ 162.316037][ T8797] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.844'. [ 162.339953][ T8800] bond6: entered promiscuous mode [ 162.345406][ T8800] veth1_macvtap: entered promiscuous mode [ 162.375583][ T8800] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.385179][ T8800] batman_adv: batadv0: Interface activated: team0 [ 162.392411][ T8800] batman_adv: batadv0: Interface deactivated: team0 [ 162.405929][ T8800] batman_adv: batadv0: Removing interface: team0 [ 162.414057][ T8800] bridge0: port 4(team0) entered blocking state [ 162.421243][ T8800] bridge0: port 4(team0) entered disabled state [ 162.428509][ T8800] team0: entered allmulticast mode [ 162.433911][ T8800] team_slave_0: entered allmulticast mode [ 162.440237][ T8800] team_slave_1: entered allmulticast mode [ 162.447059][ T8800] bond6: entered allmulticast mode [ 162.452278][ T8800] veth1_macvtap: entered allmulticast mode [ 162.476768][ T8805] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 162.986438][ T1313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.363484][ T1313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.444632][ T1313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.543691][ T1313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.662253][ T1313] bridge_slave_1: left allmulticast mode [ 163.671696][ T1313] bridge_slave_1: left promiscuous mode [ 163.680268][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.692822][ T1313] bridge_slave_0: left allmulticast mode [ 163.701286][ T1313] bridge_slave_0: left promiscuous mode [ 163.710673][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.295851][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.325716][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.359396][ T1313] bond0 (unregistering): Released all slaves [ 164.386270][ T8824] tipc: Started in network mode [ 164.420559][ T8824] tipc: Node identity f6bcb3222a2, cluster identity 4711 [ 164.441673][ T8824] tipc: Enabled bearer , priority 0 [ 164.567271][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.579151][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.591254][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.599847][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.609791][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.618771][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.731600][ T8828] syzkaller0: entered promiscuous mode [ 164.737458][ T8828] syzkaller0: entered allmulticast mode [ 164.745769][ T8825] tipc: Disabling bearer [ 164.992022][ T8848] netlink: 'syz.2.854': attribute type 5 has an invalid length. [ 165.164671][ T8856] netlink: 76 bytes leftover after parsing attributes in process `syz.2.855'. [ 166.686847][ T5838] Bluetooth: hci0: command tx timeout [ 167.159854][ T1313] hsr_slave_0: left promiscuous mode [ 167.167784][ T1313] hsr_slave_1: left promiscuous mode [ 167.186647][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.194096][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.218881][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.237702][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.302172][ T1313] veth1_macvtap: left promiscuous mode [ 167.303161][ T8869] Bluetooth: MGMT ver 1.23 [ 167.341149][ T8869] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 167.356613][ T1313] veth0_macvtap: left promiscuous mode [ 167.362297][ T1313] veth1_vlan: left promiscuous mode [ 167.375364][ T1313] veth0_vlan: left promiscuous mode [ 167.900378][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 167.942409][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 168.375433][ T8875] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 168.475234][ T8881] netlink: 'syz.3.863': attribute type 10 has an invalid length. [ 168.523889][ T8881] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 168.555277][ T8881] netlink: 224 bytes leftover after parsing attributes in process `syz.3.863'. [ 168.572747][ T8887] netlink: 48 bytes leftover after parsing attributes in process `syz.3.863'. [ 168.697291][ T8894] [ 168.699670][ T8894] ====================================================== [ 168.706710][ T8894] WARNING: possible circular locking dependency detected [ 168.713745][ T8894] 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 Not tainted [ 168.720859][ T8894] ------------------------------------------------------ [ 168.727892][ T8894] syz.4.868/8894 is trying to acquire lock: [ 168.733795][ T8894] ffff88805de5cd28 (&dev_instance_lock_key#12){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 168.744105][ T8894] [ 168.744105][ T8894] but task is already holding lock: [ 168.751481][ T8894] ffff88805dc74d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 168.761184][ T8894] [ 168.761184][ T8894] which lock already depends on the new lock. [ 168.761184][ T8894] [ 168.771597][ T8894] [ 168.771597][ T8894] the existing dependency chain (in reverse order) is: [ 168.780621][ T8894] [ 168.780621][ T8894] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 168.789105][ T8894] lock_acquire+0x1ed/0x550 [ 168.794118][ T8894] __mutex_lock+0x19c/0x1010 [ 168.797072][ T5838] Bluetooth: hci0: command tx timeout [ 168.799214][ T8894] __dev_open+0x5cb/0x8a0 [ 168.799240][ T8894] netif_open+0xae/0x1b0 [ 168.799259][ T8894] dev_open+0x13e/0x260 [ 168.818903][ T8894] team_add_slave+0xabe/0x28a0 [ 168.824217][ T8894] do_set_master+0x579/0x730 [ 168.829426][ T8894] rtnl_newlink_create+0x6e6/0xbd0 [ 168.835069][ T8894] rtnl_newlink+0x167a/0x1d90 [ 168.840282][ T8894] rtnetlink_rcv_msg+0x791/0xcf0 [ 168.845752][ T8894] netlink_rcv_skb+0x206/0x480 [ 168.851049][ T8894] netlink_unicast+0x7f6/0x990 [ 168.856321][ T8894] netlink_sendmsg+0x8de/0xcb0 [ 168.861626][ T8894] __sock_sendmsg+0x221/0x270 [ 168.866824][ T8894] ____sys_sendmsg+0x53a/0x860 [ 168.872101][ T8894] __sys_sendmsg+0x269/0x350 [ 168.877206][ T8894] do_syscall_64+0xf3/0x230 [ 168.882233][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.888641][ T8894] [ 168.888641][ T8894] -> #1 (team->team_lock_key){+.+.}-{4:4}: [ 168.896635][ T8894] lock_acquire+0x1ed/0x550 [ 168.901694][ T8894] __mutex_lock+0x19c/0x1010 [ 168.906827][ T8894] team_set_mac_address+0x122/0x280 [ 168.912582][ T8894] netif_set_mac_address+0x327/0x510 [ 168.918392][ T8894] do_setlink+0xaa6/0x40f0 [ 168.923320][ T8894] rtnl_newlink+0x15a6/0x1d90 [ 168.928566][ T8894] rtnetlink_rcv_msg+0x791/0xcf0 [ 168.934018][ T8894] netlink_rcv_skb+0x206/0x480 [ 168.939297][ T8894] netlink_unicast+0x7f6/0x990 [ 168.944576][ T8894] netlink_sendmsg+0x8de/0xcb0 [ 168.949857][ T8894] __sock_sendmsg+0x221/0x270 [ 168.955051][ T8894] __sys_sendto+0x363/0x4c0 [ 168.960072][ T8894] __x64_sys_sendto+0xde/0x100 [ 168.965356][ T8894] do_syscall_64+0xf3/0x230 [ 168.970392][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.976797][ T8894] [ 168.976797][ T8894] -> #0 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 168.985302][ T8894] validate_chain+0x18ef/0x5920 [ 168.990660][ T8894] __lock_acquire+0x1397/0x2100 [ 168.996042][ T8894] lock_acquire+0x1ed/0x550 [ 169.001073][ T8894] __mutex_lock+0x19c/0x1010 [ 169.006171][ T8894] dev_set_mac_address+0x2a/0x50 [ 169.011616][ T8894] bond_set_mac_address+0x28e/0x830 [ 169.017345][ T8894] netif_set_mac_address+0x327/0x510 [ 169.023139][ T8894] do_setlink+0xaa6/0x40f0 [ 169.028067][ T8894] rtnl_newlink+0x15a6/0x1d90 [ 169.033256][ T8894] rtnetlink_rcv_msg+0x791/0xcf0 [ 169.038704][ T8894] netlink_rcv_skb+0x206/0x480 [ 169.043997][ T8894] netlink_unicast+0x7f6/0x990 [ 169.049275][ T8894] netlink_sendmsg+0x8de/0xcb0 [ 169.054549][ T8894] __sock_sendmsg+0x221/0x270 [ 169.059735][ T8894] ____sys_sendmsg+0x53a/0x860 [ 169.065038][ T8894] __sys_sendmsg+0x269/0x350 [ 169.070137][ T8894] do_syscall_64+0xf3/0x230 [ 169.075147][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.081557][ T8894] [ 169.081557][ T8894] other info that might help us debug this: [ 169.081557][ T8894] [ 169.091769][ T8894] Chain exists of: [ 169.091769][ T8894] &dev_instance_lock_key#12 --> team->team_lock_key --> &dev_instance_lock_key#2 [ 169.091769][ T8894] [ 169.106969][ T8894] Possible unsafe locking scenario: [ 169.106969][ T8894] [ 169.114408][ T8894] CPU0 CPU1 [ 169.119761][ T8894] ---- ---- [ 169.125107][ T8894] lock(&dev_instance_lock_key#2); [ 169.130299][ T8894] lock(team->team_lock_key); [ 169.137566][ T8894] lock(&dev_instance_lock_key#2); [ 169.145284][ T8894] lock(&dev_instance_lock_key#12); [ 169.150584][ T8894] [ 169.150584][ T8894] *** DEADLOCK *** [ 169.150584][ T8894] [ 169.158710][ T8894] 2 locks held by syz.4.868/8894: [ 169.163713][ T8894] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 169.172756][ T8894] #1: ffff88805dc74d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 169.182873][ T8894] [ 169.182873][ T8894] stack backtrace: [ 169.188742][ T8894] CPU: 0 UID: 0 PID: 8894 Comm: syz.4.868 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 169.188754][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.188761][ T8894] Call Trace: [ 169.188766][ T8894] [ 169.188771][ T8894] dump_stack_lvl+0x241/0x360 [ 169.188786][ T8894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.188796][ T8894] ? __pfx__printk+0x10/0x10 [ 169.188807][ T8894] print_circular_bug+0x13a/0x1b0 [ 169.188820][ T8894] check_noncircular+0x36a/0x4a0 [ 169.188832][ T8894] ? __pfx_check_noncircular+0x10/0x10 [ 169.188842][ T8894] ? queued_spin_lock_slowpath+0x42/0x50 [ 169.188850][ T8894] ? lockdep_lock+0x1b0/0x2b0 [ 169.188866][ T8894] validate_chain+0x18ef/0x5920 [ 169.188882][ T8894] ? __pfx_validate_chain+0x10/0x10 [ 169.188892][ T8894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.188907][ T8894] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 169.188919][ T8894] ? lockdep_hardirqs_on+0x99/0x150 [ 169.188930][ T8894] ? mark_lock+0x9a/0x360 [ 169.188940][ T8894] ? __lock_acquire+0x1397/0x2100 [ 169.188956][ T8894] ? mark_lock+0x9a/0x360 [ 169.188965][ T8894] __lock_acquire+0x1397/0x2100 [ 169.188982][ T8894] lock_acquire+0x1ed/0x550 [ 169.188995][ T8894] ? dev_set_mac_address+0x2a/0x50 [ 169.189006][ T8894] ? __pfx_lock_acquire+0x10/0x10 [ 169.189020][ T8894] ? __pfx___might_resched+0x10/0x10 [ 169.189033][ T8894] ? dev_set_mac_address+0x42/0x50 [ 169.189042][ T8894] ? __pfx_lock_release+0x10/0x10 [ 169.189057][ T8894] __mutex_lock+0x19c/0x1010 [ 169.189068][ T8894] ? dev_set_mac_address+0x2a/0x50 [ 169.189076][ T8894] ? notifier_call_chain+0x3cc/0x3f0 [ 169.189090][ T8894] ? __mutex_unlock_slowpath+0x227/0x800 [ 169.189104][ T8894] ? dev_set_mac_address+0x2a/0x50 [ 169.189119][ T8894] ? __pfx___mutex_lock+0x10/0x10 [ 169.189136][ T8894] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.189157][ T8894] ? net_generic+0x1f/0x240 [ 169.189172][ T8894] ? net_generic+0x1f0/0x240 [ 169.189183][ T8894] dev_set_mac_address+0x2a/0x50 [ 169.189192][ T8894] bond_set_mac_address+0x28e/0x830 [ 169.189206][ T8894] ? __pfx_bond_set_mac_address+0x10/0x10 [ 169.189216][ T8894] ? hsr_netdev_notify+0x295/0xb50 [ 169.189231][ T8894] ? notifier_call_chain+0x15a/0x3f0 [ 169.189244][ T8894] ? notifier_call_chain+0x3cc/0x3f0 [ 169.189258][ T8894] netif_set_mac_address+0x327/0x510 [ 169.189269][ T8894] ? __pfx_netif_set_mac_address+0x10/0x10 [ 169.189279][ T8894] ? rcu_is_watching+0x15/0xb0 [ 169.189289][ T8894] ? trace_kmalloc+0x1f/0xd0 [ 169.189302][ T8894] ? do_setlink+0x7a7/0x40f0 [ 169.189318][ T8894] do_setlink+0xaa6/0x40f0 [ 169.189336][ T8894] ? mark_lock+0x9a/0x360 [ 169.189345][ T8894] ? __pfx_do_setlink+0x10/0x10 [ 169.189358][ T8894] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 169.189373][ T8894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.189388][ T8894] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 169.189396][ T8894] ? lockdep_hardirqs_on+0x99/0x150 [ 169.189406][ T8894] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 169.189415][ T8894] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.189425][ T8894] ? rcu_is_watching+0x15/0xb0 [ 169.189435][ T8894] ? __mutex_lock+0xba3/0x1010 [ 169.189446][ T8894] ? __mutex_lock+0x602/0x1010 [ 169.189458][ T8894] ? rtnl_newlink+0xc4c/0x1d90 [ 169.189471][ T8894] ? __pfx___mutex_lock+0x10/0x10 [ 169.189483][ T8894] ? ns_capable+0x8a/0xf0 [ 169.189494][ T8894] ? rtnl_link_get_net_capable+0x168/0x340 [ 169.189509][ T8894] rtnl_newlink+0x15a6/0x1d90 [ 169.189526][ T8894] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.189538][ T8894] ? __pfx_validate_chain+0x10/0x10 [ 169.189552][ T8894] ? validate_chain+0x11e/0x5920 [ 169.189561][ T8894] ? __pfx_lock_acquire+0x10/0x10 [ 169.189575][ T8894] ? __pfx_lock_release+0x10/0x10 [ 169.189589][ T8894] ? __pfx_validate_chain+0x10/0x10 [ 169.189599][ T8894] ? mark_lock+0x9a/0x360 [ 169.189608][ T8894] ? __lock_acquire+0x1397/0x2100 [ 169.189628][ T8894] ? __pfx_lock_release+0x10/0x10 [ 169.189644][ T8894] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.189657][ T8894] rtnetlink_rcv_msg+0x791/0xcf0 [ 169.189676][ T8894] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 169.189689][ T8894] ? __lock_acquire+0x1397/0x2100 [ 169.189703][ T8894] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.189719][ T8894] netlink_rcv_skb+0x206/0x480 [ 169.189733][ T8894] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.189746][ T8894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.189763][ T8894] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.189776][ T8894] netlink_unicast+0x7f6/0x990 [ 169.189790][ T8894] ? __pfx_netlink_unicast+0x10/0x10 [ 169.189800][ T8894] ? __virt_addr_valid+0x45f/0x530 [ 169.189809][ T8894] ? __phys_addr_symbol+0x2f/0x70 [ 169.189817][ T8894] ? __check_object_size+0x47a/0x730 [ 169.189831][ T8894] netlink_sendmsg+0x8de/0xcb0 [ 169.189846][ T8894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.189860][ T8894] ? aa_sock_msg_perm+0x91/0x160 [ 169.189876][ T8894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.189888][ T8894] __sock_sendmsg+0x221/0x270 [ 169.189902][ T8894] ____sys_sendmsg+0x53a/0x860 [ 169.189915][ T8894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.189925][ T8894] ? __fget_files+0x2a/0x410 [ 169.189939][ T8894] ? __fget_files+0x2a/0x410 [ 169.189953][ T8894] __sys_sendmsg+0x269/0x350 [ 169.189964][ T8894] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.189982][ T8894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.189996][ T8894] ? do_syscall_64+0x100/0x230 [ 169.190008][ T8894] ? do_syscall_64+0xb6/0x230 [ 169.190019][ T8894] do_syscall_64+0xf3/0x230 [ 169.190030][ T8894] ? clear_bhb_loop+0x35/0x90 [ 169.190044][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.190058][ T8894] RIP: 0033:0x7fb47358d169 [ 169.190067][ T8894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.190075][ T8894] RSP: 002b:00007fb4713f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.190086][ T8894] RAX: ffffffffffffffda RBX: 00007fb4737a5fa0 RCX: 00007fb47358d169 [ 169.190093][ T8894] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 0000000000000003 [ 169.190099][ T8894] RBP: 00007fb47360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.190105][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.190111][ T8894] R13: 0000000000000000 R14: 00007fb4737a5fa0 R15: 00007ffe09256ca8 [ 169.190120][ T8894] [ 169.803828][ T8894] bond0: entered promiscuous mode [ 169.809001][ T8894] bond_slave_0: entered promiscuous mode [ 169.815163][ T8894] bond_slave_1: entered promiscuous mode [ 169.821055][ T8894] team0: entered promiscuous mode [ 169.827428][ T8894] team_slave_0: entered promiscuous mode [ 169.833265][ T8894] team_slave_1: entered promiscuous mode [ 169.849037][ T8894] vlan2: entered promiscuous mode [ 169.860150][ T8833] chnl_net:caif_netlink_parms(): no params data found [ 169.934048][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.941373][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.949209][ T8833] bridge_slave_0: entered allmulticast mode [ 169.964301][ T8833] bridge_slave_0: entered promiscuous mode [ 169.973476][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.980694][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.988099][ T8833] bridge_slave_1: entered allmulticast mode [ 169.994503][ T8833] bridge_slave_1: entered promiscuous mode [ 170.016914][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.027709][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.050092][ T8833] team0: Port device team_slave_0 added [ 170.057242][ T8833] team0: Port device team_slave_1 added [ 170.074629][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.082260][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.108820][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.120552][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.127738][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.154103][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.178632][ T8833] hsr_slave_0: entered promiscuous mode [ 170.184656][ T8833] hsr_slave_1: entered promiscuous mode [ 170.190920][ T8833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.198899][ T8833] Cannot create hsr debugfs directory [ 170.420944][ T8833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.429257][ T8833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.438740][ T8833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.456516][ T8833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.471642][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.478749][ T8833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.486128][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.493197][ T8833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.527018][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.539025][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.547554][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.559561][ T8833] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.569532][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.576655][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.588770][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.595866][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.679859][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.702596][ T8833] veth0_vlan: entered promiscuous mode [ 170.712893][ T8833] veth1_vlan: entered promiscuous mode [ 170.730858][ T8833] veth0_macvtap: entered promiscuous mode [ 170.739394][ T8833] veth1_macvtap: entered promiscuous mode [ 170.751440][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.762089][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.772669][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.783240][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.794378][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.805135][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.816924][ T8833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.825732][ T8833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.834426][ T8833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.843789][ T8833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.853023][ T5838] Bluetooth: hci0: command tx timeout [ 170.870422][ T8833] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 170.887444][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.888895][ T8833] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 170.895460][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.918315][ T3586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.926448][ T3586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.878687][ T1313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.519704][ T1313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.589508][ T1313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.649398][ T1313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.738008][ T1313] bridge_slave_1: left allmulticast mode [ 174.743709][ T1313] bridge_slave_1: left promiscuous mode [ 174.752721][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.762355][ T1313] bridge_slave_0: left allmulticast mode [ 174.770160][ T1313] bridge_slave_0: left promiscuous mode [ 174.776310][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.881854][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.891955][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.903115][ T1313] bond0 (unregistering): Released all slaves [ 175.142577][ T1313] hsr_slave_0: left promiscuous mode [ 175.171307][ T1313] hsr_slave_1: left promiscuous mode [ 175.183790][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.199983][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.208269][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.216295][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.225788][ T1313] veth1_macvtap: left promiscuous mode [ 175.231306][ T1313] veth0_macvtap: left promiscuous mode [ 175.237109][ T1313] veth1_vlan: left promiscuous mode [ 175.242372][ T1313] veth0_vlan: left promiscuous mode [ 175.366899][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 175.383476][ T1313] team0 (unregistering): Port device team_slave_0 removed