last executing test programs: 40.088997737s ago: executing program 1 (id=931): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d96600000000000000000000000000000000000000200000000000001ae0000000000000feffffff01000000110000000000000081006263736630876289c05f0f1da93f000000000000000002000000ffff00000000626f6e643000000000000000000000007600000000010000005c121d00000000ffffffffffff0000000000000000000000002000000000000000d0000000d000000000010000766c616e000000ff030000002000000000000000000000000000000000000000080000000000007f0000000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000706d10020041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaacc030000000000aaaaaaaaaaaa00000000000000007000000071000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaa044c1d19af00d81e0000000000000000000000800000000000000000000000000000000000000000400000000000000002000000ffffffff00000000"]}, 0x2b0) sendto$inet(r4, &(0x7f0000000080)="6ddf68ce8f73a4f83dd7215e655c5a317358878e6d4f00ecdb1a94c8cf3b8c0009d81b4875a4257dba82d045b1d667887b519bbee321427ea8fe000b62c526d8aae9a2943e15a44534fc78faa4bd767131927bcfb01a3c3d4d06a37b53932c07c879af2bc82bf4f821aa1d98c4e1e9a2027aca5ac63ba5f9a510a97c34d334458ac2d106b50256352ce968bde995ab754a7d9bb2716c0c9f6caf018e32beb4e33b0812df54a55be81fb2524d", 0xac, 0x80, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @remote}}, 0x1, 0xab79, 0x401, 0x4, 0x1, 0x5, 0x59}, &(0x7f0000000240)=0x9c) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 40.08877682s ago: executing program 1 (id=931): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) sendto$inet(r4, &(0x7f0000000080)="6ddf68ce8f73a4f83dd7215e655c5a317358878e6d4f00ecdb1a94c8cf3b8c0009d81b4875a4257dba82d045b1d667887b519bbee321427ea8fe000b62c526d8aae9a2943e15a44534fc78faa4bd767131927bcfb01a3c3d4d06a37b53932c07c879af2bc82bf4f821aa1d98c4e1e9a2027aca5ac63ba5f9a510a97c34d334458ac2d106b50256352ce968bde995ab754a7d9bb2716c0c9f6caf018e32beb4e33b0812df54a55be81fb2524d", 0xac, 0x80, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @remote}}, 0x1, 0xab79, 0x401, 0x4, 0x1, 0x5, 0x59}, &(0x7f0000000240)=0x9c) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 40.088568492s ago: executing program 1 (id=931): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) sendto$inet(r4, &(0x7f0000000080)="6ddf68ce8f73a4f83dd7215e655c5a317358878e6d4f00ecdb1a94c8cf3b8c0009d81b4875a4257dba82d045b1d667887b519bbee321427ea8fe000b62c526d8aae9a2943e15a44534fc78faa4bd767131927bcfb01a3c3d4d06a37b53932c07c879af2bc82bf4f821aa1d98c4e1e9a2027aca5ac63ba5f9a510a97c34d334458ac2d106b50256352ce968bde995ab754a7d9bb2716c0c9f6caf018e32beb4e33b0812df54a55be81fb2524d", 0xac, 0x80, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @remote}}, 0x1, 0xab79, 0x401, 0x4, 0x1, 0x5, 0x59}, &(0x7f0000000240)=0x9c) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 37.110871086s ago: executing program 1 (id=931): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d96600000000000000000000000000000000000000200000000000001ae0000000000000feffffff01000000110000000000000081006263736630876289c05f0f1da93f000000000000000002000000ffff00000000626f6e643000000000000000000000007600000000010000005c121d00000000ffffffffffff0000000000000000000000002000000000000000d0000000d000000000010000766c616e000000ff030000002000000000000000000000000000000000000000080000000000007f0000000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000706d10020041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaacc030000000000aaaaaaaaaaaa00000000000000007000000071000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaa044c1d19af00d81e0000000000000000000000800000000000000000000000000000000000000000400000000000000002000000ffffffff00000000"]}, 0x2b0) sendto$inet(r4, &(0x7f0000000080)="6ddf68ce8f73a4f83dd7215e655c5a317358878e6d4f00ecdb1a94c8cf3b8c0009d81b4875a4257dba82d045b1d667887b519bbee321427ea8fe000b62c526d8aae9a2943e15a44534fc78faa4bd767131927bcfb01a3c3d4d06a37b53932c07c879af2bc82bf4f821aa1d98c4e1e9a2027aca5ac63ba5f9a510a97c34d334458ac2d106b50256352ce968bde995ab754a7d9bb2716c0c9f6caf018e32beb4e33b0812df54a55be81fb2524d", 0xac, 0x80, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @remote}}, 0x1, 0xab79, 0x401, 0x4, 0x1, 0x5, 0x59}, &(0x7f0000000240)=0x9c) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 23.9605728s ago: executing program 1 (id=931): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) sendto$inet(r4, &(0x7f0000000080)="6ddf68ce8f73a4f83dd7215e655c5a317358878e6d4f00ecdb1a94c8cf3b8c0009d81b4875a4257dba82d045b1d667887b519bbee321427ea8fe000b62c526d8aae9a2943e15a44534fc78faa4bd767131927bcfb01a3c3d4d06a37b53932c07c879af2bc82bf4f821aa1d98c4e1e9a2027aca5ac63ba5f9a510a97c34d334458ac2d106b50256352ce968bde995ab754a7d9bb2716c0c9f6caf018e32beb4e33b0812df54a55be81fb2524d", 0xac, 0x80, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @remote}}, 0x1, 0xab79, 0x401, 0x4, 0x1, 0x5, 0x59}, &(0x7f0000000240)=0x9c) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 14.139877978s ago: executing program 1 (id=931): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) sendto$inet(r4, &(0x7f0000000080)="6ddf68ce8f73a4f83dd7215e655c5a317358878e6d4f00ecdb1a94c8cf3b8c0009d81b4875a4257dba82d045b1d667887b519bbee321427ea8fe000b62c526d8aae9a2943e15a44534fc78faa4bd767131927bcfb01a3c3d4d06a37b53932c07c879af2bc82bf4f821aa1d98c4e1e9a2027aca5ac63ba5f9a510a97c34d334458ac2d106b50256352ce968bde995ab754a7d9bb2716c0c9f6caf018e32beb4e33b0812df54a55be81fb2524d", 0xac, 0x80, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={r7, 0x2, 0x4, "a5175f65"}, 0xc) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @remote}}, 0x1, 0xab79, 0x401, 0x4, 0x1, 0x5, 0x59}, &(0x7f0000000240)=0x9c) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2.061303848s ago: executing program 3 (id=2265): pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5574ccda48575b25, 0x5, 0x5, 0x1000f, 0x0, r0, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18010000000000000000000003000000850000006d00000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYRES16=r3, @ANYRES16=r2, @ANYRESHEX=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='rpm_return_int\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r6, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRES32, @ANYRES8=r1, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r8}, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000200"/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='sched_switch\x00', r10}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702500000000fe1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0xd80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r12, 0x8, 0x0, 0x0, 0x2, 0x4, 0x15c2, 0x5886, 0x801, 0x6, 0x8, 'syz0\x00'}) r13 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002bbd7000000008004400000008000300", @ANYRES32=r17, @ANYBLOB="0c0023800800090008f4e623e8ae3baa0e000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008054}, 0x8800) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x20000000) 1.851389662s ago: executing program 3 (id=2267): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b151000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000021400128009000100626f6e64000000000400028008001f0001"], 0x3c}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9317ebe44b85d1f2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x3f9, 0x1, 0x70bd26, 0x25dfdbfe, {0x1, 0xffffffff}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x84000}, 0x4084) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2300030000000000280012800b00010069703667726500b52618e7ca9562af49f6d73987602600180002c01400070020"], 0x48}}, 0x0) 1.78117489s ago: executing program 2 (id=2268): syz_emit_ethernet(0x36, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) (async) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288ca6d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYRES8=r2], 0x1c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYRES8=r2], 0x1c}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0x33, 0x27) bind$vsock_stream(r5, &(0x7f0000000940), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$sock_int(r6, 0x28, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYRESOCT=r2], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10) (async) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10) sendto$inet(r8, &(0x7f00000006c0)="0adc6511b917c667764b0192f690b8bb21e787ef90a83cd3e43e46d198f7b5157992b3d8ab348f8365e6b6b87da30b5f34f586c860fa0647ed2b3381a8f15e26f1742616cb36114fc5fa07828f73788d8af78a2d6146de4888bce3dc569c8aa0a8613516fac3ca0f7e8d15d3361bf5a55d90abc9da4dcb595039f83ba7d2da187ac6d15b", 0x84, 0x0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, r7, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, r7, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000000080000000800000500000022020000", @ANYRES32=r10, @ANYBLOB="0500"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="05000100050000000500"/28], 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) socket$nl_route(0x10, 0x3, 0x0) 1.779256029s ago: executing program 0 (id=2269): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x9) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r3, &(0x7f0000000780)="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", 0x1000, 0x40, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x4, {0x2, 0x4e23, @private=0xa010102}}, 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x44}}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x2, 0x400000000000003, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x7}}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0xfffffffffffffffe}, 0x0, 0x0) 1.622733249s ago: executing program 3 (id=2270): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x5, 0xe, 0x9}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004a40)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELSET={0x14}], {0x14, 0x3f8}}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={0x1, &(0x7f00000002c0)="a0eec1905da45cd45448d113cee855a16d52cf8312c670eca6eba52bed18607acb1b357c2376063bbce6bcf02eaf3d9a721f00dd0f51aa8a9de305b8bf14a1bdc5f5cb707f1018c1c548c577b611bc0e14422f0895dfa23b", &(0x7f0000000340)=""/91, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.482095148s ago: executing program 2 (id=2271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000080)={r1}, 0x8) 1.389237828s ago: executing program 3 (id=2272): unshare(0x480) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000005980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3, 0x0, 0x80000001}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000006200)={&(0x7f0000006140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000fbdbdf25070000000900bb000300000005003800000000000a00090000000000000000000c002b0004000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000fe00000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="18004000000001040000000000000000020000000400018010708a637e169810af912a8a1048a93e3ad0e3e48755a015eab1c7473e4f0100000076ae5a56cdc9c44eee469f0ed2ea7a483519f87a19d5e880f8a8fed347f721470320a82ca2f50376fbeb36d2773e4382081481387a69ca3309d8fc9f02fb0daeb839cdd59e0df6479902646d956447bc7f82d562a1f324"], 0x18}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r6, &(0x7f0000002fc0), 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000a3ae425153d1759dcf7e3bd595a2b2fa2a0fb1911f8711d449e3ffaa603a302c0a7479ce296c3089dbcebcf811de7a55eb8a9d76207365745b0a3fee83c5f079dce5321339a8972499", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000400000014000480050003000200000005000300010000000800020002000000"], 0x38}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x28, 0x4, 0x0, 0x0, 0x42}, 0x10) connect$llc(r7, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r8, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x42}, 0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r10, 0x1) 870.090381ms ago: executing program 4 (id=2277): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f0000000880)=""/87, 0x57}, {0x0, 0x1000000}], 0x3}}], 0x48}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x7, 0x30, r0, 0x2000) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x6, 'veth1_to_bond\x00'}) 823.476037ms ago: executing program 0 (id=2278): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001fff000000000000000000000000abd5478b44434fa0970e1405fc240038d6fa14e2427689a555986b41dc0dd728ec151f860b4f13b0ab3eb15bfe5451731029334206c745de997571f658323b570b413bb46fba342eb0f3d8d4e8c31e3cc2ed8303ee8bb491fbffb2", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000108000a00", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) 741.005317ms ago: executing program 4 (id=2279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) close(0x3) write(r5, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1200000002000000040000008200000000000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYRES32, @ANYRES16=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) close(r2) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9850, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x80) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000114000300766c616e300000000000000000000000180008800c000140"], 0xc0}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000029c0)={0x0, 0xe9, "ece97904025379ee5e2efd7ca4f78a847d4eead41bcdaa8459a1d6912ea919affc2f0863d69c031a627b113523d50383d27c8d85b06c1a61d84bbceff5a554a0be126fe74eb96fb96a4ba848f6fed6c8197c6ffbdd563e4da4ab02b2ed6a875a432699adcab561c4ab2ecf7aeba55d58675f050e2867883fabd6131b45066599dd07c6cee8eac84e61aa781aecae4d2e4cb9c84ea75f6712f2cc1e3fe3eba9c24a5f43b86d44dfc41901a4414a23cc1b67cea3e67c01b0748750dbd9becb7dd24252c826275ef7431018b2098d6ce28a7c7211146862a848cdc8ffeb5208dd60cee67ceb071437c4c9"}, &(0x7f0000002ac0)=0xf1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000002d40)={0x0, 0xe}, &(0x7f0000002d80)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000003300)={0x0, 0xffffe167, 0x5, 0xb}, &(0x7f0000003340)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000003700)={r13, @in6={{0xa, 0x4e21, 0x1, @empty, 0xff}}, 0x9, 0x3, 0x6, 0x80000000, 0x400}, &(0x7f0000002800)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000003380)={0x0, @in6={{0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}, 0xf, 0x6}, &(0x7f0000003440)=0x90) sendmmsg$inet_sctp(r7, &(0x7f00000035c0)=[{&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xfff}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000280)="09d3aeb80582159a425133a9310a94705610860d2e90e4fd7fda2960755afb3c3fb04b26409ad307feb44f4d445b7e6eb8bb27eee7c1d8a79e030a6c3e774e1cde74ee0e08b807b33c8ca85ba4fe9bf51bc7f4b075f862d375fd06a922bd4edfeb7586f3605c921ae1dc7c29fd91dfac14bb5411414fc62a7ea68dd3afec055d7983ada52f5571c88777d0b5688f8fda18bf6aaa2c92c228b8d53b7d04f9201809d72fc1", 0xa4}, {&(0x7f0000000340)="43e28fdfe34b847dec897a67ed434e3a3ae8f9d1ba0a56d25d28d81ae87182f969eca879eed0212ce006930ba966a20bfd7152cd0579d5e73de1bb137c71a3eb5b20cbd2c6f521b8888eb32145f99ac816e9318d51ce3276ca9f0ddb145067a49ad15db5deffd309b57ec0718d9e45971225e2800cd6332df6cde6a1ff55a38e918462d0de8744bbff75990d4a1a133dc995acdd50dab12017d5e056a96d9d1a3bfcb39a94a4fac382dc7e417b21b9693b7cd76c9254b2200ed456e411dc417288cfb3f1c04600dd9dd963de7e459cebbe3fc708573bf70b0d9365d6e75a39fe69fa88db33ca1d3be0b4631b1cd0ce2f93124df2ef", 0xf5}, {&(0x7f0000000440)="9438920ecdad9bbd6caced614db8cfba4d063b2556f22db92cd8145c38e307c8b4e099ef7f96e9c3dac314a3d48d7799a371b68d0f42fdbe418bedf5c94daa3f232e38042b2da55ff1867c56c48a255377ced34e8d5487f5c603ff67a47c21a0f82b2467731649cd1c921d47ef341740eeed19af1758b9cbb82ad68f98d97958fa87a41e652f3be31876", 0x8a}, {&(0x7f0000000500)="5f58473d4a0be4552f", 0x9}], 0x5, &(0x7f00000006c0), 0x0, 0x4040010}, {&(0x7f0000000540)=@in6={0xa, 0x4e21, 0x2, @local, 0x101}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)}], 0x2, &(0x7f0000002880)=ANY=[@ANYBLOB="1800"/24], 0x18, 0x4000001}, {&(0x7f00000028c0)=@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000002900)="35fbf53ddd16237667a9f18bae1b580ab39329a9525d2de4f41da93265", 0x1d}, {&(0x7f0000002940)="f9d349b79627b2f5d9de2271a135de7fc93967268f5b67a58b142020409931932059396d70411efcdf5138d4792f6fd0f0", 0x31}], 0x2, &(0x7f0000002b00)=ANY=[@ANYBLOB="20000000000000008400000008000000fe8000000000000000000000000000aa1800000000000000840000000700000000000000000000001800000000000000840000000000000000000801000000002000000000000000840000000200000009000e00b80a000000000000", @ANYRES32=r12], 0x70, 0x40800}, {&(0x7f0000002b80)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002d00)=[{&(0x7f0000002bc0)="c6bee82b150cb72e3666b7624762fb1b4d7125cf5728279b577e00c53907", 0x1e}, {&(0x7f0000002c00)="ff66f0dde42601f2a9e0d8c9c143bdad4069c7ee24c7e74f0e61e3fc83f993dca53c9b94988023fb726de1d0bf34654c46af96fbd03cb02608", 0x39}, {&(0x7f0000002c40)="a138311e23f2c3488bac85f124f109ed6f9a4186dc3012df88d00e7a8caab813d04080b891464d564ea5230fb4fa57e1bc3d2a19db7362f3a1023fdba1b889f0c6d4b7a5533fb98c924ecdeb6d23ba9ecd34d81ad0c2a85e2658bdc2ae2ef18dc3174aad8f623493245c5af90fbac1bbb059763e8ed05083f22b70bcbc21968bdcda9ff6", 0x84}], 0x3, &(0x7f0000002dc0)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000ffff0a010100180000000000000084000000070000000000000000000000200000000000000084000000020000002f0002020300000005000000", @ANYRES32=r13, @ANYBLOB="20000000000000008400000002000000011965785600000003000000", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500000030000000f7ffffff20000000000000008400000002000000050003800900000007000000", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000600"/24], 0xc8, 0x4000000}, {&(0x7f00000006c0)=@in6={0xa, 0x4e20, 0xf03, @local, 0x7ff}, 0x1c, &(0x7f0000003280)=[{&(0x7f00000037c0)="d095fb918d5e379500ba56f57efec566e2a3cf3187538df6d2a9680c865900c926731417a1e0693778a00074539ec376275e28561fb2c9b7711b74d95b07edd8c32a865dbd61710d092bd5372146b7112f6214e993f66f892369f8749c95def04bc7d56b0174890b8cf2b7689b947f3995b002fef94bb8fdd032400df24b8f9570c0b7ad51133c6c9adbd7695d05693af0092011a9c06f", 0x97}, {&(0x7f0000002f40)="5d6b0a4fe245a52846556f99fea7cbc9d21c8de89df53aae06b6a4aa4fab0a40f52c93be7f815bc7e90efae726f2a34db3cc57b9657afbfe55799d5331184145b46b09e5e8", 0x45}, {&(0x7f0000002fc0)="e5a59f9689b658db22fdbf5fba3b7d6c72ebb1c56c423873c95f79c361a4bf444809bef181ea2f9267e5599f51ecfeb404b3e2035f", 0x35}, {&(0x7f0000003000)="3dbeef0ab9c8d586aa8d6f17c61dc4253855e3cd8c703ec50cb3dcab5b43eb55e89373076348da263f81eace6f3d42ea1493328cb185223a6b6dc14041a6c505078796d95a4a59796b286a47fd0af07053366cfc22db9f54f388beda190abc8625ac5fe2ee9806ecbfd4e2110f239b705e", 0x71}, {&(0x7f0000003080)="57996d81b7b9626ef0858d472c9a575610dcee9003d28b4ac1b46e45e716f5", 0x1f}, {&(0x7f00000030c0)="fc4a7b860ffc2b4c75b737f5d62cb5d1ce557ec85e02d1a868cdef231e218297cc08574b428d0b824d9c5c6d8d1369bef03a8d26c921455d88fd02d50295c2c2bac33d6bb27a4414a589c048505456b0d4f03058215b2b6aed403a6c772b7b4210cc8ebba861b9f4de306c4e0881d32919195a14d4e1919b59cd98992a97c6da45187df84a5d6fb7eeba07374238ce0ddb15400e56525ad1a39a42826f125ee9336662aa28129048183d89f14f106c9fccecf059bf3ddf", 0xb7}, {&(0x7f0000003180)="92cade64939383c2192bc65f70cbc3458ee7bc7dcfafe8ec41c1ffdbc37b497021634e65ff66971d0f9f1e586ca92acdc0ee81adaeb55f9ea763628810fa1aa6fc35356d493c0167634eff58890affa41f5f9797684c8792460d146d34c04d300d2c73d4f11bb47124af4fb290c77a1136fbaa770f4bbd3f1d6eec22f743faed9cd1c12bd6e0e54f62e3467b4fafa2e6690c25e4da67eb0119ad04b0220fdd77a54d30ed4a915edaa6d503710636abe26dce2bf6add70afadb88a3ce545c4191fdc3076efccf286e92f86805", 0xcc}], 0x7, &(0x7f0000003880)=ANY=[@ANYBLOB="300000000000000084000000010000007f00030001000000000001000d0000009100000015d2000040000000", @ANYRES32=r14, @ANYBLOB="2000c800000000008400000002000000010009000000000005000000ee0ad59a6033f40017a74e7aafc19bd7b468d5c8cd30839d2f44cefa", @ANYRES32=r15, @ANYBLOB="18000000000000008400000007000000e0000002000000001800000000000000840000000500000010000000000000801800000000000000840000000000000023000800080002003000000000000000840000000100000001000b00030000000100000000080000050000000300000000100000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000e000000200000000180000000000000084000000060000000500000000000000180000000000000084000000050000003000000001000100"], 0x110, 0x1}], 0x5, 0x40) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x20008090) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', r8, 0x2f, 0xe, 0x0, 0x2, 0x2c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x80, 0x20, 0x3, 0x1}}) ioctl$TUNDETACHFILTER(r0, 0x541b, 0x1000000000000) 719.86261ms ago: executing program 0 (id=2280): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r1}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 691.587471ms ago: executing program 4 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001340)=ANY=[@ANYBLOB="2c00000001020160390b1f66ca0efc000a000004180001801400018008000100ac1e010108000200e0000002"], 0x2c}}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x1c, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x1, 0x502, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) (async) r4 = accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x20008890) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="301200003d000107000000000000000003"], 0x1230}}, 0x0) (async) accept$netrom(r4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0xac5ac46a92c0f631) 651.316755ms ago: executing program 0 (id=2282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) r5 = accept4(r4, &(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000002c0)=0x80, 0xc00) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r10, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@ifindex=r6, r12, 0x2f, 0x8000000, 0x0, @void, @value=r12}, 0x20) bind$alg(0xffffffffffffffff, 0x0, 0x0) r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000006780)=0x82e, 0x4) bind$inet6(r14, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r14, 0x0, 0x0, 0x1f, 0x0) connect$inet6(r14, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffd}, 0x1c) sendmmsg(r14, &(0x7f00000092c0), 0x4ff, 0x0) write(r13, 0x0, 0x0) 561.262517ms ago: executing program 4 (id=2283): r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {}, 0xff}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, r5, 0x0, {0x2, 0xfe, 0x4}, 0x2}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x40805}, 0x20080084) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r9], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000020000000000000088001f8c5fff040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x2c) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x1b, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="56f3f0bb476c38c5375b673976e3dfb33dac5609a29e921bd4c305cebfc11b64d226307c48ad5cecb30c2065d195f27ae7b79bb3eeff44136a9ecf645b7defb57e44fc38057d3f6416d494ed39f5d6433c18ec96c171111a000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000440)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) (async) r13 = socket$pppl2tp(0x18, 0x1, 0x1) r14 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r14, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r13, 0x80047453, 0x0) (async) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000080)=r9) (async) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) (async) accept4(r15, 0x0, 0x0, 0x0) 559.84701ms ago: executing program 2 (id=2284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000001c0)={0x0, "d3527ebab64acea5e21a9cb7ad23a664"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x11, 0xa, 0x300) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x591cb000) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001680)={r2, r4}, 0xc) syz_emit_ethernet(0x33, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4100, 0x88be, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "0a02868700"}}}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0xfffffffffffffe58}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xf0, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xefd1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc92}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda584abb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000011c0)={r1, 0x400, 0x0, [0x4, 0x0, 0x6, 0x1, 0x7], [0x1, 0x7fffffff, 0x7, 0x3, 0xffff, 0x7f, 0x5, 0x69, 0x3ff, 0x800, 0x0, 0x3cc, 0x1, 0x4, 0x9, 0x8, 0x1, 0xd7, 0x100000001, 0x45, 0xa82, 0x5, 0x6, 0x0, 0xd558, 0x4, 0x6, 0x80, 0x3ff, 0xa3, 0x2, 0x3536, 0x3, 0x76158a93, 0x7, 0x8000000000000001, 0x6, 0x9, 0x7f, 0x6, 0x8, 0xfca, 0x401, 0x8, 0x7f, 0x1ff, 0x40, 0xa, 0x4, 0x1, 0x6, 0x7, 0x0, 0xe, 0x57d9, 0x8, 0xd49c, 0x9, 0xfa66, 0xb, 0x8, 0x3, 0x8, 0x3, 0x3, 0x7, 0xfc14, 0x400, 0x3, 0x4, 0x3, 0x4, 0x6, 0x81, 0xffff, 0x1, 0x1, 0x4, 0x3, 0x0, 0xae0, 0x2, 0x5fcc03c0, 0x0, 0x2, 0x6, 0x3, 0xffffffff, 0x2, 0x0, 0x993, 0x68, 0x200, 0x800, 0x80000001, 0x3, 0x100000000, 0xf0, 0x5, 0x8000, 0x9, 0x6, 0x5, 0xa, 0x1, 0x8, 0x1000, 0x2, 0xfffffffffffffffd, 0xffff, 0x10000, 0xb, 0xb2a5, 0x3fd, 0x3, 0x2364, 0x83, 0x8000, 0x6, 0x1, 0x51]}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x35, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000000101040000000000000000020000002c05000100000000001400018008000100e0000001e6ff0100ac1e00010600034000010000060012400002000000000010000000b2d412fceee4d04b5f1425cadb982136cf7e6f6955a230fb722150dd80313e9b0af495ea8c4e3737328c75831761ca2afdc98370ef358bfe22686c8aa6d2bf3c75d1e9c7bfeb6af9ac8d8f21fa7f5046d3ce74f67d8bd64e9c27"], 0x48}}, 0x0) 513.150344ms ago: executing program 3 (id=2285): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000000070101000000190000000007000002"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x68, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x80}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x34, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xb0}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000340)={0x23, 0x2, 0x3}, 0x10) 467.201452ms ago: executing program 2 (id=2286): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7000000}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0xff4c}, 0x1c) 376.44269ms ago: executing program 4 (id=2287): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x700, 0x80, 0x0, 0xfffffffb, {{0x36, 0x4, 0x3, 0x10, 0xd8, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp={0x44, 0x28, 0x33, 0x0, 0x1, [0x9, 0x5bc7, 0x3, 0x1, 0x2, 0x4, 0xc, 0x2, 0x2]}, @timestamp_addr={0x44, 0x44, 0xe4, 0x1, 0x6, [{@multicast1, 0x2}, {@local, 0x26}, {@local, 0x4}, {@private=0xa010100, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x2}, {@empty, 0x5}, {@broadcast, 0x8}]}, @ssrr={0x89, 0xf, 0x75, [@multicast1, @loopback, @empty]}, @ssrr={0x89, 0xb, 0xfa, [@rand_addr=0x64010101, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x97, 0x0, 0x0, [0x1]}, @rr={0x7, 0x13, 0xfc, [@dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @rand_addr=0x64010100, @broadcast]}, @cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "eb9ea036a428528fbd"}]}, @ssrr={0x89, 0xf, 0x52, [@empty, @multicast1, @loopback]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@dellinkprop={0xd8, 0x6d, 0x3312a19c8574c651, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x880, 0x40401}, [@IFLA_NET_NS_FD={0x8, 0x1c, r0}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'geneve1\x00'}, {0x14, 0x35, 'veth1_macvtap\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'batadv0\x00'}]}, @IFLA_WEIGHT={0x8, 0xf, 0xb4}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x8804) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@dellinkprop={0xd8, 0x6d, 0x3312a19c8574c651, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x880, 0x40401}, [@IFLA_NET_NS_FD={0x8, 0x1c, r0}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'geneve1\x00'}, {0x14, 0x35, 'veth1_macvtap\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'batadv0\x00'}]}, @IFLA_WEIGHT={0x8, 0xf, 0xb4}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x8804) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) connect$packet(r1, &(0x7f0000000380)={0x11, 0xd6, r3, 0x1, 0xbf, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) connect$packet(r1, &(0x7f0000000380)={0x11, 0xd6, r3, 0x1, 0xbf, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'team0\x00', 0x1000}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) (async) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) getpeername$unix(r1, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e) (async) getpeername$unix(r1, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000580)={0x91}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000580)={0x91, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={r4, 0x8000}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={r4, 0x8000}, 0xc) socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r5, 0x1268000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000680)=@get={0x1, &(0x7f0000000600)=""/117, 0x7f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0xc, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000800)={0x1, 0x1, 0x5, r3, 0x80}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000800)={0x1, 0x1, 0x5, r3, 0x80}, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa0000040}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37cb71c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41bf1443}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5750ad32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17bb51b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x24040080) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x2, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x100}, 0x0) syz_emit_ethernet(0x3ba, &(0x7f0000000b00)={@multicast, @multicast, @void, {@mpls_mc={0x8848, {[{0xc1b1, 0x0, 0x1}, {0x61bbe, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb0, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv6=@gre_packet={0x9, 0x6, "95fb29", 0x370, 0x2f, 0x0, @mcast2, @mcast2, {[@hopopts={0xe7, 0x2c, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0x3, [0x9, 0x245, 0x8, 0xffff, 0x8]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x5, 0x7, [0x800, 0xfffffffffffffffb, 0xf, 0x6, 0x4]}}, @enc_lim={0x4, 0x1, 0x49}, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x924, [0x1, 0x9]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xff}, @generic={0x8, 0xcc, "5e0cde2b2db851824a9cb4640c19271f85003cb96965bcab438bf462f62fb75670164a4460aa734685351f9a6a24556cb019eb7260fe5a895556151ab615b4ed8505f77bc669b9778add5d33682a50e0743b3fac4a8c516d7bb19b2f468b001bbf6bd4a6f7dfe12cacce37791c61e691d11b9e37170750a6937d02ff8b3edd82ee4f7d4de51ebaaa6eb60041f78a6ea3aaf64672bdf676fe8ecc73e65486464f9182589712d334ba8e9a30b7147e9499522a58d7310748b3a44391b329e61c01a289d095a7ceda4d79a678fe"}, @jumbo={0xc2, 0x4, 0x6}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x2d, 0x0, [0x6, 0x7], "f7ba996c40192a69ab8851b6b9077d24497066ffdeac449561c07152fcc4617e32b8634eff9805c65cee0c1f9c"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9199, 0xe522, 0x9], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0x3, 0x8], "91fbcf136556c466a786c7289d979e2b4e23ad4991b1f5b6d5fd08479d69ccfe7f76e8b39a5ac5fe857a802c9229b6460b8f37502d383c9974c9cacd669e91e49c7bbc45723d88ce04383ce163e99605041141972c4557081016e86ed9a8"}, {0x8, 0x88be, 0x2, {{0xc, 0x1, 0x9, 0x3, 0x0, 0x0, 0x7, 0x4}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x5, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x2, {0x1, 0x7, 0x1, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "2df150522eb823186d10ff5ad02a5cedc33c36e1747275d5d2e6061fda4286ffd776"}}}}}}}}, &(0x7f0000000ec0)={0x1, 0x3, [0xf89, 0xa74, 0x679, 0x4a5]}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r8) sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r11, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001040)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001040)={'virt_wifi0\x00'}) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e22, 0x1, @mcast1, 0x2}, 0x1c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000010c0)="0e750c", 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x19, 0x8, &(0x7f0000001100)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x0, 0x1, 0x2, 0xa, 0x1, 0x10, 0xfffffffffffffffc}, @exit, @call={0x85, 0x0, 0x0, 0x70}, @jmp={0x5, 0x0, 0x0, 0xb, 0x1, 0xfffffffffffffffe}], &(0x7f0000001140)='GPL\x00', 0x74dd, 0x3b, &(0x7f0000001180)=""/59, 0x40f00, 0x14, '\x00', r3, @cgroup_sockopt=0x15, r0, 0x8, &(0x7f00000011c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x5, 0x6, 0x8000, 0x1}, 0x10, 0x0, r0, 0x4, &(0x7f0000001280), &(0x7f00000012c0)=[{0x5, 0x2, 0xfffffff9, 0x2}, {0x5, 0x2, 0x3}, {0x2, 0x4, 0x3, 0x3}, {0x1, 0x1, 0x3, 0xb}], 0x10, 0xffff5dd3, @void, @value}, 0x94) 354.806381ms ago: executing program 2 (id=2288): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x1, 0x10000, 0x0, @private1, @empty, 0x700, 0x40, 0xcb, 0x2}}) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x54, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44810}, 0x8020) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r5 = socket(0x1d, 0x2, 0x6) (async) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r7, 0x2}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000280)={0x1d, r9, 0x1, {0x1, 0x1, 0x3}}, 0x18) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async, rerun: 32) r11 = socket(0x1d, 0x2, 0x6) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000380)={0x1d, r12, 0x1}, 0x18) epoll_create(0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r10, {0xfff1}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 335.034683ms ago: executing program 3 (id=2289): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x9) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r3, &(0x7f0000000780)="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", 0x1000, 0x40, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x4, {0x2, 0x4e23, @private=0xa010102}}, 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x44}}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x2, 0x400000000000003, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x7}}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0xfffffffffffffffe}, 0x0, 0x0) 229.295772ms ago: executing program 4 (id=2290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x22020400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0x0, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x3, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x0, 0x0, [0x0, 0x26, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x32]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000004240)=0x2, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@generic={0x0}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000180001000000000000000000020000000100fe0200000000080005"], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x10000000000000) 225.903616ms ago: executing program 0 (id=2291): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xafab}, {0x20, 0x0, 0x2, 0xf7fff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0xfdef}}, 0x0) 107.748014ms ago: executing program 2 (id=2292): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000740)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f968fe", 0x4a, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [0x0, 0x0, 0x0]}}}}}}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4005, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x4b315000) connect$ax25(0xffffffffffffffff, 0x0, 0x0) connect$can_j1939(r2, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}]}]}}]}, 0x50}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000090601020000000000000000000000000900020073797a3100000000050001000700000028000780"], 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0077990d4216cfc63b25f4730c510000160001de7efde4be701161000a00002004cfd10c55bd36a23fce42c3f1720000800400", @ANYRESOCT], 0x1c}}, 0x0) 0s ago: executing program 0 (id=2293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x0, 0x19e8) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x50, r3, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x400000c}, 0x4008001) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000020000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r6}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000780)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x4c015) recvmsg(r4, 0x0, 0x10041) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): , allowed=10048) [ 271.035239][T11651] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1666'. [ 271.063087][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.071323][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.078591][T11518] bridge_slave_0: entered allmulticast mode [ 271.088000][T11518] bridge_slave_0: entered promiscuous mode [ 271.095725][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.102921][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.110158][T11518] bridge_slave_1: entered allmulticast mode [ 271.117525][T11518] bridge_slave_1: entered promiscuous mode [ 271.218054][T11518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.238353][T11518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.299272][T11518] team0: Port device team_slave_0 added [ 271.323193][T11518] team0: Port device team_slave_1 added [ 271.390844][T11518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.397858][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.424301][T11518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.436982][T11518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.444025][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.470274][T11518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.573243][T11673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1670'. [ 271.589833][T11518] hsr_slave_0: entered promiscuous mode [ 271.599959][T11518] hsr_slave_1: entered promiscuous mode [ 271.726770][T11670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1670'. [ 271.829273][T11683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1672'. [ 271.848234][T11683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.855588][T11683] IPv6: NLM_F_CREATE should be set when creating new route [ 271.910617][ T5840] Bluetooth: hci2: command tx timeout [ 272.181587][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1676'. [ 272.283353][T11518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.297338][T11518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.307053][T11518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.335929][T11518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.380131][T11708] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.1678'. [ 272.399352][T11708] openvswitch: netlink: Unexpected mask (mask=400, allowed=10048) [ 272.404342][T11705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.421446][T11705] team0: Port device bond4 added [ 272.427469][T11711] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 272.549753][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.605343][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.634288][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.641504][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.684676][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.691934][T10070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.743660][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 272.757044][T11518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.767642][T11518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.006946][T11518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.042382][T11744] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 273.099425][T11518] veth0_vlan: entered promiscuous mode [ 273.106848][T10076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.116251][T10076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.139988][T11518] veth1_vlan: entered promiscuous mode [ 273.178985][T11518] veth0_macvtap: entered promiscuous mode [ 273.196665][T11518] veth1_macvtap: entered promiscuous mode [ 273.250798][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.275027][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.290895][T11755] openvswitch: netlink: Unexpected mask (mask=400, allowed=10048) [ 273.301671][T11518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.326595][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.343589][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.357753][T11518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.386958][T11518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.400499][T11518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.419081][T11518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.432965][T11518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.588788][T11764] netlink: 'syz.3.1694': attribute type 21 has an invalid length. [ 273.634871][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.643365][T10070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.648968][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.669434][T10070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.048799][T11780] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 274.056975][T11780] batman_adv: batadv0: Removing interface: team0 [ 274.064976][T11780] bridge0: port 3(team0) entered blocking state [ 274.073740][T11780] bridge0: port 3(team0) entered disabled state [ 274.082002][T11780] team0: entered allmulticast mode [ 274.087747][T11780] team_slave_0: entered allmulticast mode [ 274.094037][T11780] team_slave_1: entered allmulticast mode [ 274.110573][T11780] dummy0: entered allmulticast mode [ 274.117900][T11780] team0: entered promiscuous mode [ 274.128198][T11780] team_slave_0: entered promiscuous mode [ 274.135869][T11780] team_slave_1: entered promiscuous mode [ 274.142271][T11780] dummy0: entered promiscuous mode [ 274.914882][T11800] openvswitch: netlink: Unexpected mask (mask=400, allowed=10048) [ 276.434905][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.444490][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.452639][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.461097][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.484874][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.494325][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.520280][T10076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.637411][T11808] lo speed is unknown, defaulting to 1000 [ 276.730967][T11820] geneve1: entered allmulticast mode [ 276.748451][T11824] __nla_validate_parse: 5 callbacks suppressed [ 276.748471][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1713'. [ 276.926168][T11831] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1716'. [ 276.988655][T11833] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.1717'. [ 277.020573][T11833] openvswitch: netlink: Unexpected mask (mask=400, allowed=10048) [ 277.141283][T10076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.169938][T11835] vlan0: entered allmulticast mode [ 277.216772][T11840] netlink: 'syz.4.1720': attribute type 21 has an invalid length. [ 277.261452][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 277.396253][T11808] chnl_net:caif_netlink_parms(): no params data found [ 277.414741][T11858] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 277.456757][T11858] netlink: 'syz.2.1724': attribute type 9 has an invalid length. [ 277.478742][T11858] netlink: 'syz.2.1724': attribute type 7 has an invalid length. [ 277.486962][T11858] netlink: 'syz.2.1724': attribute type 8 has an invalid length. [ 277.499033][T11863] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1725'. [ 277.509534][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 277.526769][T11808] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.534256][T11808] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.547159][T11808] bridge_slave_0: entered allmulticast mode [ 277.554441][T11808] bridge_slave_0: entered promiscuous mode [ 277.569240][T11808] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.576867][T11808] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.589861][T11808] bridge_slave_1: entered allmulticast mode [ 277.602309][T11808] bridge_slave_1: entered promiscuous mode [ 277.645658][T10076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.724394][T11808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.775810][T10076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.818576][T11808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.889989][T11808] team0: Port device team_slave_0 added [ 277.919210][T11808] team0: Port device team_slave_1 added [ 278.031071][T11808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.044296][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.128090][T11808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.153677][T10076] bridge_slave_1: left allmulticast mode [ 278.160513][T10076] bridge_slave_1: left promiscuous mode [ 278.177039][T10076] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.193891][T10076] bridge_slave_0: left allmulticast mode [ 278.199631][T10076] bridge_slave_0: left promiscuous mode [ 278.220679][T10076] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.553212][ T5846] Bluetooth: hci2: command tx timeout [ 278.806087][T10076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.817161][T10076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.827520][T10076] bond0 (unregistering): Released all slaves [ 278.838828][T11808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.846522][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.888273][T11808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.908928][T11875] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1729'. [ 279.025049][T11901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1737'. [ 279.256277][T11913] netlink: 'syz.2.1741': attribute type 2 has an invalid length. [ 279.295654][T11919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1740'. [ 279.331891][T11910] netlink: 'syz.3.1738': attribute type 21 has an invalid length. [ 279.362985][T11808] hsr_slave_0: entered promiscuous mode [ 279.394877][T11808] hsr_slave_1: entered promiscuous mode [ 279.403911][T11808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.415714][T11808] Cannot create hsr debugfs directory [ 279.745837][T10076] hsr_slave_0: left promiscuous mode [ 279.755656][T10076] hsr_slave_1: left promiscuous mode [ 279.763228][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.776032][T10076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.784698][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.792914][T10076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.837528][T10076] veth1_macvtap: left promiscuous mode [ 279.846548][T10076] veth0_macvtap: left promiscuous mode [ 279.853336][T10076] veth1_vlan: left promiscuous mode [ 279.859664][T10076] veth0_vlan: left promiscuous mode [ 280.551641][T10076] team0 (unregistering): Port device team_slave_1 removed [ 280.605267][T10076] team0 (unregistering): Port device team_slave_0 removed [ 280.634393][ T5846] Bluetooth: hci2: command tx timeout [ 281.204331][T11945] FAULT_INJECTION: forcing a failure. [ 281.204331][T11945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.218032][T11945] CPU: 0 UID: 0 PID: 11945 Comm: syz.2.1749 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 281.228831][T11945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.234316][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'. [ 281.238896][T11945] Call Trace: [ 281.238911][T11945] [ 281.238921][T11945] dump_stack_lvl+0x241/0x360 [ 281.238954][T11945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.264064][T11945] ? __pfx__printk+0x10/0x10 [ 281.268675][T11945] ? __pfx_lock_release+0x10/0x10 [ 281.273733][T11945] should_fail_ex+0x3b0/0x4e0 [ 281.278438][T11945] _copy_from_user+0x2f/0xc0 [ 281.283044][T11945] copy_msghdr_from_user+0xae/0x680 [ 281.288251][T11945] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 281.294059][T11945] ? __fget_files+0x2a/0x410 [ 281.298660][T11945] ? __fget_files+0x2a/0x410 [ 281.303276][T11945] __sys_sendmsg+0x209/0x350 [ 281.307874][T11945] ? __pfx_lock_release+0x10/0x10 [ 281.312934][T11945] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.318074][T11945] ? __pfx_vfs_write+0x10/0x10 [ 281.322877][T11945] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.329222][T11945] ? do_syscall_64+0x100/0x230 [ 281.333989][T11945] ? do_syscall_64+0xb6/0x230 [ 281.338664][T11945] do_syscall_64+0xf3/0x230 [ 281.343175][T11945] ? clear_bhb_loop+0x35/0x90 [ 281.347852][T11945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.353760][T11945] RIP: 0033:0x7fb4cdd7ff19 [ 281.358172][T11945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.377794][T11945] RSP: 002b:00007fb4ceb80058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.386244][T11945] RAX: ffffffffffffffda RBX: 00007fb4cdf45fa0 RCX: 00007fb4cdd7ff19 [ 281.394234][T11945] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 281.402217][T11945] RBP: 00007fb4ceb800a0 R08: 0000000000000000 R09: 0000000000000000 [ 281.410206][T11945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.418361][T11945] R13: 0000000000000000 R14: 00007fb4cdf45fa0 R15: 00007ffc65ee94a8 [ 281.426384][T11945] [ 281.987120][T11982] netlink: 'syz.3.1758': attribute type 21 has an invalid length. [ 282.018664][T11808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 282.060940][T11808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 282.084861][T11808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 282.107851][T11808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 282.258002][T11808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.293200][T11808] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.306650][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.313905][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.342284][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.349490][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.388274][T11808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.398836][T11808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.616464][T11999] FAULT_INJECTION: forcing a failure. [ 282.616464][T11999] name failslab, interval 1, probability 0, space 0, times 0 [ 282.644156][T11808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.673498][T11999] CPU: 0 UID: 0 PID: 11999 Comm: syz.2.1762 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 282.684332][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.694428][T11999] Call Trace: [ 282.697732][T11999] [ 282.700684][T11999] dump_stack_lvl+0x241/0x360 [ 282.705394][T11999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.710626][T11999] ? __pfx__printk+0x10/0x10 [ 282.715244][T11999] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 282.721229][T11999] ? __pfx___might_resched+0x10/0x10 [ 282.726514][T11999] should_fail_ex+0x3b0/0x4e0 [ 282.731209][T11999] should_failslab+0xac/0x100 [ 282.731652][ T5846] Bluetooth: hci2: command tx timeout [ 282.735892][T11999] kmem_cache_alloc_node_noprof+0x77/0x380 [ 282.735922][T11999] ? __alloc_skb+0x1c3/0x440 [ 282.751712][T11999] __alloc_skb+0x1c3/0x440 [ 282.756164][T11999] ? __pfx___alloc_skb+0x10/0x10 [ 282.761168][T11999] ? netlink_autobind+0xd6/0x2f0 [ 282.766138][T11999] ? netlink_autobind+0x2b0/0x2f0 [ 282.771195][T11999] netlink_sendmsg+0x638/0xcb0 [ 282.776008][T11999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.781330][T11999] ? aa_sock_msg_perm+0x91/0x160 [ 282.786286][T11999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.791574][T11999] __sock_sendmsg+0x221/0x270 [ 282.796257][T11999] ____sys_sendmsg+0x52a/0x7e0 [ 282.801048][T11999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.806335][T11999] ? __fget_files+0x2a/0x410 [ 282.810927][T11999] ? __fget_files+0x2a/0x410 [ 282.815519][T11999] __sys_sendmsg+0x269/0x350 [ 282.820112][T11999] ? __pfx_lock_release+0x10/0x10 [ 282.825139][T11999] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.830258][T11999] ? __pfx_vfs_write+0x10/0x10 [ 282.835041][T11999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.841371][T11999] ? do_syscall_64+0x100/0x230 [ 282.846139][T11999] ? do_syscall_64+0xb6/0x230 [ 282.850823][T11999] do_syscall_64+0xf3/0x230 [ 282.855329][T11999] ? clear_bhb_loop+0x35/0x90 [ 282.860005][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.865899][T11999] RIP: 0033:0x7fb4cdd7ff19 [ 282.870320][T11999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.889944][T11999] RSP: 002b:00007fb4ceb80058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.898365][T11999] RAX: ffffffffffffffda RBX: 00007fb4cdf45fa0 RCX: 00007fb4cdd7ff19 [ 282.906339][T11999] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 282.914314][T11999] RBP: 00007fb4ceb800a0 R08: 0000000000000000 R09: 0000000000000000 [ 282.922287][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.930264][T11999] R13: 0000000000000000 R14: 00007fb4cdf45fa0 R15: 00007ffc65ee94a8 [ 282.938255][T11999] [ 282.967597][T11808] veth0_vlan: entered promiscuous mode [ 282.983774][T11808] veth1_vlan: entered promiscuous mode [ 283.009470][T11808] veth0_macvtap: entered promiscuous mode [ 283.018691][T11808] veth1_macvtap: entered promiscuous mode [ 283.034744][T11808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.045515][T11808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.060910][T11808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.070994][T11808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.081755][T11808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.093837][T11808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.105066][T11808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.113942][T11808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.122731][T11808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.131534][T11808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.236536][T10065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.251825][T10065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.283114][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.300535][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.485099][T12018] FAULT_INJECTION: forcing a failure. [ 283.485099][T12018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.498809][T12018] CPU: 0 UID: 0 PID: 12018 Comm: syz.2.1770 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 283.509607][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 283.519672][T12018] Call Trace: [ 283.522947][T12018] [ 283.525900][T12018] dump_stack_lvl+0x241/0x360 [ 283.530597][T12018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.535815][T12018] ? __pfx__printk+0x10/0x10 [ 283.540421][T12018] ? __pfx_lock_release+0x10/0x10 [ 283.545447][T12018] should_fail_ex+0x3b0/0x4e0 [ 283.550118][T12018] _copy_from_user+0x2f/0xc0 [ 283.554732][T12018] copy_msghdr_from_user+0xae/0x680 [ 283.559953][T12018] ? __lock_acquire+0x1397/0x2100 [ 283.564981][T12018] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 283.570792][T12018] ? __fget_files+0x2a/0x410 [ 283.575381][T12018] ? __fget_files+0x2a/0x410 [ 283.579978][T12018] do_recvmmsg+0x3bd/0xab0 [ 283.584412][T12018] ? __pfx_do_recvmmsg+0x10/0x10 [ 283.589365][T12018] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 283.595268][T12018] ? ksys_write+0x22a/0x2b0 [ 283.599783][T12018] ? __pfx_lock_release+0x10/0x10 [ 283.604820][T12018] ? vfs_write+0x730/0xd30 [ 283.609251][T12018] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.615235][T12018] ? __fget_files+0x2a/0x410 [ 283.619833][T12018] __x64_sys_recvmmsg+0x199/0x250 [ 283.624865][T12018] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 283.630419][T12018] ? do_syscall_64+0x100/0x230 [ 283.635191][T12018] ? do_syscall_64+0xb6/0x230 [ 283.639876][T12018] do_syscall_64+0xf3/0x230 [ 283.644390][T12018] ? clear_bhb_loop+0x35/0x90 [ 283.649067][T12018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.654966][T12018] RIP: 0033:0x7fb4cdd7ff19 [ 283.659388][T12018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.678999][T12018] RSP: 002b:00007fb4ceb5f058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 283.687442][T12018] RAX: ffffffffffffffda RBX: 00007fb4cdf46080 RCX: 00007fb4cdd7ff19 [ 283.695416][T12018] RDX: 0000000000000002 RSI: 00000000200067c0 RDI: 0000000000000003 [ 283.703402][T12018] RBP: 00007fb4ceb5f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 283.711390][T12018] R10: 0000000000001020 R11: 0000000000000246 R12: 0000000000000001 [ 283.719365][T12018] R13: 0000000000000000 R14: 00007fb4cdf46080 R15: 00007ffc65ee94a8 [ 283.727357][T12018] [ 283.984799][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 283.996685][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 284.156435][T12034] netlink: 'syz.3.1777': attribute type 21 has an invalid length. [ 284.205547][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 284.232912][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 284.391595][ T3543] wlan1: Trigger new scan to find an IBSS to join [ 285.436263][ T3510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.143247][T12073] FAULT_INJECTION: forcing a failure. [ 286.143247][T12073] name failslab, interval 1, probability 0, space 0, times 0 [ 286.156590][T12073] CPU: 0 UID: 0 PID: 12073 Comm: syz.2.1790 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 286.167391][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.177464][T12073] Call Trace: [ 286.180739][T12073] [ 286.183658][T12073] dump_stack_lvl+0x241/0x360 [ 286.188334][T12073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.193526][T12073] ? __pfx__printk+0x10/0x10 [ 286.198129][T12073] ? __pfx_validate_chain+0x10/0x10 [ 286.203349][T12073] should_fail_ex+0x3b0/0x4e0 [ 286.208020][T12073] should_failslab+0xac/0x100 [ 286.212712][T12073] kmem_cache_alloc_node_noprof+0x77/0x380 [ 286.218545][T12073] ? __alloc_skb+0x1c3/0x440 [ 286.223135][T12073] __alloc_skb+0x1c3/0x440 [ 286.227547][T12073] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.232753][T12073] ? __pfx___alloc_skb+0x10/0x10 [ 286.237688][T12073] ? __lock_acquire+0x1397/0x2100 [ 286.242707][T12073] skb_copy_expand+0x199/0xb60 [ 286.247474][T12073] sctp_ulpevent_make_send_failed+0xa5/0xa00 [ 286.253455][T12073] sctp_datamsg_put+0x2d7/0x570 [ 286.258303][T12073] sctp_chunk_free+0x4a/0x60 [ 286.262903][T12073] __sctp_outq_teardown+0x7c6/0x9b0 [ 286.268137][T12073] sctp_association_free+0x21a/0x7b0 [ 286.273451][T12073] sctp_do_sm+0x4393/0x60c0 [ 286.277986][T12073] ? __pfx_sctp_do_sm+0x10/0x10 [ 286.282867][T12073] ? lockdep_hardirqs_on+0x99/0x150 [ 286.288079][T12073] ? __local_bh_enable_ip+0x168/0x200 [ 286.293462][T12073] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 286.298752][T12073] sctp_close+0x3cd/0x920 [ 286.303083][T12073] ? __pfx_locks_remove_file+0x10/0x10 [ 286.308556][T12073] ? __pfx_sctp_close+0x10/0x10 [ 286.313423][T12073] ? down_write+0x18c/0x220 [ 286.317931][T12073] ? ip_mc_drop_socket+0x25f/0x280 [ 286.323054][T12073] inet_release+0x17d/0x200 [ 286.327566][T12073] sock_close+0xbc/0x240 [ 286.331816][T12073] ? __pfx_sock_close+0x10/0x10 [ 286.336677][T12073] __fput+0x23c/0xa50 [ 286.340683][T12073] task_work_run+0x24f/0x310 [ 286.345291][T12073] ? __pfx_task_work_run+0x10/0x10 [ 286.350406][T12073] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 286.356307][T12073] ? ksys_write+0x22a/0x2b0 [ 286.360825][T12073] get_signal+0x15f7/0x1750 [ 286.365357][T12073] ? __pfx_get_signal+0x10/0x10 [ 286.370225][T12073] arch_do_signal_or_restart+0x96/0x860 [ 286.375787][T12073] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 286.381950][T12073] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.387950][T12073] ? syscall_exit_to_user_mode+0xa3/0x340 [ 286.393680][T12073] syscall_exit_to_user_mode+0xce/0x340 [ 286.399238][T12073] do_syscall_64+0x100/0x230 [ 286.403845][T12073] ? clear_bhb_loop+0x35/0x90 [ 286.408533][T12073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.414437][T12073] RIP: 0033:0x7fb4cdd7ff19 [ 286.418863][T12073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.438481][T12073] RSP: 002b:00007fb4ceb5f058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 286.446902][T12073] RAX: fffffffffffffe00 RBX: 00007fb4cdf46080 RCX: 00007fb4cdd7ff19 [ 286.454880][T12073] RDX: 0000000000000002 RSI: 00000000200067c0 RDI: 0000000000000003 [ 286.462875][T12073] RBP: 00007fb4ceb5f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.470864][T12073] R10: 0000000000001020 R11: 0000000000000246 R12: 0000000000000001 [ 286.478843][T12073] R13: 0000000000000000 R14: 00007fb4cdf46080 R15: 00007ffc65ee94a8 [ 286.486835][T12073] [ 286.697643][T12078] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 43152 - 0 [ 286.730168][T12078] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 43152 - 0 [ 286.750800][T12078] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 43152 - 0 [ 286.770882][T12078] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 43152 - 0 [ 286.820953][T12078] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 47986 - 0 [ 286.829291][T12078] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 47986 - 0 [ 286.889384][T12078] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 47986 - 0 [ 286.906882][T12078] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 47986 - 0 [ 286.934050][T12078] geneve4: entered promiscuous mode [ 286.948069][T12078] geneve4: entered allmulticast mode [ 286.965324][T12083] netlink: 'syz.4.1795': attribute type 21 has an invalid length. [ 287.138470][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.149291][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.161787][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.204887][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.236197][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.244663][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.245556][T12115] FAULT_INJECTION: forcing a failure. [ 287.245556][T12115] name failslab, interval 1, probability 0, space 0, times 0 [ 287.281262][T12115] CPU: 1 UID: 0 PID: 12115 Comm: syz.3.1803 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 287.292201][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.302296][T12115] Call Trace: [ 287.305602][T12115] [ 287.308561][T12115] dump_stack_lvl+0x241/0x360 [ 287.313276][T12115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.318505][T12115] ? __pfx__printk+0x10/0x10 [ 287.323136][T12115] should_fail_ex+0x3b0/0x4e0 [ 287.327822][T12115] should_failslab+0xac/0x100 [ 287.332506][T12115] ? skb_clone+0x20c/0x390 [ 287.336926][T12115] kmem_cache_alloc_noprof+0x70/0x380 [ 287.342303][T12115] skb_clone+0x20c/0x390 [ 287.346550][T12115] __netlink_deliver_tap+0x3cc/0x7f0 [ 287.351843][T12115] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.357044][T12115] netlink_deliver_tap+0x19d/0x1b0 [ 287.362181][T12115] netlink_unicast+0x7c4/0x990 [ 287.366953][T12115] ? __pfx_netlink_unicast+0x10/0x10 [ 287.372242][T12115] ? __virt_addr_valid+0x183/0x530 [ 287.377359][T12115] ? __check_object_size+0x48e/0x900 [ 287.382651][T12115] netlink_sendmsg+0x8e4/0xcb0 [ 287.387428][T12115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.392723][T12115] ? aa_sock_msg_perm+0x91/0x160 [ 287.397670][T12115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.402953][T12115] __sock_sendmsg+0x221/0x270 [ 287.407639][T12115] ____sys_sendmsg+0x52a/0x7e0 [ 287.412412][T12115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.417697][T12115] ? __fget_files+0x2a/0x410 [ 287.422289][T12115] ? __fget_files+0x2a/0x410 [ 287.426883][T12115] __sys_sendmsg+0x269/0x350 [ 287.431478][T12115] ? __pfx_lock_release+0x10/0x10 [ 287.436510][T12115] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.441639][T12115] ? __pfx_vfs_write+0x10/0x10 [ 287.446432][T12115] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.452761][T12115] ? do_syscall_64+0x100/0x230 [ 287.457536][T12115] ? do_syscall_64+0xb6/0x230 [ 287.462218][T12115] do_syscall_64+0xf3/0x230 [ 287.466728][T12115] ? clear_bhb_loop+0x35/0x90 [ 287.471407][T12115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.477302][T12115] RIP: 0033:0x7f8de537ff19 [ 287.481735][T12115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.501359][T12115] RSP: 002b:00007f8de6161058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.509781][T12115] RAX: ffffffffffffffda RBX: 00007f8de5545fa0 RCX: 00007f8de537ff19 [ 287.517752][T12115] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 287.525723][T12115] RBP: 00007f8de61610a0 R08: 0000000000000000 R09: 0000000000000000 [ 287.533701][T12115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.541675][T12115] R13: 0000000000000000 R14: 00007f8de5545fa0 R15: 00007ffc56ed0b18 [ 287.549664][T12115] [ 287.554723][T10076] wlan1: Trigger new scan to find an IBSS to join [ 287.559861][T12106] lo speed is unknown, defaulting to 1000 [ 287.632539][ T3510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.745057][ T3510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.781206][T12121] netlink: 'syz.4.1805': attribute type 33 has an invalid length. [ 287.789339][T12121] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1805'. [ 287.900949][ T3510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.058205][ T3510] bridge_slave_1: left allmulticast mode [ 288.065187][ T3510] bridge_slave_1: left promiscuous mode [ 288.082031][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.114120][ T3510] bridge_slave_0: left allmulticast mode [ 288.130087][ T3510] bridge_slave_0: left promiscuous mode [ 288.139511][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.675083][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.685876][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.696161][ T3510] bond0 (unregistering): Released all slaves [ 289.145181][T12161] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1814'. [ 289.159590][T12149] pim6reg1: entered promiscuous mode [ 289.165186][T12149] pim6reg1: entered allmulticast mode [ 289.176463][T12159] netlink: 'syz.4.1815': attribute type 21 has an invalid length. [ 289.344598][T12167] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1814'. [ 289.354810][ T5840] Bluetooth: hci2: command tx timeout [ 289.505640][ T3510] hsr_slave_0: left promiscuous mode [ 289.515022][ T3510] hsr_slave_1: left promiscuous mode [ 289.522329][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.529817][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.538341][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.547238][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.574000][ T3510] veth1_macvtap: left promiscuous mode [ 289.579599][ T3510] veth0_macvtap: left promiscuous mode [ 289.585754][ T3510] veth1_vlan: left promiscuous mode [ 289.591366][ T3510] veth0_vlan: left promiscuous mode [ 290.176967][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 290.224607][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 290.392074][T10070] wlan1: Creating new IBSS network, BSSID 3a:af:6c:95:93:03 [ 290.756456][T12183] pim6reg1: entered promiscuous mode [ 290.771781][T12183] pim6reg1: entered allmulticast mode [ 291.012986][T12190] pim6reg1: entered promiscuous mode [ 291.018390][T12190] pim6reg1: entered allmulticast mode [ 291.045961][T12197] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 291.057242][T12106] chnl_net:caif_netlink_parms(): no params data found [ 291.315652][T12106] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.328395][T12106] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.344966][T12106] bridge_slave_0: entered allmulticast mode [ 291.366060][T12106] bridge_slave_0: entered promiscuous mode [ 291.404508][T12106] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.421383][T12106] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.428663][T12106] bridge_slave_1: entered allmulticast mode [ 291.435169][ T5840] Bluetooth: hci2: command tx timeout [ 291.446343][T12106] bridge_slave_1: entered promiscuous mode [ 291.531873][T12106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.550161][T12106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.578289][T12228] netlink: 'syz.0.1832': attribute type 21 has an invalid length. [ 291.615479][T12106] team0: Port device team_slave_0 added [ 291.636482][T12106] team0: Port device team_slave_1 added [ 291.714535][T12106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.726521][T12106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.753173][T12106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.773108][T12106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.780212][T12106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.807167][T12106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.899175][T12106] hsr_slave_0: entered promiscuous mode [ 291.906245][T12106] hsr_slave_1: entered promiscuous mode [ 291.918129][T12241] pim6reg1: entered promiscuous mode [ 291.932213][T12241] pim6reg1: entered allmulticast mode [ 292.078004][T12252] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1839'. [ 292.087447][T12252] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 292.098903][T12252] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 292.107252][T12252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1839'. [ 292.265968][T12254] syzkaller0: entered promiscuous mode [ 292.272048][T12254] syzkaller0: entered allmulticast mode [ 292.528834][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 292.546330][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 292.572273][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'. [ 293.520591][ T5840] Bluetooth: hci2: command tx timeout [ 294.219675][T12275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.360292][T12106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 294.373814][T12106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 294.390243][T12106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 294.410147][T12106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 294.411453][T12285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1851'. [ 294.431553][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 294.444866][T12285] netlink: 'syz.2.1851': attribute type 2 has an invalid length. [ 294.456056][T12281] pim6reg1: entered promiscuous mode [ 294.462152][T12281] pim6reg1: entered allmulticast mode [ 294.553377][T12106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.593358][T12106] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.617563][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.624787][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.647957][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.655209][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.729165][T12294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1854'. [ 294.748398][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 294.878088][T12300] netlink: 'syz.4.1855': attribute type 21 has an invalid length. [ 294.927811][T12106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.005238][T12106] veth0_vlan: entered promiscuous mode [ 295.023054][T12106] veth1_vlan: entered promiscuous mode [ 295.055529][T12106] veth0_macvtap: entered promiscuous mode [ 295.065553][T12106] veth1_macvtap: entered promiscuous mode [ 295.082625][T12106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.093870][T12106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.110215][T12106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.127276][T12106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.141079][T12106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.153508][T12106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.167799][T12106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.178235][T12106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.189226][T12106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.199130][T12106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.273856][T10076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.282848][T10076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.317135][T12312] netlink: 'syz.2.1859': attribute type 3 has an invalid length. [ 295.334675][T10065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.343254][T10065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.637883][T12321] veth1_to_bridge: entered allmulticast mode [ 295.668739][T12323] lo speed is unknown, defaulting to 1000 [ 296.807434][ T8] hid-generic 0005:04F3:0058.0002: item fetching failed at offset 0/1 [ 296.851772][ T8] hid-generic 0005:04F3:0058.0002: probe with driver hid-generic failed with error -22 [ 297.008245][T12363] netlink: 'syz.2.1877': attribute type 22 has an invalid length. [ 297.156227][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 297.265685][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.617967][T12390] x_tables: duplicate underflow at hook 1 [ 298.856057][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.905902][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.923496][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.932726][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.965012][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.977962][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 298.987523][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.107208][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.261752][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1897'. [ 299.472058][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.494106][T12408] lo speed is unknown, defaulting to 1000 [ 299.828020][ T11] bridge_slave_1: left allmulticast mode [ 299.836844][ T11] bridge_slave_1: left promiscuous mode [ 299.848839][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.953818][ T11] bridge_slave_0: left allmulticast mode [ 299.959727][ T11] bridge_slave_0: left promiscuous mode [ 299.966006][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.719943][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.733928][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.745224][ T11] bond0 (unregistering): Released all slaves [ 301.123578][ T5840] Bluetooth: hci2: command tx timeout [ 301.257637][T12476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1907'. [ 301.318377][T12488] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1911'. [ 301.406250][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1911'. [ 301.413249][T12408] chnl_net:caif_netlink_parms(): no params data found [ 301.734463][ T11] hsr_slave_0: left promiscuous mode [ 301.762388][ T11] hsr_slave_1: left promiscuous mode [ 301.779588][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.798066][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.863677][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.879466][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.981958][ T11] veth1_macvtap: left promiscuous mode [ 301.990143][ T11] veth0_macvtap: left promiscuous mode [ 302.007406][ T11] veth1_vlan: left promiscuous mode [ 302.017526][ T11] veth0_vlan: left promiscuous mode [ 302.635862][ T11] team0 (unregistering): Port device team_slave_1 removed [ 302.685688][ T11] team0 (unregistering): Port device team_slave_0 removed [ 303.177746][T12518] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1919'. [ 303.190816][ T5840] Bluetooth: hci2: command tx timeout [ 303.276017][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.284601][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.297939][T12408] bridge_slave_0: entered allmulticast mode [ 303.311567][T12408] bridge_slave_0: entered promiscuous mode [ 303.319580][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.331005][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.338394][T12408] bridge_slave_1: entered allmulticast mode [ 303.345661][T12408] bridge_slave_1: entered promiscuous mode [ 303.494088][T12408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.531827][T12408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.567040][T12538] xt_TCPMSS: Only works on TCP SYN packets [ 303.662014][T12408] team0: Port device team_slave_0 added [ 303.670183][T12408] team0: Port device team_slave_1 added [ 303.702690][T12550] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1927'. [ 303.762738][T12408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.780477][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.812416][T12408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.828566][T12408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.838219][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.871973][T12408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.023223][T12408] hsr_slave_0: entered promiscuous mode [ 304.038991][T12408] hsr_slave_1: entered promiscuous mode [ 304.115173][T12558] syz.4.1930[12558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.115273][T12558] syz.4.1930[12558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.160602][T12558] syz.4.1930[12558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.570440][T12558] xt_bpf: check failed: parse error [ 304.740292][T12408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.750259][T12408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.760731][T12408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.770693][T12408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.834986][T12408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.853058][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.864249][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.871419][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.887613][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.894775][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.023044][T12408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.056123][T12408] veth0_vlan: entered promiscuous mode [ 305.066072][T12408] veth1_vlan: entered promiscuous mode [ 305.087549][T12408] veth0_macvtap: entered promiscuous mode [ 305.096505][T12408] veth1_macvtap: entered promiscuous mode [ 305.111958][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.123309][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.134509][T12408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.146953][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.157542][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.168568][T12408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.179581][T12408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.189899][T12408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.198835][T12408] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.207602][T12408] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.262426][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.270315][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.270533][ T5840] Bluetooth: hci2: command tx timeout [ 305.296595][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.305133][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.289818][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.689752][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.698387][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.710313][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.718757][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.728748][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 308.737586][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.775867][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.799393][T12581] lo speed is unknown, defaulting to 1000 [ 308.847410][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.935041][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.062155][T12581] chnl_net:caif_netlink_parms(): no params data found [ 309.097042][ T61] bridge_slave_1: left allmulticast mode [ 309.103585][ T61] bridge_slave_1: left promiscuous mode [ 309.109295][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.118428][ T61] bridge_slave_0: left allmulticast mode [ 309.124558][ T61] bridge_slave_0: left promiscuous mode [ 309.130238][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.476424][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.487275][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.497550][ T61] bond0 (unregistering): Released all slaves [ 309.566311][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.575609][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.583163][T12581] bridge_slave_0: entered allmulticast mode [ 309.590221][T12581] bridge_slave_0: entered promiscuous mode [ 309.617515][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.624787][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.632141][T12581] bridge_slave_1: entered allmulticast mode [ 309.638777][T12581] bridge_slave_1: entered promiscuous mode [ 309.661493][T12581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.686731][T12581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.733830][T12581] team0: Port device team_slave_0 added [ 309.744533][T12581] team0: Port device team_slave_1 added [ 309.797741][T12581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.811296][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.845787][T12581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.884271][T12581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.895090][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.926478][T12581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.961542][ T61] hsr_slave_0: left promiscuous mode [ 309.974391][ T61] hsr_slave_1: left promiscuous mode [ 309.980869][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.988282][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.997936][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.005874][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.025991][ T61] veth1_macvtap: left promiscuous mode [ 310.031760][ T61] veth0_macvtap: left promiscuous mode [ 310.037311][ T61] veth1_vlan: left promiscuous mode [ 310.042656][ T61] veth0_vlan: left promiscuous mode [ 310.467460][ T61] team0 (unregistering): Port device team_slave_1 removed [ 310.513202][ T61] team0 (unregistering): Port device team_slave_0 removed [ 310.793263][ T5840] Bluetooth: hci2: command tx timeout [ 310.946708][T12581] hsr_slave_0: entered promiscuous mode [ 310.956032][T12581] hsr_slave_1: entered promiscuous mode [ 311.299396][T12581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.309261][T12581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.318249][T12581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.333611][T12581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.383615][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.404626][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.416948][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.424123][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.438937][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.446072][T10065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.567736][T12581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.599202][T12581] veth0_vlan: entered promiscuous mode [ 311.610826][T12581] veth1_vlan: entered promiscuous mode [ 311.634907][T12581] veth0_macvtap: entered promiscuous mode [ 311.643532][T12581] veth1_macvtap: entered promiscuous mode [ 311.658358][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.669880][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.684722][T12581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.696146][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.707105][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.718484][T12581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.731729][T12581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.740879][T12581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.749582][T12581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.758909][T12581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.814662][T10065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.822679][T10065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.846274][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.854560][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.233209][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.772811][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.781837][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.790235][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.799972][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.811256][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 315.820371][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.859357][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.876893][T12594] lo speed is unknown, defaulting to 1000 [ 315.948087][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.031162][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.124091][T12594] chnl_net:caif_netlink_parms(): no params data found [ 316.180180][ T61] bridge_slave_1: left allmulticast mode [ 316.187117][ T61] bridge_slave_1: left promiscuous mode [ 316.193019][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.202603][ T61] bridge_slave_0: left allmulticast mode [ 316.208273][ T61] bridge_slave_0: left promiscuous mode [ 316.214122][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.557484][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.569102][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.579585][ T61] bond0 (unregistering): Released all slaves [ 316.607889][T12594] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.615342][T12594] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.625411][T12594] bridge_slave_0: entered allmulticast mode [ 316.632566][T12594] bridge_slave_0: entered promiscuous mode [ 316.641307][T12594] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.648494][T12594] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.655938][T12594] bridge_slave_1: entered allmulticast mode [ 316.663166][T12594] bridge_slave_1: entered promiscuous mode [ 316.719788][T12594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.732140][T12594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.793703][T12594] team0: Port device team_slave_0 added [ 316.803072][T12594] team0: Port device team_slave_1 added [ 316.821196][T12594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.828175][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.854426][T12594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.866775][T12594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.875008][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.904367][T12594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.969095][T12594] hsr_slave_0: entered promiscuous mode [ 316.976319][T12594] hsr_slave_1: entered promiscuous mode [ 316.987661][T12594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.997048][T12594] Cannot create hsr debugfs directory [ 317.135521][ T61] hsr_slave_0: left promiscuous mode [ 317.146259][ T61] hsr_slave_1: left promiscuous mode [ 317.152562][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.159984][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.179396][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.186921][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.209402][ T61] veth1_macvtap: left promiscuous mode [ 317.215232][ T61] veth0_macvtap: left promiscuous mode [ 317.221149][ T61] veth1_vlan: left promiscuous mode [ 317.226421][ T61] veth0_vlan: left promiscuous mode [ 317.630056][ T61] team0 (unregistering): Port device team_slave_1 removed [ 317.680206][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.689079][ T61] team0 (unregistering): Port device team_slave_0 removed [ 317.912506][ T5840] Bluetooth: hci2: command tx timeout [ 318.416578][T12594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 318.427526][T12594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 318.440780][T12594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 318.453559][T12594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 318.509540][T12594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.527159][T12594] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.539344][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.546467][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.558288][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.565415][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.687679][T12594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.719789][T12594] veth0_vlan: entered promiscuous mode [ 318.729021][T12594] veth1_vlan: entered promiscuous mode [ 318.755743][T12594] veth0_macvtap: entered promiscuous mode [ 318.764717][T12594] veth1_macvtap: entered promiscuous mode [ 318.779913][T12594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.791274][T12594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.802279][T12594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.814278][T12594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.825015][T12594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.836205][T12594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.847413][T12594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.856510][T12594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.865380][T12594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.874105][T12594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.924377][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.939638][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.965874][T10065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.976690][T10065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.988220][ T1076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.609730][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.620280][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.629926][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.639265][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.649233][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 322.656655][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.686329][T12607] lo speed is unknown, defaulting to 1000 [ 322.733063][ T1076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.817717][ T1076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.875825][ T1076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.941109][T12607] chnl_net:caif_netlink_parms(): no params data found [ 323.005629][ T1076] bridge_slave_1: left allmulticast mode [ 323.011570][ T1076] bridge_slave_1: left promiscuous mode [ 323.017256][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.026989][ T1076] bridge_slave_0: left allmulticast mode [ 323.032894][ T1076] bridge_slave_0: left promiscuous mode [ 323.038591][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.346417][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.358396][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.368572][ T1076] bond0 (unregistering): Released all slaves [ 323.396522][T12607] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.404048][T12607] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.419375][T12607] bridge_slave_0: entered allmulticast mode [ 323.426608][T12607] bridge_slave_0: entered promiscuous mode [ 323.439266][T12607] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.446951][T12607] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.465548][T12607] bridge_slave_1: entered allmulticast mode [ 323.472429][T12607] bridge_slave_1: entered promiscuous mode [ 323.512707][T12607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.523772][T12607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.565569][T12607] team0: Port device team_slave_0 added [ 323.575548][T12607] team0: Port device team_slave_1 added [ 323.618854][T12607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.626055][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.652176][T12607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.667871][T12607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.675377][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.702338][T12607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.758465][T12607] hsr_slave_0: entered promiscuous mode [ 323.769489][T12607] hsr_slave_1: entered promiscuous mode [ 323.909007][ T1076] hsr_slave_0: left promiscuous mode [ 323.918518][ T1076] hsr_slave_1: left promiscuous mode [ 323.924796][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.932377][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.940104][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.947875][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.969061][ T1076] veth1_macvtap: left promiscuous mode [ 323.974846][ T1076] veth0_macvtap: left promiscuous mode [ 323.980555][ T1076] veth1_vlan: left promiscuous mode [ 323.985886][ T1076] veth0_vlan: left promiscuous mode [ 324.398722][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 324.445131][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 324.723352][ T5840] Bluetooth: hci2: command tx timeout [ 325.160256][T12607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 325.179751][T12607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 325.189399][T12607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 325.198542][T12607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 325.254759][T12607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.272537][T12607] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.283331][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.290474][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.305157][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.312329][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.437235][T12607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.468749][T12607] veth0_vlan: entered promiscuous mode [ 325.477972][T12607] veth1_vlan: entered promiscuous mode [ 325.502743][T12607] veth0_macvtap: entered promiscuous mode [ 325.511522][T12607] veth1_macvtap: entered promiscuous mode [ 325.526939][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.537457][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.548241][T12607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.559828][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.571594][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.582718][T12607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.595684][T12607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.604902][T12607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.613998][T12607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.622933][T12607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.682971][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.696335][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.715851][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.724719][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.700070][ T3510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.446956][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.457972][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.466827][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.475819][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.486118][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 329.493742][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.532582][ T3510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.558762][T12620] lo speed is unknown, defaulting to 1000 [ 329.612525][ T3510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.691800][ T3510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.794275][ T3510] bridge_slave_1: left allmulticast mode [ 329.799973][ T3510] bridge_slave_1: left promiscuous mode [ 329.808058][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.816645][ T3510] bridge_slave_0: left allmulticast mode [ 329.822945][ T3510] bridge_slave_0: left promiscuous mode [ 329.830091][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.174024][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.185995][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.196390][ T3510] bond0 (unregistering): Released all slaves [ 330.239771][T12620] chnl_net:caif_netlink_parms(): no params data found [ 330.327006][T12620] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.334750][T12620] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.342182][T12620] bridge_slave_0: entered allmulticast mode [ 330.349141][T12620] bridge_slave_0: entered promiscuous mode [ 330.358577][T12620] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.365971][T12620] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.373509][T12620] bridge_slave_1: entered allmulticast mode [ 330.381201][T12620] bridge_slave_1: entered promiscuous mode [ 330.422227][T12620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.436479][T12620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.464220][T12620] team0: Port device team_slave_0 added [ 330.485158][T12620] team0: Port device team_slave_1 added [ 330.526668][T12620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.533884][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.560924][T12620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.590979][T12620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.597972][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.624550][T12620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.694385][T12620] hsr_slave_0: entered promiscuous mode [ 330.710975][T12620] hsr_slave_1: entered promiscuous mode [ 330.717736][T12620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.725858][T12620] Cannot create hsr debugfs directory [ 330.748072][ T3510] hsr_slave_0: left promiscuous mode [ 330.756768][ T3510] hsr_slave_1: left promiscuous mode [ 330.764351][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.771984][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.779741][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.787797][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.810267][ T3510] veth1_macvtap: left promiscuous mode [ 330.816012][ T3510] veth0_macvtap: left promiscuous mode [ 330.821642][ T3510] veth1_vlan: left promiscuous mode [ 330.826883][ T3510] veth0_vlan: left promiscuous mode [ 331.256146][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 331.306441][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 331.595542][ T5840] Bluetooth: hci2: command tx timeout [ 332.069723][T12620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.079673][T12620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.088589][T12620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.098312][T12620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.151118][T12620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.168345][T12620] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.179053][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.186170][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.201434][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.208554][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.335219][T12620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.367978][T12620] veth0_vlan: entered promiscuous mode [ 332.378894][T12620] veth1_vlan: entered promiscuous mode [ 332.404122][T12620] veth0_macvtap: entered promiscuous mode [ 332.412400][T12620] veth1_macvtap: entered promiscuous mode [ 332.427041][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.437833][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.448988][T12620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.460745][T12620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.473670][T12620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.484561][T12620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.497342][T12620] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.506238][T12620] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.515389][T12620] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.524210][T12620] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.575931][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.589521][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.609559][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.618165][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.854600][ T3510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.561758][ T3510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.635257][ T3510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.711586][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.723738][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.742341][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.752753][ T3510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.763682][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.771787][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.779012][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.810893][T12633] lo speed is unknown, defaulting to 1000 [ 336.901440][ T3510] bridge_slave_1: left allmulticast mode [ 336.907135][ T3510] bridge_slave_1: left promiscuous mode [ 336.912974][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.922393][ T3510] bridge_slave_0: left allmulticast mode [ 336.928076][ T3510] bridge_slave_0: left promiscuous mode [ 336.933976][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.278876][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.289775][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.300149][ T3510] bond0 (unregistering): Released all slaves [ 337.428838][T12633] chnl_net:caif_netlink_parms(): no params data found [ 337.508606][T12633] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.516531][T12633] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.523879][T12633] bridge_slave_0: entered allmulticast mode [ 337.530604][T12633] bridge_slave_0: entered promiscuous mode [ 337.537829][T12633] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.545713][T12633] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.553228][T12633] bridge_slave_1: entered allmulticast mode [ 337.559898][T12633] bridge_slave_1: entered promiscuous mode [ 337.622944][T12633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.662267][T12633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.748717][T12633] team0: Port device team_slave_0 added [ 337.770187][ T3510] hsr_slave_0: left promiscuous mode [ 337.776338][ T3510] hsr_slave_1: left promiscuous mode [ 337.786359][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.794171][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.802344][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.809764][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.832455][ T3510] veth1_macvtap: left promiscuous mode [ 337.837978][ T3510] veth0_macvtap: left promiscuous mode [ 337.843810][ T3510] veth1_vlan: left promiscuous mode [ 337.849119][ T3510] veth0_vlan: left promiscuous mode [ 338.281741][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 338.330047][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 338.736982][T12633] team0: Port device team_slave_1 added [ 338.778109][T12633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.785351][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.812128][T12633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.841728][T12633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.848741][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.875711][T12633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.880480][ T5840] Bluetooth: hci2: command tx timeout [ 338.936647][T12633] hsr_slave_0: entered promiscuous mode [ 338.943025][T12633] hsr_slave_1: entered promiscuous mode [ 339.245327][T12633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 339.255169][T12633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 339.265589][T12633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.274678][T12633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.326973][T12633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.347904][T12633] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.358806][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.365917][T10065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.379740][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.386915][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.508942][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.545422][T12633] veth0_vlan: entered promiscuous mode [ 339.555641][T12633] veth1_vlan: entered promiscuous mode [ 339.577274][T12633] veth0_macvtap: entered promiscuous mode [ 339.585653][T12633] veth1_macvtap: entered promiscuous mode [ 339.602695][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.613908][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.625009][T12633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.637205][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.649354][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.661087][T12633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.673712][T12633] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.682907][T12633] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.692004][T12633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.701021][T12633] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.751817][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.759662][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.781318][T10070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.790507][T10070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.198702][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 340.220641][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 340.289952][T12658] lo speed is unknown, defaulting to 1000 [ 340.396841][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 340.414850][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1945'. [ 340.474323][T12664] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.1943'. [ 341.088232][T12675] bond0: (slave netdevsim0): Releasing backup interface [ 341.819408][T12691] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 341.966274][T12697] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1954'. [ 342.026483][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 342.863192][T12706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1957'. [ 342.874431][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 342.890968][T12706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1957'. [ 343.004515][T12709] tipc: Enabling of bearer rejected, already enabled [ 343.209598][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.597110][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.657524][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.726806][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.799368][ T61] bridge_slave_1: left allmulticast mode [ 344.805236][ T61] bridge_slave_1: left promiscuous mode [ 344.813875][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.822478][ T61] bridge_slave_0: left allmulticast mode [ 344.828137][ T61] bridge_slave_0: left promiscuous mode [ 344.834349][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.225622][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.241466][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.270383][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.305055][T12730] xt_TCPMSS: Only works on TCP SYN packets [ 345.318636][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.331209][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.339558][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.657018][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.668473][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.679491][ T61] bond0 (unregistering): Released all slaves [ 345.756602][T12721] lo speed is unknown, defaulting to 1000 [ 346.317622][T12755] netlink: 'syz.3.1973': attribute type 10 has an invalid length. [ 346.340259][T12755] netlink: 'syz.3.1973': attribute type 10 has an invalid length. [ 346.638488][T12765] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 346.657940][T12766] __nla_validate_parse: 2 callbacks suppressed [ 346.657961][T12766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1971'. [ 346.757376][T12721] chnl_net:caif_netlink_parms(): no params data found [ 346.853545][T12766] ip6gretap0: entered promiscuous mode [ 346.891630][T12766] batman_adv: batadv0: Adding interface: macvlan5 [ 346.910564][T12766] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.960454][T12766] batman_adv: batadv0: Interface activated: macvlan5 [ 346.988625][ T61] hsr_slave_0: left promiscuous mode [ 346.996952][ T61] hsr_slave_1: left promiscuous mode [ 347.006334][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.020638][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.028848][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.037878][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.066777][ T61] veth1_macvtap: left promiscuous mode [ 347.072597][ T61] veth0_macvtap: left promiscuous mode [ 347.078390][ T61] veth1_vlan: left promiscuous mode [ 347.084154][ T61] veth0_vlan: left promiscuous mode [ 347.430759][ T5846] Bluetooth: hci2: command tx timeout [ 347.571936][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1977'. [ 348.003821][ T61] team0 (unregistering): Port device team_slave_1 removed [ 348.050049][ T61] team0 (unregistering): Port device team_slave_0 removed [ 348.492744][T12778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1977'. [ 348.638282][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1980'. [ 348.663850][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1980'. [ 348.724586][T12793] gretap0: entered promiscuous mode [ 348.762514][T12793] batadv_slave_1: entered promiscuous mode [ 348.779364][T12793] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 348.786673][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 348.809535][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1983'. [ 348.818805][T12793] Cannot create hsr debugfs directory [ 348.846827][T12793] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 348.886322][T12793] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.912462][T12721] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.919984][T12721] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.942597][T12721] bridge_slave_0: entered allmulticast mode [ 348.963937][T12721] bridge_slave_0: entered promiscuous mode [ 349.035492][T12721] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.074452][T12721] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.086576][T12721] bridge_slave_1: entered allmulticast mode [ 349.132089][T12721] bridge_slave_1: entered promiscuous mode [ 349.205493][T12721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.246386][T12814] syzkaller0: entered promiscuous mode [ 349.252452][T12814] syzkaller0: entered allmulticast mode [ 349.262898][T12721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.414115][T12721] team0: Port device team_slave_0 added [ 349.474924][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1986'. [ 349.520999][ T5846] Bluetooth: hci2: command 0x041b tx timeout [ 351.309861][T12721] team0: Port device team_slave_1 added [ 351.323370][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:15) already exists on: macvlan5 [ 351.333906][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.344953][T12823] ip6gretap0: entered promiscuous mode [ 351.366395][T12823] ip6gretap0: left promiscuous mode [ 351.509137][T12721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.531547][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.559112][T12837] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 351.573604][T12721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.590028][T12721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.597166][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 351.619098][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.706261][T12721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.798462][T12721] hsr_slave_0: entered promiscuous mode [ 351.805814][T12721] hsr_slave_1: entered promiscuous mode [ 351.991473][T12858] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 352.415162][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'. [ 352.481866][T12892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2002'. [ 352.501563][T12886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.521150][T12886] batman_adv: batadv0: Removing interface: macvlan3 [ 352.529708][T12886] batman_adv: batadv0: Interface deactivated: macvlan4 [ 352.538004][T12886] batman_adv: batadv0: Removing interface: macvlan4 [ 352.546193][T12886] batman_adv: batadv0: Interface deactivated: macvlan5 [ 352.556365][T12886] batman_adv: batadv0: Removing interface: macvlan5 [ 352.707049][T12721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.790780][T12721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.933492][T12721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.969156][T12721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.226225][T12721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.290182][T12721] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.326711][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.333927][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.381847][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.389042][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.487306][T12721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.507295][T12721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.551277][T12945] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 353.653142][T12951] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2013'. [ 353.671865][T12951] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2013'. [ 353.672304][ T5846] Bluetooth: hci2: command 0x041b tx timeout [ 353.701180][T12945] bond0: entered promiscuous mode [ 353.715225][T12721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.807119][T12721] veth0_vlan: entered promiscuous mode [ 353.836572][T12721] veth1_vlan: entered promiscuous mode [ 353.944001][T12721] veth0_macvtap: entered promiscuous mode [ 353.966145][T12721] veth1_macvtap: entered promiscuous mode [ 354.003493][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.027252][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.041395][T12721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.057329][T12964] syzkaller1: entered promiscuous mode [ 354.064384][T12964] syzkaller1: entered allmulticast mode [ 354.074038][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.086569][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.098429][T12721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.153908][T12721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.163673][T12721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.184339][T12721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.209070][T12721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.405317][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.428729][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.456562][T12978] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 354.469499][T12978] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 354.507695][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.526116][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.616886][T12984] netlink: 'syz.4.2022': attribute type 4 has an invalid length. [ 354.950131][T13003] batadv0: entered promiscuous mode [ 354.959373][T13003] batadv_slave_0: entered promiscuous mode [ 354.970554][T13003] batadv_slave_0: left promiscuous mode [ 354.977733][T13003] batadv0: left promiscuous mode [ 355.021943][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2028'. [ 355.095099][T13010] syzkaller1: entered promiscuous mode [ 355.101282][T13010] syzkaller1: entered allmulticast mode [ 355.175393][T13012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2030'. [ 355.219394][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2030'. [ 355.528984][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 356.024317][T13044] veth1_to_hsr: entered allmulticast mode [ 356.029917][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2040'. [ 356.135811][T13046] syzkaller1: entered promiscuous mode [ 356.142283][T13046] syzkaller1: entered allmulticast mode [ 356.263083][T10076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.916372][T10076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.978462][T10076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.055511][T10076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.140233][T10076] bridge_slave_1: left allmulticast mode [ 357.146321][T10076] bridge_slave_1: left promiscuous mode [ 357.153864][T10076] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.162417][T10076] bridge_slave_0: left allmulticast mode [ 357.168089][T10076] bridge_slave_0: left promiscuous mode [ 357.174157][T10076] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.486239][T10076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.496977][T10076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.507439][T10076] bond0 (unregistering): Released all slaves [ 357.859876][T10076] hsr_slave_0: left promiscuous mode [ 357.866520][T10076] hsr_slave_1: left promiscuous mode [ 357.882816][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.890811][T10076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.898576][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.906209][T10076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.929227][T10076] veth1_macvtap: left promiscuous mode [ 357.935040][T10076] veth0_macvtap: left promiscuous mode [ 357.940775][T10076] veth1_vlan: left promiscuous mode [ 357.946294][T10076] veth0_vlan: left promiscuous mode [ 358.505080][T13071] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2048'. [ 358.673991][T10076] team0 (unregistering): Port device team_slave_1 removed [ 358.735757][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.747975][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.764956][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.778009][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.787218][T10076] team0 (unregistering): Port device team_slave_0 removed [ 358.796342][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.809415][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.297350][T13068] netlink: 'syz.3.2047': attribute type 7 has an invalid length. [ 359.359418][T13078] lo speed is unknown, defaulting to 1000 [ 359.733646][T13102] syzkaller1: entered promiscuous mode [ 359.739593][T13102] syzkaller1: entered allmulticast mode [ 359.769623][T13100] netlink: 'syz.3.2054': attribute type 4 has an invalid length. [ 359.803211][T13104] tipc: Started in network mode [ 359.813120][T13104] tipc: Node identity ffffffff, cluster identity 4711 [ 359.830216][T13104] tipc: Node number set to 4294967295 [ 360.049360][T13115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2059'. [ 360.063964][T13115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2059'. [ 360.259474][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 360.269895][T13078] chnl_net:caif_netlink_parms(): no params data found [ 360.352332][T13126] erspan1: entered promiscuous mode [ 360.357620][T13126] erspan1: entered allmulticast mode [ 360.387938][T13133] netlink: 'syz.4.2065': attribute type 3 has an invalid length. [ 360.467590][T13078] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.513819][T13078] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.541492][T13078] bridge_slave_0: entered allmulticast mode [ 360.555811][T13078] bridge_slave_0: entered promiscuous mode [ 360.575148][T13139] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20005 [ 360.581900][T13078] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.589006][T13078] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.611691][T13078] bridge_slave_1: entered allmulticast mode [ 360.621096][T13078] bridge_slave_1: entered promiscuous mode [ 360.758126][T13078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.788235][T13078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.852752][T13078] team0: Port device team_slave_0 added [ 360.869830][T13078] team0: Port device team_slave_1 added [ 360.880907][ T5840] Bluetooth: hci2: command tx timeout [ 360.983437][T13078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.998557][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.054169][T13078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.058457][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 361.113271][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 361.179346][T13078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.196849][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.224310][T13078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.236615][T13150] syzkaller1: entered promiscuous mode [ 361.243037][T13150] syzkaller1: entered allmulticast mode [ 361.442900][T13155] lo speed is unknown, defaulting to 1000 [ 361.463623][T13158] netlink: 'syz.2.2071': attribute type 13 has an invalid length. [ 361.504304][T13078] hsr_slave_0: entered promiscuous mode [ 361.536081][T13078] hsr_slave_1: entered promiscuous mode [ 361.592688][T13164] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2072'. [ 361.709738][T13169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2074'. [ 361.807847][T13173] netlink: 'syz.3.2076': attribute type 2 has an invalid length. [ 361.832437][T13173] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2076'. [ 362.238992][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'. [ 362.342291][T13200] syzkaller1: entered promiscuous mode [ 362.348084][T13200] syzkaller1: entered allmulticast mode [ 362.516547][T13078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 362.594452][T13078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.605713][T13078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 362.605875][T13209] ipt_REJECT: TCP_RESET invalid for non-tcp [ 362.634129][T13078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 362.801053][T13078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.820784][T13218] netlink: 'syz.2.2087': attribute type 27 has an invalid length. [ 362.866268][T13078] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.894709][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.901917][T10065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.938614][T13223] erspan0: entered promiscuous mode [ 362.950583][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 362.983882][T13223] erspan0: left promiscuous mode [ 363.074889][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.082043][T10065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.119197][T13078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.179294][T13078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.317963][T13241] vlan3: entered promiscuous mode [ 363.340178][T13241] bond0: entered promiscuous mode [ 363.365897][T13245] syzkaller1: entered promiscuous mode [ 363.372436][T13245] syzkaller1: entered allmulticast mode [ 363.515113][T13078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.613104][T13078] veth0_vlan: entered promiscuous mode [ 363.667425][T13078] veth1_vlan: entered promiscuous mode [ 363.733737][T13264] openvswitch: netlink: Duplicate or invalid key (type 0). [ 363.751210][T13264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.761401][T13078] veth0_macvtap: entered promiscuous mode [ 363.776780][T13078] veth1_macvtap: entered promiscuous mode [ 363.832260][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.872135][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.892222][T13078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.919566][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.960569][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.987058][T13078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.021630][T13279] netlink: 'syz.0.2103': attribute type 3 has an invalid length. [ 364.038295][T13279] __nla_validate_parse: 6 callbacks suppressed [ 364.038324][T13279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2103'. [ 364.063853][T13271] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 364.073154][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'. [ 364.116079][T13078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.146147][T13078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.179429][T13078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.188836][T13078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.202264][T13282] xt_TPROXY: Can be used only with -p tcp or -p udp [ 364.358434][T13296] netlink: 'syz.0.2107': attribute type 29 has an invalid length. [ 364.396537][T13301] netlink: 'syz.0.2107': attribute type 29 has an invalid length. [ 364.417563][T13292] netlink: 516 bytes leftover after parsing attributes in process `syz.0.2107'. [ 364.419739][T13295] syzkaller1: entered promiscuous mode [ 364.434915][T13295] syzkaller1: entered allmulticast mode [ 364.519059][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.530633][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.572990][T10070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.599287][T10070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.646834][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 364.879550][T13323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2116'. [ 365.034118][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 365.144083][T13336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2121'. [ 365.188730][T13334] bpq0: entered allmulticast mode [ 365.394413][T13344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2122'. [ 365.449982][T13345] syzkaller1: entered promiscuous mode [ 365.463946][T13345] syzkaller1: entered allmulticast mode [ 366.077056][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2131'. [ 366.146547][ T1076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.797000][ T1076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.872250][ T1076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.944595][ T1076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.021125][ T1076] bridge_slave_1: left allmulticast mode [ 367.026808][ T1076] bridge_slave_1: left promiscuous mode [ 367.032974][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.042613][ T1076] bridge_slave_0: left allmulticast mode [ 367.048288][ T1076] bridge_slave_0: left promiscuous mode [ 367.054069][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.378090][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.388880][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.399021][ T1076] bond0 (unregistering): Released all slaves [ 367.714091][ T1076] hsr_slave_0: left promiscuous mode [ 367.720009][ T1076] hsr_slave_1: left promiscuous mode [ 367.726506][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.734058][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.742051][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.749479][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.771348][ T1076] veth1_macvtap: left promiscuous mode [ 367.776891][ T1076] veth0_macvtap: left promiscuous mode [ 367.782879][ T1076] veth1_vlan: left promiscuous mode [ 367.788193][ T1076] veth0_vlan: left promiscuous mode [ 368.150582][T13387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2133'. [ 368.159611][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 368.201573][T13394] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 368.327492][T13400] netlink: 'syz.3.2137': attribute type 27 has an invalid length. [ 368.459658][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 368.544353][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 368.594338][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.608838][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.620665][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.650297][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.667965][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 368.678893][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.168962][T13405] lo speed is unknown, defaulting to 1000 [ 369.260636][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2141'. [ 369.360004][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2143'. [ 369.431200][T13419] IPVS: stopping backup sync thread 13420 ... [ 369.647820][T13419] siw: device registration error -23 [ 369.655415][T13432] x_tables: duplicate underflow at hook 1 [ 369.807702][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2150'. [ 369.875409][T13405] chnl_net:caif_netlink_parms(): no params data found [ 369.890953][T13437] nbd: socks must be embedded in a SOCK_ITEM attr [ 370.091380][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.098493][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.125770][T13405] bridge_slave_0: entered allmulticast mode [ 370.141668][T13405] bridge_slave_0: entered promiscuous mode [ 370.168625][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.191396][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.198699][T13405] bridge_slave_1: entered allmulticast mode [ 370.217139][T13405] bridge_slave_1: entered promiscuous mode [ 370.276784][T13471] netlink: 'syz.2.2160': attribute type 10 has an invalid length. [ 370.288327][T13471] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2160'. [ 370.290077][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.327543][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.384292][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 370.457690][T13405] team0: Port device team_slave_0 added [ 370.475511][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2161'. [ 370.503789][T13405] team0: Port device team_slave_1 added [ 370.654198][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.661596][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.690646][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.703935][T13487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 370.710496][ T5840] Bluetooth: hci2: command tx timeout [ 370.741604][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.750778][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.782741][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.858593][T13405] hsr_slave_0: entered promiscuous mode [ 370.865938][T13405] hsr_slave_1: entered promiscuous mode [ 371.117700][T13493] sctp: [Deprecated]: syz.4.2165 (pid 13493) Use of int in max_burst socket option. [ 371.117700][T13493] Use struct sctp_assoc_value instead [ 371.397762][T13405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 371.412622][T13405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 371.424563][T13405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 371.443475][T13405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 371.450796][T13510] netlink: 'syz.3.2170': attribute type 39 has an invalid length. [ 371.589391][T13405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.606922][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2172'. [ 371.614038][T13405] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.626578][T13519] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2172'. [ 371.631989][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.644351][T10065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.666469][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2172'. [ 371.701575][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.708719][T10065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.032295][T13405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.103615][T13405] veth0_vlan: entered promiscuous mode [ 372.125942][T13405] veth1_vlan: entered promiscuous mode [ 372.137676][T13551] FAULT_INJECTION: forcing a failure. [ 372.137676][T13551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.170770][T13551] CPU: 0 UID: 0 PID: 13551 Comm: syz.3.2182 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 372.181600][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 372.182432][T13405] veth0_macvtap: entered promiscuous mode [ 372.191661][T13551] Call Trace: [ 372.191673][T13551] [ 372.191682][T13551] dump_stack_lvl+0x241/0x360 [ 372.191714][T13551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.212839][T13405] veth1_macvtap: entered promiscuous mode [ 372.213524][T13551] ? __pfx__printk+0x10/0x10 [ 372.223877][T13551] ? __pfx_lock_release+0x10/0x10 [ 372.228938][T13551] ? __mutex_unlock_slowpath+0x21e/0x790 [ 372.229656][T13405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.234594][T13551] should_fail_ex+0x3b0/0x4e0 [ 372.234623][T13551] _copy_from_user+0x2f/0xc0 [ 372.234648][T13551] __se_sys_select+0xd7/0x360 [ 372.234674][T13551] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 372.234696][T13551] ? __pfx___se_sys_select+0x10/0x10 [ 372.234720][T13551] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 372.234740][T13551] ? do_syscall_64+0x100/0x230 [ 372.234768][T13551] ? __x64_sys_select+0x20/0xc0 [ 372.234792][T13551] do_syscall_64+0xf3/0x230 [ 372.234817][T13551] ? clear_bhb_loop+0x35/0x90 [ 372.234837][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.234861][T13551] RIP: 0033:0x7f8de537ff19 [ 372.234880][T13551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.234898][T13551] RSP: 002b:00007f8de6161058 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 372.234922][T13551] RAX: ffffffffffffffda RBX: 00007f8de5545fa0 RCX: 00007f8de537ff19 [ 372.234937][T13551] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000040 [ 372.234951][T13551] RBP: 00007f8de61610a0 R08: 0000000020000200 R09: 0000000000000000 [ 372.234965][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.234979][T13551] R13: 0000000000000000 R14: 00007f8de5545fa0 R15: 00007ffc56ed0b18 [ 372.235008][T13551] [ 372.404170][T13405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.431534][T13405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.481157][T13564] netlink: 'syz.3.2186': attribute type 4 has an invalid length. [ 372.496454][T13405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.509987][T13405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.522821][T13405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.577874][T13405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.591197][T13405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.600060][T13405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.609350][T13405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.757143][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.775345][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.797038][ T5840] Bluetooth: hci2: command tx timeout [ 372.802731][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.824381][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.993084][T13602] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 373.027464][T13602] netlink: 'syz.3.2195': attribute type 4 has an invalid length. [ 373.186627][T13614] syzkaller1: entered promiscuous mode [ 373.197899][T13614] syzkaller1: entered allmulticast mode [ 373.729550][T13634] dvmrp0: entered allmulticast mode [ 374.028852][T13651] ip6t_rpfilter: unknown options [ 374.051539][T13657] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 374.151050][T13657] bond3: entered promiscuous mode [ 374.156581][T13657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.171430][T13664] batadv0: entered promiscuous mode [ 374.176694][T13664] batadv0: entered allmulticast mode [ 374.183909][T13664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.193668][T13664] bond3: (slave batadv0): making interface the new active one [ 374.211237][T13664] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 374.803382][T13683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.833107][T13683] __nla_validate_parse: 9 callbacks suppressed [ 374.833129][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 374.870680][ T5846] Bluetooth: hci2: command tx timeout [ 375.183931][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 375.194316][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2229'. [ 375.295222][T13706] team0: Master is either lo or non-ether device [ 375.550284][T13718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2237'. [ 375.565671][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2237'. [ 375.575516][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 375.936097][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2240'. [ 376.092766][T13737] FAULT_INJECTION: forcing a failure. [ 376.092766][T13737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.109800][T13737] CPU: 1 UID: 0 PID: 13737 Comm: syz.4.2244 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 376.120637][T13737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.130717][T13737] Call Trace: [ 376.134006][T13737] [ 376.136933][T13737] dump_stack_lvl+0x241/0x360 [ 376.141627][T13737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.146868][T13737] ? __pfx__printk+0x10/0x10 [ 376.147517][T13739] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2245'. [ 376.151475][T13737] ? snprintf+0xda/0x120 [ 376.151531][T13737] should_fail_ex+0x3b0/0x4e0 [ 376.151555][T13737] _copy_to_user+0x31/0xb0 [ 376.151579][T13737] simple_read_from_buffer+0xca/0x150 [ 376.151607][T13737] proc_fail_nth_read+0x1e9/0x250 [ 376.151634][T13737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.151662][T13737] ? rw_verify_area+0x55e/0x6f0 [ 376.151707][T13737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.151731][T13737] vfs_read+0x1fc/0xb70 [ 376.151758][T13737] ? __pfx___mutex_lock+0x10/0x10 [ 376.151782][T13737] ? __pfx_vfs_read+0x10/0x10 [ 376.151804][T13737] ? __fget_files+0x2a/0x410 [ 376.218871][T13737] ? __fget_files+0x395/0x410 [ 376.223558][T13737] ? __fget_files+0x2a/0x410 [ 376.228159][T13737] ksys_read+0x18f/0x2b0 [ 376.232407][T13737] ? __pfx_ksys_read+0x10/0x10 [ 376.237203][T13737] ? do_syscall_64+0x100/0x230 [ 376.241976][T13737] ? do_syscall_64+0xb6/0x230 [ 376.246655][T13737] do_syscall_64+0xf3/0x230 [ 376.251162][T13737] ? clear_bhb_loop+0x35/0x90 [ 376.255844][T13737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.261742][T13737] RIP: 0033:0x7f2a1cd7e92c [ 376.266157][T13737] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 376.285780][T13737] RSP: 002b:00007f2a1dbfd050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.294204][T13737] RAX: ffffffffffffffda RBX: 00007f2a1cf45fa0 RCX: 00007f2a1cd7e92c [ 376.302177][T13737] RDX: 000000000000000f RSI: 00007f2a1dbfd0b0 RDI: 0000000000000004 [ 376.310177][T13737] RBP: 00007f2a1dbfd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 376.318171][T13737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.326157][T13737] R13: 0000000000000000 R14: 00007f2a1cf45fa0 R15: 00007ffff0915908 [ 376.334151][T13737] [ 376.351523][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 376.433881][T13746] netlink: 'syz.3.2246': attribute type 10 has an invalid length. [ 376.456740][T13745] syzkaller1: entered promiscuous mode [ 376.464798][T13745] syzkaller1: entered allmulticast mode [ 376.969100][T13762] netlink: 'syz.0.2253': attribute type 24 has an invalid length. [ 376.995782][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2253'. [ 377.017575][T13764] lo speed is unknown, defaulting to 1000 [ 377.561241][T13778] pim6reg1: entered promiscuous mode [ 377.566672][T13778] pim6reg1: entered allmulticast mode [ 377.661007][T13784] batadv_slave_1: entered promiscuous mode [ 377.671879][T13783] batadv_slave_1: left promiscuous mode [ 378.466921][T13816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2267'. [ 378.550539][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 379.024611][T13839] netlink: 'syz.4.2273': attribute type 3 has an invalid length. [ 379.304114][T13851] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 379.338563][T13853] netlink: 'syz.0.2278': attribute type 1 has an invalid length. [ 379.375766][T13853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 379.625594][T13869] bridge_slave_1: left allmulticast mode [ 379.636676][T13869] bridge_slave_1: left promiscuous mode [ 379.647761][T13869] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.996457][T13895] __nla_validate_parse: 6 callbacks suppressed [ 379.996478][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 380.088126][T13895] ------------[ cut here ]------------ [ 380.094383][T13895] WARNING: CPU: 1 PID: 13895 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 380.107595][T13895] Modules linked in: [ 380.111618][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.4.2290 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 380.122482][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.132868][T13895] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 380.139600][T13895] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 a6 65 87 fa eb 05 e8 9f 65 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 380.159720][T13895] RSP: 0018:ffffc90002fa76b0 EFLAGS: 00010287 [ 380.166437][T13895] RAX: ffffffff87180c81 RBX: 0000000000000000 RCX: 0000000000080000 [ 380.174708][T13895] RDX: ffffc9000e551000 RSI: 0000000000004bf2 RDI: 0000000000004bf3 [ 380.182820][T13895] RBP: 0000000000000000 R08: ffffffff87180a8d R09: 1ffffffff20329b6 [ 380.191703][T13895] R10: dffffc0000000000 R11: ffffffff87177ad0 R12: ffff88802a056e32 [ 380.199705][T13895] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888028eb30a0 [ 380.207990][T13895] FS: 00007f2a1dbdc6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 380.217044][T13895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.223935][T13895] CR2: 000055557c3cb808 CR3: 00000000233ec000 CR4: 00000000003526f0 [ 380.231990][T13895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.240019][T13895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.248134][T13895] Call Trace: [ 380.251764][T13895] [ 380.254727][T13895] ? __warn+0x165/0x4d0 [ 380.258928][T13895] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 380.265095][T13895] ? report_bug+0x2b3/0x500 [ 380.269896][T13895] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 380.276289][T13895] ? handle_bug+0x60/0x90 [ 380.280956][T13895] ? exc_invalid_op+0x1a/0x50 [ 380.285674][T13895] ? asm_exc_invalid_op+0x1a/0x20 [ 380.290808][T13895] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 380.297277][T13895] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 380.303345][T13895] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 380.309463][T13895] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 380.315861][T13895] ? mac80211_hwsim_add_interface+0x86/0x320 [ 380.321953][T13895] mac80211_hwsim_add_interface+0x9a/0x320 [ 380.327811][T13895] drv_add_interface+0x2f8/0x8e0 [ 380.332915][T13895] ieee80211_do_open+0x73d/0x2420 [ 380.337989][T13895] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 380.344774][T13895] ieee80211_open+0x192/0x200 [ 380.349497][T13895] __dev_open+0x2d3/0x450 [ 380.353933][T13895] ? __pfx___dev_open+0x10/0x10 [ 380.358829][T13895] ? dev_set_rx_mode+0xb8/0x2e0 [ 380.363784][T13895] __dev_change_flags+0x1e2/0x6f0 [ 380.368849][T13895] ? __pfx___mutex_lock+0x10/0x10 [ 380.374583][T13895] ? __pfx___dev_change_flags+0x10/0x10 [ 380.380180][T13895] ? apparmor_capable+0x13b/0x1b0 [ 380.385294][T13895] dev_change_flags+0x8b/0x1a0 [ 380.390106][T13895] devinet_ioctl+0xcce/0x1ac0 [ 380.394972][T13895] inet_ioctl+0x3d7/0x4f0 [ 380.399341][T13895] ? __pfx_inet_ioctl+0x10/0x10 [ 380.404553][T13895] ? tomoyo_path_number_perm+0x679/0x860 [ 380.410246][T13895] ? tomoyo_path_number_perm+0x206/0x860 [ 380.415988][T13895] sock_do_ioctl+0x158/0x460 [ 380.420721][T13895] ? __pfx_sock_do_ioctl+0x10/0x10 [ 380.425881][T13895] ? __pfx_lock_release+0x10/0x10 [ 380.431284][T13895] sock_ioctl+0x626/0x8e0 [ 380.435691][T13895] ? __pfx_sock_ioctl+0x10/0x10 [ 380.440647][T13895] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.446667][T13895] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.453108][T13895] ? __pfx_sock_ioctl+0x10/0x10 [ 380.458004][T13895] __se_sys_ioctl+0xf5/0x170 [ 380.462924][T13895] do_syscall_64+0xf3/0x230 [ 380.467482][T13895] ? clear_bhb_loop+0x35/0x90 [ 380.472411][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.478511][T13895] RIP: 0033:0x7f2a1cd7fb1b [ 380.483089][T13895] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 380.503038][T13895] RSP: 002b:00007f2a1dbdae80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.511686][T13895] RAX: ffffffffffffffda RBX: 00007f2a1dbdafa0 RCX: 00007f2a1cd7fb1b [ 380.519693][T13895] RDX: 00007f2a1dbdaf00 RSI: 0000000000008914 RDI: 0000000000000006 [ 380.527789][T13895] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 380.536074][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 380.544133][T13895] R13: 0000000000000048 R14: 00007f2a1dbdafc0 R15: 00007f2a1dbdaf00 [ 380.552354][T13895] [ 380.555459][T13895] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 380.562767][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.4.2290 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 380.573551][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.583627][T13895] Call Trace: [ 380.586910][T13895] [ 380.589845][T13895] dump_stack_lvl+0x241/0x360 [ 380.594540][T13895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.599745][T13895] ? __pfx__printk+0x10/0x10 [ 380.604343][T13895] ? vscnprintf+0x5d/0x90 [ 380.608678][T13895] panic+0x349/0x880 [ 380.612576][T13895] ? __warn+0x174/0x4d0 [ 380.616738][T13895] ? __pfx_panic+0x10/0x10 [ 380.621169][T13895] __warn+0x344/0x4d0 [ 380.625152][T13895] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 380.631265][T13895] report_bug+0x2b3/0x500 [ 380.635602][T13895] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 380.641679][T13895] handle_bug+0x60/0x90 [ 380.645836][T13895] exc_invalid_op+0x1a/0x50 [ 380.650339][T13895] asm_exc_invalid_op+0x1a/0x20 [ 380.655219][T13895] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 380.661928][T13895] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 a6 65 87 fa eb 05 e8 9f 65 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 380.681549][T13895] RSP: 0018:ffffc90002fa76b0 EFLAGS: 00010287 [ 380.687627][T13895] RAX: ffffffff87180c81 RBX: 0000000000000000 RCX: 0000000000080000 [ 380.695606][T13895] RDX: ffffc9000e551000 RSI: 0000000000004bf2 RDI: 0000000000004bf3 [ 380.703579][T13895] RBP: 0000000000000000 R08: ffffffff87180a8d R09: 1ffffffff20329b6 [ 380.711551][T13895] R10: dffffc0000000000 R11: ffffffff87177ad0 R12: ffff88802a056e32 [ 380.719521][T13895] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888028eb30a0 [ 380.727506][T13895] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 380.733930][T13895] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 380.739912][T13895] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 380.745984][T13895] ? mac80211_hwsim_add_interface+0x86/0x320 [ 380.751971][T13895] mac80211_hwsim_add_interface+0x9a/0x320 [ 380.757784][T13895] drv_add_interface+0x2f8/0x8e0 [ 380.762734][T13895] ieee80211_do_open+0x73d/0x2420 [ 380.767846][T13895] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 380.774270][T13895] ieee80211_open+0x192/0x200 [ 380.778951][T13895] __dev_open+0x2d3/0x450 [ 380.783326][T13895] ? __pfx___dev_open+0x10/0x10 [ 380.788185][T13895] ? dev_set_rx_mode+0xb8/0x2e0 [ 380.793049][T13895] __dev_change_flags+0x1e2/0x6f0 [ 380.798081][T13895] ? __pfx___mutex_lock+0x10/0x10 [ 380.803114][T13895] ? __pfx___dev_change_flags+0x10/0x10 [ 380.808670][T13895] ? apparmor_capable+0x13b/0x1b0 [ 380.813703][T13895] dev_change_flags+0x8b/0x1a0 [ 380.818476][T13895] devinet_ioctl+0xcce/0x1ac0 [ 380.823167][T13895] inet_ioctl+0x3d7/0x4f0 [ 380.827503][T13895] ? __pfx_inet_ioctl+0x10/0x10 [ 380.832360][T13895] ? tomoyo_path_number_perm+0x679/0x860 [ 380.838012][T13895] ? tomoyo_path_number_perm+0x206/0x860 [ 380.843662][T13895] sock_do_ioctl+0x158/0x460 [ 380.848261][T13895] ? __pfx_sock_do_ioctl+0x10/0x10 [ 380.853378][T13895] ? __pfx_lock_release+0x10/0x10 [ 380.858417][T13895] sock_ioctl+0x626/0x8e0 [ 380.862751][T13895] ? __pfx_sock_ioctl+0x10/0x10 [ 380.867606][T13895] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.873601][T13895] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.879939][T13895] ? __pfx_sock_ioctl+0x10/0x10 [ 380.884796][T13895] __se_sys_ioctl+0xf5/0x170 [ 380.889392][T13895] do_syscall_64+0xf3/0x230 [ 380.893900][T13895] ? clear_bhb_loop+0x35/0x90 [ 380.898578][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.904475][T13895] RIP: 0033:0x7f2a1cd7fb1b [ 380.908890][T13895] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 380.928499][T13895] RSP: 002b:00007f2a1dbdae80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.936918][T13895] RAX: ffffffffffffffda RBX: 00007f2a1dbdafa0 RCX: 00007f2a1cd7fb1b [ 380.944892][T13895] RDX: 00007f2a1dbdaf00 RSI: 0000000000008914 RDI: 0000000000000006 [ 380.952863][T13895] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 380.960925][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 380.968895][T13895] R13: 0000000000000048 R14: 00007f2a1dbdafc0 R15: 00007f2a1dbdaf00 [ 380.976907][T13895] [ 380.980088][T13895] Kernel Offset: disabled [ 380.984486][T13895] Rebooting in 86400 seconds..