last executing test programs: 3.59116973s ago: executing program 1 (id=895): socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000600)={0x0, 0x0, "977b17"}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1, @mcast2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x5e2e, 0x86, 0x4, 0xd40, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0xc}, 0x48) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 3.292157162s ago: executing program 1 (id=898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f21e0dd037a3f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/207, 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/201, 0xc9}], 0x1}}], 0x2, 0x0, 0x0) 3.083647378s ago: executing program 2 (id=901): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5b08bc1af2ca68b357310dce47d455f52ee5e63b04b61b92428e157d85dce57e7ea63a7d521c63fdb2be730b5c79be573aa2ca5a2ad6a97241b7d8bec0b0479a9cc299f27be0cea11e36425f365d0badb7b4c6a255f7c0ea360e21647409a4abb6d92cae8c468290ede", 0x82}, {&(0x7f0000000700)="42a86db21e3a6b2d2f33659689ebffd90f8e737b31c8bbacf0c4942be1068c781ac9e25791a08f779b64cc51c034b219f326032701d362476fe6447300ed52b7cadb20d46417a797c3e9d5ee043773a57681bc09130c600caa0816cb2f2f938ed1267fa8067ad05bb4b12682488a4dfe7f3e45f2e8ed82e796dbaf30bfc553b7718fcb34fed67402530609745e3cf1756f0858ba6bf558c81a69af9abd2496c23c68c0b21889102377702bfad4d53811bd1cb5ed3856568211f84e41c02cdefbe478bd4835ea081b2705001479c02423aff80b0fafd57bcd54aff6e04d0ce394150d730bc8f020a3e7d56b3adc44d6fcfad4308e183e1647ccebc6c1da039f83f9fa6592e40977910842bb5602af9fa5fead5d2ea30364c63b96e31e74436546fd03200f5571c618f9b500"/308, 0x134}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/119, 0x77}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}}], 0x2, 0x0, 0x0) 2.972085321s ago: executing program 3 (id=902): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xd93}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x300000000000000, 0x0, 0x3}, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f0000000000)="09268a927f1f6588b967481241ba7860fdfaf65ac618ded89748f71b16daf3f6e9b7dee3a6ccd5abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf", 0x54, 0x8011, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000280)="f46b49d18c2b07eb6e3e924f842264c1cfa9b176ec19f6324cc2dbbf15cf447ca7fd67eff75a81498b54aa2161698aa79b8122103e0bd52cfa42a46143b5361bac677db854aa873eb34529515031d6222e937a8f09bc62373cfddad19b43a7d330b19f4415ddd78d62b9092f15174417458ca8e2454ba00ad322c445688e28369477f9e52be97e28750c61a5", 0x8c}, {&(0x7f0000000340)="311c0b1af0c874f4a16ecb8828343dbecccd5981dc7c699454ffa0109be05e4ca01952f415faa13f8b56019c2c9c616d2719899c9f41", 0x36}, {0x0}], 0x3) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 2.886311906s ago: executing program 0 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x10, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {0x0}, {&(0x7f00000004c0)}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32b86de0ff15be80ddf3dab5b55443991f2b4d7276d4d6334a4385a70581c45a6926fc7874e38018387a2d6195df3281ba32a96811d4e9e40b1cf5b927", 0x79}], 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{r3, 0xffffffffffffffff}, &(0x7f0000001180)=0x2, &(0x7f00000011c0)}, 0x20) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r6 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000009500000095000000000000006bda40427375404b9f6f71a8579c0f6f72bbbfbf8893ce04ef6fedda8db9a077f1192e2d78736be8e95a7c3cc29cd6e2a91878a884c95d89b86f1a1587a8833faeba65e2a875952c8c257de77f15889db58c9bf325294795026f8b0fd395b01bf14d7566f95dc5c835ab05c143386fcdd97642d7ef037dc151806d3dddf5090921fec0942696e0e5a50119a75f0fd05583ee168881715cf8d0c8930d0fab38bceefc28a8ad7ae9d8058ddf36d0da50"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$qrtr(0x2a, 0x2, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r8, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) 2.776180238s ago: executing program 0 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x2}]}}}]}, 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={0xffffffffffffffff, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000001f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002240)={'syztnl2\x00', &(0x7f00000021c0)={'erspan0\x00', 0x0, 0x7880, 0x1, 0x7ff, 0x10001, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x0, 0x9, "4409cb51624f21"}, @lsrr={0x83, 0x7, 0x10, [@loopback]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000008000d000000000034001680300001802c000c80140001000000000000000000000000000000000014"], 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000002380)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002340)={&(0x7f0000002280)={0xb8, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8050}, 0x8001) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x198, r8, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffb2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x198}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x210, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000804}, 0x40080) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r13, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r12, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x1708, r13, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x1374, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x118, 0xd, 0x0, 0x1, [{0xb7, 0x0, "762da2d9b0c1766589c0b60faeadef46a13dd1d6e44ab7a00e3531953f071461bc37a8f942a2638df4f802e027698d5bb3cca63e5831522b6cb9c5c6a93a8f8f663159b2eb0c64dc9b82bacf577f0c8ea42f86de793504e13d5cc21e2bd699184c1b42df65b84210adb50fefe8a9a3484f233fcb0d3a5876adff3d534786b81a28fd7869398b60a81ae5bfd0ae94085f8b0c87c699407f1d310150e00d3e7aafd77df75fba493d76af48b7f6b3f9bc0098ee27"}, {0x51, 0x0, "89772acf2f3f0a2ae40934524815e66250343d36f36224cf21996109d91e1a84517df56ae7409d246ae6f3299a02b43c8d2c1b10a3707fa25f4fe6702452f5532ef766804931ce9f553a445a11"}, {0x7, 0x0, "c4aec3"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1244, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x7f, 0x0, "2f2ca419008d34993795d39fb5332276e01c8808c637a24efdbf590449a248a58baacace7ba3f7e16af49d93d10844af30567b8dcc0febf8d9ea964ac486cdde576d363ae411120c5a2775749f0d129a0bacc14ecc712f624d49a86c561e10f902a186008e3039c5da0457b210a1a0a652092f61cf42dd0b7d236c"}, {0x5b, 0x0, "dd20fe1f95c30580258958d82e9039d675cdf01f7b389de9a51a465b9306efa0aef6713d0d4f0ad93003a1aaea5cc3c25b2dde9969e915c7b20a08610b826674cc35f482640e073cb2af4eba60ae7da51310dbb9944caa"}, {0x63, 0x0, "a45f0835126d1fc99cd97ae3f33280cb47c4f5d927c6c390f3f1ec4e9ed92270789001a06228ee4c0f5306e135cd442c0845814416e1e8c0a8accb16a31da499dfb0c179395902cdcd888c36beda60dde20747b8cac4ccd7b6d6e64628a336"}, {0xc2, 0x0, "792d8efdd18294343b669ce2035186fa628eddcdf7035b85913143cdeaff7f3a8681c317bcad3d0fcd230ff468a33dcda3b2ffade87be184235d4c949284429994f5499db900994496a2ca6871785ca64c029c4fb4f2bbc20d6fbbed78024ebceebf2877436e7c9dadb420a5a8d961ef793b23614c749a9d79d468ba99534322344170103f667674b2c26685db301e8148bbe10c69adf3fe831c950f6a659cc550fd988d63374dcd0eb2b06043194e98f9a47f308a7b9ebd52e41c2a2acd"}, {0x35, 0x0, "d81af4d31db4e0118002fead618c0225b5a2920277dcae2bd99d20075c085a26b1642de07a6e9e4ec4d97ba6d91663c12b"}]}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0x348, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x114, 0xe, 0x0, 0x1, [{0x68, 0x0, "d0f8000c755f560e8a8a4f5efb3acf26275897b148c9776e807b51e05d4c78c0f01e9dd63473f0108216aca5f8732e2dec8fef3e57b314833c8160c7ff15ea82e45afb8a9d5969b00df4e872d1cae7552077c4b9d36391003cb292853975a1d086795b3a"}, {0xa7, 0x0, "40531d71f3981e0ed4a24a88fba247db76cf6f2d1888dbf5c3a0a33b1292411d13c50020f2e8550e446732b9fd8f6ae18c809454cec0f38f0787ee90c35f88529ac230bc8627bd421d0368737997818489c3aacfb5272b698b871ac51a6ce414bbfd0e0a10514dfef224e2b0b946352d5d044e452582c0160faafa7c695fc6f4739306f150e2bab223ef9060f293881f37dd57d7418d5770da4fab66e4970fc7508b25"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x208, 0xd, 0x0, 0x1, [{0x45, 0x0, "d934dacb0fefe17539b941f1503485bc4d90472d50ce5a7ac423db2cc8c9a126829fedf64a891a0286771590ad242e740a5cd2ee6519fe9ed38e8b75005d40ec61"}, {0x83, 0x0, "4dfef1d5fe3f9790698a313a8843c96ec6ee602ad1bab86082429dcda608fab71dc9223338b2cc2d001a32cea228ae295aca11c404d099920139a56e488d421d4d21eabc35798dee36b7a952d2bd3ad3f124df1618057177f24adb19c202ae410b727baa5dc665b7d8a30b98099feb41dd112d2722919e0e676723a630f43b"}, {0xf1, 0x0, "f4b83ec2c9e0cfb3efb8310dfa56086f3fbec02c7d6ba0b1deff85d72b4f9b9c137a84b0b9442cd404dd1609ada1776d760ee660da0241bec89a0e1f521d6d2f82c9075e49a401ed78abd43912ae2c60c1e9d0ab60224f68f5182651dbcfda1b3265b618289c6052c6154fe13a63cbfde5960bff058bc0831dc30c02ef3212c39e0d8cad023960903582f276bda5b105583ac1f85769a01cbd6d9ec4f86448c9dbdeafa1d3530c8423c680bf70f02db33375655fb33a8fd39f29a10a6354613d28a710ecb0722c3d8d5662e468d61d8c0410ef5d5d64d0322ec781da772c36725836193777133dc46fd1461674"}, {0x43, 0x0, "52e64c2d72cc8b99a6722f6dd58cb0752b613f24ed4b6372113e1d94168a6e7841016d9995f6de5844b928bf707553537abe3a887cf2ffdcf2a9badc08e2d1"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}]}]}, 0x1708}, 0x1, 0x0, 0x0, 0x8015}, 0x20008004) syz_emit_ethernet(0x96, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x8864, @tcp={{0x1d, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@ra={0x94, 0x4}, @end, @noop, @rr={0x7, 0x13, 0xc0, [@multicast2, @broadcast, @empty, @private=0xa010100]}, @timestamp={0x44, 0x8, 0x94, 0x0, 0xe, [0x8]}, @timestamp_addr={0x44, 0x2c, 0xb3, 0x1, 0x2, [{@multicast1, 0x3}, {@broadcast, 0x1}, {@broadcast, 0x1}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x24bb}]}, @lsrr={0x83, 0xf, 0xec, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1]}, @noop]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r14, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001cc0)={0x150, r13, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x2, 0x8}}}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x150}, 0x1, 0x0, 0x0, 0x40081}, 0x1) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d8"}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x40, r10, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x40}}, 0x0) 2.77156335s ago: executing program 2 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050010040000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800c9006c09"], 0x44}}, 0x0) 2.62538568s ago: executing program 2 (id=907): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0x0, &(0x7f0000008000)={0x77359400}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x43, 0xa0, 0xb8, 0x98, 0x1a0, 0x178, 0x178, 0x1a0, 0x178, 0x49, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x11}, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}}, @common=@ttl={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300), 0x51, 0x0, 0x49}, 0x3a0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) 2.211071959s ago: executing program 0 (id=908): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a800160008000c4009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.194510322s ago: executing program 1 (id=909): socket$inet6_sctp(0xa, 0x0, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x1ff) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) (async) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000600)="2501f71d330b07000000000000002bbe9196e06d9bd46973ff740219a971634887b4", 0x22, 0x0, 0x0, 0x0) (async, rerun: 32) recvfrom$inet6(r0, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000411204001351ee7d3c9bbd1200000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 2.129463223s ago: executing program 4 (id=910): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x4, [@ptr={0x1, 0x0, 0x0, 0x2, 0x4}, @union={0x2, 0x4, 0x0, 0x5, 0x0, 0x6, [{0xd, 0x1, 0xb}, {0x3, 0x5, 0x2}, {0x6, 0x1, 0x3}, {0x4, 0x4, 0xd6}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0xf, 0x6}, @struct={0x4, 0x3, 0x0, 0x4, 0x1, 0x8001, [{0xe, 0x4, 0x5}, {0x0, 0x5, 0xfffffff9}, {0xd, 0x3, 0x6}]}, @ptr={0xd}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0x7, 0x6}, {0x1, 0x8}]}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0xe, 0x30]}}, &(0x7f00000003c0)=""/226, 0xfc, 0xe2, 0x0, 0x7fff}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x48, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911206000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @broadcast]}, @end, @timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x12, "83dc61b1ce5707432dd0595dac60aef2"}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@private}, {@empty}, {@remote}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0xd, "82ee46f3c317e9defd568c"}, {0x0, 0x4, "8e28"}]}]}}}}}}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict, @func_proto, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x3a6f5491e0ad3b4f, 0x30]}}, 0x0, 0x4f}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r8}, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)={0x0, 0x0, 0x0, {0x0, 0xea60}}, 0x48}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x338, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CT={0x4}, @NFQA_MARK={0x8}, @NFQA_EXP={0x1d4, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0xf0, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8}]}, @NFQA_CT={0x14, 0xb, 0x0, 0x1, [@CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, @NFQA_PAYLOAD={0x28, 0xa, "7aaea608f5c14e96fe47a4756821e8870102eccfe6eac55e111608bc17ac938a00c09455"}, @NFQA_EXP={0xbc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}, @NFQA_PAYLOAD={0x40, 0xa, "8b2016dda45e7097df779561fee34819696dc72090787355d2bc9428dafc2cda9924bf65092f3d64c530b3d6df9ac562f18d997ab228124e9b06bb69"}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000005}, 0x8010) 1.926143373s ago: executing program 3 (id=911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)={&(0x7f0000004400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x20}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) (async) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x54, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x54}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x64, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r11, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000000) (async) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000400)=0xd2, &(0x7f0000000440)=0x4) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) sendto$inet(r12, &(0x7f0000000340)='\x00', 0x1, 0x4801, 0x0, 0x0) (async) sendto$inet(r12, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r12, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 1.923859478s ago: executing program 4 (id=912): r0 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000380)='>', 0x1) setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)={0x28, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000070402eeffffffffffffff002100", @ANYRESOCT=r7], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 1.869264649s ago: executing program 1 (id=913): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000280)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x2, 0x4, 0x6, 0x4, 0xffffffffffffffff, 0x8, '\x00', r1, r0, 0x5, 0x1000005, 0x1, 0xb}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000ac0)="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", 0x1000) (async) sendmmsg$inet(r7, &(0x7f0000005d40)=[{{&(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)}}], 0x2, 0x0) (async) write$binfmt_script(r6, &(0x7f0000000180), 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_macvtap\x00'}) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x5, '\x00', 0x0, r5, 0x0, 0x4, 0x5}, 0x48) (rerun: 64) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (async) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x4040800) setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a0080"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) (async) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000340)="07000000010000", 0x7) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) (async) sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10, 0x0}, 0x44840) 1.800332085s ago: executing program 3 (id=914): unshare(0x62040200) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001400)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r0, &(0x7f00000001c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="7cb1b47c843e16bb9a374614115a7a68f993c999c72c487d6167b6e603b322311d9a2b0220682da7653229b5d6ebc82232c57f02065fee315891c497c5cde285f350ad6396d8f7f6c9528b5b01827d00dbc5379c3a8484bdcd0a6b2d136f3b3d50d2090210fc789726d4413cecceb4a10be80761d1e470ad1af4faa5dd72665655695da15ce651b6e8fed4f04412a4455872e45b241900abf80340e81aad15896b4eba1dbae66d0339b9a80d4906b128f962cbf3d33a86c8d9bd9ee4c8c0cc7b5e7b4a40d32fed09e79de1ad9486ca00679a62b1dbac6f7bd41498e4b3e775f35e2a88b2ef66fbda12ecba20c122a0a50a0857444bd4", 0xf6}], 0x1, 0x0, 0x0, 0x44080}, 0x8810) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/109, 0x6d}], 0x2}}], 0x1, 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}}) 1.639045052s ago: executing program 2 (id=915): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000007000100000000000000ffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000710100010000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0xff, 0xea, &(0x7f00000003c0)=""/234, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xd, 0x70, 0x19b6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000680)=[{0x0, 0x5, 0x7, 0xa}, {0x5, 0x5, 0x5, 0x3}, {0x4, 0x2, 0x0, 0xa}, {0x5, 0x5, 0x4}, {0x5, 0x5, 0x0, 0xa}, {0x2, 0x5, 0x5, 0x2}, {0x5, 0x5, 0x0, 0xc}], 0x10, 0xf}, 0x90) close(r3) (async) close(r3) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={r4}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) (async) r7 = openat$cgroup_procs(r6, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) (async) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc2, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f000000c840)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x1, 0x45e8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100000, 0x3, 0x0, 0xe}, 0x48) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"/3571], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 1.463474536s ago: executing program 1 (id=916): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xff, @none}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x7f, @fixed}, 0xe) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x6c, r4, 0x213, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x83b1, 0x0) 1.447416522s ago: executing program 4 (id=917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050010040000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800c9006c09"], 0x44}}, 0x0) 1.255176199s ago: executing program 2 (id=918): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000050060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1.254957801s ago: executing program 0 (id=919): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f21e0dd037a3f08d3aaea2bc0000de", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002a00)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/207, 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/201, 0xc9}], 0x1}}], 0x2, 0x0, 0x0) 1.181246233s ago: executing program 4 (id=920): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2}, 0x18) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f00000016c0)=""/4096, &(0x7f0000000140)=0x1000) socket(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45600d2}) (fail_nth: 4) 1.051901763s ago: executing program 0 (id=921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@flushpolicy={0x38, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x21, {@in=@multicast1, @in6=@dev}}]}, 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000080)=0x4, 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xc8, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x138, 0x4c, 0x1a, 0x138, 0x73, 0x208, 0x258, 0x258, 0x208, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg2\x00', 'pim6reg0\x00'}, 0x0, 0x118, 0x138, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1000000, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2, @loopback, [], [], 'nr0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r4 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x3c, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x1a, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) socket(0x3, 0x5, 0xffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}}, 0x0) syz_emit_ethernet(0xfffffffffffffdd0, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0000000000000800451800700000000000019078ac1e0001ac1414aa05009078e00600e0450000000000000000730000ac1414aa640101018303000700535a67a6497ae9e1835a2f45443c000364010100fffffffdac1414bb00000000e000000100000000ac00000000000000000000000000e000000200000000000000"], 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="08000800070000000000000000004500002800000000002f9078ac1e0001ffffffff280022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="40f700000052240c"], 0xfdef) 675.164554ms ago: executing program 2 (id=922): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x58, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x58}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "957008"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x58, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x58}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r5, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "957008"}) (async) 641.694488ms ago: executing program 4 (id=923): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/33, 0x21}}], 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/33, 0x21}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x490, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x490, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r2, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x10000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x2}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x40400) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000810}, 0x4008000) r7 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) 480.923659ms ago: executing program 3 (id=924): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4ec, @empty, 0x1}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x7fffffff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @private0}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x12b, 0x2, 0x200, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYRES64=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x200000c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r11, 0x1, 0x2, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0xffff00fd}}}}, 0x30}}, 0x240840f0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x26e1, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000000)) write$cgroup_int(r13, &(0x7f0000000200), 0x44000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[]) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r11, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x226, 0x8, 0x4c2, 0x80}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16=r9, @ANYRESHEX=0x0], 0x14}, 0x1, 0xf000000}, 0x0) 368.960699ms ago: executing program 1 (id=925): clock_gettime(0x4, &(0x7f0000001700)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000580)={@val={0x1c}, @val={0x0, 0x5}, @ipv6=@udp={0x0, 0x6, "272cc3", 0xc, 0x11, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x42) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00%\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000000000000000000007000000000000000086dd"], 0x38}, 0x1, 0xf00}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x22, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001300)={r5, 0xfffc}, &(0x7f0000001340)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0xf1e, @loopback, 0x2, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB="44000000100001040400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES32=0x0, @ANYBLOB="e523ce5765ea2fb1f35f7f1a04815ee08984651fe8b748d3bf490bdbd775bb7e7a6b0298dd03d95e4de67373242bfc5ab677adccc9d560b62dbe8d36f97dec42a74294134499680ae2fcde90f9864731698d55da073f6c8b2b6faf4182206e25b16cf941ef8dfffaf17dc87915b5add84e811ce83e6e74dd9dd162ba985b2e9a05cd6df3cc5502939b"], 0x44}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x11, &(0x7f0000000140)=0x10001, 0x4) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvfrom(r8, &(0x7f0000000300)=""/4096, 0x1000, 0x12000, &(0x7f0000000140)=@x25, 0x80) 367.096136ms ago: executing program 4 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000240)}, 0x20) socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000780)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0xffffffcd, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x0) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000840)=@ctrl_frame=@rts={{}, {0x7}, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000a40)=ANY=[@ANYBLOB="b0000000080211000001080211f400f60702110000001000000002000000b7d912327fa84c92fc1f051acb2fd8e969ace32c5777d52e7bc46bb7554e9c314e011ef4b26c6d44a748320e147385ba59136463dcb47492933b212dd8863c771ff2b51a337faa61ff22965695493a5043a4325a9cc7f5a358bb8a3347d57435e695bc65c059577ed71dfcf5b74ffffadca559cc04a228298dc3a5f26daf0e5bff7bbeb75474c4e23a6497a6b42a61a62128846a"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void}, 0x27) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) getuid() sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000040a0102dc46a77f3e1075d76406631a42ef816a0000000000e6000000000000cbdb6dc57793f96dcd6b98a9fa5e055fa2d3967449523058f5450e82c9bbd05d0cd58d2486e70b0fcda28f6d214224da32fbc8db3ff144e9363667e0422915162c43782099aad75caf29980127374aca90a214d61ada3e08efd09fbde773b9984f6d8327a41bc600d1fdfaa28eb5f1a3adc0b9895a02cfb2d31a21a03331f1a774ba8570cefab29e93"], 0x14}}, 0x0) 278.120261ms ago: executing program 3 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) readv(0xffffffffffffffff, &(0x7f0000002bc0)=[{0x0}, {&(0x7f0000000680)=""/192, 0xc0}, {0x0}, {&(0x7f0000000840)=""/120, 0x78}, {&(0x7f00000008c0)=""/191, 0xbf}, {&(0x7f0000002b00)=""/184, 0xb8}], 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x2, 0xa, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) bind$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @mcast2, 0x8}}, 0x24) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x2, 0x5, 0x0, @remote, @rand_addr=' \x01\x00', 0x80, 0x20, 0x5e, 0x6}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @multicast2}, &(0x7f0000000300)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf25010000003c0002801c0001800800010004000200080001000000000008000100000000001c00018008000100050000000800010008000000080001000500000004000300040003006800080001002100000008000100190000000008000100060000000800010007000000080001000700000008000100040000001400018008000100040000000800010063b4dcc10c000180080001000000000004e60300730926a1c208610ae42e3674eb6ac9e57f809a57d92e6fea5d29e96a85b21bacd220cab65fcb3a5d37b300"/226], 0xc4}, 0x1, 0x0, 0x0, 0x8840}, 0x40) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000030000000000011907800000000000000000000010092aefaeb5e8000009078b679abd1fc19a3697b6b1e85613b"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000010000000000002000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f0000000bc0)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYRESDEC=r8, @ANYRES32=r7, @ANYRES8=r2, @ANYRES64=r6], 0x40}}, 0x0) 130.302072ms ago: executing program 0 (id=928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x0, 0xb}, 0x48) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 0s ago: executing program 3 (id=929): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x0, 0x4, 0x1, 0x0, 0xd}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0xfe27, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x3) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20058041, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r3, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000003740)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x525, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000002000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 74.295306][ T5214] cgroup: Unknown subsys name 'net' [ 74.444205][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.237782][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.212132][ C1] eth0: bad gso: type: 1, size: 1408 [ 79.862767][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.881527][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.891433][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.899972][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.902204][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.908401][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.916378][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.926007][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.931184][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.937125][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.944625][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.952727][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.958389][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.965503][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.979426][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.984630][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.994418][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.023953][ T4616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.032780][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.035367][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.041807][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.049095][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.056303][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.063281][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.070910][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.083915][ T56] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.084267][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.098478][ T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.108375][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.116691][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.756614][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 80.791433][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 80.898202][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 81.032116][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.039979][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.047536][ T5227] bridge_slave_0: entered allmulticast mode [ 81.056390][ T5227] bridge_slave_0: entered promiscuous mode [ 81.123443][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.130812][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.138321][ T5227] bridge_slave_1: entered allmulticast mode [ 81.146678][ T5227] bridge_slave_1: entered promiscuous mode [ 81.154517][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 81.166939][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 81.184352][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.191495][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.199193][ T5226] bridge_slave_0: entered allmulticast mode [ 81.207022][ T5226] bridge_slave_0: entered promiscuous mode [ 81.252023][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.260104][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.267924][ T5226] bridge_slave_1: entered allmulticast mode [ 81.275478][ T5226] bridge_slave_1: entered promiscuous mode [ 81.364904][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.377319][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.410909][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.418342][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.428552][ T5225] bridge_slave_0: entered allmulticast mode [ 81.435833][ T5225] bridge_slave_0: entered promiscuous mode [ 81.444567][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.451745][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.459086][ T5225] bridge_slave_1: entered allmulticast mode [ 81.466635][ T5225] bridge_slave_1: entered promiscuous mode [ 81.476615][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.489414][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.618507][ T5227] team0: Port device team_slave_0 added [ 81.628818][ T5227] team0: Port device team_slave_1 added [ 81.674721][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.687572][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.701014][ T5226] team0: Port device team_slave_0 added [ 81.720972][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.729199][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.737023][ T5239] bridge_slave_0: entered allmulticast mode [ 81.744982][ T5239] bridge_slave_0: entered promiscuous mode [ 81.752288][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.760303][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.767626][ T5224] bridge_slave_0: entered allmulticast mode [ 81.775211][ T5224] bridge_slave_0: entered promiscuous mode [ 81.809886][ T5226] team0: Port device team_slave_1 added [ 81.845504][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.852501][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.879368][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.891530][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.900746][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.908486][ T5239] bridge_slave_1: entered allmulticast mode [ 81.916529][ T5239] bridge_slave_1: entered promiscuous mode [ 81.937195][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.944521][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.952120][ T5224] bridge_slave_1: entered allmulticast mode [ 81.959533][ T5224] bridge_slave_1: entered promiscuous mode [ 81.987912][ T5225] team0: Port device team_slave_0 added [ 81.997676][ T5225] team0: Port device team_slave_1 added [ 82.017758][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.024842][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.051115][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.062299][ T5244] Bluetooth: hci0: command tx timeout [ 82.071021][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.078186][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.104291][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.134848][ T56] Bluetooth: hci1: command tx timeout [ 82.140996][ T5244] Bluetooth: hci2: command tx timeout [ 82.159937][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.167592][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.194217][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.213789][ T56] Bluetooth: hci4: command tx timeout [ 82.219662][ T5244] Bluetooth: hci3: command tx timeout [ 82.226956][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.239150][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.252110][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.294021][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.329445][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.336875][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.362942][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.375947][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.382927][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.409077][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.473923][ T5224] team0: Port device team_slave_0 added [ 82.503351][ T5226] hsr_slave_0: entered promiscuous mode [ 82.510765][ T5226] hsr_slave_1: entered promiscuous mode [ 82.524652][ T5227] hsr_slave_0: entered promiscuous mode [ 82.531147][ T5227] hsr_slave_1: entered promiscuous mode [ 82.538173][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.546989][ T5227] Cannot create hsr debugfs directory [ 82.556537][ T5239] team0: Port device team_slave_0 added [ 82.564733][ T5224] team0: Port device team_slave_1 added [ 82.598533][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.605672][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.632231][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.646449][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.653466][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.679499][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.692976][ T5239] team0: Port device team_slave_1 added [ 82.807888][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.815010][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.841842][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.900658][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.908115][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.936939][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.960438][ T5225] hsr_slave_0: entered promiscuous mode [ 82.968552][ T5225] hsr_slave_1: entered promiscuous mode [ 82.975184][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.982777][ T5225] Cannot create hsr debugfs directory [ 83.048275][ T5224] hsr_slave_0: entered promiscuous mode [ 83.057025][ T5224] hsr_slave_1: entered promiscuous mode [ 83.063541][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.071236][ T5224] Cannot create hsr debugfs directory [ 83.132817][ T5239] hsr_slave_0: entered promiscuous mode [ 83.140420][ T5239] hsr_slave_1: entered promiscuous mode [ 83.147124][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.154858][ T5239] Cannot create hsr debugfs directory [ 83.619847][ T5227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.632940][ T5227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.655313][ T5227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.681742][ T5227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.758845][ T5226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.772602][ T5226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.784115][ T5226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.798351][ T5226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.902022][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.924404][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.939346][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.967648][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.089257][ T5224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.118679][ T5224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.131245][ T5224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.139671][ T5244] Bluetooth: hci0: command tx timeout [ 84.152459][ T5224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.212415][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.219530][ T5244] Bluetooth: hci2: command tx timeout [ 84.219595][ T5244] Bluetooth: hci1: command tx timeout [ 84.295030][ T56] Bluetooth: hci3: command tx timeout [ 84.300600][ T56] Bluetooth: hci4: command tx timeout [ 84.329532][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.350152][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.373132][ T5239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.391829][ T5239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.429768][ T5239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.445718][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.453120][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.468200][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.475595][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.507111][ T5239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.538110][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.556696][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.581195][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.588487][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.638048][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.645231][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.706339][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.729476][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.768562][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.775898][ T5287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.812606][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.819830][ T5287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.844164][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.926221][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.933431][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.990460][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.997691][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.243056][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.302450][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.363018][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.385817][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.393153][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.492949][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.500356][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.515322][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.603115][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.659176][ T5227] veth0_vlan: entered promiscuous mode [ 85.702624][ T5239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.740473][ T5227] veth1_vlan: entered promiscuous mode [ 85.838648][ T5225] veth0_vlan: entered promiscuous mode [ 85.885535][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.977215][ T5225] veth1_vlan: entered promiscuous mode [ 86.017282][ T5227] veth0_macvtap: entered promiscuous mode [ 86.078416][ T5227] veth1_macvtap: entered promiscuous mode [ 86.120946][ T5225] veth0_macvtap: entered promiscuous mode [ 86.133261][ T5225] veth1_macvtap: entered promiscuous mode [ 86.178498][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.204666][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.215258][ T56] Bluetooth: hci0: command tx timeout [ 86.219824][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.252212][ T5224] veth0_vlan: entered promiscuous mode [ 86.263510][ T5227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.272859][ T5227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.282131][ T5227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.291292][ T5227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.294132][ T56] Bluetooth: hci1: command tx timeout [ 86.305729][ T5244] Bluetooth: hci2: command tx timeout [ 86.332545][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.344238][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.357076][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.374414][ T5244] Bluetooth: hci3: command tx timeout [ 86.380094][ T56] Bluetooth: hci4: command tx timeout [ 86.387455][ T5224] veth1_vlan: entered promiscuous mode [ 86.409685][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.420735][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.432974][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.456154][ T5226] veth0_vlan: entered promiscuous mode [ 86.472287][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.481455][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.490632][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.499729][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.604176][ T5239] veth0_vlan: entered promiscuous mode [ 86.643372][ T5224] veth0_macvtap: entered promiscuous mode [ 86.668049][ T5226] veth1_vlan: entered promiscuous mode [ 86.726752][ T5239] veth1_vlan: entered promiscuous mode [ 86.735752][ T5224] veth1_macvtap: entered promiscuous mode [ 86.745840][ T2566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.760939][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.773130][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.777199][ T2566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.783389][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.801538][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.813510][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.826329][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.836968][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.847492][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.858287][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.870065][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.912012][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.924635][ T5224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.933392][ T5224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.944238][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.952969][ T5224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.961999][ T5224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.005320][ T5226] veth0_macvtap: entered promiscuous mode [ 87.024718][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.032596][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.051527][ T5226] veth1_macvtap: entered promiscuous mode [ 87.152592][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.158781][ T5239] veth0_macvtap: entered promiscuous mode [ 87.172324][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.204346][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.228226][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.243990][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.266781][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.282874][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.294530][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.309342][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.350351][ T5239] veth1_macvtap: entered promiscuous mode [ 87.385771][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.423793][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.457015][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.468034][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.478383][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.489408][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.506325][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.611028][ T5226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.630334][ T5226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.642220][ T5226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.673858][ T5226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.701429][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.734886][ T5318] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.751502][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.761858][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.773869][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.784811][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.796241][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.806550][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.830742][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.850684][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.885085][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.916962][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.932096][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.959809][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.980296][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.991282][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.007538][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.027696][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.052875][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.073830][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.085860][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.123839][ T5239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.144781][ T5239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.183750][ T5239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.192623][ T5239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.281113][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.295571][ T56] Bluetooth: hci0: command tx timeout [ 88.298421][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.374347][ T56] Bluetooth: hci1: command tx timeout [ 88.378517][ T5244] Bluetooth: hci2: command tx timeout [ 88.455396][ T5244] Bluetooth: hci4: command tx timeout [ 88.457943][ T56] Bluetooth: hci3: command tx timeout [ 88.476603][ T5324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.543070][ T2566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.570566][ T2566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.668146][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.697782][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.722513][ T2584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.742613][ T2584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.793287][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.818095][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.858496][ T5331] pimreg: entered allmulticast mode [ 89.017643][ T5336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 89.610272][ T5349] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 90.105859][ T8] IPVS: starting estimator thread 0... [ 90.234038][ T5371] IPVS: using max 16 ests per chain, 38400 per kthread [ 90.544759][ T5391] xt_ecn: cannot match TCP bits for non-tcp packets [ 90.704705][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 91.599632][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 91.802494][ T5449] netlink: 'syz.1.28': attribute type 21 has an invalid length. [ 91.826179][ T5449] netlink: 156 bytes leftover after parsing attributes in process `syz.1.28'. [ 92.010353][ T5456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29'. [ 92.323719][ T60] cfg80211: failed to load regulatory.db [ 92.695383][ T5483] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.723535][ T5479] Zero length message leads to an empty skb [ 93.849488][ T5528] netlink: 'syz.0.49': attribute type 21 has an invalid length. [ 93.863132][ T5528] netlink: 156 bytes leftover after parsing attributes in process `syz.0.49'. [ 94.547846][ T5559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.59'. [ 94.770289][ T5567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.60'. [ 94.812306][ T5567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.60'. [ 94.842493][ T5569] netlink: 288 bytes leftover after parsing attributes in process `syz.1.60'. [ 95.059268][ T5580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.65'. [ 95.224048][ T5582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.64'. [ 95.463642][ T5598] tipc: Started in network mode [ 95.468723][ T5598] tipc: Node identity ffffffff, cluster identity 4711 [ 95.538794][ T5598] tipc: Node number set to 4294967295 [ 95.604688][ T5605] netlink: 'syz.2.71': attribute type 21 has an invalid length. [ 95.642841][ T5605] netlink: 156 bytes leftover after parsing attributes in process `syz.2.71'. [ 95.739294][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.73'. [ 96.268617][ C1] eth0: bad gso: type: 1, size: 1408 [ 97.250561][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 97.269543][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 97.295742][ T5660] vlan2: entered promiscuous mode [ 97.301411][ T5660] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 97.632942][ T5673] netlink: 'syz.0.92': attribute type 21 has an invalid length. [ 98.247587][ T5696] netlink: 'syz.4.97': attribute type 10 has an invalid length. [ 98.384593][ T5698] tipc: Enabled bearer , priority 0 [ 98.467361][ T5697] tipc: Disabling bearer [ 98.611295][ T5707] netlink: 'syz.0.104': attribute type 19 has an invalid length. [ 99.604632][ T5742] __nla_validate_parse: 8 callbacks suppressed [ 99.604654][ T5742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.114'. [ 99.616918][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 99.984393][ T5750] tipc: Started in network mode [ 99.989348][ T5750] tipc: Node identity 86c9957e0008, cluster identity 4711 [ 100.034809][ T5750] tipc: Enabled bearer , priority 0 [ 100.139071][ T5747] tipc: Disabling bearer [ 100.221985][ T5759] netlink: 508 bytes leftover after parsing attributes in process `syz.0.120'. [ 100.293115][ T5759] warning: `syz.0.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.400993][ T5767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.120'. [ 100.478424][ T5770] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 100.629887][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 100.808053][ T5778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 101.068860][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 101.083059][ T5795] FAULT_INJECTION: forcing a failure. [ 101.083059][ T5795] name failslab, interval 1, probability 0, space 0, times 1 [ 101.110095][ T5795] CPU: 1 PID: 5795 Comm: syz.3.129 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 101.119901][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 101.130014][ T5795] Call Trace: [ 101.133370][ T5795] [ 101.136572][ T5795] dump_stack_lvl+0x241/0x360 [ 101.141292][ T5795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.146503][ T5795] ? __pfx__printk+0x10/0x10 [ 101.151110][ T5795] ? netlink_insert+0x10b7/0x14b0 [ 101.156157][ T5795] should_fail_ex+0x3b0/0x4e0 [ 101.160848][ T5795] ? __alloc_skb+0x1c3/0x440 [ 101.165454][ T5795] should_failslab+0x9/0x20 [ 101.169975][ T5795] kmem_cache_alloc_node_noprof+0x71/0x320 [ 101.175807][ T5795] __alloc_skb+0x1c3/0x440 [ 101.180258][ T5795] ? __pfx___alloc_skb+0x10/0x10 [ 101.185225][ T5795] ? netlink_autobind+0xd6/0x2f0 [ 101.190273][ T5795] ? netlink_autobind+0x2b0/0x2f0 [ 101.195315][ T5795] netlink_sendmsg+0x638/0xcb0 [ 101.200261][ T5795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.205586][ T5795] ? __import_iovec+0x536/0x820 [ 101.210500][ T5795] ? aa_sock_msg_perm+0x91/0x160 [ 101.215494][ T5795] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 101.220828][ T5795] ? security_socket_sendmsg+0x87/0xb0 [ 101.226353][ T5795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.231683][ T5795] __sock_sendmsg+0x221/0x270 [ 101.236384][ T5795] ____sys_sendmsg+0x525/0x7d0 [ 101.241177][ T5795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.246500][ T5795] __sys_sendmsg+0x2b0/0x3a0 [ 101.251111][ T5795] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.256258][ T5795] ? vfs_write+0x7c4/0xc90 [ 101.260751][ T5795] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.267121][ T5795] ? do_syscall_64+0x100/0x230 [ 101.271958][ T5795] ? do_syscall_64+0xb6/0x230 [ 101.276660][ T5795] do_syscall_64+0xf3/0x230 [ 101.281183][ T5795] ? clear_bhb_loop+0x35/0x90 [ 101.285876][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.291795][ T5795] RIP: 0033:0x7f363d775f19 [ 101.296228][ T5795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.315871][ T5795] RSP: 002b:00007f363e5f4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.324303][ T5795] RAX: ffffffffffffffda RBX: 00007f363d905f60 RCX: 00007f363d775f19 [ 101.332290][ T5795] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 101.340268][ T5795] RBP: 00007f363e5f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.348390][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.356395][ T5795] R13: 000000000000000b R14: 00007f363d905f60 R15: 00007fff90561e48 [ 101.364392][ T5795] [ 101.582925][ T5802] netlink: 'syz.1.130': attribute type 21 has an invalid length. [ 101.679703][ T5804] tipc: Enabled bearer , priority 0 [ 101.731437][ T5803] tipc: Disabling bearer [ 102.504298][ T5824] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.139'. [ 102.565920][ T5824] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 102.775333][ T5833] openvswitch: netlink: Key type 7951 is out of range max 32 [ 102.840739][ T5838] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.140'. [ 102.912341][ T5839] tipc: Enabled bearer , priority 0 [ 102.945116][ T5837] tipc: Disabling bearer [ 102.973249][ T5842] xt_NFQUEUE: number of total queues is 0 [ 103.182056][ T5852] xt_TPROXY: Can be used only with -p tcp or -p udp [ 103.279822][ T5856] netlink: 'syz.2.149': attribute type 21 has an invalid length. [ 103.517916][ T5860] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 103.785437][ T5865] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.154'. [ 103.803839][ T5865] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 104.039890][ T5875] tipc: Started in network mode [ 104.062504][ T5875] tipc: Node identity 123365f53ef6, cluster identity 4711 [ 104.093902][ T5875] tipc: Enabled bearer , priority 0 [ 104.169561][ T5874] tipc: Disabling bearer [ 104.482395][ T5884] syzkaller0: entered promiscuous mode [ 104.496760][ T5884] syzkaller0: entered allmulticast mode [ 104.582721][ T5884] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.161'. [ 104.626506][ T11] syzkaller0: tun_net_xmit 48 [ 104.813508][ T5910] netlink: 'syz.1.167': attribute type 11 has an invalid length. [ 105.014898][ C1] eth0: bad gso: type: 1, size: 1408 [ 105.029522][ C1] eth0: bad gso: type: 1, size: 1408 [ 106.420697][ T5924] netlink: 'syz.4.170': attribute type 21 has an invalid length. [ 106.434734][ T5924] netlink: 'syz.4.170': attribute type 20 has an invalid length. [ 106.463920][ T5924] netlink: 'syz.4.170': attribute type 4 has an invalid length. [ 106.482745][ T5924] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.573825][ T5939] tipc: Enabling of bearer rejected, failed to enable media [ 106.741883][ T5942] bridge0: entered promiscuous mode [ 106.755454][ T5944] netlink: 'syz.2.175': attribute type 21 has an invalid length. [ 106.759788][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.771908][ T5944] netlink: 156 bytes leftover after parsing attributes in process `syz.2.175'. [ 106.790327][ T5941] bridge0: left promiscuous mode [ 106.825522][ T5952] syz.0.177[5952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.825724][ T5952] syz.0.177[5952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.346470][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 107.414767][ T5969] netlink: 'syz.3.183': attribute type 21 has an invalid length. [ 107.445067][ T5969] netlink: 'syz.3.183': attribute type 20 has an invalid length. [ 107.473701][ T5969] netlink: 'syz.3.183': attribute type 4 has an invalid length. [ 107.503694][ T5969] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.552563][ T5979] tipc: Enabled bearer , priority 0 [ 107.611985][ T5983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.188'. [ 107.756876][ T5974] syzkaller0: entered promiscuous mode [ 107.762432][ T5974] syzkaller0: entered allmulticast mode [ 107.779766][ T5988] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.185'. [ 107.820787][ T5404] syzkaller0: tun_net_xmit 48 [ 107.840144][ T5978] tipc: Disabling bearer [ 108.045797][ T5996] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 108.148147][ T5996] team0: Port device team_slave_0 removed [ 110.319307][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 110.552933][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 110.600853][ T6042] netlink: 'syz.3.200': attribute type 21 has an invalid length. [ 110.627865][ T6042] netlink: 'syz.3.200': attribute type 20 has an invalid length. [ 110.658441][ T6042] netlink: 'syz.3.200': attribute type 4 has an invalid length. [ 110.732637][ T6051] tipc: Started in network mode [ 110.758606][ T6051] tipc: Node identity 6e310d5d5ee4, cluster identity 4711 [ 110.809952][ T6051] tipc: Enabled bearer , priority 0 [ 110.847395][ T6049] tipc: Disabling bearer [ 111.120883][ T6062] netlink: 'syz.2.206': attribute type 25 has an invalid length. [ 111.159368][ T6062] netlink: 'syz.2.206': attribute type 7 has an invalid length. [ 111.245700][ T6060] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.206'. [ 111.522407][ T6077] Illegal XDP return value 4294967274 on prog (id 66) dev N/A, expect packet loss! [ 112.090381][ T6102] tipc: Started in network mode [ 112.094400][ T6100] ax25_connect(): syz.4.216 uses autobind, please contact jreuter@yaina.de [ 112.103357][ T6102] tipc: Node identity 8a08d5b342b, cluster identity 4711 [ 112.179310][ T6102] tipc: Enabled bearer , priority 0 [ 112.276237][ T6101] tipc: Disabling bearer [ 112.446030][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 112.556167][ T6123] raw_sendmsg: syz.2.223 forgot to set AF_INET. Fix it! [ 112.596784][ T6118] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 112.646619][ T6118] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.677047][ T6118] bond0: (slave team0): Enslaving as an active interface with an up link [ 112.772027][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 112.798886][ T6135] netlink: 'syz.1.224': attribute type 15 has an invalid length. [ 112.850908][ T6135] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 112.860545][ T6135] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 112.869577][ T6135] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 112.878674][ T6135] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 112.894948][ T6135] vxlan0: entered promiscuous mode [ 113.372126][ T6158] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 113.523651][ T6164] tipc: Enabled bearer , priority 0 [ 113.590077][ T6162] tipc: Disabling bearer [ 113.641268][ T6169] netlink: 'syz.3.235': attribute type 6 has an invalid length. [ 113.710670][ T6172] syz.4.237[6172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.710904][ T6172] syz.4.237[6172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.787518][ T6172] syz.4.237[6172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.804124][ T6172] syz.4.237[6172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.100182][ T6178] veth1_macvtap: left promiscuous mode [ 114.376260][ T6187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.242'. [ 115.231299][ T6221] tipc: Enabled bearer , priority 0 [ 115.311363][ T6219] tipc: Disabling bearer [ 115.429523][ T6230] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 115.742810][ T6248] openvswitch: netlink: Message has 16 unknown bytes. [ 115.972593][ T6240] netlink: 56 bytes leftover after parsing attributes in process `syz.3.257'. [ 116.000424][ T6255] veth1_macvtap: left promiscuous mode [ 116.441428][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.264'. [ 116.696410][ T6284] tipc: Enabled bearer , priority 0 [ 116.774722][ T6274] tipc: Disabling bearer [ 117.137932][ T6287] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 117.587408][ T6294] netlink: 'syz.0.270': attribute type 4 has an invalid length. [ 117.611414][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.630857][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.640853][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.661310][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.661967][ T6294] netlink: 'syz.0.270': attribute type 4 has an invalid length. [ 117.692893][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.703934][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.738253][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 117.817708][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.852883][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 118.064205][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.199780][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.331879][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.862443][ T11] bridge_slave_1: left allmulticast mode [ 118.879910][ T11] bridge_slave_1: left promiscuous mode [ 118.904118][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.959690][ T11] bridge_slave_0: left allmulticast mode [ 118.972767][ T11] bridge_slave_0: left promiscuous mode [ 118.988941][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.642009][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.663449][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.693432][ T11] bond0 (unregistering): Released all slaves [ 119.735601][ T56] Bluetooth: hci4: command tx timeout [ 119.757805][ T6299] chnl_net:caif_netlink_parms(): no params data found [ 119.791787][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 119.839390][ T6334] tipc: Enabled bearer , priority 0 [ 119.936607][ T6328] tipc: Disabling bearer [ 119.976221][ T11] tipc: Left network mode [ 120.023307][ T6343] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 120.324291][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.332059][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.339435][ T6299] bridge_slave_0: entered allmulticast mode [ 120.355192][ T6299] bridge_slave_0: entered promiscuous mode [ 120.437537][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.465526][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.502150][ T6299] bridge_slave_1: entered allmulticast mode [ 120.521422][ T6299] bridge_slave_1: entered promiscuous mode [ 120.646014][ T6358] netlink: 'syz.0.281': attribute type 34 has an invalid length. [ 120.921425][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 121.054304][ T6368] unknown channel width for channel at 909000KHz? [ 121.071281][ T6368] unknown channel width for channel at 909000KHz? [ 121.122492][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.172690][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.486434][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 121.675652][ T11] hsr_slave_0: left promiscuous mode [ 121.690876][ T11] hsr_slave_1: left promiscuous mode [ 121.699178][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.711013][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.729925][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.746110][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.789583][ T11] veth0_macvtap: left promiscuous mode [ 121.795916][ T11] veth1_vlan: left promiscuous mode [ 121.801640][ T11] veth0_vlan: left promiscuous mode [ 121.814438][ T56] Bluetooth: hci4: command tx timeout [ 122.600858][ T11] team0 (unregistering): Port device team_slave_1 removed [ 122.648625][ T11] team0 (unregistering): Port device team_slave_0 removed [ 123.262106][ T6299] team0: Port device team_slave_0 added [ 123.274045][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.287'. [ 123.287291][ T6299] team0: Port device team_slave_1 added [ 123.471999][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.513603][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.578383][ T6299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.603073][ T6406] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 123.626298][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.649739][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.709608][ T6299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.746604][ T6408] tipc: Enabled bearer , priority 0 [ 123.893692][ T56] Bluetooth: hci4: command tx timeout [ 123.932397][ T6299] hsr_slave_0: entered promiscuous mode [ 123.942497][ T6299] hsr_slave_1: entered promiscuous mode [ 123.950607][ T6299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.959558][ T6299] Cannot create hsr debugfs directory [ 123.970449][ T6402] tipc: Disabling bearer [ 124.455819][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.293'. [ 124.478632][ T6426] netlink: 'syz.3.293': attribute type 1 has an invalid length. [ 124.823614][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 124.843247][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.295'. [ 124.906524][ T6446] geneve2: entered promiscuous mode [ 124.932572][ T6446] geneve2: entered allmulticast mode [ 125.328299][ T6462] Bluetooth: MGMT ver 1.23 [ 125.467820][ T6299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.518391][ T6299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.599856][ T6299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.655353][ T6299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.697733][ T6473] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 125.717397][ T6472] tipc: Enabled bearer , priority 0 [ 125.761901][ T6470] tipc: Disabling bearer [ 125.973803][ T56] Bluetooth: hci4: command tx timeout [ 126.005316][ T6477] netlink: 'syz.3.302': attribute type 9 has an invalid length. [ 126.029372][ T6484] vxcan1: tx address claim with dlc 1 [ 126.063481][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.118640][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.174866][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.182169][ T5287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.258555][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.265869][ T5287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.341487][ T6493] netlink: 'syz.3.306': attribute type 21 has an invalid length. [ 126.393979][ T6493] netlink: 156 bytes leftover after parsing attributes in process `syz.3.306'. [ 127.015637][ T6515] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 127.066821][ T6520] tipc: Enabled bearer , priority 0 [ 127.248861][ T6519] tipc: Disabling bearer [ 127.353007][ T6538] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.316'. [ 127.439025][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.522616][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 127.634591][ T6536] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.316'. [ 127.661562][ T6299] veth0_vlan: entered promiscuous mode [ 127.806522][ T6299] veth1_vlan: entered promiscuous mode [ 128.001322][ T6299] veth0_macvtap: entered promiscuous mode [ 128.056700][ T6299] veth1_macvtap: entered promiscuous mode [ 128.092269][ C1] eth0: bad gso: type: 1, size: 1408 [ 128.152283][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.173663][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.211078][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.249443][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.270381][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.302628][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.313881][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.325452][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.337339][ T6569] netlink: 'syz.1.322': attribute type 21 has an invalid length. [ 128.370528][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.413040][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.449169][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.480898][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.517016][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.540230][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.561493][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.580618][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.599815][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.619666][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.641493][ T6299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.655668][ T6299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.678029][ T6579] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 128.692686][ T6299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.714334][ T6299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.808097][ T6577] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.324'. [ 128.867174][ T6587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.326'. [ 129.053870][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.091795][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.148642][ T6595] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 129.309540][ T6593] syzkaller0: entered promiscuous mode [ 129.329184][ T6603] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.328'. [ 129.344000][ T6593] syzkaller0: entered allmulticast mode [ 129.388024][ T5403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.433799][ T5403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.383837][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.331'. [ 131.408762][ T6655] netlink: 'syz.3.335': attribute type 21 has an invalid length. [ 131.436481][ T6655] netlink: 156 bytes leftover after parsing attributes in process `syz.3.335'. [ 131.554761][ T6659] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 131.906472][ T6681] tipc: Enabled bearer , priority 0 [ 132.022294][ T6673] tipc: Disabling bearer [ 132.514364][ T6708] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 132.745540][ T6720] Cannot find add_set index 0 as target [ 132.770147][ T6720] netlink: 'syz.0.355': attribute type 21 has an invalid length. [ 132.798873][ T6720] netlink: 132 bytes leftover after parsing attributes in process `syz.0.355'. [ 132.858258][ T6731] tipc: Started in network mode [ 132.863212][ T6731] tipc: Node identity 2248c93455b, cluster identity 4711 [ 132.902392][ T6731] tipc: Enabled bearer , priority 0 [ 132.997294][ T6723] tipc: Disabling bearer [ 133.021660][ T6739] Bluetooth: MGMT ver 1.23 [ 133.258482][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.265916][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.336489][ T6759] netlink: 'syz.0.364': attribute type 15 has an invalid length. [ 134.251508][ T6786] tipc: Enabling of bearer rejected, failed to enable media [ 134.340773][ T6792] trusted_key: syz.1.374 sent an empty control message without MSG_MORE. [ 134.385781][ T6796] netlink: 'syz.2.376': attribute type 4 has an invalid length. [ 134.392611][ T6794] tipc: Enabled bearer , priority 0 [ 134.409382][ T6796] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.376'. [ 134.434653][ T6793] tipc: Disabling bearer [ 134.499418][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.376'. [ 134.529788][ T6796] vlan1: entered promiscuous mode [ 134.576205][ T6798] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 134.598166][ T6798] macsec1: entered promiscuous mode [ 134.623925][ T6798] macsec1: entered allmulticast mode [ 134.629444][ T6798] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 134.647127][ T6798] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 134.664307][ T6798] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 134.711777][ T6795] vlan1: left promiscuous mode [ 134.864987][ T6812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.380'. [ 134.928340][ T6814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.972459][ T6819] FAULT_INJECTION: forcing a failure. [ 134.972459][ T6819] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.984838][ T6814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.993368][ T6819] CPU: 1 PID: 6819 Comm: syz.4.384 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 135.005225][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 135.016017][ T6819] Call Trace: [ 135.019333][ T6819] [ 135.022302][ T6819] dump_stack_lvl+0x241/0x360 [ 135.027028][ T6819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.032290][ T6819] ? __pfx__printk+0x10/0x10 [ 135.036936][ T6819] should_fail_ex+0x3b0/0x4e0 [ 135.041659][ T6819] _copy_from_user+0x2f/0xe0 [ 135.046306][ T6819] move_addr_to_kernel+0x82/0x150 [ 135.051375][ T6819] __sys_sendto+0x2a3/0x4f0 [ 135.055918][ T6819] ? __pfx___sys_sendto+0x10/0x10 [ 135.061013][ T6819] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.067129][ T6819] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.073605][ T6819] __x64_sys_sendto+0xde/0x100 [ 135.078436][ T6819] do_syscall_64+0xf3/0x230 [ 135.082995][ T6819] ? clear_bhb_loop+0x35/0x90 [ 135.087720][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.093656][ T6819] RIP: 0033:0x7f28bf575f19 [ 135.098130][ T6819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.117799][ T6819] RSP: 002b:00007f28c037a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 135.126274][ T6819] RAX: ffffffffffffffda RBX: 00007f28bf705f60 RCX: 00007f28bf575f19 [ 135.134294][ T6819] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 135.142360][ T6819] RBP: 00007f28c037a0a0 R08: 0000000020000040 R09: 0000000000000010 [ 135.150386][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.158402][ T6819] R13: 000000000000000b R14: 00007f28bf705f60 R15: 00007ffd7bb53e38 [ 135.166436][ T6819] [ 135.233859][ T6826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.433253][ T6835] tipc: Enabled bearer , priority 0 [ 135.449878][ T6834] tipc: Disabling bearer [ 135.609394][ T6839] netlink: 'syz.1.391': attribute type 4 has an invalid length. [ 135.619650][ T6839] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.391'. [ 135.625853][ T6837] syzkaller0: entered promiscuous mode [ 135.636025][ T6837] syzkaller0: entered allmulticast mode [ 135.646342][ T35] syzkaller0: tun_net_xmit 48 [ 135.653363][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 135.657316][ T6837] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.390'. [ 135.694756][ T6839] vlan1: entered promiscuous mode [ 135.988169][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 137.289027][ T6838] vlan1: left promiscuous mode [ 137.322026][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 137.351952][ T6854] bridge_slave_1: left allmulticast mode [ 137.370169][ T6854] bridge_slave_1: left promiscuous mode [ 137.394664][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.438899][ T6854] bridge_slave_0: left allmulticast mode [ 137.463637][ T6854] bridge_slave_0: left promiscuous mode [ 137.484511][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.666780][ T6855] netlink: 'syz.3.394': attribute type 4 has an invalid length. [ 137.685876][ T6852] netlink: 'syz.3.394': attribute type 4 has an invalid length. [ 137.716822][ T6860] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 137.761607][ T6870] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 137.810984][ T6870] tipc: Enabled bearer , priority 10 [ 137.882658][ T6878] tipc: Enabled bearer , priority 0 [ 137.988281][ T6877] tipc: Disabling bearer [ 138.012660][ T6883] netlink: 47 bytes leftover after parsing attributes in process `syz.1.402'. [ 138.159311][ T6888] FAULT_INJECTION: forcing a failure. [ 138.159311][ T6888] name failslab, interval 1, probability 0, space 0, times 0 [ 138.172534][ T6888] CPU: 1 PID: 6888 Comm: syz.2.403 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 138.182211][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 138.192289][ T6888] Call Trace: [ 138.195580][ T6888] [ 138.198519][ T6888] dump_stack_lvl+0x241/0x360 [ 138.203206][ T6888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.208427][ T6888] ? __pfx__printk+0x10/0x10 [ 138.213039][ T6888] ? do_raw_spin_lock+0x14f/0x370 [ 138.218095][ T6888] should_fail_ex+0x3b0/0x4e0 [ 138.222790][ T6888] ? sctp_get_port_local+0x78e/0x1740 [ 138.228180][ T6888] should_failslab+0x9/0x20 [ 138.232719][ T6888] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 138.238146][ T6888] sctp_get_port_local+0x78e/0x1740 [ 138.243380][ T6888] ? __pfx_lock_release+0x10/0x10 [ 138.248436][ T6888] ? __pfx_sctp_get_port_local+0x10/0x10 [ 138.254075][ T6888] ? sctp_bind_addr_match+0x295/0x2b0 [ 138.259482][ T6888] sctp_do_bind+0x513/0x950 [ 138.264014][ T6888] sctp_connect_new_asoc+0x277/0x6c0 [ 138.269314][ T6888] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 138.275145][ T6888] ? sctp_sendmsg+0xbb9/0x3520 [ 138.280039][ T6888] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 138.285594][ T6888] ? security_sctp_bind_connect+0x90/0xb0 [ 138.291346][ T6888] sctp_sendmsg+0x219a/0x3520 [ 138.296071][ T6888] ? __pfx_sctp_sendmsg+0x10/0x10 [ 138.301172][ T6888] ? __pfx_aa_sk_perm+0x10/0x10 [ 138.306040][ T6888] ? inet_sendmsg+0x330/0x390 [ 138.310739][ T6888] __sock_sendmsg+0x1a6/0x270 [ 138.315446][ T6888] __sys_sendto+0x3a4/0x4f0 [ 138.319998][ T6888] ? __pfx___sys_sendto+0x10/0x10 [ 138.325097][ T6888] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.331125][ T6888] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.337502][ T6888] __x64_sys_sendto+0xde/0x100 [ 138.342311][ T6888] do_syscall_64+0xf3/0x230 [ 138.346834][ T6888] ? clear_bhb_loop+0x35/0x90 [ 138.351525][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.357426][ T6888] RIP: 0033:0x7f1cff375f19 [ 138.361846][ T6888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.381551][ T6888] RSP: 002b:00007f1d001f6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 138.389983][ T6888] RAX: ffffffffffffffda RBX: 00007f1cff505f60 RCX: 00007f1cff375f19 [ 138.397964][ T6888] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 138.405942][ T6888] RBP: 00007f1d001f60a0 R08: 0000000020000040 R09: 0000000000000010 [ 138.413916][ T6888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.421920][ T6888] R13: 000000000000000b R14: 00007f1cff505f60 R15: 00007ffc05386648 [ 138.429923][ T6888] [ 138.581415][ T6897] netlink: 'syz.0.405': attribute type 4 has an invalid length. [ 138.608848][ T6897] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.405'. [ 138.630307][ T6897] vlan1: entered promiscuous mode [ 138.654072][ T6895] vlan1: left promiscuous mode [ 138.845331][ T60] tipc: Node number set to 751134197 [ 138.949267][ T6906] syzkaller0: entered promiscuous mode [ 138.958087][ T6906] syzkaller0: entered allmulticast mode [ 138.977961][ T12] syzkaller0: tun_net_xmit 48 [ 139.295423][ T6923] FAULT_INJECTION: forcing a failure. [ 139.295423][ T6923] name failslab, interval 1, probability 0, space 0, times 0 [ 139.333963][ T6923] CPU: 1 PID: 6923 Comm: syz.2.412 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 139.343655][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 139.353804][ T6923] Call Trace: [ 139.357103][ T6923] [ 139.360040][ T6923] dump_stack_lvl+0x241/0x360 [ 139.364765][ T6923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.370069][ T6923] ? __pfx__printk+0x10/0x10 [ 139.374669][ T6923] ? netlink_insert+0x10b7/0x14b0 [ 139.379703][ T6923] should_fail_ex+0x3b0/0x4e0 [ 139.384406][ T6923] ? __alloc_skb+0x1c3/0x440 [ 139.389011][ T6923] should_failslab+0x9/0x20 [ 139.393527][ T6923] kmem_cache_alloc_node_noprof+0x71/0x320 [ 139.399363][ T6923] __alloc_skb+0x1c3/0x440 [ 139.403795][ T6923] ? __pfx___alloc_skb+0x10/0x10 [ 139.408743][ T6923] ? netlink_autobind+0xd6/0x2f0 [ 139.413689][ T6923] ? netlink_autobind+0x2b0/0x2f0 [ 139.418725][ T6923] netlink_sendmsg+0x638/0xcb0 [ 139.423507][ T6923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.428809][ T6923] ? __import_iovec+0x536/0x820 [ 139.433683][ T6923] ? aa_sock_msg_perm+0x91/0x160 [ 139.438641][ T6923] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 139.443938][ T6923] ? security_socket_sendmsg+0x87/0xb0 [ 139.449424][ T6923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.454720][ T6923] __sock_sendmsg+0x221/0x270 [ 139.459409][ T6923] ____sys_sendmsg+0x525/0x7d0 [ 139.464200][ T6923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.469520][ T6923] __sys_sendmsg+0x2b0/0x3a0 [ 139.474219][ T6923] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.479354][ T6923] ? vfs_write+0x7c4/0xc90 [ 139.483815][ T6923] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.490177][ T6923] ? do_syscall_64+0x100/0x230 [ 139.494954][ T6923] ? do_syscall_64+0xb6/0x230 [ 139.499642][ T6923] do_syscall_64+0xf3/0x230 [ 139.504155][ T6923] ? clear_bhb_loop+0x35/0x90 [ 139.508870][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.514792][ T6923] RIP: 0033:0x7f1cff375f19 [ 139.519229][ T6923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.538856][ T6923] RSP: 002b:00007f1d001f6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.547287][ T6923] RAX: ffffffffffffffda RBX: 00007f1cff505f60 RCX: 00007f1cff375f19 [ 139.555270][ T6923] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 139.563247][ T6923] RBP: 00007f1d001f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.571237][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.579222][ T6923] R13: 000000000000000b R14: 00007f1cff505f60 R15: 00007ffc05386648 [ 139.587325][ T6923] [ 140.888333][ T6933] tipc: Enabled bearer , priority 0 [ 141.054525][ T6943] netlink: 'syz.3.417': attribute type 4 has an invalid length. [ 141.085720][ T6943] __nla_validate_parse: 2 callbacks suppressed [ 141.085741][ T6943] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.417'. [ 141.125492][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 141.157812][ T6943] vlan1: entered promiscuous mode [ 141.162692][ T6953] FAULT_INJECTION: forcing a failure. [ 141.162692][ T6953] name failslab, interval 1, probability 0, space 0, times 0 [ 141.169871][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 141.185072][ T6953] CPU: 0 PID: 6953 Comm: syz.2.421 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 141.185104][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 141.185118][ T6953] Call Trace: [ 141.185128][ T6953] [ 141.185138][ T6953] dump_stack_lvl+0x241/0x360 [ 141.185173][ T6953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.185198][ T6953] ? __pfx__printk+0x10/0x10 [ 141.185226][ T6953] ? sctp_get_port_local+0xe13/0x1740 [ 141.185249][ T6953] ? __pfx_lock_release+0x10/0x10 [ 141.185283][ T6953] should_fail_ex+0x3b0/0x4e0 [ 141.185312][ T6953] ? sctp_add_bind_addr+0x89/0x3a0 [ 141.185341][ T6953] should_failslab+0x9/0x20 [ 141.185368][ T6953] __kmalloc_cache_noprof+0x6c/0x2c0 [ 141.254206][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 141.256172][ T6953] ? __pfx_sctp_get_port_local+0x10/0x10 [ 141.270630][ T6953] sctp_add_bind_addr+0x89/0x3a0 [ 141.275624][ T6953] sctp_do_bind+0x5d2/0x950 [ 141.280188][ T6953] sctp_connect_new_asoc+0x277/0x6c0 [ 141.285526][ T6953] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 141.291194][ T6951] macsec0: entered promiscuous mode [ 141.291347][ T6953] ? sctp_sendmsg+0xbb9/0x3520 [ 141.299084][ T6951] macsec0: entered allmulticast mode [ 141.301301][ T6953] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 141.312714][ T6953] ? security_sctp_bind_connect+0x90/0xb0 [ 141.318466][ T6953] sctp_sendmsg+0x219a/0x3520 [ 141.323182][ T6953] ? __pfx_sctp_sendmsg+0x10/0x10 [ 141.328248][ T6953] ? __pfx_aa_sk_perm+0x10/0x10 [ 141.333117][ T6953] ? inet_sendmsg+0x330/0x390 [ 141.337827][ T6953] __sock_sendmsg+0x1a6/0x270 [ 141.342607][ T6953] __sys_sendto+0x3a4/0x4f0 [ 141.347170][ T6953] ? __pfx___sys_sendto+0x10/0x10 [ 141.352290][ T6953] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.358310][ T6953] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.364655][ T6953] __x64_sys_sendto+0xde/0x100 [ 141.369435][ T6953] do_syscall_64+0xf3/0x230 [ 141.373957][ T6953] ? clear_bhb_loop+0x35/0x90 [ 141.378648][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.384551][ T6953] RIP: 0033:0x7f1cff375f19 [ 141.388975][ T6953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.408590][ T6953] RSP: 002b:00007f1d001f6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 141.417052][ T6953] RAX: ffffffffffffffda RBX: 00007f1cff505f60 RCX: 00007f1cff375f19 [ 141.425036][ T6953] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 141.433013][ T6953] RBP: 00007f1d001f60a0 R08: 0000000020000040 R09: 0000000000000010 [ 141.440991][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.448972][ T6953] R13: 000000000000000b R14: 00007f1cff505f60 R15: 00007ffc05386648 [ 141.456971][ T6953] [ 141.495097][ T6941] vlan1: left promiscuous mode [ 141.521368][ T6945] netlink: 360 bytes leftover after parsing attributes in process `syz.4.419'. [ 141.885486][ T5281] tipc: Node number set to 819268957 [ 142.085043][ T6980] syzkaller0: entered promiscuous mode [ 142.103763][ T6980] syzkaller0: entered allmulticast mode [ 142.157027][ T6986] tipc: Enabling of bearer rejected, already enabled [ 142.174357][ T1105] syzkaller0: tun_net_xmit 48 [ 142.179959][ T6980] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.428'. [ 142.884721][ T7008] netlink: 508 bytes leftover after parsing attributes in process `syz.2.434'. [ 143.113062][ T7016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.117488][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 144.233089][ T7017] lo speed is unknown, defaulting to 1000 [ 144.258021][ T7017] lo speed is unknown, defaulting to 1000 [ 144.374630][ T7017] lo speed is unknown, defaulting to 1000 [ 144.400711][ T7017] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.468624][ T7017] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.478157][ T60] IPVS: starting estimator thread 0... [ 144.542717][ T7035] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 144.550855][ T7035] netlink: 224 bytes leftover after parsing attributes in process `syz.3.441'. [ 144.554166][ T7040] tipc: Enabling of bearer rejected, already enabled [ 144.575257][ T7017] lo speed is unknown, defaulting to 1000 [ 144.592675][ T7017] lo speed is unknown, defaulting to 1000 [ 144.599154][ T7037] IPVS: using max 20 ests per chain, 48000 per kthread [ 144.627829][ T7017] lo speed is unknown, defaulting to 1000 [ 144.644825][ T7017] lo speed is unknown, defaulting to 1000 [ 144.652440][ T7017] lo speed is unknown, defaulting to 1000 [ 144.868975][ T7050] netlink: 'syz.0.445': attribute type 10 has an invalid length. [ 144.934445][ T7053] netlink: 224 bytes leftover after parsing attributes in process `syz.0.445'. [ 144.965343][ T7050] team0: Port device wlan1 added [ 145.042022][ T7053] netlink: 'syz.0.445': attribute type 10 has an invalid length. [ 145.076982][ T7058] xt_NFQUEUE: number of total queues is 0 [ 145.763985][ T7087] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 145.794517][ T7087] sch_tbf: peakrate 6 is lower than or equals to rate 7694164503644904053 ! [ 146.183275][ T7096] ieee802154 phy0 wpan0: encryption failed: -90 [ 146.287815][ T7096] netlink: 'syz.0.458': attribute type 10 has an invalid length. [ 146.344768][ T7096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.535387][ T7106] __nla_validate_parse: 7 callbacks suppressed [ 146.535407][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 146.642550][ T7109] xt_NFQUEUE: number of total queues is 0 [ 146.667445][ T7110] netlink: 256 bytes leftover after parsing attributes in process `syz.1.464'. [ 146.781745][ T7112] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 147.253160][ T7124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.469'. [ 147.715383][ T7133] ieee802154 phy0 wpan0: encryption failed: -90 [ 147.737997][ T7133] netlink: 'syz.2.473': attribute type 10 has an invalid length. [ 147.776441][ T7133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.829152][ T7138] xt_NFQUEUE: number of total queues is 0 [ 148.008770][ T7143] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 148.010746][ T7144] sctp: [Deprecated]: syz.4.478 (pid 7144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.010746][ T7144] Use struct sctp_sack_info instead [ 148.039402][ T7143] netlink: 96 bytes leftover after parsing attributes in process `syz.2.477'. [ 148.139995][ T7157] netlink: 'syz.1.479': attribute type 7 has an invalid length. [ 148.164547][ T7156] IPv6: Can't replace route, no match found [ 148.181789][ T7157] netlink: 'syz.1.479': attribute type 3 has an invalid length. [ 148.218413][ T7157] netlink: 224 bytes leftover after parsing attributes in process `syz.1.479'. [ 148.458095][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 148.484658][ T7169] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 148.682780][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 148.699188][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.708474][ T7178] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 148.771711][ T7169] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 148.842953][ T7169] bond1 (unregistering): Released all slaves [ 149.030835][ T7185] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.485'. [ 149.054808][ T7194] xt_NFQUEUE: number of total queues is 0 [ 149.141262][ T7186] syzkaller0: entered promiscuous mode [ 149.164123][ T7186] syzkaller0: entered allmulticast mode [ 149.180458][ T7188] netlink: 44 bytes leftover after parsing attributes in process `syz.1.486'. [ 149.270174][ T7192] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 149.278221][ T7192] macsec1: entered promiscuous mode [ 149.287718][ T7192] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 149.355654][ T5404] syzkaller0: tun_net_xmit 48 [ 150.108592][ T7226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.492'. [ 151.481667][ T7236] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 151.707226][ T7252] xt_NFQUEUE: number of total queues is 0 [ 151.912312][ T7262] __nla_validate_parse: 2 callbacks suppressed [ 151.912349][ T7262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.504'. [ 152.089750][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.506'. [ 152.341621][ T7271] syzkaller0: entered promiscuous mode [ 152.358899][ T7280] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.507'. [ 152.382442][ T7271] syzkaller0: entered allmulticast mode [ 152.426370][ T5404] syzkaller0: tun_net_xmit 48 [ 152.824737][ T7289] xt_hashlimit: size too large, truncated to 1048576 [ 152.853952][ T7289] xt_hashlimit: max too large, truncated to 1048576 [ 152.860892][ T7289] xt_hashlimit: overflow, try lower: 0/0 [ 153.189675][ T7298] ieee802154 phy0 wpan0: encryption failed: -90 [ 154.740787][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 154.752392][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.511'. [ 154.825119][ T7300] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 154.887073][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.929147][ T7300] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 154.956970][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.517'. [ 155.324354][ T7332] netlink: 'syz.0.523': attribute type 3 has an invalid length. [ 155.351519][ T7332] netlink: 'syz.0.523': attribute type 4 has an invalid length. [ 155.387076][ T7332] netlink: 'syz.0.523': attribute type 7 has an invalid length. [ 155.438945][ T7332] netlink: 'syz.0.523': attribute type 8 has an invalid length. [ 155.485723][ T7332] netlink: 'syz.0.523': attribute type 7 has an invalid length. [ 155.493439][ T7332] netlink: 198180 bytes leftover after parsing attributes in process `syz.0.523'. [ 155.520267][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 155.652064][ T7347] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.766697][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 155.873838][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'. [ 155.890464][ T7354] syzkaller0: entered promiscuous mode [ 155.902112][ T7354] syzkaller0: entered allmulticast mode [ 155.922029][ T11] syzkaller0: tun_net_xmit 48 [ 155.956917][ T7354] syzkaller0: tun_net_xmit 1280 [ 155.985416][ T7354] syzkaller0: create flow: hash 3291473290 index 1 [ 156.094006][ T7364] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 156.122077][ T7352] syzkaller0: delete flow: hash 3291473290 index 1 [ 156.150669][ T7364] netlink: 'syz.2.532': attribute type 3 has an invalid length. [ 156.172497][ T7364] netlink: 'syz.2.532': attribute type 3 has an invalid length. [ 156.798329][ T7383] netlink: 'syz.1.536': attribute type 2 has an invalid length. [ 158.174857][ T7397] netlink: 'syz.2.539': attribute type 10 has an invalid length. [ 158.209432][ T7397] syz_tun: entered promiscuous mode [ 158.242815][ T7397] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 158.292911][ T7403] __nla_validate_parse: 4 callbacks suppressed [ 158.292932][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.542'. [ 158.410323][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'. [ 158.706848][ T5244] Bluetooth: hci0: command 0x0401 tx timeout [ 158.712982][ T56] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 158.867153][ T7422] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 158.913759][ T7422] netlink: 96 bytes leftover after parsing attributes in process `syz.1.549'. [ 159.112220][ T7436] syzkaller0: entered promiscuous mode [ 159.117990][ T7436] syzkaller0: entered allmulticast mode [ 159.146193][ T11] syzkaller0: tun_net_xmit 48 [ 159.186492][ T7429] syzkaller0: tun_net_xmit 1280 [ 159.191556][ T7429] syzkaller0: create flow: hash 3291473290 index 1 [ 159.211047][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 159.236635][ T7429] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.551'. [ 159.327724][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 159.430292][ T7450] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 159.450489][ T7428] syzkaller0: delete flow: hash 3291473290 index 1 [ 160.127287][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 161.136130][ T7455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.557'. [ 161.226226][ T7469] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.561'. [ 161.280699][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 161.295666][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.307575][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.352499][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.371048][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.260925][ T7518] syzkaller0: entered promiscuous mode [ 162.279174][ T7518] syzkaller0: entered allmulticast mode [ 162.545708][ T7531] xt_TCPMSS: Only works on TCP SYN packets [ 163.262391][ T7563] syzkaller0: entered promiscuous mode [ 163.280569][ T7563] syzkaller0: entered allmulticast mode [ 163.301115][ T2966] syzkaller0: tun_net_xmit 48 [ 163.324544][ T7563] syzkaller0: create flow: hash 3291473290 index 1 [ 163.341972][ T7563] __nla_validate_parse: 4 callbacks suppressed [ 163.341995][ T7563] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.585'. [ 163.452508][ T7562] syzkaller0: delete flow: hash 3291473290 index 1 [ 163.634492][ T7573] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 163.641422][ T7574] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 164.095478][ T7583] netlink: 'syz.3.591': attribute type 4 has an invalid length. [ 164.103888][ T7583] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.591'. [ 164.190123][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.591'. [ 165.077773][ T7586] netlink: 68 bytes leftover after parsing attributes in process `syz.0.592'. [ 165.086896][ T7586] netlink: 3 bytes leftover after parsing attributes in process `syz.0.592'. [ 165.103675][ T7584] vlan1: entered promiscuous mode [ 165.114023][ T7584] vlan1: left promiscuous mode [ 165.466444][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'. [ 165.479120][ T7611] netlink: 64 bytes leftover after parsing attributes in process `syz.1.599'. [ 165.972736][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 166.025358][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.604'. [ 166.192631][ T7644] netlink: 'syz.0.606': attribute type 4 has an invalid length. [ 166.213641][ T7644] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.606'. [ 166.255616][ T7644] vlan1: entered promiscuous mode [ 166.290918][ T7642] vlan1: left promiscuous mode [ 168.061661][ T7720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.284877][ T7725] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 168.414141][ T7725] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.553778][ T7730] __nla_validate_parse: 4 callbacks suppressed [ 168.553801][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 168.710740][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 168.806912][ T7739] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.633'. [ 168.842135][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 168.893787][ T7742] vlan3: entered promiscuous mode [ 168.909191][ T7742] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 168.963280][ T7742] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 169.257320][ T7761] netlink: 732 bytes leftover after parsing attributes in process `syz.4.641'. [ 169.281862][ T7761] netlink: 732 bytes leftover after parsing attributes in process `syz.4.641'. [ 169.283918][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 169.312720][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 169.387053][ T7774] xt_addrtype: ipv6 does not support BROADCAST matching [ 169.473494][ T7776] tipc: Enabled bearer , priority 0 [ 169.513865][ T7780] delete_channel: no stack [ 169.525048][ T7775] tipc: Disabling bearer [ 169.578986][ T7780] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 169.927232][ T7798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.951310][ T7799] netlink: 'syz.0.655': attribute type 15 has an invalid length. [ 169.994899][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.655'. [ 170.150504][ T7806] lo speed is unknown, defaulting to 1000 [ 170.205311][ T7811] dccp_invalid_packet: P.Data Offset(102) too large [ 170.318731][ T7812] netlink: 'syz.4.659': attribute type 21 has an invalid length. [ 170.339333][ T7812] netlink: 168 bytes leftover after parsing attributes in process `syz.4.659'. [ 171.215543][ T7837] syz_tun: entered allmulticast mode [ 171.245690][ T7836] netlink: 'syz.1.665': attribute type 9 has an invalid length. [ 171.318224][ T7833] syz_tun: left allmulticast mode [ 171.371571][ C1] eth0: bad gso: type: 1, size: 1408 [ 171.707427][ T7843] netlink: 'syz.4.668': attribute type 21 has an invalid length. [ 172.518679][ T7890] netlink: 'syz.4.686': attribute type 2 has an invalid length. [ 172.705330][ T7902] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 172.732961][ T7905] Bluetooth: MGMT ver 1.23 [ 172.769758][ T7902] macvlan2: entered promiscuous mode [ 173.116142][ T7926] syz.3.695[7926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.116312][ T7926] syz.3.695[7926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.374576][ T7946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.643286][ T7955] __nla_validate_parse: 12 callbacks suppressed [ 173.643328][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 173.674579][ T7961] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 174.078081][ T7981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.712'. [ 174.348132][ T7993] tipc: Failed to remove unknown binding: 66,1,1/0:1417294878/1417294880 [ 174.383771][ T7993] tipc: Failed to remove unknown binding: 66,1,1/0:1417294878/1417294880 [ 174.521090][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.717'. [ 174.700413][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 174.977468][ T8035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.725'. [ 174.990883][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.725'. [ 175.155720][ T8041] IPv6: Can't replace route, no match found [ 175.771284][ T8068] rdma_rxe: rxe_newlink: failed to add bond0 [ 175.892027][ T8066] wg2: entered promiscuous mode [ 175.930599][ T8066] wg2: entered allmulticast mode [ 176.332968][ T8092] xt_HMARK: spi-set and port-set can't be combined [ 176.370949][ T8096] netlink: 172 bytes leftover after parsing attributes in process `syz.4.741'. [ 176.576416][ C1] eth0: bad gso: type: 1, size: 1408 [ 177.029498][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 177.068252][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 177.192196][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.751'. [ 177.493986][ T8136] lo speed is unknown, defaulting to 1000 [ 177.856827][ T8147] ip6t_rpfilter: unknown options [ 178.144157][ T8155] openvswitch: netlink: VXLAN extension 1024 out of range max 1 [ 178.149649][ T8128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.782429][ T8183] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 178.790928][ T8183] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 178.807399][ T8183] team0: Port device netdevsim0 added [ 178.829430][ T8184] IPv6: sit1: Disabled Multicast RS [ 178.874759][ T8186] __nla_validate_parse: 6 callbacks suppressed [ 178.874781][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.770'. [ 179.572357][ T8234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.783'. [ 179.722442][ T8242] netlink: 'syz.3.785': attribute type 11 has an invalid length. [ 179.811883][ T8247] netlink: 'syz.1.786': attribute type 16 has an invalid length. [ 179.829247][ T8247] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.866384][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 180.001388][ T8254] lo speed is unknown, defaulting to 1000 [ 180.355189][ T8271] netlink: 'syz.3.794': attribute type 21 has an invalid length. [ 180.375585][ T8274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.795'. [ 180.381907][ T8271] netlink: 156 bytes leftover after parsing attributes in process `syz.3.794'. [ 180.428712][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 180.446382][ T8271] netlink: 892 bytes leftover after parsing attributes in process `syz.3.794'. [ 180.680738][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 180.904334][ T8298] IPVS: Unknown mcast interface: vcan0 [ 181.141197][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.807'. [ 181.196764][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.808'. [ 182.226067][ T8378] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 182.622920][ T8407] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 182.792429][ T8415] netlink: 'syz.1.834': attribute type 21 has an invalid length. [ 183.438493][ T8443] netlink: 'syz.1.843': attribute type 46 has an invalid length. [ 183.617859][ T8449] bridge0: port 3(geneve1) entered blocking state [ 183.642858][ T8449] bridge0: port 3(geneve1) entered disabled state [ 183.649827][ T8449] geneve1: entered allmulticast mode [ 183.668733][ T8449] geneve1: entered promiscuous mode [ 183.677633][ T8449] bridge0: port 3(geneve1) entered blocking state [ 183.684828][ T8449] bridge0: port 3(geneve1) entered forwarding state [ 183.694710][ T8454] IPv6: Can't replace route, no match found [ 184.039223][ T8474] ebt_among: dst integrity fail: 36e [ 184.194890][ T8478] lo speed is unknown, defaulting to 1000 [ 184.625934][ T8478] __nla_validate_parse: 17 callbacks suppressed [ 184.625959][ T8478] netlink: 56 bytes leftover after parsing attributes in process `syz.2.852'. [ 184.699635][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 185.065329][ T8510] SET target dimension over the limit! [ 185.079389][ T8510] SET target dimension over the limit! [ 185.085662][ T8510] SET target dimension over the limit! [ 185.091607][ T8510] SET target dimension over the limit! [ 185.223822][ T8518] netlink: 'syz.2.862': attribute type 33 has an invalid length. [ 185.330879][ T8521] netlink: 48 bytes leftover after parsing attributes in process `syz.2.862'. [ 185.353761][ T8521] netlink: 48 bytes leftover after parsing attributes in process `syz.2.862'. [ 185.864329][ T8551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.868'. [ 186.042285][ T8563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.871'. [ 186.463493][ T8587] siw: device registration error -23 [ 186.695185][ T8599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.881'. [ 186.730341][ T8598] vlan0: entered promiscuous mode [ 186.751711][ T8598] vlan0: entered allmulticast mode [ 186.772232][ T8598] veth0_vlan: entered allmulticast mode [ 186.819900][ T8598] team0: Port device vlan0 added [ 186.871222][ T8602] lo speed is unknown, defaulting to 1000 [ 187.384531][ T8625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.427796][ T8625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.448644][ T8625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.971618][ T8642] openvswitch: netlink: Flow actions attr not present in new flow. [ 188.037709][ C1] eth0: bad gso: type: 1, size: 1408 [ 188.157039][ T8651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.893'. [ 188.533062][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 188.571303][ T8671] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551614) [ 188.585872][ T8671] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 188.600247][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 189.085352][ T8692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 189.232137][ T8704] FAULT_INJECTION: forcing a failure. [ 189.232137][ T8704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.280787][ T8704] CPU: 0 PID: 8704 Comm: syz.4.905 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 189.290525][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 189.300625][ T8704] Call Trace: [ 189.303928][ T8704] [ 189.306918][ T8704] dump_stack_lvl+0x241/0x360 [ 189.311617][ T8704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.316832][ T8704] ? __pfx__printk+0x10/0x10 [ 189.321455][ T8704] ? __pfx_lock_release+0x10/0x10 [ 189.326519][ T8704] should_fail_ex+0x3b0/0x4e0 [ 189.331227][ T8704] _copy_from_user+0x2f/0xe0 [ 189.335868][ T8704] inet6_ioctl+0x192/0x280 [ 189.340325][ T8704] ? __pfx_inet6_ioctl+0x10/0x10 [ 189.345297][ T8704] sock_do_ioctl+0x158/0x460 [ 189.349914][ T8704] ? __pfx_sock_do_ioctl+0x10/0x10 [ 189.355072][ T8704] sock_ioctl+0x629/0x8e0 [ 189.359438][ T8704] ? __pfx_sock_ioctl+0x10/0x10 [ 189.364317][ T8704] ? __fget_files+0x29/0x470 [ 189.368928][ T8704] ? __fget_files+0x3f6/0x470 [ 189.373618][ T8704] ? __fget_files+0x29/0x470 [ 189.378225][ T8704] ? bpf_lsm_file_ioctl+0x9/0x10 [ 189.383174][ T8704] ? security_file_ioctl+0x87/0xb0 [ 189.388294][ T8704] ? __pfx_sock_ioctl+0x10/0x10 [ 189.393163][ T8704] __se_sys_ioctl+0xfc/0x170 [ 189.397794][ T8704] do_syscall_64+0xf3/0x230 [ 189.402308][ T8704] ? clear_bhb_loop+0x35/0x90 [ 189.407003][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.412910][ T8704] RIP: 0033:0x7f28bf575f19 [ 189.417354][ T8704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.436979][ T8704] RSP: 002b:00007f28c0338048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.445421][ T8704] RAX: ffffffffffffffda RBX: 00007f28bf706110 RCX: 00007f28bf575f19 [ 189.453402][ T8704] RDX: 0000000020000240 RSI: 000000000000890b RDI: 0000000000000006 [ 189.461385][ T8704] RBP: 00007f28c03380a0 R08: 0000000000000000 R09: 0000000000000000 [ 189.469376][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.477457][ T8704] R13: 000000000000006e R14: 00007f28bf706110 R15: 00007ffd7bb53e38 [ 189.485909][ T8704] [ 189.683368][ T8715] netlink: 'syz.0.908': attribute type 21 has an invalid length. [ 189.701808][ T8715] __nla_validate_parse: 2 callbacks suppressed [ 189.701829][ T8715] netlink: 156 bytes leftover after parsing attributes in process `syz.0.908'. [ 189.715628][ T8716] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 189.992084][ T8725] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 190.065996][ T8725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.912'. [ 190.139151][ T8725] bond1: (slave gretap1): making interface the new active one [ 190.164840][ T8725] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 190.237397][ T8733] lo speed is unknown, defaulting to 1000 [ 190.388883][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 190.564932][ T8753] tipc: Enabling of bearer rejected, failed to enable media [ 190.708512][ T8760] FAULT_INJECTION: forcing a failure. [ 190.708512][ T8760] name failslab, interval 1, probability 0, space 0, times 0 [ 190.745458][ T8760] CPU: 1 PID: 8760 Comm: syz.4.920 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 190.755171][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 190.765354][ T8760] Call Trace: [ 190.768671][ T8760] [ 190.771634][ T8760] dump_stack_lvl+0x241/0x360 [ 190.776362][ T8760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.781604][ T8760] ? __pfx__printk+0x10/0x10 [ 190.786266][ T8760] should_fail_ex+0x3b0/0x4e0 [ 190.790993][ T8760] ? fib6_info_alloc+0x2e/0xf0 [ 190.791068][ T8762] netlink: 'syz.0.921': attribute type 33 has an invalid length. [ 190.795781][ T8760] should_failslab+0x9/0x20 [ 190.795819][ T8760] __kmalloc_noprof+0xd8/0x400 [ 190.795855][ T8760] fib6_info_alloc+0x2e/0xf0 [ 190.795888][ T8760] ip6_route_info_create+0x445/0x12b0 [ 190.823197][ T8760] ? security_capable+0x90/0xb0 [ 190.828097][ T8760] ip6_route_add+0x28/0x160 [ 190.832747][ T8760] ipv6_route_ioctl+0x588/0x870 [ 190.837669][ T8760] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 190.843116][ T8760] ? __might_fault+0xc6/0x120 [ 190.847849][ T8760] inet6_ioctl+0x21a/0x280 [ 190.852397][ T8760] ? __pfx_inet6_ioctl+0x10/0x10 [ 190.857474][ T8760] sock_do_ioctl+0x158/0x460 [ 190.862085][ T8760] ? __pfx_sock_do_ioctl+0x10/0x10 [ 190.867221][ T8760] sock_ioctl+0x629/0x8e0 [ 190.871574][ T8760] ? __pfx_sock_ioctl+0x10/0x10 [ 190.876442][ T8760] ? __fget_files+0x29/0x470 [ 190.881050][ T8760] ? __fget_files+0x3f6/0x470 [ 190.885749][ T8760] ? __fget_files+0x29/0x470 [ 190.890396][ T8760] ? bpf_lsm_file_ioctl+0x9/0x10 [ 190.895361][ T8760] ? security_file_ioctl+0x87/0xb0 [ 190.900602][ T8760] ? __pfx_sock_ioctl+0x10/0x10 [ 190.905476][ T8760] __se_sys_ioctl+0xfc/0x170 [ 190.910083][ T8760] do_syscall_64+0xf3/0x230 [ 190.914592][ T8760] ? clear_bhb_loop+0x35/0x90 [ 190.919289][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.925196][ T8760] RIP: 0033:0x7f28bf575f19 [ 190.929618][ T8760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.949233][ T8760] RSP: 002b:00007f28c0359048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.957686][ T8760] RAX: ffffffffffffffda RBX: 00007f28bf706038 RCX: 00007f28bf575f19 [ 190.965665][ T8760] RDX: 0000000020000240 RSI: 000000000000890b RDI: 0000000000000006 [ 190.973642][ T8760] RBP: 00007f28c03590a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.981621][ T8760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.989600][ T8760] R13: 000000000000006e R14: 00007f28bf706038 R15: 00007ffd7bb53e38 [ 190.997592][ T8760] [ 191.004735][ T8763] xt_l2tp: v2 sid > 0xffff: 16777216 [ 191.041860][ T8762] netlink: 6 bytes leftover after parsing attributes in process `syz.0.921'. [ 191.170234][ T8762] vlan2: entered promiscuous mode [ 191.182106][ T8762] team0: Device vlan2 is already an upper device of the team interface [ 191.309830][ T8763] syzkaller1: entered promiscuous mode [ 191.322093][ T8763] syzkaller1: entered allmulticast mode [ 191.361853][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 191.522307][ T8780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.561588][ T8780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.588769][ T8780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.654150][ T8783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.927'. [ 191.702602][ T8788] tipc: Enabled bearer , priority 0 [ 191.731674][ T8787] tipc: Disabling bearer [ 191.771823][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.929'. Connection to 10.128.0.146 closed by remote host. [ 192.216713][ T5244] Bluetooth: hci0: command 0x0401 tx timeout [ 192.225420][ T56] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 192.379708][ T8765] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 192.410703][ T8765] ------------[ cut here ]------------ [ 192.416469][ T8765] ODEBUG: free active (active state 0) object: ffff888023fd8978 object type: timer_list hint: hci_cmd_timeout+0x0/0x1e0 [ 192.459296][ T8765] WARNING: CPU: 0 PID: 8765 at lib/debugobjects.c:518 debug_print_object+0x17a/0x1f0 [ 192.469172][ T8765] Modules linked in: [ 192.473108][ T8765] CPU: 0 PID: 8765 Comm: syz.2.922 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 192.482847][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 192.493134][ T8765] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 192.499038][ T8765] Code: e8 1b 7f 42 fd 4c 8b 0b 48 c7 c7 00 74 40 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 db 5b 9e fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 3c 62 40 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 192.519441][ T8765] RSP: 0018:ffffc900033ef838 EFLAGS: 00010282 [ 192.525850][ T8765] RAX: e245ec500a070100 RBX: ffffffff8becb720 RCX: ffff88802a189e00 [ 192.533943][ T8765] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 192.541949][ T8765] RBP: ffffffff8c407580 R08: ffffffff815565a2 R09: fffffbfff1cb9f60 [ 192.550051][ T8765] R10: dffffc0000000000 R11: fffffbfff1cb9f60 R12: 0000000000000000 [ 192.558513][ T8765] R13: ffffffff8c407498 R14: dffffc0000000000 R15: ffff888023fd8978 [ 192.566928][ T8765] FS: 00007f1d001f66c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 192.576344][ T8765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.582965][ T8765] CR2: 00007ffec4630b88 CR3: 0000000012ae4000 CR4: 00000000003506f0 [ 192.591416][ T8765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.599631][ T8765] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.607702][ T8765] Call Trace: [ 192.611394][ T8765] [ 192.614729][ T8765] ? __warn+0x163/0x4e0 [ 192.618939][ T8765] ? debug_print_object+0x17a/0x1f0 [ 192.624310][ T8765] ? report_bug+0x2b3/0x500 [ 192.628877][ T8765] ? debug_print_object+0x17a/0x1f0 [ 192.634283][ T8765] ? handle_bug+0x3e/0x70 [ 192.638653][ T8765] ? exc_invalid_op+0x1a/0x50 [ 192.643367][ T8765] ? asm_exc_invalid_op+0x1a/0x20 [ 192.648512][ T8765] ? __warn_printk+0x292/0x360 [ 192.653316][ T8765] ? debug_print_object+0x17a/0x1f0 [ 192.658633][ T8765] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 192.664018][ T8765] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 192.669350][ T8765] debug_check_no_obj_freed+0x45b/0x580 [ 192.675057][ T8765] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 192.681180][ T8765] ? lockdep_hardirqs_on+0x99/0x150 [ 192.686510][ T8765] ? hci_release_dev+0x1525/0x16b0 [ 192.691660][ T8765] kfree+0x10f/0x360 [ 192.695817][ T8765] hci_release_dev+0x1525/0x16b0 [ 192.700823][ T8765] ? devres_release_all+0x1eb/0x250 [ 192.706144][ T8765] ? __pfx_hci_release_dev+0x10/0x10 [ 192.711651][ T8765] ? rcu_is_watching+0x15/0xb0 [ 192.716982][ T8765] ? device_release+0x66/0x1c0 [ 192.721796][ T8765] bt_host_release+0x83/0x90 [ 192.726507][ T8765] ? __pfx_bt_host_release+0x10/0x10 [ 192.731832][ T8765] device_release+0x99/0x1c0 [ 192.736539][ T8765] kobject_put+0x22f/0x480 [ 192.741005][ T8765] hci_dev_cmd+0x296/0xa50 [ 192.745503][ T8765] ? __pfx_hci_dev_cmd+0x10/0x10 [ 192.750475][ T8765] ? do_proc_dointvec_jiffies_conv+0x10/0x210 [ 192.756663][ T8765] ? hci_sock_ioctl+0x6c6/0xa40 [ 192.761559][ T8765] sock_do_ioctl+0x158/0x460 [ 192.766315][ T8765] ? __pfx_sock_do_ioctl+0x10/0x10 [ 192.771500][ T8765] sock_ioctl+0x629/0x8e0 [ 192.776218][ T8765] ? __pfx_sock_ioctl+0x10/0x10 [ 192.781118][ T8765] ? __fget_files+0x29/0x470 [ 192.785812][ T8765] ? __fget_files+0x3f6/0x470 [ 192.790537][ T8765] ? __fget_files+0x29/0x470 [ 192.795266][ T8765] ? bpf_lsm_file_ioctl+0x9/0x10 [ 192.800251][ T8765] ? security_file_ioctl+0x87/0xb0 [ 192.805459][ T8765] ? __pfx_sock_ioctl+0x10/0x10 [ 192.810374][ T8765] __se_sys_ioctl+0xfc/0x170 [ 192.815455][ T8765] do_syscall_64+0xf3/0x230 [ 192.820281][ T8765] ? clear_bhb_loop+0x35/0x90 [ 192.825051][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.830987][ T8765] RIP: 0033:0x7f1cff375f19 [ 192.835477][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.855515][ T8765] RSP: 002b:00007f1d001f6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.864023][ T8765] RAX: ffffffffffffffda RBX: 00007f1cff505f60 RCX: 00007f1cff375f19 [ 192.872035][ T8765] RDX: 0000000020000240 RSI: 00000000400448dd RDI: 0000000000000009 [ 192.880163][ T8765] RBP: 00007f1cff3e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 192.888249][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.896336][ T8765] R13: 000000000000000b R14: 00007f1cff505f60 R15: 00007ffc05386648 [ 192.904418][ T8765] [ 192.907470][ T8765] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.914768][ T8765] CPU: 0 PID: 8765 Comm: syz.2.922 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 192.924593][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 192.934679][ T8765] Call Trace: [ 192.937971][ T8765] [ 192.940910][ T8765] dump_stack_lvl+0x241/0x360 [ 192.945608][ T8765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.950821][ T8765] ? __pfx__printk+0x10/0x10 [ 192.955416][ T8765] ? _printk+0xd5/0x120 [ 192.959593][ T8765] ? vscnprintf+0x5d/0x90 [ 192.963954][ T8765] panic+0x349/0x860 [ 192.967867][ T8765] ? __warn+0x172/0x4e0 [ 192.972123][ T8765] ? __pfx_panic+0x10/0x10 [ 192.976543][ T8765] ? show_trace_log_lvl+0x4e6/0x520 [ 192.981865][ T8765] __warn+0x346/0x4e0 [ 192.985857][ T8765] ? debug_print_object+0x17a/0x1f0 [ 192.991068][ T8765] report_bug+0x2b3/0x500 [ 192.995418][ T8765] ? debug_print_object+0x17a/0x1f0 [ 193.000635][ T8765] handle_bug+0x3e/0x70 [ 193.004803][ T8765] exc_invalid_op+0x1a/0x50 [ 193.009318][ T8765] asm_exc_invalid_op+0x1a/0x20 [ 193.014182][ T8765] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 193.020003][ T8765] Code: e8 1b 7f 42 fd 4c 8b 0b 48 c7 c7 00 74 40 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 db 5b 9e fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 3c 62 40 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 193.039637][ T8765] RSP: 0018:ffffc900033ef838 EFLAGS: 00010282 [ 193.045720][ T8765] RAX: e245ec500a070100 RBX: ffffffff8becb720 RCX: ffff88802a189e00 [ 193.053705][ T8765] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 193.061695][ T8765] RBP: ffffffff8c407580 R08: ffffffff815565a2 R09: fffffbfff1cb9f60 [ 193.069683][ T8765] R10: dffffc0000000000 R11: fffffbfff1cb9f60 R12: 0000000000000000 [ 193.077668][ T8765] R13: ffffffff8c407498 R14: dffffc0000000000 R15: ffff888023fd8978 [ 193.085681][ T8765] ? __warn_printk+0x292/0x360 [ 193.090484][ T8765] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 193.095804][ T8765] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 193.101123][ T8765] debug_check_no_obj_freed+0x45b/0x580 [ 193.106706][ T8765] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 193.112811][ T8765] ? lockdep_hardirqs_on+0x99/0x150 [ 193.118041][ T8765] ? hci_release_dev+0x1525/0x16b0 [ 193.123180][ T8765] kfree+0x10f/0x360 [ 193.127101][ T8765] hci_release_dev+0x1525/0x16b0 [ 193.132059][ T8765] ? devres_release_all+0x1eb/0x250 [ 193.137272][ T8765] ? __pfx_hci_release_dev+0x10/0x10 [ 193.142578][ T8765] ? rcu_is_watching+0x15/0xb0 [ 193.147361][ T8765] ? device_release+0x66/0x1c0 [ 193.152138][ T8765] bt_host_release+0x83/0x90 [ 193.156747][ T8765] ? __pfx_bt_host_release+0x10/0x10 [ 193.162048][ T8765] device_release+0x99/0x1c0 [ 193.166662][ T8765] kobject_put+0x22f/0x480 [ 193.171094][ T8765] hci_dev_cmd+0x296/0xa50 [ 193.175527][ T8765] ? __pfx_hci_dev_cmd+0x10/0x10 [ 193.180476][ T8765] ? do_proc_dointvec_jiffies_conv+0x10/0x210 [ 193.186571][ T8765] ? hci_sock_ioctl+0x6c6/0xa40 [ 193.191438][ T8765] sock_do_ioctl+0x158/0x460 [ 193.196047][ T8765] ? __pfx_sock_do_ioctl+0x10/0x10 [ 193.201183][ T8765] sock_ioctl+0x629/0x8e0 [ 193.205565][ T8765] ? __pfx_sock_ioctl+0x10/0x10 [ 193.210440][ T8765] ? __fget_files+0x29/0x470 [ 193.215043][ T8765] ? __fget_files+0x3f6/0x470 [ 193.219732][ T8765] ? __fget_files+0x29/0x470 [ 193.224340][ T8765] ? bpf_lsm_file_ioctl+0x9/0x10 [ 193.229305][ T8765] ? security_file_ioctl+0x87/0xb0 [ 193.234432][ T8765] ? __pfx_sock_ioctl+0x10/0x10 [ 193.239315][ T8765] __se_sys_ioctl+0xfc/0x170 [ 193.243940][ T8765] do_syscall_64+0xf3/0x230 [ 193.248467][ T8765] ? clear_bhb_loop+0x35/0x90 [ 193.253161][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.259070][ T8765] RIP: 0033:0x7f1cff375f19 [ 193.263503][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.283219][ T8765] RSP: 002b:00007f1d001f6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.291671][ T8765] RAX: ffffffffffffffda RBX: 00007f1cff505f60 RCX: 00007f1cff375f19 [ 193.299763][ T8765] RDX: 0000000020000240 RSI: 00000000400448dd RDI: 0000000000000009 [ 193.307757][ T8765] RBP: 00007f1cff3e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 193.315753][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.323755][ T8765] R13: 000000000000000b R14: 00007f1cff505f60 R15: 00007ffc05386648 [ 193.331766][ T8765] [ 193.334953][ T8765] Kernel Offset: disabled [ 193.339325][ T8765] Rebooting in 86400 seconds..