last executing test programs: 52.364353056s ago: executing program 0 (id=376): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x88b9, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) unshare(0x2000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r4, &(0x7f00000011c0)=""/99, 0x63, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) listen(r7, 0x2) close(r7) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r9, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x0, 0x0}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000f000000000000004000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001d0000001850000006000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000c27b2d61c83687253d44fb2120b70400000000000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000183a0000020000000000000000000000bf91000000000000b7020000010000008500000085000000b70000"], &(0x7f00000000c0)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x0, 0x2}, 0xffffffffffffff39, 0x2aa9e, r7, 0x6, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x4, 0x8}, {0x2, 0x1, 0xf, 0x3}, {0x2, 0x2, 0xa, 0x8}, {0x0, 0x2, 0xc, 0x3}, {0x2, 0x5, 0xf, 0xb}, {0x2, 0x3, 0x0, 0x6}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 42.403859835s ago: executing program 0 (id=376): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x88b9, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) unshare(0x2000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r4, &(0x7f00000011c0)=""/99, 0x63, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) listen(r7, 0x2) close(r7) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r9, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x0, 0x0}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000f000000000000004000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001d0000001850000006000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000c27b2d61c83687253d44fb2120b70400000000000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000183a0000020000000000000000000000bf91000000000000b7020000010000008500000085000000b70000"], &(0x7f00000000c0)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x0, 0x2}, 0xffffffffffffff39, 0x2aa9e, r7, 0x6, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x4, 0x8}, {0x2, 0x1, 0xf, 0x3}, {0x2, 0x2, 0xa, 0x8}, {0x0, 0x2, 0xc, 0x3}, {0x2, 0x5, 0xf, 0xb}, {0x2, 0x3, 0x0, 0x6}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 32.47056145s ago: executing program 0 (id=376): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x88b9, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) unshare(0x2000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r4, &(0x7f00000011c0)=""/99, 0x63, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) listen(r7, 0x2) close(r7) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r9, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x0, 0x0}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000f000000000000004000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001d0000001850000006000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000c27b2d61c83687253d44fb2120b70400000000000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000183a0000020000000000000000000000bf91000000000000b7020000010000008500000085000000b70000"], &(0x7f00000000c0)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x0, 0x2}, 0xffffffffffffff39, 0x2aa9e, r7, 0x6, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x4, 0x8}, {0x2, 0x1, 0xf, 0x3}, {0x2, 0x2, 0xa, 0x8}, {0x0, 0x2, 0xc, 0x3}, {0x2, 0x5, 0xf, 0xb}, {0x2, 0x3, 0x0, 0x6}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 22.451998979s ago: executing program 0 (id=376): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x88b9, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) unshare(0x2000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r4, &(0x7f00000011c0)=""/99, 0x63, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) listen(r7, 0x2) close(r7) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r9, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x0, 0x0}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000f000000000000004000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001d0000001850000006000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000c27b2d61c83687253d44fb2120b70400000000000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000183a0000020000000000000000000000bf91000000000000b7020000010000008500000085000000b70000"], &(0x7f00000000c0)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x0, 0x2}, 0xffffffffffffff39, 0x2aa9e, r7, 0x6, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x4, 0x8}, {0x2, 0x1, 0xf, 0x3}, {0x2, 0x2, 0xa, 0x8}, {0x0, 0x2, 0xc, 0x3}, {0x2, 0x5, 0xf, 0xb}, {0x2, 0x3, 0x0, 0x6}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 11.677753491s ago: executing program 0 (id=376): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x88b9, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) unshare(0x2000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r4, &(0x7f00000011c0)=""/99, 0x63, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) listen(r7, 0x2) close(r7) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r9, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x0, 0x0}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000f000000000000004000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001d0000001850000006000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000c27b2d61c83687253d44fb2120b70400000000000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000183a0000020000000000000000000000bf91000000000000b7020000010000008500000085000000b70000"], &(0x7f00000000c0)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x0, 0x2}, 0xffffffffffffff39, 0x2aa9e, r7, 0x6, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x4, 0x8}, {0x2, 0x1, 0xf, 0x3}, {0x2, 0x2, 0xa, 0x8}, {0x0, 0x2, 0xc, 0x3}, {0x2, 0x5, 0xf, 0xb}, {0x2, 0x3, 0x0, 0x6}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 4.517038907s ago: executing program 4 (id=1149): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1000f) 3.674461348s ago: executing program 2 (id=1161): r0 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f00000000c0)=0x2, 0x4) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffc}}}}]}, 0x78}}, 0x0) 3.569527186s ago: executing program 2 (id=1163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xff, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) 3.524532497s ago: executing program 4 (id=1165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x10d, 0x10, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@delchain={0x34, 0x65, 0x1, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {0x2, 0x2}, {0xf, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x3336}, @TCA_CHAIN={0x8, 0xb, 0x10000}]}, 0x34}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="258e0d5465999bafa30001000000080002000201ee0008000100"], 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffd7a, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x844) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000ff030000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000efff00"/26], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0xf0, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000190000042dbd7000fbdbdf25021000f7fd02c80500040000080007007f00000108001e0006000000080006001c06000008001e0003000000080010000700000005001b000600000008001e000600000008000400a56932ff2c9d3317821e16868ea6c565b206857bf45e31fc5d57a5bb9499863a49afc7328edd499fa33d0412020a9998071990b1d9361277fa21a69d3e3ad2e34c37391ae2401ec82cd7e2ed721322fadcf542f1e85cbe482d1fd6063fb4150e81f9b4aa3182ecd9d34a33b15a0337983a33", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) 3.41267816s ago: executing program 2 (id=1167): r0 = socket(0x9, 0x1, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x80800) sendmsg$nl_netfilter(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x20005080}, 0x80) recvmmsg(r3, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/214, 0xd6}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmmsg(r1, &(0x7f0000003e00), 0x0, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000000500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1, @ANYRESDEC=r0], 0x11c}, 0x1, 0x0, 0x0, 0x4008084}, 0x20048800) socket$inet_udp(0x2, 0x2, 0x0) 3.312508749s ago: executing program 4 (id=1170): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000ffffffffffffffa40001"], 0x190) 3.143963638s ago: executing program 4 (id=1173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000017c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x156c}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xe, 0xc, 0xb, 0x4, 0x10}, @exit, @jmp={0x5, 0x0, 0x4, 0x6, 0xb, 0xfffffffffffffef8, 0xfffffffffffffffb}, @ldst={0x2, 0x3, 0x2, 0x0, 0x4, 0x2b, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0xe, 0x15, &(0x7f00000002c0)=""/21, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x6, 0x3ff, 0xdaa}, 0x10, 0xc501, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r1, r1, r1, r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x101, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r2, r3}) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe00006600"], 0xfe33) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x40000160) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x150, 0x150, 0x0, 0x90a, 0x218, 0x238, 0x238, 0x218, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0x128, 0x148, 0x0, {0xb00}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x115, 0x0, 0x0, 0x0, 0x0, 0x12c00, 0x7}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r8, 0x4}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r13 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x12, r14, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x8, 0x4, 0xfffc], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000140009050200000000000000020100fe2f8860316e9f7ec1783bf3ac2878de0e308342e1ae0a494e7dc064c026462172e0edfcbcbfee66f62f609d8136dfa20d7ab0d54f74cdea166524b8285b3258c5aa2f7f80827858a7ab99ff78295773e0a31c2a2fbe2436a1b101cf68e759c3f51e534ee8f345859b9a411610309a8b33b1eee390b7cfa138164982893cf998926f1953", @ANYRES32=r12, @ANYBLOB="1400060000000000000400f00000000001000000080002006401010208000100e0000002"], 0x3c}, 0x1, 0x0, 0x0, 0x4044095}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 3.1436816s ago: executing program 1 (id=1174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40fffffff70900020073797a30000000090900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000107"], 0xb0}}, 0x20050800) 3.060758021s ago: executing program 3 (id=1176): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 2.935857829s ago: executing program 4 (id=1177): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f00000006c0)={0x23, 0x6, 0xf1, 0x8}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f00000004c0)="87935a279c7f395e87a3fe5945748b4fe516fc233cb3f3d48d975b1375d33d4762c33794dff1b78fe3e858cddbe2ae1b9f893bb58cbf4d3c4431738504112ac1ba25905f4298b7def503c9ee5b7fcff57c8cf954496f2071fb6753711546b8250685ab5919c7579a13c5c1b4b68f3e36a6b6d759247764ccc60e76c47da9e3b4212cca9010b006cb77606808e41b282140c5177cd43a145fdcb68fa2b8c36192e3f3c37ee81e5183785bc1a46d8886", 0xaf}, {&(0x7f0000000580)="4c11e4a599f9ce9f6ff7e6d792aedafde99c89ca1c34f9a9729381a2519e75608b520e1c41ffa3550ee86174a75359bd2c61ad76f8866df144c8b0d56c8ed6c76267a0df7a75326814009b57fc8ba3731295cd43803487b92be64549a1ba3680d10d1f619edd4f199fdeaf2ef1a7550e2e0e9e2289f24db58adc1725f4c1d80e1fc55c24569d191fab79f6ed671c9f", 0x8f}], 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1a2bd7673a5cd91b0000000000000000000000000004a2000000000031eea67508461abd21313604000000953338", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x0, 0x0, 0x6, 0x9, 0x2, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffcb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000001040)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)={0x1b4, 0x0, 0x221, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x18884) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988cafbe863cac5058031c97d70ccd0f7", 0x1c}, {&(0x7f0000000100)="e3f4e01bb64d88aff4c99218e545", 0xe}], 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r11}, 0x10) r12 = socket(0x10, 0x3, 0x0) sendto$inet6(r12, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r13 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r13, &(0x7f0000000240)=@id, &(0x7f0000000100)=0x10, 0x800) close(0x3) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r4, 0x1, 0x70bd2d}, 0x14}}, 0x20000800) 2.841854222s ago: executing program 1 (id=1178): getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x33) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0xffffd000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="68000000100037040000dd0000000000f0ffffff", @ANYRES32=r4, @ANYBLOB="83040500c2080200480012800b00010067656e65766500003800028005000a000000000005000a000100000005000c0003000000140007000000000000000000000000000000000105000a00ffe00000"], 0x68}}, 0x0) 2.841351211s ago: executing program 3 (id=1179): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000001e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 2.780718531s ago: executing program 3 (id=1180): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@multicast2}, {@local}, {@remote}]}]}}}}}}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000800) 2.757912228s ago: executing program 0 (id=376): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x88b9, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) unshare(0x2000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r4, &(0x7f00000011c0)=""/99, 0x63, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) listen(r7, 0x2) close(r7) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r9, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x0, 0x0}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000f000000000000004000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001d0000001850000006000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000c27b2d61c83687253d44fb2120b70400000000000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000183a0000020000000000000000000000bf91000000000000b7020000010000008500000085000000b70000"], &(0x7f00000000c0)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x0, 0x2}, 0xffffffffffffff39, 0x2aa9e, r7, 0x6, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x4, 0x8}, {0x2, 0x1, 0xf, 0x3}, {0x2, 0x2, 0xa, 0x8}, {0x0, 0x2, 0xc, 0x3}, {0x2, 0x5, 0xf, 0xb}, {0x2, 0x3, 0x0, 0x6}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 1.81182394s ago: executing program 1 (id=1181): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d0000", 0x23) 1.810985496s ago: executing program 2 (id=1182): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="d88fb769bff2e262fe836a6663d386bc", 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x12, r1, 0x60114000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendto(r2, &(0x7f00000002c0)="0fad319f25b1902767905ea06608380e15b56694f5fa4c73a497a5b215a69251092dba42a8004d31bbd93ae8de371eeea22991c2390df07137f30c7f2dacae5f85c9b7cf278f8515261113a84c7c2a5f65cb03fef6da5e788c4ca9480212eef1d35dd8bd31429a844ddf1a577c11ae6d0e5b6ff03755139dd6122851277d034de4da4dfcffd13ee2e46a3d4894ba33a0643cb7d47b99b18030e469a32f3cfcb8d3854b4badab33a9caf010dce1dba3c5eb1a46ef0d2b2525ed2fc1d5a81adff43c001a1add8f8cb25eaac5c92c7773dc0f51f9e0e07adf0c36ff5f01559455dbbba04591d3f9dffe8292f0e1fd82a231279567bdc4e838d532", 0xf9, 0x1, &(0x7f0000000040)=@in={0x2, 0x4e23, @remote}, 0x80) 1.810720255s ago: executing program 3 (id=1183): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff0000ffffffa400bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 866.568201ms ago: executing program 1 (id=1184): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x100, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x100}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 831.53585ms ago: executing program 1 (id=1185): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xc, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @dev={0xac, 0x14, 0x14, 0xdc}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07ef000000000000000008"], 0x40}, 0x1, 0x0, 0x0, 0x44041}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) 451.166479ms ago: executing program 3 (id=1186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1000f) 387.90818ms ago: executing program 1 (id=1187): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x10001, 0x7, 0x6}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0xff08, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r9, 0x0, 0x5, &(0x7f0000001740)={@dev, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000100), 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r11, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x776}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11ed}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xee9}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095000000000000006c9dd7a281c977"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x8, 0x5, 0xb, 0x2, 0x101}, @ldst={0x2, 0x1, 0x4, 0x92c02b833d8ea10d, 0x7, 0x4, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)='syzkaller\x00', 0xffffffff, 0xc0, &(0x7f00000006c0)=""/192, 0x41000, 0x82, '\x00', r2, 0x1b, r3, 0x8, &(0x7f0000000600)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x5, 0x10}, 0x10, r13, 0x0, 0x5, 0x0, &(0x7f0000000780)=[{0x1, 0x1, 0x8, 0x5}, {0x1, 0x1, 0x4, 0x2}, {0x5, 0x2, 0x8, 0xb}, {0x0, 0x1, 0x1, 0xc}, {0x3, 0x3, 0xb, 0xc}], 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000080)=@raw=[@tail_call, @ldst={0x2, 0x1, 0x3, 0xa, 0x4, 0xfffffffffffffff7, 0xffffffffffffffef}], &(0x7f0000000100)='GPL\x00', 0xc006, 0xeb, &(0x7f00000002c0)=""/235, 0x41000, 0x46, '\x00', r2, 0x17, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2e651, r4, 0x0, &(0x7f00000004c0)=[0x1, r7, 0xffffffffffffffff, 0x1, r14], 0x0, 0x10, 0x12, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r15, 0xffffffffffffffff, 0x24}, 0xc) r16 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r16, 0x65, 0x4, &(0x7f0000000940), &(0x7f0000000980)=0x4) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl1\x00', r2, 0x2f, 0x98, 0x8, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8000, 0x40, 0x3, 0x5}}) sendmsg$nl_route(r17, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000710"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 358.31723ms ago: executing program 2 (id=1188): r0 = socket$inet(0x2, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xdc8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r1, 0x800, 0x0, 0xab, 0x2}, &(0x7f0000000200)=0x18) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) r2 = socket$inet(0x2, 0x8, 0x2) getsockopt$inet_buf(r2, 0x0, 0x26, &(0x7f0000000080)=""/129, &(0x7f0000000000)=0x81) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) 318.94095ms ago: executing program 4 (id=1189): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@mpls_newroute={0xe0, 0x18, 0x1, 0x70bd25, 0x25dfdbfd, {0x1c, 0x10, 0x14, 0x0, 0xfd, 0x4, 0xfe, 0x5, 0x1c00}, [@RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x8, 0x8b, r1}}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x3, 0x7a, r1}}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x7, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x40}, @RTA_OIF={0x8, 0x4, r1}, @RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0xbf4, 0x0, 0x1}, {0xeee}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0xff, 0x0, 0x1}, {0x2}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2}, {0x9}, {0x8, 0x0, 0x1}, {0x1}, {0x9, 0x0, 0x1}, {}, {0xcf}, {0x9ea9, 0x0, 0x1}, {0x1b}, {0x58}, {0x8, 0x0, 0x1}, {0x4}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x9}, {0x1, 0x0, 0x1}, {0x4e, 0x0, 0x1}, {0x7, 0x0, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40081}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e00000000140002800600050088a80000060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x54}}, 0x0) 306.267461ms ago: executing program 3 (id=1190): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000002e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 0s ago: executing program 2 (id=1191): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req={0x7ff, 0xe7, 0x7, 0x5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=ANY=[], 0x2c}], 0x1}, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x4, 0x0, 0x10, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10001}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x109, &(0x7f0000000780)=""/265, 0x41000, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0x2, 0x7fff, 0x9}, 0x10, 0x5893, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x16, @void, @value}, 0x94) unshare(0x28000600) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f0000009000)=r6, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000007480)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000075c0), r9) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000007700)={0x0, 0x0, &(0x7f00000076c0)={&(0x7f0000007600)={0x3c, r11, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8a68d707b233fc5d9fe44c0521b002b0"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_SSID={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb8100000086dd6000000500140600fc000000000000000000000000000000ff1000000000000000000000000000010000000004d3a50284314b0ebf4b1760a5e755a2de006673a2d26fb2ec86149996de057a1818a7b4d1797630c79c3587ab567064990628424a6ba0e3d8f3b48e0c26f5f88a1da5dd903c30bb5bad2da28ab2a63cf40821f7d9476751341bb5c800ea48ff9ba1cc72016668a5f8de85856f1459f5512762027dc6fc166036de28fcf7153f56a55b9a325a809ddcbc799a4147406ce909dd7e4ba43de80e3d3bfa1b3462a2cfc7fa4fc581e9eccf47bf12", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) kernel console output (not intermixed with test programs): state [ 69.114540][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.121668][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.156270][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.163467][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.203365][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.227138][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.234333][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.252668][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.274651][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.281875][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.346511][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.427406][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.434614][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.467236][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.502753][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.509970][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.605780][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.653820][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.661030][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.693435][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.700666][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.708197][ T5829] Bluetooth: hci0: command tx timeout [ 69.772374][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.802322][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.849677][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.860832][ T5829] Bluetooth: hci1: command tx timeout [ 69.866303][ T5829] Bluetooth: hci2: command tx timeout [ 69.947341][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.968352][ T5826] veth0_vlan: entered promiscuous mode [ 70.020483][ T5829] Bluetooth: hci3: command tx timeout [ 70.057109][ T5826] veth1_vlan: entered promiscuous mode [ 70.100644][ T5829] Bluetooth: hci4: command tx timeout [ 70.123720][ T5832] veth0_vlan: entered promiscuous mode [ 70.137767][ T5831] veth0_vlan: entered promiscuous mode [ 70.164113][ T5832] veth1_vlan: entered promiscuous mode [ 70.189335][ T5826] veth0_macvtap: entered promiscuous mode [ 70.204798][ T5826] veth1_macvtap: entered promiscuous mode [ 70.212288][ T5831] veth1_vlan: entered promiscuous mode [ 70.231995][ T5839] veth0_vlan: entered promiscuous mode [ 70.263051][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.284738][ T5832] veth0_macvtap: entered promiscuous mode [ 70.295448][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.307932][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.317079][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.328056][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.337133][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.366166][ T5839] veth1_vlan: entered promiscuous mode [ 70.387314][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.397124][ T5832] veth1_macvtap: entered promiscuous mode [ 70.462955][ T5831] veth0_macvtap: entered promiscuous mode [ 70.485036][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.495950][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.508008][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.538218][ T5831] veth1_macvtap: entered promiscuous mode [ 70.568804][ T5839] veth0_macvtap: entered promiscuous mode [ 70.569851][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.584975][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.595129][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.607289][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.618684][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.647415][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.656879][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.666651][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.676650][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.687392][ T5839] veth1_macvtap: entered promiscuous mode [ 70.710126][ T5841] veth0_vlan: entered promiscuous mode [ 70.716516][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.728829][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.739232][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.750481][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.762557][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.773832][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.784794][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.795014][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.805720][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.816414][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.838207][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.844262][ T5841] veth1_vlan: entered promiscuous mode [ 70.851969][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.871791][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.882820][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.893364][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.904947][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.915027][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.925504][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.936409][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.947481][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.956404][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.965431][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.974927][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.003086][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.013779][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.025161][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.036076][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.046202][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.056934][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.068394][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.106548][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.115778][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.124974][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.133870][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.166120][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.253302][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.261509][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.371864][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.385014][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.415145][ T5841] veth0_macvtap: entered promiscuous mode [ 71.426923][ T5841] veth1_macvtap: entered promiscuous mode [ 71.436894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.443685][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.455372][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.465701][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.466064][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.476192][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.476208][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.476222][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.476232][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.476242][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.478752][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.604860][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.605207][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.625126][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.627892][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.652524][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.667474][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.678801][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.679620][ T5909] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.696892][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.712821][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.723672][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.756393][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.779567][ T5829] Bluetooth: hci0: command tx timeout [ 71.784031][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.793948][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.827407][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.836778][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.848369][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.857487][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.878170][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.907556][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.916628][ T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.929041][ T5914] pim6reg: entered allmulticast mode [ 71.929563][ T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.939822][ T5829] Bluetooth: hci2: command tx timeout [ 71.942585][ T5837] Bluetooth: hci1: command tx timeout [ 71.978223][ T5916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.101004][ T5837] Bluetooth: hci3: command tx timeout [ 72.179732][ T5837] Bluetooth: hci4: command tx timeout [ 72.267689][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.285504][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.412881][ T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.448670][ T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.542706][ T5936] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 72.720750][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 72.768924][ T5942] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12'. [ 72.916924][ T5947] Illegal XDP return value 4144857809 on prog (id 5) dev N/A, expect packet loss! [ 72.985545][ T5953] netlink: 'syz.2.16': attribute type 10 has an invalid length. [ 73.026587][ T5953] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 73.409126][ T5966] netlink: 'syz.4.19': attribute type 5 has an invalid length. [ 73.409604][ T5943] ebt_among: src integrity fail: 300 [ 73.412178][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 73.518665][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 73.563833][ T5975] IPVS: Error joining to the multicast group [ 73.859569][ T5837] Bluetooth: hci0: command tx timeout [ 73.919727][ T5996] Zero length message leads to an empty skb [ 74.020185][ T5837] Bluetooth: hci1: command tx timeout [ 74.023971][ T5829] Bluetooth: hci2: command tx timeout [ 74.044156][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 74.074047][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 74.099565][ T5997] netlink: 'syz.1.25': attribute type 12 has an invalid length. [ 74.107513][ T5997] netlink: 'syz.1.25': attribute type 11 has an invalid length. [ 74.181389][ T5829] Bluetooth: hci3: command tx timeout [ 74.259806][ T5829] Bluetooth: hci4: command tx timeout [ 74.431550][ T6017] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 74.466882][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 74.482790][ T6018] netlink: 'syz.4.34': attribute type 7 has an invalid length. [ 74.697483][ T6032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.784947][ T6034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.39'. [ 75.023945][ T6042] netlink: 56 bytes leftover after parsing attributes in process `syz.3.41'. [ 75.044268][ T6050] warning: `syz.2.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.048770][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 75.108425][ T6053] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 75.122563][ T6042] netlink: 'syz.3.41': attribute type 3 has an invalid length. [ 75.657796][ T6077] syz.3.53 uses obsolete (PF_INET,SOCK_PACKET) [ 75.951998][ T6093] syzkaller0: entered promiscuous mode [ 75.957644][ T6093] syzkaller0: entered allmulticast mode [ 76.264693][ T6110] netlink: 'syz.4.65': attribute type 15 has an invalid length. [ 77.949470][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 78.487463][ T6131] delete_channel: no stack [ 78.547689][ T6131] delete_channel: no stack [ 78.566118][ T6131] delete_channel: no stack [ 78.583351][ T6131] delete_channel: no stack [ 78.597322][ T6131] delete_channel: no stack [ 78.606672][ T6143] __nla_validate_parse: 25 callbacks suppressed [ 78.606690][ T6143] netlink: 36 bytes leftover after parsing attributes in process `syz.3.73'. [ 78.628338][ T6131] delete_channel: no stack [ 78.633871][ T6131] delete_channel: no stack [ 78.638462][ T6131] delete_channel: no stack [ 78.655409][ T6131] delete_channel: no stack [ 78.670313][ T6131] delete_channel: no stack [ 78.674944][ T6131] delete_channel: no stack [ 78.698936][ T6131] delete_channel: no stack [ 78.707816][ T6131] delete_channel: no stack [ 78.716772][ T6131] delete_channel: no stack [ 78.733545][ T6131] delete_channel: no stack [ 78.738506][ T6131] delete_channel: no stack [ 78.766226][ T6131] delete_channel: no stack [ 78.783235][ T6131] delete_channel: no stack [ 78.788154][ T6131] delete_channel: no stack [ 78.797337][ T6131] delete_channel: no stack [ 78.804561][ T6131] delete_channel: no stack [ 78.809151][ T6131] delete_channel: no stack [ 78.817862][ T6131] delete_channel: no stack [ 78.845846][ T6131] delete_channel: no stack [ 79.180173][ T6164] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 79.194550][ T6159] openvswitch: netlink: Missing key (keys=40, expected=100) [ 79.255771][ T6164] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 79.537970][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 79.796357][ T6192] Unsupported ieee802154 address type: 0 [ 79.980480][ T6201] sctp: [Deprecated]: syz.1.95 (pid 6201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.980480][ T6201] Use struct sctp_sack_info instead [ 80.277116][ T6220] dccp_v4_rcv: dropped packet with invalid checksum [ 80.338293][ T6223] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 80.380282][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 80.385712][ T6182] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 80.696163][ T6236] netlink: 'syz.3.106': attribute type 142 has an invalid length. [ 80.729713][ T6240] netlink: 172 bytes leftover after parsing attributes in process `syz.0.108'. [ 80.747945][ T6240] netlink: 48 bytes leftover after parsing attributes in process `syz.0.108'. [ 80.882537][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 81.052074][ T6256] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.114'. [ 81.095982][ T6256] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.114'. [ 81.706731][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 81.787067][ T6303] netlink: 10 bytes leftover after parsing attributes in process `syz.1.132'. [ 82.023732][ T25] cfg80211: failed to load regulatory.db [ 82.213112][ T6331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.138'. [ 82.638810][ T6354] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 82.685283][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.706761][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.725167][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.739896][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.850495][ T6358] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 82.934483][ T6358] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 82.967425][ T6358] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 83.624107][ T6408] Bluetooth: MGMT ver 1.23 [ 83.989174][ T6427] xt_TPROXY: Can be used only with -p tcp or -p udp [ 84.122385][ T6433] __nla_validate_parse: 5 callbacks suppressed [ 84.122405][ T6433] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.177'. [ 84.137843][ T6433] openvswitch: netlink: Flow actions attr not present in new flow. [ 84.180824][ T6436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.175'. [ 84.736938][ T6463] pimreg3: entered allmulticast mode [ 84.769205][ T6463] dvmrp0: entered allmulticast mode [ 85.281147][ T6483] syz.0.193 (6483) used greatest stack depth: 17904 bytes left [ 85.770554][ T6523] nbd: device at index 3 is going down [ 85.799206][ T6523] nbd: device at index 3 is going down [ 86.663746][ T6569] netlink: 18 bytes leftover after parsing attributes in process `syz.3.218'. [ 86.702346][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 86.765516][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.840879][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 87.077479][ T6589] netlink: 72 bytes leftover after parsing attributes in process `syz.4.225'. [ 87.236625][ T6594] netlink: 'syz.1.226': attribute type 4 has an invalid length. [ 87.309337][ T6600] netlink: 'syz.1.226': attribute type 4 has an invalid length. [ 87.642057][ T6611] netlink: 92 bytes leftover after parsing attributes in process `syz.1.232'. [ 87.653411][ T6611] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 87.766728][ T6618] netlink: 'syz.1.235': attribute type 2 has an invalid length. [ 87.841506][ T6619] openvswitch: netlink: Missing key (keys=40, expected=100) [ 87.921858][ T6625] FAULT_INJECTION: forcing a failure. [ 87.921858][ T6625] name failslab, interval 1, probability 0, space 0, times 1 [ 87.938765][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.4.237 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 87.949396][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 87.959488][ T6625] Call Trace: [ 87.962794][ T6625] [ 87.965748][ T6625] dump_stack_lvl+0x241/0x360 [ 87.970482][ T6625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.975730][ T6625] ? __pfx__printk+0x10/0x10 [ 87.980357][ T6625] ? __kmalloc_cache_noprof+0x48/0x390 [ 87.985861][ T6625] ? __pfx___might_resched+0x10/0x10 [ 87.991189][ T6625] ? __lock_acquire+0x1397/0x2100 [ 87.996249][ T6625] should_fail_ex+0x3b0/0x4e0 [ 88.000968][ T6625] should_failslab+0xac/0x100 [ 88.005682][ T6625] __kmalloc_cache_noprof+0x70/0x390 [ 88.010999][ T6625] ? hash_ip_create+0x7a9/0x1670 [ 88.014275][ T6632] trusted_key: syz.0.236 sent an empty control message without MSG_MORE. [ 88.015958][ T6625] hash_ip_create+0x7a9/0x1670 [ 88.029387][ T6625] ? __pfx_lock_acquire+0x10/0x10 [ 88.034456][ T6625] ? __pfx_hash_ip_create+0x10/0x10 [ 88.039700][ T6625] ? read_word_at_a_time+0xe/0x20 [ 88.044746][ T6625] ? sized_strscpy+0x9a/0x2b0 [ 88.049422][ T6625] ? __pfx_hash_ip_create+0x10/0x10 [ 88.054635][ T6625] ip_set_create+0xa31/0x18b0 [ 88.059308][ T6625] ? ip_set_create+0x424/0x18b0 [ 88.064158][ T6625] ? __pfx_ip_set_create+0x10/0x10 [ 88.069296][ T6625] ? nfnetlink_rcv_msg+0x225/0x1180 [ 88.074504][ T6625] nfnetlink_rcv_msg+0xbec/0x1180 [ 88.079531][ T6625] ? nfnetlink_rcv_msg+0x225/0x1180 [ 88.084759][ T6625] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.090212][ T6625] ? stack_trace_save+0x118/0x1d0 [ 88.095420][ T6625] ? dev_hard_start_xmit+0x27a/0x7d0 [ 88.100700][ T6625] ? __dev_queue_xmit+0x1b73/0x3f50 [ 88.105891][ T6625] ? __netlink_deliver_tap+0x56b/0x7f0 [ 88.111347][ T6625] ? netlink_deliver_tap+0x19d/0x1b0 [ 88.116650][ T6625] ? netlink_unicast+0x7c4/0x990 [ 88.121788][ T6625] ? netlink_sendmsg+0x8e4/0xcb0 [ 88.126849][ T6625] ? __sock_sendmsg+0x221/0x270 [ 88.131710][ T6625] ? ____sys_sendmsg+0x52a/0x7e0 [ 88.136643][ T6625] ? __sys_sendmsg+0x269/0x350 [ 88.141417][ T6625] netlink_rcv_skb+0x1e3/0x430 [ 88.146178][ T6625] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.151640][ T6625] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.156930][ T6625] ? apparmor_capable+0x13b/0x1b0 [ 88.161958][ T6625] ? bpf_lsm_capable+0x9/0x10 [ 88.166632][ T6625] ? security_capable+0x7e/0x2d0 [ 88.171580][ T6625] nfnetlink_rcv+0x297/0x2ab0 [ 88.176272][ T6625] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 88.182003][ T6625] ? __dev_queue_xmit+0x2f4/0x3f50 [ 88.187118][ T6625] ? __dev_queue_xmit+0x1775/0x3f50 [ 88.192314][ T6625] ? kasan_save_track+0x51/0x80 [ 88.197166][ T6625] ? ____sys_sendmsg+0x52a/0x7e0 [ 88.202102][ T6625] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 88.207213][ T6625] ? __dev_queue_xmit+0x2f4/0x3f50 [ 88.212334][ T6625] ? __pfx___dev_queue_xmit+0x10/0x10 [ 88.217713][ T6625] ? ref_tracker_free+0x643/0x7e0 [ 88.222736][ T6625] ? __asan_memcpy+0x40/0x70 [ 88.227322][ T6625] ? __pfx_ref_tracker_free+0x10/0x10 [ 88.232699][ T6625] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.237894][ T6625] ? skb_clone+0x240/0x390 [ 88.242311][ T6625] ? __pfx_lock_release+0x10/0x10 [ 88.247332][ T6625] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 88.252806][ T6625] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.258036][ T6625] netlink_unicast+0x7f6/0x990 [ 88.262818][ T6625] ? __pfx_netlink_unicast+0x10/0x10 [ 88.268107][ T6625] ? __virt_addr_valid+0x45f/0x530 [ 88.273235][ T6625] ? __phys_addr_symbol+0x2f/0x70 [ 88.278262][ T6625] ? __check_object_size+0x47a/0x730 [ 88.283561][ T6625] netlink_sendmsg+0x8e4/0xcb0 [ 88.288334][ T6625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.293626][ T6625] ? aa_sock_msg_perm+0x91/0x160 [ 88.298569][ T6625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.303874][ T6625] __sock_sendmsg+0x221/0x270 [ 88.308556][ T6625] ____sys_sendmsg+0x52a/0x7e0 [ 88.313324][ T6625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.318602][ T6625] ? __fget_files+0x2a/0x410 [ 88.323195][ T6625] ? __fget_files+0x2a/0x410 [ 88.327796][ T6625] __sys_sendmsg+0x269/0x350 [ 88.332393][ T6625] ? __pfx_lock_release+0x10/0x10 [ 88.337417][ T6625] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.342537][ T6625] ? __pfx_vfs_write+0x10/0x10 [ 88.347317][ T6625] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.353652][ T6625] ? do_syscall_64+0x100/0x230 [ 88.358423][ T6625] ? do_syscall_64+0xb6/0x230 [ 88.363106][ T6625] do_syscall_64+0xf3/0x230 [ 88.367611][ T6625] ? clear_bhb_loop+0x35/0x90 [ 88.372288][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.378199][ T6625] RIP: 0033:0x7f5e27385d29 [ 88.382622][ T6625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.402234][ T6625] RSP: 002b:00007f5e28185038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.410650][ T6625] RAX: ffffffffffffffda RBX: 00007f5e27575fa0 RCX: 00007f5e27385d29 [ 88.418617][ T6625] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 88.426584][ T6625] RBP: 00007f5e28185090 R08: 0000000000000000 R09: 0000000000000000 [ 88.434551][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.442516][ T6625] R13: 0000000000000000 R14: 00007f5e27575fa0 R15: 00007fff8cb3cec8 [ 88.450501][ T6625] [ 88.590720][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.236'. [ 88.673998][ T6637] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.239'. [ 88.861862][ T6647] netlink: 'syz.0.243': attribute type 29 has an invalid length. [ 88.893849][ T6647] netlink: 'syz.0.243': attribute type 29 has an invalid length. [ 88.940258][ T6647] netlink: 500 bytes leftover after parsing attributes in process `syz.0.243'. [ 89.148841][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 89.234153][ T6672] netlink: 'syz.0.250': attribute type 29 has an invalid length. [ 89.336830][ T6672] netlink: 'syz.0.250': attribute type 29 has an invalid length. [ 89.546251][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 89.734454][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 90.080239][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.266'. [ 90.470505][ T9] hid-generic 0005:7FFF:0008.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 90.558761][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 90.569578][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 90.722480][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 90.780989][ T6755] netlink: 48 bytes leftover after parsing attributes in process `syz.0.278'. [ 90.815909][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 90.844604][ T6760] sctp: [Deprecated]: syz.2.280 (pid 6760) Use of int in maxseg socket option. [ 90.844604][ T6760] Use struct sctp_assoc_value instead [ 90.912993][ T6763] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 91.064168][ T6763] bond2: entered allmulticast mode [ 91.071092][ T6763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.080420][ T6763] bond1: (slave bond2): making interface the new active one [ 91.089663][ T6763] bond1: (slave bond2): Enslaving as an active interface with an up link [ 91.253072][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 92.366081][ T6854] sctp: [Deprecated]: syz.2.312 (pid 6854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.366081][ T6854] Use struct sctp_sack_info instead [ 92.384764][ T6851] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 92.402729][ T6851] netlink: 'syz.4.309': attribute type 10 has an invalid length. [ 92.433628][ T6860] sctp: [Deprecated]: syz.2.312 (pid 6860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.433628][ T6860] Use struct sctp_sack_info instead [ 92.748450][ T6874] FAULT_INJECTION: forcing a failure. [ 92.748450][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 92.793674][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.2.318 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 92.804335][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 92.814426][ T6874] Call Trace: [ 92.817729][ T6874] [ 92.820698][ T6874] dump_stack_lvl+0x241/0x360 [ 92.825435][ T6874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.830689][ T6874] ? __pfx__printk+0x10/0x10 [ 92.835334][ T6874] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 92.840767][ T6874] ? __pfx___might_resched+0x10/0x10 [ 92.846115][ T6874] should_fail_ex+0x3b0/0x4e0 [ 92.850853][ T6874] should_failslab+0xac/0x100 [ 92.855582][ T6874] __kmalloc_node_noprof+0xe1/0x4d0 [ 92.860822][ T6874] ? allocate_slab+0xb6/0x2b0 [ 92.865535][ T6874] allocate_slab+0xb6/0x2b0 [ 92.870072][ T6874] ___slab_alloc+0xc27/0x14a0 [ 92.874798][ T6874] ? __kvmalloc_node_noprof+0x72/0x190 [ 92.880300][ T6874] ? __kvmalloc_node_noprof+0x72/0x190 [ 92.885801][ T6874] __slab_alloc+0x58/0xa0 [ 92.890193][ T6874] __kmalloc_node_noprof+0x2ee/0x4d0 [ 92.895537][ T6874] ? __kvmalloc_node_noprof+0x72/0x190 [ 92.901034][ T6874] __kvmalloc_node_noprof+0x72/0x190 [ 92.906349][ T6874] hash_ip_create+0x96b/0x1670 [ 92.911154][ T6874] ? __pfx_lock_acquire+0x10/0x10 [ 92.916185][ T6874] ? __pfx_hash_ip_create+0x10/0x10 [ 92.921386][ T6874] ? read_word_at_a_time+0xe/0x20 [ 92.926407][ T6874] ? sized_strscpy+0x9a/0x2b0 [ 92.931079][ T6874] ? __pfx_hash_ip_create+0x10/0x10 [ 92.936277][ T6874] ip_set_create+0xa31/0x18b0 [ 92.940951][ T6874] ? ip_set_create+0x424/0x18b0 [ 92.945802][ T6874] ? __pfx_ip_set_create+0x10/0x10 [ 92.950931][ T6874] ? nfnetlink_rcv_msg+0x225/0x1180 [ 92.956133][ T6874] nfnetlink_rcv_msg+0xbec/0x1180 [ 92.961155][ T6874] ? nfnetlink_rcv_msg+0x225/0x1180 [ 92.966363][ T6874] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 92.971818][ T6874] ? stack_trace_save+0x118/0x1d0 [ 92.976854][ T6874] ? dev_hard_start_xmit+0x27a/0x7d0 [ 92.982142][ T6874] ? __dev_queue_xmit+0x1b73/0x3f50 [ 92.987338][ T6874] ? __netlink_deliver_tap+0x56b/0x7f0 [ 92.992801][ T6874] ? netlink_deliver_tap+0x19d/0x1b0 [ 92.998109][ T6874] ? netlink_unicast+0x7c4/0x990 [ 93.003057][ T6874] ? netlink_sendmsg+0x8e4/0xcb0 [ 93.007993][ T6874] ? __sock_sendmsg+0x221/0x270 [ 93.012841][ T6874] ? ____sys_sendmsg+0x52a/0x7e0 [ 93.017777][ T6874] ? __sys_sendmsg+0x269/0x350 [ 93.022564][ T6874] netlink_rcv_skb+0x1e3/0x430 [ 93.027327][ T6874] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 93.032784][ T6874] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.038076][ T6874] ? apparmor_capable+0x13b/0x1b0 [ 93.043102][ T6874] ? bpf_lsm_capable+0x9/0x10 [ 93.047791][ T6874] ? security_capable+0x7e/0x2d0 [ 93.052732][ T6874] nfnetlink_rcv+0x297/0x2ab0 [ 93.057409][ T6874] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 93.063141][ T6874] ? __dev_queue_xmit+0x2f4/0x3f50 [ 93.068255][ T6874] ? __dev_queue_xmit+0x1775/0x3f50 [ 93.073484][ T6874] ? kasan_save_track+0x51/0x80 [ 93.078335][ T6874] ? ____sys_sendmsg+0x52a/0x7e0 [ 93.083271][ T6874] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 93.088382][ T6874] ? __dev_queue_xmit+0x2f4/0x3f50 [ 93.093502][ T6874] ? __pfx___dev_queue_xmit+0x10/0x10 [ 93.098883][ T6874] ? ref_tracker_free+0x643/0x7e0 [ 93.103932][ T6874] ? __asan_memcpy+0x40/0x70 [ 93.108536][ T6874] ? __pfx_ref_tracker_free+0x10/0x10 [ 93.113922][ T6874] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.119119][ T6874] ? skb_clone+0x240/0x390 [ 93.123535][ T6874] ? __pfx_lock_release+0x10/0x10 [ 93.128583][ T6874] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 93.134076][ T6874] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.139297][ T6874] netlink_unicast+0x7f6/0x990 [ 93.144102][ T6874] ? __pfx_netlink_unicast+0x10/0x10 [ 93.149425][ T6874] ? __virt_addr_valid+0x45f/0x530 [ 93.154557][ T6874] ? __phys_addr_symbol+0x2f/0x70 [ 93.159580][ T6874] ? __check_object_size+0x47a/0x730 [ 93.164865][ T6874] netlink_sendmsg+0x8e4/0xcb0 [ 93.169635][ T6874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.174918][ T6874] ? aa_sock_msg_perm+0x91/0x160 [ 93.179855][ T6874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.185134][ T6874] __sock_sendmsg+0x221/0x270 [ 93.189825][ T6874] ____sys_sendmsg+0x52a/0x7e0 [ 93.194600][ T6874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.199886][ T6874] ? __fget_files+0x2a/0x410 [ 93.204479][ T6874] ? __fget_files+0x2a/0x410 [ 93.209092][ T6874] __sys_sendmsg+0x269/0x350 [ 93.213710][ T6874] ? __pfx_lock_release+0x10/0x10 [ 93.218768][ T6874] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.223882][ T6874] ? __pfx_vfs_write+0x10/0x10 [ 93.228662][ T6874] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.235077][ T6874] ? do_syscall_64+0x100/0x230 [ 93.239849][ T6874] ? do_syscall_64+0xb6/0x230 [ 93.244528][ T6874] do_syscall_64+0xf3/0x230 [ 93.249030][ T6874] ? clear_bhb_loop+0x35/0x90 [ 93.253716][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.259613][ T6874] RIP: 0033:0x7fcdb1185d29 [ 93.264049][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.283823][ T6874] RSP: 002b:00007fcdb1f62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.292243][ T6874] RAX: ffffffffffffffda RBX: 00007fcdb1375fa0 RCX: 00007fcdb1185d29 [ 93.300239][ T6874] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 93.308222][ T6874] RBP: 00007fcdb1f62090 R08: 0000000000000000 R09: 0000000000000000 [ 93.316207][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.324174][ T6874] R13: 0000000000000000 R14: 00007fcdb1375fa0 R15: 00007ffe23471b48 [ 93.332159][ T6874] [ 94.002917][ T6917] x_tables: duplicate underflow at hook 2 [ 94.558705][ T6958] __nla_validate_parse: 6 callbacks suppressed [ 94.558723][ T6958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.351'. [ 94.649684][ T6956] netlink: 168 bytes leftover after parsing attributes in process `syz.4.349'. [ 94.819732][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 94.881629][ T6970] syz.0.355 (6970) used obsolete PPPIOCDETACH ioctl [ 94.995328][ T6982] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 95.101701][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 95.273773][ T6993] netlink: 56 bytes leftover after parsing attributes in process `syz.4.363'. [ 95.309495][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 95.338947][ T6993] netlink: 31 bytes leftover after parsing attributes in process `syz.4.363'. [ 95.359490][ T6993] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 95.367395][ T6993] netlink: 'syz.4.363': attribute type 2 has an invalid length. [ 95.375325][ T6993] netlink: 31 bytes leftover after parsing attributes in process `syz.4.363'. [ 96.089379][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 96.168554][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.196749][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 96.313428][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.445718][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.477447][ T7041] netlink: 'syz.4.378': attribute type 29 has an invalid length. [ 96.683199][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.709980][ T7058] netlink: 'syz.2.384': attribute type 5 has an invalid length. [ 96.940723][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.956469][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.977178][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.998462][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.019533][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.029177][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.109835][ T68] bridge_slave_1: left allmulticast mode [ 97.126231][ T68] bridge_slave_1: left promiscuous mode [ 97.141916][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.222570][ T68] bridge_slave_0: left allmulticast mode [ 97.228349][ T68] bridge_slave_0: left promiscuous mode [ 97.235877][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.654460][ T68] dvmrp0 (unregistering): left allmulticast mode [ 97.904920][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.916473][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.928981][ T68] bond0 (unregistering): Released all slaves [ 98.365056][ T7064] chnl_net:caif_netlink_parms(): no params data found [ 98.808954][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.839687][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.868061][ T7064] bridge_slave_0: entered allmulticast mode [ 98.895743][ T7064] bridge_slave_0: entered promiscuous mode [ 98.970159][ T68] hsr_slave_0: left promiscuous mode [ 98.998903][ T68] hsr_slave_1: left promiscuous mode [ 99.069533][ T5837] Bluetooth: hci0: command tx timeout [ 99.095009][ T68] veth1_macvtap: left promiscuous mode [ 99.101775][ T68] veth0_macvtap: left promiscuous mode [ 99.108028][ T68] veth1_vlan: left promiscuous mode [ 99.115599][ T68] veth0_vlan: left promiscuous mode [ 99.291318][ T68] pimreg3 (unregistering): left allmulticast mode [ 99.300089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.641570][ T68] team0 (unregistering): Port device team_slave_1 removed [ 99.681526][ T68] team0 (unregistering): Port device team_slave_0 removed [ 100.033900][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.041433][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.049526][ T7064] bridge_slave_1: entered allmulticast mode [ 100.056545][ T7064] bridge_slave_1: entered promiscuous mode [ 100.081764][ T7160] __nla_validate_parse: 6 callbacks suppressed [ 100.081782][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 100.140265][ T7168] veth1_macvtap: left promiscuous mode [ 100.156052][ T7168] macsec0: entered allmulticast mode [ 100.193353][ T7177] veth1_macvtap: entered promiscuous mode [ 100.199156][ T7177] veth1_macvtap: entered allmulticast mode [ 100.226835][ T7177] macsec0: left allmulticast mode [ 100.232894][ T7177] veth1_macvtap: left allmulticast mode [ 100.269637][ T35] wlan1: Trigger new scan to find an IBSS to join [ 100.293949][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 100.334419][ T7064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.357487][ T7064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.483448][ T7064] team0: Port device team_slave_0 added [ 100.513771][ T7064] team0: Port device team_slave_1 added [ 100.541456][ T7193] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 100.711474][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.732524][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 100.737174][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.779064][ T7064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.831509][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.838514][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.911033][ T7064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.111405][ T7219] x_tables: duplicate underflow at hook 1 [ 101.133453][ T7064] hsr_slave_0: entered promiscuous mode [ 101.150262][ T5837] Bluetooth: hci0: command tx timeout [ 101.192172][ T7064] hsr_slave_1: entered promiscuous mode [ 101.305986][ T7224] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 101.334713][ T7224] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 101.517659][ T7229] openvswitch: netlink: IP tunnel dst address not specified [ 101.755058][ T7246] netlink: 48 bytes leftover after parsing attributes in process `syz.2.429'. [ 102.744891][ T7064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.765502][ T7064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.776599][ T7064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.801191][ T7064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.839201][ T7310] netlink: 200 bytes leftover after parsing attributes in process `syz.3.445'. [ 103.191936][ T7307] team0 (unregistering): Port device team_slave_0 removed [ 103.216628][ T7307] team0 (unregistering): Port device team_slave_1 removed [ 103.236873][ T5837] Bluetooth: hci0: command tx timeout [ 103.377518][ T7064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.426219][ T7064] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.484950][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.492161][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.554860][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.562050][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.598655][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'. [ 103.674468][ T7339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.449'. [ 103.683887][ T7345] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 103.748416][ T7355] netlink: 33280 bytes leftover after parsing attributes in process `syz.3.452'. [ 104.333032][ T7064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.501804][ T7064] veth0_vlan: entered promiscuous mode [ 104.556073][ T7064] veth1_vlan: entered promiscuous mode [ 104.708172][ T7064] veth0_macvtap: entered promiscuous mode [ 104.716457][ T7405] raw_sendmsg: syz.3.464 forgot to set AF_INET. Fix it! [ 104.751381][ T7064] veth1_macvtap: entered promiscuous mode [ 104.804860][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.857244][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.896495][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.917971][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.928157][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.946706][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.957012][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.976490][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.988888][ T7064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.003553][ T7420] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 105.018911][ T7420] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 105.108523][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.161466][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.192929][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.212242][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.224299][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.243358][ T54] wlan1: Trigger new scan to find an IBSS to join [ 105.286474][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.309808][ T5837] Bluetooth: hci0: command tx timeout [ 105.326073][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.345984][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.366474][ T7064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.429755][ T7429] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.523215][ T7064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.583079][ T7064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.637130][ T7064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.669397][ T7064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.723510][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 105.758564][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 105.760327][ T7460] xt_policy: output policy not valid in PREROUTING and INPUT [ 105.774602][ T7454] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 105.812604][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 105.851372][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 105.961788][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.990245][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.008184][ T7468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.125387][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.161554][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.217725][ T7474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.481'. [ 106.258754][ T969] wlan1: Creating new IBSS network, BSSID 06:59:65:ba:f3:1e [ 106.568117][ T7490] xt_l2tp: v2 sid > 0xffff: 262144 [ 106.633501][ T7500] ip6t_srh: unknown srh invflags 5F00 [ 106.677496][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 106.788891][ T7506] netlink: 60 bytes leftover after parsing attributes in process `syz.4.487'. [ 107.002110][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.152108][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.488787][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.782295][ T7546] netlink: 56 bytes leftover after parsing attributes in process `syz.3.495'. [ 107.805128][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.090822][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.117167][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.125571][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.140744][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.149157][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.158995][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.230100][ T7563] netlink: 'syz.1.499': attribute type 2 has an invalid length. [ 108.271427][ T68] bridge_slave_1: left allmulticast mode [ 108.279177][ T68] bridge_slave_1: left promiscuous mode [ 108.285613][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.296125][ T7563] netlink: 'syz.1.499': attribute type 8 has an invalid length. [ 108.304220][ T7563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.499'. [ 108.324420][ T68] bridge_slave_0: left allmulticast mode [ 108.331510][ T68] bridge_slave_0: left promiscuous mode [ 108.337267][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.749056][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.762575][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.773142][ T68] bond0 (unregistering): Released all slaves [ 109.029037][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.504'. [ 109.238419][ T7600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.699492][ T7606] can: request_module (can-proto-0) failed. [ 109.928452][ T7609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.959116][ T7609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.981169][ T7609] bond0 (unregistering): Released all slaves [ 110.027109][ T7556] chnl_net:caif_netlink_parms(): no params data found [ 110.126191][ T68] hsr_slave_0: left promiscuous mode [ 110.133588][ T68] hsr_slave_1: left promiscuous mode [ 110.189649][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.220686][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.265529][ T5837] Bluetooth: hci0: command tx timeout [ 110.285977][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.295795][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.351317][ T68] veth1_macvtap: left promiscuous mode [ 110.356897][ T68] veth0_macvtap: left promiscuous mode [ 110.392336][ T68] veth1_vlan: left promiscuous mode [ 110.407926][ T68] veth0_vlan: left promiscuous mode [ 111.079663][ T68] team0 (unregistering): Port device team_slave_1 removed [ 111.117782][ T68] team0 (unregistering): Port device team_slave_0 removed [ 111.427979][ T7671] __nla_validate_parse: 2 callbacks suppressed [ 111.428001][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.524'. [ 111.940912][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.948053][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.999903][ T7556] bridge_slave_0: entered allmulticast mode [ 112.006950][ T7556] bridge_slave_0: entered promiscuous mode [ 112.018277][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.021691][ T7694] nbd: must specify a size in bytes for the device [ 112.026111][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.047127][ T7556] bridge_slave_1: entered allmulticast mode [ 112.097640][ T7556] bridge_slave_1: entered promiscuous mode [ 112.314771][ T7556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.326794][ T7556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.363177][ T5837] Bluetooth: hci0: command tx timeout [ 112.383673][ T7716] netlink: 'syz.2.537': attribute type 33 has an invalid length. [ 112.401588][ T7716] netlink: 152 bytes leftover after parsing attributes in process `syz.2.537'. [ 112.483894][ T7556] team0: Port device team_slave_0 added [ 112.510750][ T7556] team0: Port device team_slave_1 added [ 112.809982][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.816996][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.947161][ T7556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.993952][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.004108][ T7749] nbd: must specify at least one socket [ 113.035636][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.089785][ T7556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.191883][ T7556] hsr_slave_0: entered promiscuous mode [ 113.207373][ T7556] hsr_slave_1: entered promiscuous mode [ 113.485931][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 114.045059][ T7793] netlink: 'syz.2.554': attribute type 20 has an invalid length. [ 114.429845][ T5837] Bluetooth: hci0: command tx timeout [ 114.715302][ T7556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.760657][ T7823] : renamed from bond0 (while UP) [ 114.791722][ T7556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.807124][ T7556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.818620][ T7556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.035873][ T7835] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 115.094691][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.160062][ T7556] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.178722][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.185957][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.220060][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.227224][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.263894][ T7556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.278167][ T7556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.440794][ T7854] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 115.849584][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 115.932559][ T7556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.090442][ T7897] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 116.119615][ T7897] pim6reg0: ignored: set checksum disabled [ 116.141198][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 116.148892][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 116.173290][ T7556] veth0_vlan: entered promiscuous mode [ 116.200516][ T7901] geneve2: entered promiscuous mode [ 116.303144][ T7556] veth1_vlan: entered promiscuous mode [ 116.433577][ T7556] veth0_macvtap: entered promiscuous mode [ 116.497141][ T7556] veth1_macvtap: entered promiscuous mode [ 116.504781][ T5837] Bluetooth: hci0: command tx timeout [ 116.540550][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.551906][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.562025][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.572953][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.586924][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.622572][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.649051][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.686615][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.721767][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.755664][ T7928] netlink: 144 bytes leftover after parsing attributes in process `syz.2.585'. [ 116.775165][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.798333][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.828047][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.868332][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.899043][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.949621][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.962395][ T7945] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 116.983917][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.008281][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.035151][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.055414][ T7556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.089352][ T7556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.108491][ T7556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.129641][ T7556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.360387][ T7735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.368560][ T7735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.470533][ T6213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.482273][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 117.498731][ T6213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.650548][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 117.680105][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 117.780375][ T7974] netlink: 'syz.2.594': attribute type 4 has an invalid length. [ 118.034577][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 118.158189][ T7996] bond0: option resend_igmp: invalid value (7540) [ 118.181074][ T7996] bond0: option resend_igmp: allowed values 0 - 255 [ 118.401434][ T8011] netlink: 830 bytes leftover after parsing attributes in process `syz.4.602'. [ 118.548446][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.606'. [ 118.703258][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.933085][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.064996][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.095295][ T8032] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 119.125537][ T8033] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 119.152081][ T8038] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 119.282607][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.363690][ T8044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.392785][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.613'. [ 119.440163][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.613'. [ 119.714272][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.730245][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.739440][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.748108][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.755983][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.764680][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.865839][ T54] bridge_slave_1: left allmulticast mode [ 119.886812][ T54] bridge_slave_1: left promiscuous mode [ 119.924663][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.980239][ T54] bridge_slave_0: left allmulticast mode [ 119.997154][ T54] bridge_slave_0: left promiscuous mode [ 120.018164][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.503655][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.515074][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.526313][ T54] bond0 (unregistering): Released all slaves [ 120.745789][ T8075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.777081][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 120.788770][ T8097] af_packet: tpacket_rcv: packet too big, clamped from 114 to 4294967272. macoff=96 [ 121.023291][ T8108] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 121.347254][ T54] hsr_slave_0: left promiscuous mode [ 121.367758][ T54] hsr_slave_1: left promiscuous mode [ 121.385314][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.419802][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.451289][ T8134] netlink: 'syz.2.628': attribute type 4 has an invalid length. [ 121.497138][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.504771][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.533804][ T54] veth1_macvtap: left promiscuous mode [ 121.550146][ T54] veth0_macvtap: left promiscuous mode [ 121.574769][ T54] veth1_vlan: left promiscuous mode [ 121.580844][ T54] veth0_vlan: left promiscuous mode [ 121.859541][ T5837] Bluetooth: hci0: command tx timeout [ 122.074765][ T54] team0 (unregistering): Port device team_slave_1 removed [ 122.115669][ T54] team0 (unregistering): Port device team_slave_0 removed [ 122.487139][ T8062] chnl_net:caif_netlink_parms(): no params data found [ 122.743212][ T8163] x_tables: duplicate underflow at hook 2 [ 122.753067][ T8163] xt_limit: Overflow, try lower: 0/0 [ 122.964243][ T8174] dccp_invalid_packet: P.Data Offset(100) too large [ 122.977020][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.993616][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.008816][ T8062] bridge_slave_0: entered allmulticast mode [ 123.017918][ T8062] bridge_slave_0: entered promiscuous mode [ 123.027772][ T8161] __nla_validate_parse: 2 callbacks suppressed [ 123.027790][ T8161] netlink: 96 bytes leftover after parsing attributes in process `syz.1.634'. [ 123.057224][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.072932][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.089978][ T8062] bridge_slave_1: entered allmulticast mode [ 123.115677][ T8062] bridge_slave_1: entered promiscuous mode [ 123.303891][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.320956][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 123.325687][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.347931][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.368307][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.477542][ T8062] team0: Port device team_slave_0 added [ 123.495558][ T8062] team0: Port device team_slave_1 added [ 123.554929][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.562250][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.588304][ T8062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.603274][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.610576][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.636755][ T8062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.659117][ T8196] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.732120][ T8062] hsr_slave_0: entered promiscuous mode [ 123.748429][ T8062] hsr_slave_1: entered promiscuous mode [ 123.791395][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'. [ 123.817705][ T8209] xt_ecn: cannot match TCP bits for non-tcp packets [ 123.939662][ T5837] Bluetooth: hci0: command tx timeout [ 124.068077][ T8216] netlink: 'syz.1.654': attribute type 32 has an invalid length. [ 124.296205][ T8226] netlink: 'syz.2.656': attribute type 21 has an invalid length. [ 124.313619][ T8226] netlink: 'syz.2.656': attribute type 5 has an invalid length. [ 124.336078][ T8226] netlink: 144 bytes leftover after parsing attributes in process `syz.2.656'. [ 124.455117][ T8062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.480741][ T8062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.497076][ T8062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.570331][ T8062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.657357][ T8062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.698994][ T8062] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.711128][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.718376][ T7727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.740552][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.747707][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.809115][ T8062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.819702][ T8062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.027969][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 125.080320][ T8252] vlan2: entered allmulticast mode [ 125.225198][ T8062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.260658][ T8266] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 125.455975][ T8062] veth0_vlan: entered promiscuous mode [ 125.497507][ T8277] netlink: 'syz.4.675': attribute type 21 has an invalid length. [ 125.509614][ T8277] netlink: 'syz.4.675': attribute type 20 has an invalid length. [ 125.517409][ T8277] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.567526][ T8062] veth1_vlan: entered promiscuous mode [ 125.701135][ T8284] tipc: Started in network mode [ 125.706072][ T8284] tipc: Node identity 1e0b3b6e664a, cluster identity 4711 [ 125.735844][ T8284] tipc: Enabled bearer , priority 10 [ 125.788348][ T8284] netlink: 44 bytes leftover after parsing attributes in process `syz.3.676'. [ 125.888838][ T8062] veth0_macvtap: entered promiscuous mode [ 125.897955][ T8062] veth1_macvtap: entered promiscuous mode [ 125.919239][ T8300] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 125.930299][ T8297] tc_dump_action: action bad kind [ 125.948468][ T8304] tc_dump_action: action bad kind [ 125.983600][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.994521][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.006447][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.017385][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.037907][ T5837] Bluetooth: hci0: command tx timeout [ 126.043854][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.054793][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.065376][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.076446][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.087538][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.097448][ T8303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.105094][ T8303] IPv6: NLM_F_CREATE should be set when creating new route [ 126.162532][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.189252][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.199238][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.219052][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.229320][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.240425][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.250984][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.262471][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.275922][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.317581][ T8062] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.336848][ T8062] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.357747][ T8062] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.381842][ T8062] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.396228][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 126.440907][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 126.455868][ T8323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.690'. [ 126.504181][ T5837] block nbd0: Receive control failed (result -107) [ 126.540320][ T8323] nbd0: detected capacity change from 0 to 256 [ 126.579252][ T7727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.596625][ T7727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.644081][ T7727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.666283][ T7727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.853229][ T5873] tipc: Node number set to 2017540974 [ 126.877542][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 126.916668][ T8346] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 126.928882][ T8346] team0: Device ipvlan2 is already an upper device of the team interface [ 126.961243][ T8337] infiniband syz1: set down [ 126.966107][ T8337] infiniband syz1: added ipvlan1 [ 127.042540][ T8337] RDS/IB: syz1: added [ 127.054488][ T8337] smc: adding ib device syz1 with port count 1 [ 127.075867][ T8337] smc: ib device syz1 port 1 has pnetid [ 127.121127][ T8355] IPv6: sit1: Disabled Multicast RS [ 127.127071][ T8355] sit1: entered allmulticast mode [ 128.674576][ T8379] __nla_validate_parse: 3 callbacks suppressed [ 128.674598][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'. [ 128.752046][ T8380] netlink: 'syz.2.708': attribute type 2 has an invalid length. [ 128.769471][ T8380] netlink: 'syz.2.708': attribute type 9 has an invalid length. [ 129.234829][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.257485][ T8417] netlink: zone id is out of range [ 129.264978][ T8417] netlink: zone id is out of range [ 129.277960][ T8411] IPVS: Error joining to the multicast group [ 129.418102][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.504115][ T8430] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 129.506528][ T8423] netlink: 104 bytes leftover after parsing attributes in process `syz.3.720'. [ 129.555917][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 129.579605][ T8426] nbd: nbd0 already in use [ 129.588766][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 129.602495][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.606520][ T8423] nbd: nbd0 already in use [ 129.614541][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.639791][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.644606][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.667535][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.680058][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 129.687410][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.771691][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.825276][ T8445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.724'. [ 130.210106][ T68] bridge_slave_1: left allmulticast mode [ 130.215817][ T68] bridge_slave_1: left promiscuous mode [ 130.222135][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.283010][ T8465] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.732'. [ 130.292741][ T8465] openvswitch: netlink: Flow actions attr not present in new flow. [ 130.327065][ T68] bridge_slave_0: left allmulticast mode [ 130.333272][ T68] bridge_slave_0: left promiscuous mode [ 130.339034][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.556460][ T8483] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 130.566402][ T8483] netlink: 'syz.4.734': attribute type 3 has an invalid length. [ 130.576151][ T8483] netlink: 224 bytes leftover after parsing attributes in process `syz.4.734'. [ 130.586257][ T8483] NCSI netlink: No device for ifindex 0 [ 130.661588][ T8489] netlink: 56 bytes leftover after parsing attributes in process `syz.3.738'. [ 130.666375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.692169][ T8488] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 130.933221][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.946908][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.964288][ T68] bond0 (unregistering): Released all slaves [ 130.976855][ T8471] infiniband syz1: set active [ 130.986098][ T8471] infiniband syz1: set active [ 130.992435][ T8471] infiniband syz1: set active [ 131.106926][ T8436] chnl_net:caif_netlink_parms(): no params data found [ 131.457954][ T8515] delete_channel: no stack [ 131.540024][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.547479][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.555028][ T8436] bridge_slave_0: entered allmulticast mode [ 131.565042][ T8436] bridge_slave_0: entered promiscuous mode [ 131.596361][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.615563][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.641617][ T8436] bridge_slave_1: entered allmulticast mode [ 131.664912][ T8436] bridge_slave_1: entered promiscuous mode [ 131.745504][ T8527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.748'. [ 131.782325][ T5829] Bluetooth: hci0: command tx timeout [ 131.907752][ T68] hsr_slave_0: left promiscuous mode [ 131.919878][ T68] hsr_slave_1: left promiscuous mode [ 131.950102][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.961347][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.982538][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.994672][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.050987][ T68] veth1_macvtap: left promiscuous mode [ 132.056576][ T68] veth0_macvtap: left promiscuous mode [ 132.070489][ T68] veth1_vlan: left promiscuous mode [ 132.075831][ T68] veth0_vlan: left promiscuous mode [ 132.704996][ T68] team0 (unregistering): Port device team_slave_1 removed [ 132.747477][ T68] team0 (unregistering): Port device team_slave_0 removed [ 133.165214][ T8436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.211653][ T8436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.226792][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.233365][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.260255][ T8545] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 133.280013][ T8546] macvlan2: entered promiscuous mode [ 133.320685][ T8546] macvlan2: entered allmulticast mode [ 133.598531][ T8436] team0: Port device team_slave_0 added [ 133.615785][ T8570] v: renamed from veth1_virt_wifi (while UP) [ 133.633965][ T8436] team0: Port device team_slave_1 added [ 133.863539][ T5829] Bluetooth: hci0: command tx timeout [ 133.904634][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.967385][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.044807][ T8436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.082928][ T8584] netlink: 80 bytes leftover after parsing attributes in process `syz.1.765'. [ 134.102894][ T8588] netlink: 36 bytes leftover after parsing attributes in process `syz.4.767'. [ 134.110133][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.126476][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.157851][ T8436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.168878][ T8584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.765'. [ 134.276261][ T8436] hsr_slave_0: entered promiscuous mode [ 134.301203][ T8436] hsr_slave_1: entered promiscuous mode [ 134.542537][ T8609] netlink: 'syz.3.773': attribute type 10 has an invalid length. [ 134.613879][ T8609] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.639692][ T8611] netlink: 36 bytes leftover after parsing attributes in process `syz.2.774'. [ 134.932564][ T8623] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 134.981610][ T8436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.993031][ T8436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.998912][ T8623] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 135.017718][ T8436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.028600][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'. [ 135.048939][ T8436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.246586][ T8436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.307102][ T8436] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.351298][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.358559][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.402687][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.409898][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.541696][ T8436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.552259][ T8436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.835659][ T8646] sctp: [Deprecated]: syz.3.786 (pid 8646) Use of int in max_burst socket option. [ 135.835659][ T8646] Use struct sctp_assoc_value instead [ 135.940051][ T5829] Bluetooth: hci0: command tx timeout [ 135.992459][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.063033][ T8436] veth0_vlan: entered promiscuous mode [ 136.085807][ T8436] veth1_vlan: entered promiscuous mode [ 136.163940][ T8665] netlink: 'syz.2.791': attribute type 11 has an invalid length. [ 136.176650][ T8436] veth0_macvtap: entered promiscuous mode [ 136.193805][ T8436] veth1_macvtap: entered promiscuous mode [ 136.210913][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.222215][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.232861][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.243880][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.253944][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.265713][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.276070][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.287249][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.298420][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.341573][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.355516][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.365906][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.391997][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.409951][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.431264][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.441646][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.452736][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.465829][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.505449][ T8436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.525714][ T8436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.549391][ T8436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.558163][ T8436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.595538][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.797'. [ 136.644925][ T8683] pimreg: entered allmulticast mode [ 136.751507][ T7726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.767913][ T7726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.815576][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.830308][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.971383][ T8694] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.800'. [ 136.981783][ T8694] openvswitch: netlink: Flow actions attr not present in new flow. [ 137.235998][ T8709] bond0: option ad_select: unable to set because the bond device is up [ 137.266396][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.802'. [ 137.481857][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.808'. [ 137.504652][ T8724] xt_l2tp: v2 doesn't support IP mode [ 137.509926][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.808'. [ 138.492902][ T7735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.558444][ T8776] veth1_macvtap: left promiscuous mode [ 138.591465][ T8778] tap0: tun_chr_ioctl cmd 1074025677 [ 138.602164][ T8778] tap0: linktype set to 778 [ 139.416625][ T8793] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.554541][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.837'. [ 139.568017][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.837'. [ 139.749113][ T8810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 139.767978][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.804312][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.813188][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.822634][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.833169][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.840651][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.936335][ T7735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.953442][ T8814] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 140.122521][ T7735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.224199][ T7735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.251842][ T8836] netlink: 'syz.1.846': attribute type 4 has an invalid length. [ 140.515314][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 140.539249][ T7735] bridge_slave_1: left allmulticast mode [ 140.544822][ T8848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.851'. [ 140.545174][ T7735] bridge_slave_1: left promiscuous mode [ 140.570757][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.576925][ T8859] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.854'. [ 140.592538][ T7735] bridge_slave_0: left allmulticast mode [ 140.598650][ T7735] bridge_slave_0: left promiscuous mode [ 140.604665][ T8860] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.854'. [ 140.609643][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.639255][ T8859] netlink: 'syz.4.854': attribute type 11 has an invalid length. [ 141.086443][ T7735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.097733][ T7735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.111006][ T7735] bond0 (unregistering): Released all slaves [ 141.140474][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 141.541722][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.558839][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.605117][ T8812] bridge_slave_0: entered allmulticast mode [ 141.627349][ T8812] bridge_slave_0: entered promiscuous mode [ 141.652588][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.678787][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.710266][ T8812] bridge_slave_1: entered allmulticast mode [ 141.717330][ T8812] bridge_slave_1: entered promiscuous mode [ 141.862296][ T5837] Bluetooth: hci0: command tx timeout [ 141.891365][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.961704][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.154147][ T8922] ax25_connect(): syz.1.873 uses autobind, please contact jreuter@yaina.de [ 142.719503][ T8933] netlink: 'syz.2.876': attribute type 2 has an invalid length. [ 142.839573][ T7735] hsr_slave_0: left promiscuous mode [ 142.861484][ T7735] hsr_slave_1: left promiscuous mode [ 142.896186][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.920768][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.928758][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.936332][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.962265][ T7735] veth1_macvtap: left promiscuous mode [ 142.967889][ T7735] veth0_macvtap: left promiscuous mode [ 142.979541][ T7735] veth1_vlan: left promiscuous mode [ 142.984906][ T7735] veth0_vlan: left promiscuous mode [ 143.187563][ T8946] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.880'. [ 143.197317][ T8946] netlink: zone id is out of range [ 143.202523][ T8946] netlink: zone id is out of range [ 143.211717][ T8946] netlink: zone id is out of range [ 143.563406][ T7735] team0 (unregistering): Port device team_slave_1 removed [ 143.605697][ T7735] team0 (unregistering): Port device team_slave_0 removed [ 143.942027][ T5837] Bluetooth: hci0: command tx timeout [ 144.018722][ T8812] team0: Port device team_slave_0 added [ 144.081383][ T8812] team0: Port device team_slave_1 added [ 144.191511][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.198516][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.235760][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.285996][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.298576][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.326689][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.498202][ T8812] hsr_slave_0: entered promiscuous mode [ 144.505898][ T8812] hsr_slave_1: entered promiscuous mode [ 144.887371][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 144.896095][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 144.900226][ T8990] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.911663][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 144.940057][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 144.955929][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 144.965589][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 144.981390][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 144.995848][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 144.995854][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 144.996012][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 145.069837][ T8990] netlink: 'syz.1.894': attribute type 25 has an invalid length. [ 145.077629][ T8990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.894'. [ 145.106222][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 145.115985][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 145.125376][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 145.133603][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 145.159201][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 145.171159][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 145.173809][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 145.188856][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 145.203744][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 145.204019][ T8986] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 145.230469][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 145.273657][ T8812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.293136][ T8812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.321953][ T8812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.333990][ T8812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.413999][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.434435][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.446413][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.453675][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.476411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.483669][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.567604][ T9007] IPv4: Oversized IP packet from 172.20.20.24 [ 145.576844][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 145.583543][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 145.771992][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.852587][ T8812] veth0_vlan: entered promiscuous mode [ 145.881985][ T8812] veth1_vlan: entered promiscuous mode [ 145.936878][ T8812] veth0_macvtap: entered promiscuous mode [ 145.966871][ T8812] veth1_macvtap: entered promiscuous mode [ 146.001043][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.037343][ T5837] Bluetooth: hci0: command tx timeout [ 146.044972][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.058914][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.070061][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.080330][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.091581][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.102020][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.112714][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.124015][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.144402][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.145024][ T9028] sctp: [Deprecated]: syz.4.905 (pid 9028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.145024][ T9028] Use struct sctp_sack_info instead [ 146.159347][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.182659][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.193523][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.203872][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.214691][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.233975][ T9028] sctp: [Deprecated]: syz.4.905 (pid 9028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.233975][ T9028] Use struct sctp_sack_info instead [ 146.274534][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.302867][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.320208][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.331555][ T8812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.341478][ T8812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.350478][ T8812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.359204][ T8812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.542453][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.553267][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.634553][ T7735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.656963][ T7735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.137053][ T9076] No such timeout policy "syz0" [ 147.404872][ T9089] delete_channel: no stack [ 148.196720][ T9135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.230960][ T9135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.237884][ T9135] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 148.270706][ T9135] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 148.313707][ T9144] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 148.332635][ T9144] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 148.462364][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.685371][ T9181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.768207][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.801155][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.809887][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.820828][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.828496][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.846470][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.868799][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.961150][ T9200] __nla_validate_parse: 66 callbacks suppressed [ 149.961170][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 150.079715][ T9207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.961'. [ 150.176341][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.265947][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.451180][ T9234] netlink: 32 bytes leftover after parsing attributes in process `syz.3.970'. [ 150.518597][ T9189] chnl_net:caif_netlink_parms(): no params data found [ 150.568546][ T12] bridge_slave_1: left allmulticast mode [ 150.577852][ T12] bridge_slave_1: left promiscuous mode [ 150.603201][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.628605][ T12] bridge_slave_0: left allmulticast mode [ 150.635225][ T12] bridge_slave_0: left promiscuous mode [ 150.641120][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.998680][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.023042][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.051846][ T12] bond0 (unregistering): Released all slaves [ 151.089579][ T9247] validate_nla: 64 callbacks suppressed [ 151.089599][ T9247] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 151.122989][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.974'. [ 151.377234][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.405663][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.416773][ T9189] bridge_slave_0: entered allmulticast mode [ 151.435936][ T9189] bridge_slave_0: entered promiscuous mode [ 151.444279][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.453236][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.461104][ T9189] bridge_slave_1: entered allmulticast mode [ 151.468871][ T9189] bridge_slave_1: entered promiscuous mode [ 151.536834][ T9261] smc: net device wg0 applied user defined pnetid SYZ0 [ 151.686038][ T9189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.718637][ T9189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.818114][ T9189] team0: Port device team_slave_0 added [ 151.834926][ T9189] team0: Port device team_slave_1 added [ 151.949504][ T5829] Bluetooth: hci0: command tx timeout [ 151.996946][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.029314][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.075937][ T9189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.088807][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.095952][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.122205][ T9189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.185665][ T12] hsr_slave_0: left promiscuous mode [ 152.197938][ T12] hsr_slave_1: left promiscuous mode [ 152.205750][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.213642][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.234029][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.248069][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.293979][ T12] veth1_macvtap: left promiscuous mode [ 152.300505][ T12] veth0_macvtap: left promiscuous mode [ 152.307845][ T12] veth1_vlan: left promiscuous mode [ 152.313220][ T12] veth0_vlan: left promiscuous mode [ 152.847907][ T12] team0 (unregistering): Port device team_slave_1 removed [ 152.897432][ T12] team0 (unregistering): Port device team_slave_0 removed [ 153.335744][ T9300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.987'. [ 153.348486][ T9311] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 153.365868][ T9311] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 153.410155][ T9318] veth0_to_team: entered promiscuous mode [ 153.429801][ T9318] veth0_to_team: entered allmulticast mode [ 153.459639][ T9319] netlink: 'syz.4.992': attribute type 21 has an invalid length. [ 153.497183][ T9189] hsr_slave_0: entered promiscuous mode [ 153.523332][ T9189] hsr_slave_1: entered promiscuous mode [ 153.555123][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 153.677927][ T9330] netlink: 'syz.2.994': attribute type 11 has an invalid length. [ 153.725961][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'. [ 154.019893][ T5829] Bluetooth: hci0: command tx timeout [ 154.235378][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 154.261675][ T9347] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.296299][ T9351] netlink: 10 bytes leftover after parsing attributes in process `syz.1.999'. [ 154.918759][ T9366] geneve2: entered promiscuous mode [ 154.924277][ T9366] geneve2: entered allmulticast mode [ 155.049672][ T9393] netlink: 'syz.2.1014': attribute type 10 has an invalid length. [ 155.063542][ T9393] syz_tun: entered promiscuous mode [ 155.082658][ T9393] : (slave syz_tun): Enslaving as an active interface with an up link [ 155.185980][ T9189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.196953][ T9189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.209751][ T9189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.226246][ T9189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.257156][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 155.358065][ T9189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.404486][ T9189] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.420365][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.427539][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.441826][ T9405] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 155.454507][ T9405] netlink: 'syz.3.1018': attribute type 2 has an invalid length. [ 155.464682][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1018'. [ 155.486678][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.493858][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.816295][ T9189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.903912][ T9189] veth0_vlan: entered promiscuous mode [ 155.956205][ T9189] veth1_vlan: entered promiscuous mode [ 156.005208][ T9189] veth0_macvtap: entered promiscuous mode [ 156.021295][ T9189] veth1_macvtap: entered promiscuous mode [ 156.061775][ T9430] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 156.100079][ T5829] Bluetooth: hci0: command tx timeout [ 156.125452][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.136858][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.146862][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.148136][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 156.157901][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.177980][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.195180][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.206065][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.217150][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.230057][ T9189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.267179][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.290550][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.301066][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.312273][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.322768][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.333889][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.345476][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.356802][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.368700][ T9189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.379072][ T9189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.387949][ T9189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.397010][ T9189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.406787][ T9189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.476348][ T9450] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 156.492115][ T9453] netlink: 'syz.2.1032': attribute type 5 has an invalid length. [ 156.705289][ T9459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1033'. [ 156.746745][ T9469] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1036'. [ 156.839035][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.862519][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.907012][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.916045][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.940783][ T9476] netlink: 'syz.1.1040': attribute type 1 has an invalid length. [ 156.988032][ T9474] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 156.993261][ T9483] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.1040'. [ 157.029544][ T9483] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 157.054454][ T9476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.080263][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.089106][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.265735][ T9493] : renamed from ipvlan1 (while UP) [ 157.849782][ T9526] sch_tbf: burst 5 is lower than device lo mtu (16) ! [ 157.896425][ T9532] sctp: [Deprecated]: syz.2.1056 (pid 9532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.896425][ T9532] Use struct sctp_sack_info instead [ 157.914316][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1054'. [ 157.937281][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'. [ 158.182724][ T9550] Bluetooth: MGMT ver 1.23 [ 158.274136][ T9554] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1064'. [ 158.344418][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 158.373146][ T9560] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1066'. [ 158.387693][ T9560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.505574][ T9564] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 158.631165][ T9569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.644900][ T9570] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 158.666815][ T9570] netlink: 'syz.3.1070': attribute type 2 has an invalid length. [ 158.674985][ T9570] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 158.684067][ T9569] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 158.693240][ T9573] netlink: 'syz.3.1070': attribute type 5 has an invalid length. [ 158.704343][ T9570] netlink: 'syz.3.1070': attribute type 5 has an invalid length. [ 158.712250][ T9569] netlink: 'syz.3.1070': attribute type 2 has an invalid length. [ 158.726089][ T9569] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 158.736707][ T9572] team0: Device wg2 is of different type [ 158.857336][ T9580] syz.3.1074[9580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.857433][ T9580] syz.3.1074[9580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.869485][ T9580] syz.3.1074[9580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.886116][ T9580] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 158.984251][ T9580] gretap1: entered promiscuous mode [ 159.201616][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.137728][ T9602] nbd: must specify at least one socket [ 160.270423][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.455600][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.548530][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.548998][ T9617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.560106][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.573588][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.584108][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.593496][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.601976][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.635277][ T9619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.644572][ T9619] bond2: (slave bond3): Enslaving as an active interface with a down link [ 160.664721][ T9620] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 160.678308][ T9620] bond2: (slave batadv1): making interface the new active one [ 160.687990][ T9620] batadv1: entered promiscuous mode [ 160.694198][ T9620] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 160.804837][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.838535][ T9632] veth1_macvtap: left promiscuous mode [ 161.103015][ T12] bridge_slave_1: left allmulticast mode [ 161.112952][ T12] bridge_slave_1: left promiscuous mode [ 161.119864][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.148886][ T9653] __nla_validate_parse: 2 callbacks suppressed [ 161.148907][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 161.167711][ T12] bridge_slave_0: left allmulticast mode [ 161.174132][ T12] bridge_slave_0: left promiscuous mode [ 161.199531][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.236508][ T9661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1096'. [ 161.607238][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.622513][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.635356][ T12] bond0 (unregistering): Released all slaves [ 162.051202][ T9686] Bluetooth: MGMT ver 1.23 [ 162.127154][ T9626] chnl_net:caif_netlink_parms(): no params data found [ 162.484276][ T9626] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.492728][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.501597][ T9626] bridge_slave_0: entered allmulticast mode [ 162.508402][ T9626] bridge_slave_0: entered promiscuous mode [ 162.571025][ T12] hsr_slave_0: left promiscuous mode [ 162.576990][ T12] hsr_slave_1: left promiscuous mode [ 162.585198][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.599567][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.607931][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.622863][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.661217][ T5837] Bluetooth: hci0: command tx timeout [ 162.670071][ T12] veth1_macvtap: left promiscuous mode [ 162.675748][ T12] veth0_macvtap: left promiscuous mode [ 162.685168][ T12] veth1_vlan: left promiscuous mode [ 162.696862][ T12] veth0_vlan: left promiscuous mode [ 162.866246][ T9718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.259091][ T12] team0 (unregistering): Port device team_slave_1 removed [ 163.308742][ T12] team0 (unregistering): Port device team_slave_0 removed [ 163.724464][ T9626] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.733791][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.742981][ T9626] bridge_slave_1: entered allmulticast mode [ 163.751351][ T9626] bridge_slave_1: entered promiscuous mode [ 163.806370][ T9626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.848997][ T9626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.924985][ T9626] team0: Port device team_slave_0 added [ 163.956958][ T9626] team0: Port device team_slave_1 added [ 164.004335][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.019145][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.079608][ T9626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.108097][ T9733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1117'. [ 164.118888][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.126268][ T9733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1117'. [ 164.135391][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.164052][ T9626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.294426][ T9626] hsr_slave_0: entered promiscuous mode [ 164.314028][ T9626] hsr_slave_1: entered promiscuous mode [ 164.432341][ T9744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1121'. [ 164.464609][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 164.504927][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 164.528328][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 164.741252][ T5837] Bluetooth: hci0: command tx timeout [ 164.880059][ T9770] Bluetooth: MGMT ver 1.23 [ 164.933215][ T9626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.973260][ T9626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.995141][ T9626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.044098][ T9626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.213363][ T9626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.245182][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1136'. [ 165.247040][ T9626] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.256212][ T9786] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1136'. [ 165.265806][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.277755][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.304141][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.311417][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.373888][ T9626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.570034][ T9626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.607615][ T9626] veth0_vlan: entered promiscuous mode [ 165.618861][ T9626] veth1_vlan: entered promiscuous mode [ 165.642209][ T9626] veth0_macvtap: entered promiscuous mode [ 165.650445][ T9799] validate_nla: 4 callbacks suppressed [ 165.650462][ T9799] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 165.651611][ T9626] veth1_macvtap: entered promiscuous mode [ 165.664689][ T9799] netlink: 'syz.2.1140': attribute type 4 has an invalid length. [ 165.692616][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.694788][ T9799] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 165.703311][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.703329][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.703345][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.703358][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.703371][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.703383][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.703397][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.704520][ T9626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.721339][ T9799] netlink: 'syz.2.1140': attribute type 4 has an invalid length. [ 165.736208][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.886802][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.903619][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.916496][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.933695][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.959640][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.975325][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.985901][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.004815][ T9626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.042109][ T9626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.074981][ T9626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.096015][ T9626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.112107][ T9626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.273421][ T7735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.302209][ T7735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.333647][ T7727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.348155][ T7727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.680515][ T9836] netlink: 'syz.1.1152': attribute type 10 has an invalid length. [ 166.896533][ T9853] netlink: 'syz.1.1157': attribute type 29 has an invalid length. [ 167.470863][ T9883] __nla_validate_parse: 3 callbacks suppressed [ 167.470977][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 167.481536][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 167.520807][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 167.700250][ T9896] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1173'. [ 167.731231][ T9896] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 167.773316][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1173'. [ 167.889733][ T9903] tipc: Started in network mode [ 167.900176][ T9903] tipc: Node identity 129e0143076b, cluster identity 4711 [ 167.909778][ T9903] tipc: Enabled bearer , priority 0 [ 167.956764][ T9903] syzkaller0: entered promiscuous mode [ 167.967015][ T9903] syzkaller0: entered allmulticast mode [ 167.974938][ T9903] tipc: Resetting bearer [ 167.997233][ T9902] tipc: Resetting bearer [ 168.984248][ T9] tipc: Node number set to 368378179 [ 169.388744][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.406939][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.415504][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.425272][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.433275][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.441197][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.910371][ T9931] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 169.921262][ T9931] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 170.291879][ T9902] tipc: Disabling bearer [ 170.382830][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.412662][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 170.643966][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 170.686470][ T9942] infiniband syz1: set down [ 170.800256][ T12] smc: removing ib device syz1 [ 170.965678][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.986391][ T9] ================================================================== [ 170.994498][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 171.000427][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 171.003268][ T9] Read of size 8 at addr ffff888055e1c2e8 by task kworker/0:1/9 [ 171.019751][ T9] [ 171.022193][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 171.032710][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 171.042782][ T9] Workqueue: events smc_ib_port_event_work [ 171.048616][ T9] Call Trace: [ 171.051935][ T9] [ 171.054873][ T9] dump_stack_lvl+0x241/0x360 [ 171.059572][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.064797][ T9] ? __pfx__printk+0x10/0x10 [ 171.069413][ T9] ? _printk+0xd5/0x120 [ 171.073592][ T9] ? __virt_addr_valid+0x183/0x530 [ 171.078733][ T9] ? __virt_addr_valid+0x183/0x530 [ 171.083872][ T9] print_report+0x169/0x550 [ 171.088392][ T9] ? __virt_addr_valid+0x183/0x530 [ 171.093517][ T9] ? __virt_addr_valid+0x183/0x530 [ 171.098646][ T9] ? __virt_addr_valid+0x45f/0x530 [ 171.103776][ T9] ? __phys_addr+0xba/0x170 [ 171.108303][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.114300][ T9] kasan_report+0x143/0x180 [ 171.118826][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 171.124836][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 171.130669][ T9] ib_get_eth_speed+0x160/0x800 [ 171.135548][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 171.140948][ T9] ? rxe_query_port+0x4f/0x260 [ 171.145737][ T9] rxe_query_port+0x76/0x260 [ 171.150363][ T9] ib_query_port+0x166/0x7d0 [ 171.154995][ T9] smc_ib_port_event_work+0x14e/0xa50 [ 171.160400][ T9] ? process_scheduled_works+0x976/0x1840 [ 171.166140][ T9] process_scheduled_works+0xa66/0x1840 [ 171.171718][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.177717][ T9] ? assign_work+0x364/0x3d0 [ 171.182328][ T9] worker_thread+0x870/0xd30 [ 171.186944][ T9] ? __kthread_parkme+0x169/0x1d0 [ 171.192000][ T9] ? __pfx_worker_thread+0x10/0x10 [ 171.197119][ T9] kthread+0x2f0/0x390 [ 171.201191][ T9] ? __pfx_worker_thread+0x10/0x10 [ 171.206293][ T9] ? __pfx_kthread+0x10/0x10 [ 171.210880][ T9] ret_from_fork+0x4b/0x80 [ 171.215288][ T9] ? __pfx_kthread+0x10/0x10 [ 171.219873][ T9] ret_from_fork_asm+0x1a/0x30 [ 171.224637][ T9] [ 171.227644][ T9] [ 171.229972][ T9] Allocated by task 5832: [ 171.234310][ T9] kasan_save_track+0x3f/0x80 [ 171.238996][ T9] __kasan_kmalloc+0x98/0xb0 [ 171.243587][ T9] __kmalloc_node_noprof+0x290/0x4d0 [ 171.248871][ T9] __kvmalloc_node_noprof+0x72/0x190 [ 171.254144][ T9] alloc_netdev_mqs+0xa4/0x1080 [ 171.258986][ T9] rtnl_create_link+0x2f9/0xc20 [ 171.263830][ T9] rtnl_newlink_create+0x210/0xa40 [ 171.268939][ T9] rtnl_newlink+0x1c7e/0x2210 [ 171.273608][ T9] rtnetlink_rcv_msg+0x791/0xcf0 [ 171.278537][ T9] netlink_rcv_skb+0x1e3/0x430 [ 171.283291][ T9] netlink_unicast+0x7f6/0x990 [ 171.288054][ T9] netlink_sendmsg+0x8e4/0xcb0 [ 171.292813][ T9] __sock_sendmsg+0x221/0x270 [ 171.297484][ T9] __sys_sendto+0x363/0x4c0 [ 171.301983][ T9] __x64_sys_sendto+0xde/0x100 [ 171.306739][ T9] do_syscall_64+0xf3/0x230 [ 171.311240][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.317132][ T9] [ 171.319451][ T9] Freed by task 9942: [ 171.323425][ T9] kasan_save_track+0x3f/0x80 [ 171.328094][ T9] kasan_save_free_info+0x40/0x50 [ 171.333111][ T9] __kasan_slab_free+0x59/0x70 [ 171.337862][ T9] kfree+0x196/0x430 [ 171.341751][ T9] device_release+0x99/0x1c0 [ 171.346342][ T9] kobject_put+0x22f/0x480 [ 171.350749][ T9] netdev_run_todo+0xe79/0x1000 [ 171.355593][ T9] rtnl_dellink+0x760/0x8d0 [ 171.360088][ T9] rtnetlink_rcv_msg+0x791/0xcf0 [ 171.365020][ T9] netlink_rcv_skb+0x1e3/0x430 [ 171.369783][ T9] netlink_unicast+0x7f6/0x990 [ 171.374541][ T9] netlink_sendmsg+0x8e4/0xcb0 [ 171.379295][ T9] __sock_sendmsg+0x221/0x270 [ 171.383976][ T9] ____sys_sendmsg+0x52a/0x7e0 [ 171.388734][ T9] __sys_sendmsg+0x269/0x350 [ 171.393317][ T9] do_syscall_64+0xf3/0x230 [ 171.397814][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.403706][ T9] [ 171.406020][ T9] The buggy address belongs to the object at ffff888055e1c000 [ 171.406020][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 171.420329][ T9] The buggy address is located 744 bytes inside of [ 171.420329][ T9] freed 4096-byte region [ffff888055e1c000, ffff888055e1d000) [ 171.434209][ T9] [ 171.436550][ T9] The buggy address belongs to the physical page: [ 171.442962][ T9] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55e18 [ 171.451805][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 171.460298][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 171.467846][ T9] page_type: f5(slab) [ 171.471817][ T9] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 171.480388][ T9] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 171.488968][ T9] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 171.497625][ T9] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 171.506322][ T9] head: 00fff00000000003 ffffea0001578601 ffffffffffffffff 0000000000000000 [ 171.514985][ T9] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 171.523650][ T9] page dumped because: kasan: bad access detected [ 171.530068][ T9] page_owner tracks the page as allocated [ 171.535777][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 68148037826, free_ts 68110032574 [ 171.557144][ T9] post_alloc_hook+0x1f3/0x230 [ 171.561914][ T9] get_page_from_freelist+0x365c/0x37a0 [ 171.567455][ T9] __alloc_pages_noprof+0x292/0x710 [ 171.572641][ T9] alloc_pages_mpol_noprof+0x3e8/0x680 [ 171.578092][ T9] alloc_slab_page+0x6a/0x110 [ 171.582756][ T9] allocate_slab+0x5a/0x2b0 [ 171.587252][ T9] ___slab_alloc+0xc27/0x14a0 [ 171.591931][ T9] __slab_alloc+0x58/0xa0 [ 171.596262][ T9] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 171.602674][ T9] kmemdup_noprof+0x2a/0x60 [ 171.607177][ T9] __addrconf_sysctl_register+0xb1/0x3a0 [ 171.612805][ T9] addrconf_sysctl_register+0x167/0x1c0 [ 171.618341][ T9] ipv6_add_dev+0xcf6/0x1220 [ 171.622943][ T9] addrconf_notify+0x6a7/0x1020 [ 171.627806][ T9] notifier_call_chain+0x1a5/0x3f0 [ 171.632925][ T9] register_netdevice+0x167f/0x1b00 [ 171.638157][ T9] page last free pid 5839 tgid 5839 stack trace: [ 171.644469][ T9] free_unref_page+0xd3f/0x1010 [ 171.649319][ T9] __put_partials+0x160/0x1c0 [ 171.654004][ T9] put_cpu_partial+0x17c/0x250 [ 171.658755][ T9] __slab_free+0x290/0x380 [ 171.663163][ T9] qlist_free_all+0x9a/0x140 [ 171.667742][ T9] kasan_quarantine_reduce+0x14f/0x170 [ 171.673192][ T9] __kasan_slab_alloc+0x23/0x80 [ 171.678033][ T9] __kmalloc_cache_noprof+0x1d9/0x390 [ 171.683405][ T9] __ipv6_dev_mc_inc+0x429/0xaa0 [ 171.688359][ T9] ipv6_add_dev+0xe03/0x1220 [ 171.692961][ T9] addrconf_notify+0x6a7/0x1020 [ 171.697813][ T9] notifier_call_chain+0x1a5/0x3f0 [ 171.702927][ T9] register_netdevice+0x167f/0x1b00 [ 171.708124][ T9] hsr_dev_finalize+0x64e/0xa20 [ 171.712978][ T9] hsr_newlink+0x7ee/0x970 [ 171.717392][ T9] rtnl_newlink_create+0x2ee/0xa40 [ 171.722500][ T9] [ 171.724811][ T9] Memory state around the buggy address: [ 171.730433][ T9] ffff888055e1c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.738483][ T9] ffff888055e1c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.746622][ T9] >ffff888055e1c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.754672][ T9] ^ [ 171.762120][ T9] ffff888055e1c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.770171][ T9] ffff888055e1c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.778219][ T9] ================================================================== [ 171.809398][ T5829] Bluetooth: hci0: command tx timeout [ 171.848155][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.855419][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 171.865939][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 171.876152][ T9] Workqueue: events smc_ib_port_event_work [ 171.881981][ T9] Call Trace: [ 171.885258][ T9] [ 171.888188][ T9] dump_stack_lvl+0x241/0x360 [ 171.892868][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.898066][ T9] ? __pfx__printk+0x10/0x10 [ 171.902651][ T9] ? preempt_schedule+0xe1/0xf0 [ 171.907500][ T9] ? vscnprintf+0x5d/0x90 [ 171.911821][ T9] panic+0x349/0x880 [ 171.915716][ T9] ? check_panic_on_warn+0x21/0xb0 [ 171.920852][ T9] ? __pfx_panic+0x10/0x10 [ 171.925267][ T9] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 171.931254][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 171.937577][ T9] ? print_report+0x502/0x550 [ 171.942253][ T9] check_panic_on_warn+0x86/0xb0 [ 171.947187][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 171.953163][ T9] end_report+0x77/0x160 [ 171.957399][ T9] kasan_report+0x154/0x180 [ 171.961897][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 171.967874][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 171.973672][ T9] ib_get_eth_speed+0x160/0x800 [ 171.978519][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 171.983888][ T9] ? rxe_query_port+0x4f/0x260 [ 171.988647][ T9] rxe_query_port+0x76/0x260 [ 171.993233][ T9] ib_query_port+0x166/0x7d0 [ 171.997816][ T9] smc_ib_port_event_work+0x14e/0xa50 [ 172.003185][ T9] ? process_scheduled_works+0x976/0x1840 [ 172.008895][ T9] process_scheduled_works+0xa66/0x1840 [ 172.014443][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.020426][ T9] ? assign_work+0x364/0x3d0 [ 172.025024][ T9] worker_thread+0x870/0xd30 [ 172.029622][ T9] ? __kthread_parkme+0x169/0x1d0 [ 172.034647][ T9] ? __pfx_worker_thread+0x10/0x10 [ 172.039759][ T9] kthread+0x2f0/0x390 [ 172.043833][ T9] ? __pfx_worker_thread+0x10/0x10 [ 172.048953][ T9] ? __pfx_kthread+0x10/0x10 [ 172.053555][ T9] ret_from_fork+0x4b/0x80 [ 172.057986][ T9] ? __pfx_kthread+0x10/0x10 [ 172.062581][ T9] ret_from_fork_asm+0x1a/0x30 [ 172.067345][ T9] [ 172.070651][ T9] Kernel Offset: disabled [ 172.074971][ T9] Rebooting in 86400 seconds..