last executing test programs: 1m14.637510646s ago: executing program 1 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 44.029426707s ago: executing program 1 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 44.029289632s ago: executing program 1 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 44.029250567s ago: executing program 1 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 26.570477541s ago: executing program 1 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 13.435213674s ago: executing program 1 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 6.220558194s ago: executing program 0 (id=617): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x89}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000130a03000000000000000000050000000900020073797a31000000000800034000000001090001"], 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000200)={0xbc, 0x1, 0x4, 0x3, 0x6, 0xff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x7f, 0x6, 0xbb}) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2791e50be9423142}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x800) 6.030471696s ago: executing program 0 (id=618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) socketpair(0x8, 0x80000, 0x101, &(0x7f0000000680)) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) connect$netrom(0xffffffffffffffff, &(0x7f0000000600)={{0x3, @null, 0x4}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) (async) close(r4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) writev(r6, &(0x7f0000000a40)=[{&(0x7f00000005c0)="093f0d17ae", 0x5}], 0x1) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800800034000000001040001804c00054000000000000000000900010073797a30"], 0xd8}}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 5.75065639s ago: executing program 0 (id=619): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}], 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x40001c4}, 0x20008080) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x6, 0xf, 0xc) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',', @ANYRES16, @ANYBLOB="15c607c518fab1958d7644e52297ea78bd30b7d822684b22cf7c5ae4d03ea3a2a2f089ca2fb2636833ce894d02bba2088e0b6b311ee712bb924352ccd971e6f7ef7dc3b2134f8f4f6ea60f8e6cab987845"], 0x8e}}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, &(0x7f0000002440)) sendmmsg$inet(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="46c440dddf08b81c3e60be620a05368c527768dbf571510b0c3ba1a7a50794c31aa22961c8f75ba1982a5e154ee5f94d7ad1a028b1ff2eb2931a5dbb530466c6c9844287f2cfaef317088039bde235e20fefd6072d3a6ba0b0ccac0ec1d0ad32a06a731b2da0494dcd282837f1c76bc69fdd9168f8010f85cb18e95bcd6d5bb46c", 0x81}, {&(0x7f0000000480)="365e590ab876b86070c63b686536cc1b9240102f3b51d90b466247bf1e5de61e5a2d1cc54346f604d15384ae7d2fcad0f8d420a10a8227f66a39a6408c6cb4af561b79781a9fef4c15b0875e1e35f1d7e21ab1d253d3397f30936fa775c0572df371c42e7d74f94d19116543e85bb8ee2a1630cb04f803b3c60c", 0x7a}, {&(0x7f0000000500)="bff6a66dde39e4d4f44f9adbfe965fa2ac448e8c3a3dabb875c54c4d7b26f7c7f3c48a4b8809c39468372de914af51e829f7d28e451eac570b33085b7b7700bc39d404dcdcf7fc10d872bcd5b3d4472dd12cc0eff62cb203deaf55dde4385699605e8f695a2b76c8a7d109942d0258e03515dc7a3074f24358908f399e4bbe", 0x7f}], 0x3, &(0x7f0000000780)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xa0}}, {{&(0x7f0000000600)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000940)="b705b386336d922d72367e10f08be86df6a2a372581770782cd937b26d683291dbd1f9d859710e58136f541dad5aa547abdd3fe76caf499fa699e8963838fab58e0f8f2cbed1297a90320f6914e5d73c9f2acf36c44fcd7139890e29e14c5dcfe5d21873f88c258096bc83b98fb16712ce41e1afffaefc042a5cc6bb6cb200fe16e6935c4379b0426af4e3af3578bf0c7c", 0x91}, {&(0x7f0000000840)="0c94", 0x2}, {&(0x7f0000000a00)="568905a4994911983fd0da8c2e873bb0ec31aaa9a98f9b4721d57bbfe4b076a34ab9283efdc54ac29f08e84e610a280b46760976acfdacfe2e8e3e51901a772e", 0x40}, {&(0x7f0000000fc0)="8194d814d142b906468fe39c8db24f1c377b6d185f2e842e385525d8fe499687d7ddc7d9fd363beb1d5df8ae170fc1b5bdaf5020324ecd7eb660a7784e14ff50a72218d308f920ff54c4f185ed", 0x4d}, {&(0x7f0000001040)="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", 0xfe}, {&(0x7f0000001140)="1ea461fde07f9d42d433098b9373038155570c4c37", 0x15}], 0x6, &(0x7f0000001200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x130, 0x0, 0x7, {[@cipso={0x86, 0x4c, 0x3, [{0x5, 0x3, "f6"}, {0x1, 0xc, "32da28ef889dc7286c28"}, {0x0, 0xe, "821ca784a19e7a7f7e6d7398"}, {0xa, 0xd, "bd1e72b91666b1d2461e3e"}, {0x0, 0xd, "45baaac481477673331e9b"}, {0x5, 0xf, "01d3373f210aa18d13a6a87c5d"}]}, @cipso={0x86, 0x2f, 0x0, [{0x7, 0x6, "7a6d0bd0"}, {0x5, 0x2}, {0x6, 0x12, "b653731425fb8acbd17e57cee1492b07"}, {0x1, 0xb, "8113a6b9bdc2e3b0c0"}, {0x0, 0x4, 'Qr'}]}, @end, @lsrr={0x83, 0xb, 0xfb, [@empty, @rand_addr=0x64010102]}, @lsrr={0x83, 0x13, 0x99, [@rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x44, 0x39, 0x1, 0x0, [{@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@local, 0x2}, {@broadcast, 0x4}, {@rand_addr=0x64010102, 0x400}, {@multicast1, 0x2}, {@local, 0x6}, {@broadcast, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}]}, @timestamp_addr={0x44, 0x24, 0xbb, 0x1, 0x6, [{@private=0xa010101, 0x6}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x7fff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x198}}, {{&(0x7f00000013c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001400)}, {0x0}], 0x2, &(0x7f0000001580)=[@ip_retopts={{0xe8, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xe4, [@broadcast, @empty, @remote, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast, @loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x6f, 0x0, 0x4, [0x482, 0x1c0, 0x8, 0x4]}, @end, @ssrr={0x89, 0x23, 0x7a, [@private=0xa010102, @remote, @remote, @private=0xa010100, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2]}, @end, @cipso={0x86, 0x5d, 0x3, [{0x6, 0xe, "51eac9f2fcfc06386b479946"}, {0x2, 0xf, "d57bae4f90a5525e099754f213"}, {0x1, 0xa, "e529cb8b5046548e"}, {0x7, 0x12, "4f60cd6e40eb0e2781ccee142c37051e"}, {0x5, 0x10, "29bdad67a4de9c577dc304e59834"}, {0x0, 0xe, "398a4e4a87f76bb37e387ab6"}]}, @ssrr={0x89, 0x1b, 0x97, [@multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x3b}, @local, @remote, @broadcast]}, @ssrr={0x89, 0x3, 0x2b}]}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x57, 0x0, 0x5, [0x65f5b3d4]}, @generic={0x94, 0xe, "2b302522e7c57ccf7f2ef0fe"}, @lsrr={0x83, 0x23, 0x6d, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0xfa, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x1}, {@multicast2, 0x6}, {@loopback, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@multicast2, 0xdb85802}]}]}}}], 0x160}}, {{&(0x7f0000001700)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001740)="b5565637b791829b34edcdc82a72f55812f8d2ae44205c36a94a07529ece40810153cfb96bbbefaad8f279e3f11595bad7b4fb30325de182104aa96d1dca33daedc14ee5519b1b0a95a862282afdb3a40435030d8d949381c5bf08dc5212ffa1ac596ea1b88301a8a8d91ce05df6cb5ae66c8d61e2625b16e2ceb2c0efbdd2f80fa4467f85d09ab0258483bc78b4beaabd2101f4d074cc39d9a8ac628ff11b29c5dd9bbe0b77e95b7df5e9362bfa9ad628", 0xb1}, {0x0}, {&(0x7f0000001840)="a1b5a7b3728137fab326a996066001f1de06c98d9e71b9de9141a432c3637e667896758aa61eae07071fd9a474174935188ac66dfee706664c360e9543634a4ca2065f54921b26d0166cc1a5d2709cfe4cce995681f737fd479c9ec79f7c75bc55c223291fb2f464f15419303df5dd661cffdeb2698720a3bb2f51e4740bcac586fecb05985c34b885f4ae9a25fcbeae28d69e19beab013fa18a3d221c54928629321774513d5735b9c33bfd6356d24887ab826c6f8130af571f6f5d5439ec4e4f6cb73ac047968019a56d64f815609bd6cdbc00789b83ef79815e", 0xdb}, {&(0x7f0000001940)}, {&(0x7f0000001a40)="3203ad6c87b3f4f7", 0x8}, {&(0x7f0000001a80)="add62dbb17ffdf9fc332af47b195e94184b209f2d1b3d50b3ec1b2b0abee29c91028972741e59b2cd5dd5158cea19e9656f7e2ab2176291e43ce5edc3bd04439fbdc1b361b6623e098e08381ea7daa77ad90c30e3c6993392c9acc0bae9de2b888b96f537710eb0ca032a2932e9c4771821f800032b92b8d9671b20ffd339d5997c6330e3adf92c1704d1a3ba0df759e17a61f23028305ea0095a64168b245d2dbdee50d891620356f6171af0b37890204f23852e0a784932245c0e61e13689128ba5e36176974fce624a222e4ddf9a5b8eb1626f5e4d41e7704", 0xda}, {&(0x7f0000001b80)="f7c4fb8b8d8842afcd2e252d13920aae67fe2eedd86e807220e1254d1f9f7d33aeb891a6a9f1611a5eb3fbe46acf4f93be80f14f6a2bf0df401f929428240461e1d3df1feacf09d0841c5c2be27de2028f633593d5af95f2477ef7608d62460668c69b54041fb94a3b34d51f826fe8195eec", 0x72}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000001c00)="f4cc0f10242873b232270b3f54c7409fb24c865e8bcbcf4000a0c9d76b51007e983f7c34b8ba82763d69a5ba4bb22351808ae3b1722e75808759d61fc7d77a", 0x3f}], 0x9, &(0x7f0000001d00)}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001dc0)="e348829cb62c39e2e65362c3524f7e8b0c320555cba1bda2e02721d84cc12402ae35ab12f703afe16b04a9a7a75b1c0745b077b65739c5af6062ecc31a53e62ca384ed3e2fb146763eabbc525254e9b54cfaea26b8b92272b6ec94dde2a3402b5d986cf496f448e8f2ddaf2064628b526fbdd201c3a8adbee86b320d9d4c75efd5db63b6a308791676460dd5dbc62e3fcd40e5eb0f1b73b4787583cead", 0x9d}, {&(0x7f0000001e80)="55bd2592eb8d9e4f55bd58a32aa2de9eb27552b6dd1dcc00b4fa4cf722473459162bae48e4c59243331f5ea369d2241703036483c934bdb29125f6eb512396d40c76efd8381951fb55068a3b19c7a0ad0322cd3d87f196e70973d6e683292317d71b03201404744ac7952f1da88da6d229341e266b7dd01cf5b6f94a4ad6a5baf99bb4b00e6dff131bcba796148e1d6e17f3000d1cbbf7a1eff9733bcb9ace27b04bdf515b79edffd9f513e6fb85f0b65893f99fd0e82893fc29742cbe9726f0a4", 0xc1}, {&(0x7f0000001f80)="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", 0xfc}, {&(0x7f0000002080)="3322a9afaa8f4c415a9fbbe3b18c0f9acf316454da26971f01d083b958a7f581b7e4", 0x22}], 0x4, &(0x7f0000002100)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0x13, 0x5, [@local, @loopback, @empty, @local]}, @noop, @timestamp_addr={0x44, 0x1c, 0x56, 0x1, 0x5, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7f}, {@multicast2, 0x8}]}, @timestamp_prespec={0x44, 0x44, 0xf5, 0x3, 0x8, [{@rand_addr=0x64010100, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x6c59800}, {@empty, 0x1ff}, {@empty, 0x1}, {@remote, 0x9282}, {@empty, 0x15}, {@local}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "6b77e516"}]}, @cipso={0x86, 0xc, 0x3, [{0x7, 0x4, '[C'}, {0x0, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x63, [@private=0xa010102]}, @ra={0x94, 0x4}, @end, @end, @noop]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x4e, [@loopback, @remote]}, @ssrr={0x89, 0x27, 0xfb, [@rand_addr=0x64010102, @loopback, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @remote, @broadcast, @private=0xa010102]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x148}}, {{&(0x7f0000002340)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002480)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x17, 0x5f, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}], 0xe0}}], 0x6, 0x855) 5.404954274s ago: executing program 0 (id=623): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) ioctl(0xffffffffffffffff, 0x7fffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000014000000110001ecffffff00000000000000000a"], 0x88}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/56, 0x6a}], 0x1) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 4.897830302s ago: executing program 2 (id=626): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000010400f924153cae64c75dfcff090000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163767461700004000280"], 0x34}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="2b637620fe37e482c1756986dc33aae393f484bf0000d384ad927079873b18d1f4e6c600e7815cbd0d904002801d1800b802147b02d0f5c989b3e05c8e88518b05b7"], 0x11) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) r7 = accept(r6, &(0x7f0000000880)=@can, &(0x7f0000000040)=0x80) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000900)={0x2, "1433"}, 0x3) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x3, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x29, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000210000950000000000000096c710e8534cce5acc3a07fca0ea2eca34bebf2dbfc7e739ff514bd99b1c388a00e2b0d3ba49bc2f0cdcdc5697ccf0de3f8a034d7f476ebeb20b10fc823173024cb5fe73552a7f5dac45be8428e9fe3ede950b1b0a70d6e6e4989e83b2cb64940d23ac0041413b24e3e8bb7263030c3f9947fdeafe02027c290c4627ce8ef3333671aa9a361a18fb24ce4e1e2fa6f6ec6fa79e037d098fc13a7cd967"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9}, &(0x7f0000000600), &(0x7f0000000640)=r8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r10 = socket(0x28, 0x5, 0x0) unshare(0x28000600) bind$alg(r10, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 2.770927898s ago: executing program 2 (id=630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002000f5c300000000000000000a000000000000010100000208000a0000000000140011"], 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@generic={0x0, 0x1, 0x80000000}) (async) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@remote, @default, @netrom, @null, @default, @rose, @default, @bcast]}, &(0x7f0000000000)=0x48, 0x80000) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000004580)=[{{&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x1, 0x0) (async) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000180)=0x3ff, 0x4) 2.432512729s ago: executing program 3 (id=632): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffcaf66222e6aa86dd605a6a3e00002c00fc021800000000000000004c0000000000ff0200"/54], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000100ff010000000000040000000000000001080008cc1e040000"], 0x34}}, 0x0) 2.407992505s ago: executing program 2 (id=633): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280)=ANY=[], 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x1, 0x10}]}, 0x18}}, 0x0) 2.204955602s ago: executing program 3 (id=635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xcc010) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) listen(r0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xcc010) (async) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) listen(r0, 0x1) (async) 2.192029165s ago: executing program 2 (id=636): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8008) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x2000011a) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[], 0x100000530) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000005e40)='cpuacct.usage_all\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/132, 0x84}, {&(0x7f00000005c0)=""/80, 0x50}], 0x2}, 0x7}], 0x1, 0x43, 0x0) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x20000000) unshare(0x20000400) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, r5, 0x36, 0x0, 0x0, @void, @value}, 0x20) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r6, &(0x7f0000005c80)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/28, 0xd}], 0x21, &(0x7f0000000440)=""/127, 0x7f}, 0x7ff}, {{&(0x7f0000000680)=@ax25={{0x3, @rose}, [@rose, @netrom, @remote, @rose, @remote, @rose, @null, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/159, 0x9f}, {&(0x7f0000000940)=""/183, 0xb7}], 0x6, &(0x7f0000000a80)=""/109, 0x6d}, 0x10000}, {{&(0x7f0000002400)=@isdn, 0x80, &(0x7f0000000b00)=[{&(0x7f0000002480)=""/103, 0x67}, {&(0x7f0000002500)=""/105, 0x69}], 0x2, &(0x7f0000002580)=""/207, 0xcf}, 0x3}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002680)=""/53, 0x35}, {&(0x7f00000026c0)=""/156, 0x9c}, {&(0x7f0000002780)=""/138, 0x8a}, {&(0x7f0000002840)=""/3, 0x3}, {&(0x7f0000002880)=""/43, 0xffffffffffffff11}, {&(0x7f00000028c0)=""/223, 0xdf}, {&(0x7f00000029c0)=""/228, 0xe4}], 0x7}, 0x3}, {{&(0x7f0000002b40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002bc0)=""/65, 0x41}, {&(0x7f0000002c40)=""/124, 0x7c}, {&(0x7f0000002cc0)=""/225, 0xe1}, {&(0x7f0000002dc0)=""/131, 0x83}, {&(0x7f0000002e80)=""/47, 0x2f}, {&(0x7f0000002ec0)=""/99, 0x63}, {&(0x7f0000002f40)=""/175, 0xaf}, {&(0x7f0000003000)=""/99, 0x63}], 0x8, &(0x7f0000003100)=""/172, 0xac}, 0x6d}, {{&(0x7f00000031c0)=@isdn, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003240)=""/186, 0xba}, {&(0x7f0000003300)=""/182, 0xb6}, {&(0x7f00000033c0)=""/6, 0x6}, {&(0x7f0000003400)=""/33, 0x21}, {&(0x7f0000003440)=""/13, 0xd}, {&(0x7f0000003480)=""/30, 0x1e}, {&(0x7f00000034c0)=""/144, 0x90}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000003580)=""/39, 0x27}], 0x9, &(0x7f0000003680)=""/117, 0x75}}, {{&(0x7f0000003700)=@nl=@proc, 0x80, &(0x7f0000005b80)=[{&(0x7f0000003780)=""/83, 0x53}, {&(0x7f0000003800)=""/239, 0xef}, {&(0x7f0000004940)=""/248, 0xf8}, {&(0x7f0000004a40)=""/25, 0x19}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/235, 0xeb}], 0x6, &(0x7f0000005c00)=""/119, 0x77}, 0x9}], 0x7, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000002", @ANYRES16=r8, @ANYBLOB="010000000000000000002c0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getpeername(r9, 0x0, 0x0) 2.114780733s ago: executing program 3 (id=637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000140), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000000)={r1, 0x42, "627dc9567106a2e4b56acab606fa6bbc88afafde82aa1ba09a130255ff6c756983e82f5184df241676cdd4264da466edffe6e9cfefc932344310d183db884790633c"}, &(0x7f0000000140)=0x4a) writev(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x944}], 0x1) socketpair(0x2c, 0x1, 0x9, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x70, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.681381738s ago: executing program 0 (id=640): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="140000000400000004000000060000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008e86b4ceb62ba44abe00"/21], 0x48) close(0xffffffffffffffff) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x101, 0x4d7, 0xb0ef6b62719c3d0e, 0x0, 0x8, [{0x7fffffffffffffff, 0x9, 0x81, '\x00', 0x1800}, {0x4, 0x0, 0x168e, '\x00', 0x90a}, {0x5, 0x5, 0x1, '\x00', 0x604}, {0x8, 0x7, 0x1d0ea7fb, '\x00', 0x1802}, {0x101, 0x1, 0x4, '\x00', 0x8}, {0x0, 0x1, 0x3, '\x00', 0x8}, {0x5, 0xd, 0x5c0, '\x00', 0x102}, {0x8, 0x8f, 0x0, '\x00', 0x1400}]}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000001540)={0x2, @short={0x24, 0x1}}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f00000000000100000004"], 0x78}}, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, 0x0, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x29c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x13c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELSET={0x88, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x67fd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc0c}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x34c}, 0x1, 0x0, 0x0, 0xc004}, 0x6000000) getpeername(r1, &(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001180)=0xfffffffffffffe31) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0'}, 0x1f7000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.483705755s ago: executing program 4 (id=641): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) pipe(&(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRESOCT, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) 1.292853088s ago: executing program 4 (id=642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) (async) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x0, 0x2, 0x9, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004e000000711215000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x82}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0x8}, &(0x7f0000000780)=0x8) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000007c0)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x10, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x56}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async, rerun: 64) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x1) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0100f800000082e286b939030dc958e12d04970b9532ece61563d30cf36c45f7ec17000000008000005c334291000000"], 0x18}}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) (rerun: 32) 1.244993922s ago: executing program 2 (id=643): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)=""/243, 0xf3}, {&(0x7f0000000280)=""/117, 0x75}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000600)=""/170, 0xaa}], 0x9, &(0x7f0000000780)=""/133, 0x85}, 0x10001) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001a00)={&(0x7f0000000880)=@qipcrtr, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/46, 0x2e}, {&(0x7f0000000940)=""/93, 0x5d}], 0x2, &(0x7f0000000a00)=""/4096, 0x1000}, 0x2041) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001a40)={0x7fff, {{0x2, 0x4e21, @private=0xa010102}}}, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001c40)={'syztnl0\x00', &(0x7f0000001bc0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x4, 0x10000, 0x4c, @local, @loopback, 0x80, 0x10, 0x1, 0x7ff}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001d40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x350e84b8997f1cf5}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x7) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000003a40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003a00)={&(0x7f0000001dc0)={0x1c30, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x164c, 0x3, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x134, 0xb, 0x0, 0x1, [{0x114, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x104, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_INFO={0x8, 0x3, "a35a1018"}, @NFTA_MATCH_INFO={0xd6, 0x3, "3eb2b4e873497fad546d96ee8e529dfc985755e78bbb39867685c13a7ed10387856a5039d3d49a1c5ef0910175029ec1170613b33d52eacc8aec295b80aa2e0e8cff9eda1d2b0dd2e4f1059c44b6919920c74f84b8f324111172f9bb1ef58ae530549a355b96d1200490a1594e7716a5ed1525951ca00b81af6d0ed54604ddca74cdc0921a4dbec73a443de5af21347957862e92309ab941eb51f7cab9543b6d7e5e20378d590744b9da1f17b2ae704d20ffc6e20234b129d03628196665742bf9bef313c4743c11873984fc152b2878e4c5"}]}}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}]}}}]}]}, {0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x160, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x22, 0x1, "d621dd56e0394f8b45e6d20728545d5132d986c2c0a655316fa72d34f4f0"}, @NFTA_DATA_VALUE={0x7e, 0x1, "00aa78dd7409f5eff40e51071543ec9ba9c3abfcc01e527ee736447de2baa189458b46f10630198d54a9dcc7db8675b0c04f90432dadd8bc1c62977cc0c6b2e2b654a27f9b0146867b4b5df827d4bbd669026d0ec309ce2031516aecda138e3c1398bd88602b9659475e1e6ff5ef2d8edd7d6c1f291ad6c1b1df"}, @NFTA_DATA_VALUE={0x8c, 0x1, "68db6169eaf0c08c2b3f6d58244803e3d63722ee661d81d2aab7b55fa800904865c94166ed5c28ebcb0d996dacecf8311047ffc63a939617480e004970a04f38748d04a9ee8b99cc2f4bb31c2ebe996046b6f48a0955b505bdf8b6344b5177a7ff27dabc364f92d2ce96c089b8f6e92dda992c739c5659ccc24649e836622d21f71c3c26517337cf"}]}]}, {0x132c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}, {0x7c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4d, 0x3, "6ee98c20752a4067e4c9a97accccf3251423d48920424c61a575b478d1e0c25866bd0d39b50e04cfd5076b8010b747245ca53ca9bcda3e800b5493891752a8b1b9482b8882ca6c719b"}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x98}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x27}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xeb}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_ELEM_KEY={0x1138, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x22, 0x1, "f19ec97d86dba398444b78d29c0658fc76381d6f5c212b05eeb8f1eb0619"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x36, 0x1, "dac223ed2a3d7627a75868500c02b625bceaa5eb52d2e338ce36cadb62bb1541225437d22a29360d5527a67ea76ac07a4896"}]}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "49ed3f9a466e8b4a265e6ae6b2eac407b15609743965371bdb9404990e12acbaa3aa7662202ac26e4d2fe7b0c2359fe79189eced55c0cb"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x56c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x35c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x43, 0x1, "7aab6f908a91d8d9237c425abfc17040aeadc8bd7bd9282ec6b42f42f6199b5904f31fb79c45f7c4132023139b35d5c902d171418e246779c4cbbf465dac98"}, @NFTA_DATA_VALUE={0xc7, 0x1, "c23a3a1abcac4ac62ddcbf977eda513e4463d6920fe2f48b9b44ba87f5b7c78d6350df61f55db72fb4363be12b89e18257e370e70ab7a8549f8f144a596ff20cff921ebbe8247ea8735890f23acb1816dcf60f334efa6c5e8b4545c96bef331b23e979e1aff5b965073567d1a4d195780d511884d4f9db1171ad28218eb77f3cd3beace2496ff4de40ee1c24b9efcec1b2b518f68186bb990cef2591831d0fba81a1d2d2158f997fedb6d55b8ae6330a24bb3af26e69161a731b128dbc0e0559576dfb"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "d58adba884003fb032838e9a106c8fd5f7dc0bfb826aed34bd7fef5c217e02dae3a8663dc334d196"}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0x7a, 0x1, "b748324ecf15502e169195936196a73f82810e41c91a6258af1f9ad7ebae89dded5a1915ee2bf2f86f001c1766694a5cceec01cc1b00b9f6ce2409d7a00019d36b44e4045d44190f5a392b88beefb7fc6ea2ef4a83cbb906abbb05b6c2b92ef28a6618fe77f48a6360f652b3b3f6d1e71ba175c460cd"}, @NFTA_DATA_VALUE={0x26, 0x1, "5b9c606d56aa0c056b31649738a71c1b0b4fa988e9ccf3f0d18add1a423b24a31e9d"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "c137ed5a987fb468324e99327435537a0bd9d41bbcaf4396349849c3edf4fab5894ef8ad7419447947fd0b9b8c9409883f5333b4d1f062a34c580656d68abfece8128056acde98441792eca04941b7b8011aa84f7bc770e8fea300c1396485725a58c620af81927f6dacec5d4556585157ee01d8"}, @NFTA_DATA_VALUE={0x10, 0x1, "b284a97f112e78b59a0465f3"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8b89ffdbbecae961}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xf}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x400}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1569}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x85}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1c30}, 0x1, 0x0, 0x0, 0x80}, 0x94) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000003a80)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000003ac0)='cgroup.kill\x00', 0x0, 0x0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003b00)={0x0, 0x1, 0x6, 0x163, @vifc_lcl_addr=@remote, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000003b80)={0x0, 0x38, &(0x7f0000003b40)=[@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in6={0xa, 0x4e21, 0x200, @dev={0xfe, 0x80, '\x00', 0xe}, 0x4}]}, &(0x7f0000003bc0)=0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003ec0)={r0, 0x20, &(0x7f0000003e80)={&(0x7f0000003d80)=""/153, 0x99, 0x0, &(0x7f0000003e40)=""/53, 0x35}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003f40)=@bpf_lsm={0x1d, 0x3, &(0x7f0000003c00)=@raw=[@jmp={0x5, 0x1, 0xb, 0xa, 0x6, 0x0, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}], &(0x7f0000003c40)='syzkaller\x00', 0x0, 0x6e, &(0x7f0000003c80)=""/110, 0x41000, 0x20, '\x00', r4, 0x1b, r7, 0x8, &(0x7f0000003d00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000003d40)={0x5, 0x5, 0xfffffffd, 0x306}, 0x10, r9, 0x0, 0x2, 0x0, &(0x7f0000003f00)=[{0x2, 0x5, 0x2, 0x2}, {0x2, 0x5, 0x10, 0x9}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004080)={r7, 0x58, &(0x7f0000004000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000040c0)={r10, 0x6, 0x8}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000004100)={0x6, 0x5, 0xa, 0x2, 0x8, 0x5, 0x8}, 0xc) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000004180), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000004400)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1d8, r11, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000}, 0x80040) syz_emit_ethernet(0x154, &(0x7f0000004440)={@multicast, @local, @void, {@mpls_uc={0x8847, {[{0x2}, {0x0, 0x0, 0x1}, {0x3a}, {0x9}, {0xf, 0x0, 0x1}, {0xc2}], @ipv4=@tipc={{0x41, 0x4, 0x0, 0x0, 0x12e, 0x65, 0x0, 0x4, 0x6, 0x0, @remote, @empty, {[@rr={0x7, 0x7, 0x6, [@private=0xa010102]}, @end, @cipso={0x86, 0x48, 0x1, [{0x2, 0xf, "bd93ad530411713aef9e3eb73c"}, {0x2, 0xb, "08970b2b3b3f0e3448"}, {0x0, 0x9, "7c0f7d5420b381"}, {0x2, 0x10, "bf63acefb36f8378936ccb770ac3"}, {0x2, 0xf, "ed3dba94200511e6873c48963f"}]}, @ssrr={0x89, 0x1b, 0x8, [@broadcast, @multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101]}, @ssrr={0x89, 0xf, 0x1d, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @ssrr={0x89, 0x2b, 0x2c, [@broadcast, @broadcast, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x49, 0x0, [{0x1, 0xb, "391f0b00948fc03f28"}, {0x6, 0x8, "9296ab86bb20"}, {0x6, 0x6, "2d8f5ed6"}, {0x7, 0xd, "991eeee7e286bdd26daeee"}, {0x2, 0xb, "baf637f801800de454"}, {0x7, 0xa, "aa4bcc165b238d7a"}, {0x5, 0x8, "974c6ddf3465"}]}, @end]}}, @payload_direct={{{{0x2a, 0x0, 0x0, 0x1, 0x1, 0x8, 0x1, 0x2, 0xbc0, 0x0, 0x2, 0x6, 0x4, 0x3, 0x5, 0x8, 0x2, 0x4e20, 0x4e23}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) getpeername(r7, &(0x7f00000045c0)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000004640)=0x80) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000004680)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x1, 0x2, 0x2, {0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00', 0xff}}}, 0x32) sendto$inet6(r7, &(0x7f00000046c0)="f7346b58b741aaea2d6298dd6869e8c4b8f33b182ac291f22bd52aa4063a754a4057aed04978177518f85938e176", 0x2e, 0x8010, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000004700), r13) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000004740)=@assoc_value={r8, 0x3}, 0x8) 1.21933264s ago: executing program 0 (id=644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x14000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x75) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='N-N:N'], 0x6a) connect$qrtr(r4, &(0x7f00000001c0)={0x2a, 0x2, 0x4000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x6, 0x7, 0x42b}) socket$nl_route(0x10, 0x3, 0x0) 1.121085552s ago: executing program 3 (id=645): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.073379404s ago: executing program 4 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) listen(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0xfff7ffff, @loopback, 0xffffffff}, 0xfffffffffffffe75) setsockopt$inet6_tcp_int(r0, 0x6, 0x27, &(0x7f0000000180)=0x1003, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x31, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="fb00000000000000000000000000000000000020d593b671c92cbda8af2108342861db6702eaccef22e36f04a51bf4f8e3bdc0acd924f9ab299fe7e0c7b18436f8a921882ca9886468394287912b2fb5b4c10d2d45b052"], 0x14}}, 0x0) close(r8) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000008000300", @ANYRESDEC=0x0, @ANYBLOB="140050800400060007000000000004002800"], 0x34}}, 0x20044097) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) 758.079835ms ago: executing program 3 (id=647): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000003000000e10000ffffff0400000003066644eb00000000"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@cb_func], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xff, &(0x7f0000000340)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000200), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x41943}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000000000073797a310000000068000000060a010400000000000000000100000000400004803000018008000100636d7000240002801000038009000100b37fe7dd9b000000080001400000000008000240000000010c000180080001006f7366000900010073797a3000000000140000001100010000000000000000000000000a"], 0xdc}}, 0x8090) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@mac={{0x30}, {@random="16f9a936c886"}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 672.749328ms ago: executing program 4 (id=648): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) (async) pipe(&(0x7f0000000300)) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r2 = socket(0xb, 0xa, 0x79a5) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) unshare(0x24020400) (async) pipe(&(0x7f00000004c0)) (async) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$kcm(0xa, 0x3, 0x3a) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="ffff4bdb4135459b", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) pipe(&(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x4) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 633.832895ms ago: executing program 2 (id=649): r0 = socket$nl_crypto(0x10, 0x3, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) r3 = accept4(r0, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x80, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x3, 0xac45, 0x10, @mcast2, @dev={0xfe, 0x80, '\x00', 0x20}, 0x10, 0x30, 0xfffffffc, 0x5}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x48003840}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf2502000000080004f10700000025000500010000001c00068005000200fd00000006000100020000000800030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x9c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0xd}, 0x1c) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/70, 0x46}], 0x1, &(0x7f0000000ac0)=""/191, 0xbf}, 0x1}], 0x1, 0x2000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008100340000000010800084000000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r8 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000005a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6075e70000303a00fe800000000000000000000000000000ff020000000000000000000000000001040090780000000060a3579e00000000fe7f0000000000000000000000000001fe8000000000000000000000000000bb"], 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000015000b"], 0xe8}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) 507.169661ms ago: executing program 4 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x48, 0x1, [@m_skbedit={0x44, 0xc, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x9}}, @TCA_SKBEDIT_MARK={0x8}]}, {0x5, 0x6, "da"}, {0xc, 0xa, {0x0, 0x1}}, {0xc, 0x9}}}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002940), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x30, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e00000038002f800c00020000000000000000002800038008000100000000001c00038006000300000000000600010000000000080002000200000008000300", @ANYRES32=r5], 0x54}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) 260.374445ms ago: executing program 3 (id=651): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000020101010000000000000000000000000a280e057f12b564295e62c67508001a40000000167c00068008010114000500fc010000000000000000000000000000140004002001000000000000000000000000000114000400ff01000000000000000000000000000108000200e000000114000380060001004e200000060002004e20000008000200ac1e01010800010064010100080001007f0000010800035eda6082e8240a0f72c3344409925f4e15437d0963d5d00619eac7c737af9687f4aa6d06147f"], 0xa8}, 0x1, 0x0, 0x0, 0x40001c4}, 0x20008080) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x26, 0x80000, 0x8) recvmsg(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000001540)}}, {{&(0x7f0000001700)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001740)="b5565637b791829b34edcdc82a72f55812f8d2ae44205c36a94a07529ece40810153cfb96bbbefaad8f279e3f11595bad7b4fb30325de182104aa96d1dca33daedc14e", 0x43}, {0x0}, {0x0}, {&(0x7f0000002b80)="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", 0xb7e}, {&(0x7f0000001c00)="f4cc0f10242873b232270b3f54c7409fb24c865e8bcbcf4000a0c9d76b51007e983f7c34b8ba82763d69a5ba4bb22351808ae3b1722e7580", 0x38}], 0x5, &(0x7f0000001d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11}}], 0x50}}, {{&(0x7f0000002340)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002480)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xf, 0x5f, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast]}]}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0xc0}}], 0x3, 0x855) 0s ago: executing program 4 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002cbd7000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020a02020200000a000600080211000000000004002a00"], 0x38}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e47f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$tipc(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.946835][ T5662] vfs_read+0x204/0xbc0 [ 95.951044][ T5662] ? __pfx_lock_release+0x10/0x10 [ 95.956126][ T5662] ? do_sock_setsockopt+0x3e2/0x720 [ 95.961372][ T5662] ? __pfx_vfs_read+0x10/0x10 [ 95.966089][ T5662] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 95.971694][ T5662] ? __fget_files+0x29/0x470 [ 95.976343][ T5662] ? __fget_files+0x3f6/0x470 [ 95.981101][ T5662] ksys_read+0x1a0/0x2c0 [ 95.985395][ T5662] ? __pfx_ksys_read+0x10/0x10 [ 95.990201][ T5662] ? do_syscall_64+0x100/0x230 [ 95.995028][ T5662] ? do_syscall_64+0xb6/0x230 [ 95.999756][ T5662] do_syscall_64+0xf3/0x230 [ 96.004307][ T5662] ? clear_bhb_loop+0x35/0x90 [ 96.009033][ T5662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.014982][ T5662] RIP: 0033:0x7f6b8617c93c [ 96.019439][ T5662] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 96.039106][ T5662] RSP: 002b:00007f6b85bff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.047570][ T5662] RAX: ffffffffffffffda RBX: 00007f6b86335f80 RCX: 00007f6b8617c93c [ 96.055582][ T5662] RDX: 000000000000000f RSI: 00007f6b85bff0a0 RDI: 0000000000000004 [ 96.063609][ T5662] RBP: 00007f6b85bff090 R08: 0000000000000000 R09: 0000000000000000 [ 96.071626][ T5662] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.079643][ T5662] R13: 0000000000000000 R14: 00007f6b86335f80 R15: 00007ffc46d48018 [ 96.087679][ T5662] [ 96.703426][ T5685] netlink: 148 bytes leftover after parsing attributes in process `syz.0.105'. [ 96.754163][ T5684] syzkaller1: entered promiscuous mode [ 96.765210][ T5684] syzkaller1: entered allmulticast mode [ 97.522606][ T5701] netlink: 148 bytes leftover after parsing attributes in process `syz.4.108'. [ 97.692872][ T5714] netlink: 'syz.3.112': attribute type 30 has an invalid length. [ 97.957403][ T5722] netlink: 'syz.3.114': attribute type 10 has an invalid length. [ 98.232308][ T5734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 98.243150][ T5734] netlink: 'syz.3.117': attribute type 7 has an invalid length. [ 98.258691][ T5734] netlink: 'syz.3.117': attribute type 8 has an invalid length. [ 98.266405][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 98.288273][ T5734] gretap0: entered promiscuous mode [ 98.301402][ T5734] batadv_slave_1: entered promiscuous mode [ 98.435485][ T5744] netlink: 148 bytes leftover after parsing attributes in process `syz.4.118'. [ 99.034306][ T5763] veth0_vlan: entered allmulticast mode [ 99.190677][ T5768] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 99.331826][ T5769] netlink: 148 bytes leftover after parsing attributes in process `syz.2.128'. [ 99.429140][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 99.805648][ T5786] trusted_key: syz.2.132 sent an empty control message without MSG_MORE. [ 99.850108][ T5786] netlink: 'syz.2.132': attribute type 13 has an invalid length. [ 99.934945][ T5786] gretap0: refused to change device tx_queue_len [ 99.953794][ T5786] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.301225][ T5800] netlink: 148 bytes leftover after parsing attributes in process `syz.2.136'. [ 100.620340][ T5806] FAULT_INJECTION: forcing a failure. [ 100.620340][ T5806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.683740][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: syz.0.141 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 100.694065][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 100.704157][ T5806] Call Trace: [ 100.707472][ T5806] [ 100.710437][ T5806] dump_stack_lvl+0x241/0x360 [ 100.715171][ T5806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.720413][ T5806] ? __pfx__printk+0x10/0x10 [ 100.725070][ T5806] ? __pfx_lock_release+0x10/0x10 [ 100.730144][ T5806] should_fail_ex+0x3b0/0x4e0 [ 100.734866][ T5806] _copy_from_user+0x2f/0xe0 [ 100.739496][ T5806] copy_msghdr_from_user+0xae/0x680 [ 100.744714][ T5806] ? __pfx___might_resched+0x10/0x10 [ 100.750022][ T5806] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.755856][ T5806] ? __might_fault+0xaa/0x120 [ 100.760559][ T5806] do_recvmmsg+0x40f/0xae0 [ 100.764994][ T5806] ? __pfx_lock_release+0x10/0x10 [ 100.770045][ T5806] ? __pfx_do_recvmmsg+0x10/0x10 [ 100.775014][ T5806] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 100.780942][ T5806] ? ksys_write+0x23e/0x2c0 [ 100.785452][ T5806] ? __pfx_lock_release+0x10/0x10 [ 100.790498][ T5806] ? vfs_write+0x7c4/0xc90 [ 100.794925][ T5806] ? __mutex_unlock_slowpath+0x21d/0x750 [ 100.801019][ T5806] ? __fget_files+0x3f6/0x470 [ 100.805720][ T5806] __x64_sys_recvmmsg+0x199/0x250 [ 100.810758][ T5806] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 100.816312][ T5806] ? do_syscall_64+0x100/0x230 [ 100.821096][ T5806] ? do_syscall_64+0xb6/0x230 [ 100.825790][ T5806] do_syscall_64+0xf3/0x230 [ 100.830310][ T5806] ? clear_bhb_loop+0x35/0x90 [ 100.835000][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.840911][ T5806] RIP: 0033:0x7f6b8617def9 [ 100.845337][ T5806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.864953][ T5806] RSP: 002b:00007f6b85bff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 100.873384][ T5806] RAX: ffffffffffffffda RBX: 00007f6b86335f80 RCX: 00007f6b8617def9 [ 100.881389][ T5806] RDX: 56442b6c7c8d1d9f RSI: 0000000020000700 RDI: 0000000000000003 [ 100.889370][ T5806] RBP: 00007f6b85bff090 R08: 0000000000000000 R09: 0000000000000000 [ 100.897344][ T5806] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 100.905343][ T5806] R13: 0000000000000000 R14: 00007f6b86335f80 R15: 00007ffc46d48018 [ 100.913362][ T5806] [ 100.951592][ T5809] netlink: 148 bytes leftover after parsing attributes in process `syz.4.140'. [ 101.037977][ T5817] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.144'. [ 101.085581][ T5819] netlink: 148 bytes leftover after parsing attributes in process `syz.1.143'. [ 101.558410][ T5828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.146'. [ 101.993478][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.005949][ T5838] team0: Port device bond0 added [ 102.176399][ T5852] FAULT_INJECTION: forcing a failure. [ 102.176399][ T5852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.207359][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz.0.154 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 102.217686][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 102.227786][ T5852] Call Trace: [ 102.231102][ T5852] [ 102.234070][ T5852] dump_stack_lvl+0x241/0x360 [ 102.238811][ T5852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.244066][ T5852] ? __pfx__printk+0x10/0x10 [ 102.248295][ T5858] netlink: 148 bytes leftover after parsing attributes in process `syz.1.153'. [ 102.248687][ T5852] ? __pfx_lock_release+0x10/0x10 [ 102.248736][ T5852] should_fail_ex+0x3b0/0x4e0 [ 102.267414][ T5852] _copy_from_user+0x2f/0xe0 [ 102.272062][ T5852] copy_msghdr_from_user+0xae/0x680 [ 102.277313][ T5852] ? __pfx___might_resched+0x10/0x10 [ 102.282635][ T5852] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 102.288466][ T5852] ? __might_fault+0xaa/0x120 [ 102.293181][ T5852] do_recvmmsg+0x40f/0xae0 [ 102.297664][ T5852] ? irqentry_exit+0x63/0x90 [ 102.302273][ T5852] ? __pfx_do_recvmmsg+0x10/0x10 [ 102.307253][ T5852] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 102.313200][ T5852] ? ksys_write+0x23e/0x2c0 [ 102.317745][ T5852] ? __pfx_lock_release+0x10/0x10 [ 102.322797][ T5852] ? vfs_write+0x7c4/0xc90 [ 102.327237][ T5852] ? __mutex_unlock_slowpath+0x21d/0x750 [ 102.332919][ T5852] ? __fget_files+0x3f6/0x470 [ 102.337663][ T5852] __x64_sys_recvmmsg+0x199/0x250 [ 102.342727][ T5852] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 102.348287][ T5852] ? do_syscall_64+0x100/0x230 [ 102.353093][ T5852] ? do_syscall_64+0xb6/0x230 [ 102.357803][ T5852] do_syscall_64+0xf3/0x230 [ 102.362361][ T5852] ? clear_bhb_loop+0x35/0x90 [ 102.367079][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.373013][ T5852] RIP: 0033:0x7f6b8617def9 [ 102.377487][ T5852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.397117][ T5852] RSP: 002b:00007f6b85bff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 102.405578][ T5852] RAX: ffffffffffffffda RBX: 00007f6b86335f80 RCX: 00007f6b8617def9 [ 102.413573][ T5852] RDX: 56442b6c7c8d1d9f RSI: 0000000020000700 RDI: 0000000000000003 [ 102.421568][ T5852] RBP: 00007f6b85bff090 R08: 0000000000000000 R09: 0000000000000000 [ 102.429567][ T5852] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 102.437549][ T5852] R13: 0000000000000000 R14: 00007f6b86335f80 R15: 00007ffc46d48018 [ 102.445542][ T5852] [ 102.496355][ T5857] team0: Port device bond0 removed [ 102.543341][ T5860] team0: Port device team_slave_0 removed [ 102.568827][ T5860] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 102.651284][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 102.694973][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 102.712160][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 104.071522][ T5913] FAULT_INJECTION: forcing a failure. [ 104.071522][ T5913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.127351][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: syz.1.166 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 104.137683][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 104.148043][ T5913] Call Trace: [ 104.151533][ T5913] [ 104.154493][ T5913] dump_stack_lvl+0x241/0x360 [ 104.159229][ T5913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.164478][ T5913] ? __pfx__printk+0x10/0x10 [ 104.169128][ T5913] ? __pfx_lock_release+0x10/0x10 [ 104.174200][ T5913] should_fail_ex+0x3b0/0x4e0 [ 104.178918][ T5913] _copy_from_user+0x2f/0xe0 [ 104.183544][ T5913] copy_msghdr_from_user+0xae/0x680 [ 104.188786][ T5913] ? __pfx___might_resched+0x10/0x10 [ 104.194115][ T5913] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 104.199978][ T5913] ? __might_fault+0xaa/0x120 [ 104.204703][ T5913] do_recvmmsg+0x40f/0xae0 [ 104.209161][ T5913] ? __pfx_lock_release+0x10/0x10 [ 104.214220][ T5913] ? __pfx_do_recvmmsg+0x10/0x10 [ 104.219185][ T5913] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 104.225094][ T5913] ? ksys_write+0x23e/0x2c0 [ 104.229610][ T5913] ? __pfx_lock_release+0x10/0x10 [ 104.234660][ T5913] ? vfs_write+0x7c4/0xc90 [ 104.239091][ T5913] ? __mutex_unlock_slowpath+0x21d/0x750 [ 104.244839][ T5913] ? __fget_files+0x3f6/0x470 [ 104.249545][ T5913] __x64_sys_recvmmsg+0x199/0x250 [ 104.254594][ T5913] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 104.260150][ T5913] ? do_syscall_64+0x100/0x230 [ 104.264934][ T5913] ? do_syscall_64+0xb6/0x230 [ 104.269628][ T5913] do_syscall_64+0xf3/0x230 [ 104.274159][ T5913] ? clear_bhb_loop+0x35/0x90 [ 104.278947][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.284848][ T5913] RIP: 0033:0x7fe17ed7def9 [ 104.289276][ T5913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.308888][ T5913] RSP: 002b:00007fe17fb77038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 104.317314][ T5913] RAX: ffffffffffffffda RBX: 00007fe17ef35f80 RCX: 00007fe17ed7def9 [ 104.325293][ T5913] RDX: 56442b6c7c8d1d9f RSI: 0000000020000700 RDI: 0000000000000003 [ 104.333270][ T5913] RBP: 00007fe17fb77090 R08: 0000000000000000 R09: 0000000000000000 [ 104.341335][ T5913] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 104.349316][ T5913] R13: 0000000000000000 R14: 00007fe17ef35f80 R15: 00007fff5523c658 [ 104.357309][ T5913] [ 104.688378][ T5925] __nla_validate_parse: 3 callbacks suppressed [ 104.688399][ T5925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.169'. [ 104.745469][ T5925] vlan2: entered promiscuous mode [ 104.833918][ T5933] netlink: 148 bytes leftover after parsing attributes in process `syz.3.170'. [ 105.294280][ T5947] warning: `syz.3.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.365283][ T5949] netlink: 148 bytes leftover after parsing attributes in process `syz.0.176'. [ 105.398080][ T5953] syz.1.175[5953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.398257][ T5953] syz.1.175[5953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.689831][ T5960] FAULT_INJECTION: forcing a failure. [ 105.689831][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.717711][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.2.179 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 105.728029][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 105.738129][ T5960] Call Trace: [ 105.741465][ T5960] [ 105.744435][ T5960] dump_stack_lvl+0x241/0x360 [ 105.749176][ T5960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.754430][ T5960] ? __pfx__printk+0x10/0x10 [ 105.759089][ T5960] ? __pfx_lock_release+0x10/0x10 [ 105.764168][ T5960] should_fail_ex+0x3b0/0x4e0 [ 105.768891][ T5960] _copy_from_user+0x2f/0xe0 [ 105.773530][ T5960] copy_msghdr_from_user+0xae/0x680 [ 105.778777][ T5960] ? __pfx___might_resched+0x10/0x10 [ 105.784117][ T5960] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 105.789990][ T5960] ? __might_fault+0xaa/0x120 [ 105.794756][ T5960] do_recvmmsg+0x40f/0xae0 [ 105.799219][ T5960] ? __pfx_lock_release+0x10/0x10 [ 105.804383][ T5960] ? __pfx_do_recvmmsg+0x10/0x10 [ 105.809382][ T5960] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 105.815328][ T5960] ? ksys_write+0x23e/0x2c0 [ 105.819872][ T5960] ? __pfx_lock_release+0x10/0x10 [ 105.824952][ T5960] ? vfs_write+0x7c4/0xc90 [ 105.829461][ T5960] ? __mutex_unlock_slowpath+0x21d/0x750 [ 105.835177][ T5960] ? __fget_files+0x3f6/0x470 [ 105.839921][ T5960] __x64_sys_recvmmsg+0x199/0x250 [ 105.844999][ T5960] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 105.850592][ T5960] ? do_syscall_64+0x100/0x230 [ 105.855415][ T5960] ? do_syscall_64+0xb6/0x230 [ 105.855764][ T5733] tipc: Subscription rejected, illegal request [ 105.860119][ T5960] do_syscall_64+0xf3/0x230 [ 105.860159][ T5960] ? clear_bhb_loop+0x35/0x90 [ 105.860189][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.860215][ T5960] RIP: 0033:0x7fe62197def9 [ 105.860237][ T5960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.905666][ T5960] RSP: 002b:00007fe6226ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 105.914099][ T5960] RAX: ffffffffffffffda RBX: 00007fe621b35f80 RCX: 00007fe62197def9 [ 105.922079][ T5960] RDX: 56442b6c7c8d1d9f RSI: 0000000020000700 RDI: 0000000000000003 [ 105.930058][ T5960] RBP: 00007fe6226ac090 R08: 0000000000000000 R09: 0000000000000000 [ 105.938036][ T5960] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 105.946011][ T5960] R13: 0000000000000000 R14: 00007fe621b35f80 R15: 00007ffe0d6e2778 [ 105.954004][ T5960] [ 106.218816][ T5971] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 106.405012][ T5975] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.183'. [ 106.505471][ T5980] netlink: 148 bytes leftover after parsing attributes in process `syz.2.184'. [ 106.849073][ T25] IPVS: starting estimator thread 0... [ 106.950950][ T5987] IPVS: using max 16 ests per chain, 38400 per kthread [ 107.005583][ T5989] Cannot find set identified by id 632 to match [ 107.911162][ T6011] netlink: 48 bytes leftover after parsing attributes in process `syz.0.193'. [ 107.937287][ T6011] netlink: 48 bytes leftover after parsing attributes in process `syz.0.193'. [ 108.314085][ T6024] vlan2: entered promiscuous mode [ 108.681977][ T6032] netlink: 148 bytes leftover after parsing attributes in process `syz.2.198'. [ 109.334906][ T5728] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.535766][ T5728] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.659798][ T5728] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.841825][ T5728] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.249842][ T5728] bridge_slave_1: left allmulticast mode [ 110.255946][ T5728] bridge_slave_1: left promiscuous mode [ 110.284311][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.377404][ T5728] bridge_slave_0: left allmulticast mode [ 110.384199][ T5728] bridge_slave_0: left promiscuous mode [ 110.417309][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.626987][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.636111][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.649793][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.667550][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.678788][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.686325][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.860309][ T6073] netlink: 148 bytes leftover after parsing attributes in process `syz.0.209'. [ 111.634698][ T5728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.671134][ T5728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.701768][ T5728] bond0 (unregistering): Released all slaves [ 111.757381][ T6062] netlink: 'syz.2.207': attribute type 4 has an invalid length. [ 111.893188][ T5728] : left promiscuous mode [ 112.123082][ T6085] netlink: 148 bytes leftover after parsing attributes in process `syz.0.211'. [ 112.378163][ T6088] netlink: 36 bytes leftover after parsing attributes in process `syz.4.212'. [ 112.486717][ T6088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 112.512298][ T6088] netlink: 52 bytes leftover after parsing attributes in process `syz.4.212'. [ 112.558913][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 112.620334][ T6088] vlan0: entered allmulticast mode [ 112.625532][ T6088] veth0_vlan: entered allmulticast mode [ 112.717846][ T5240] Bluetooth: hci3: command tx timeout [ 112.907420][ T6107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.215'. [ 113.069117][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 113.110585][ T6114] Bluetooth: MGMT ver 1.23 [ 113.164760][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 113.207628][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 113.292118][ T6107] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 113.311009][ T6107] bond0: entered promiscuous mode [ 113.316302][ T6107] bond_slave_0: entered promiscuous mode [ 113.322335][ T6107] bond_slave_1: entered promiscuous mode [ 113.340374][ T6107] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 113.349057][ T6107] Cannot create hsr debugfs directory [ 113.355432][ T6107] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 113.660477][ T5728] hsr_slave_0: left promiscuous mode [ 113.666405][ T6134] FAULT_INJECTION: forcing a failure. [ 113.666405][ T6134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.679912][ T6134] CPU: 0 UID: 0 PID: 6134 Comm: syz.3.220 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 113.690245][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 113.700324][ T6134] Call Trace: [ 113.703632][ T6134] [ 113.706687][ T6134] dump_stack_lvl+0x241/0x360 [ 113.711393][ T6134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.716618][ T6134] ? __pfx__printk+0x10/0x10 [ 113.721243][ T6134] ? __pfx_lock_release+0x10/0x10 [ 113.726284][ T6134] should_fail_ex+0x3b0/0x4e0 [ 113.730999][ T6134] _copy_from_user+0x2f/0xe0 [ 113.735616][ T6134] copy_msghdr_from_user+0xae/0x680 [ 113.740833][ T6134] ? __pfx___might_resched+0x10/0x10 [ 113.746137][ T6134] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 113.751966][ T6134] ? __might_fault+0xaa/0x120 [ 113.756746][ T6134] do_recvmmsg+0x40f/0xae0 [ 113.761181][ T6134] ? __pfx_lock_release+0x10/0x10 [ 113.766247][ T6134] ? __pfx_do_recvmmsg+0x10/0x10 [ 113.771250][ T6134] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 113.777215][ T6134] ? ksys_write+0x23e/0x2c0 [ 113.781742][ T6134] ? __pfx_lock_release+0x10/0x10 [ 113.786825][ T6134] ? vfs_write+0x7c4/0xc90 [ 113.791262][ T6134] ? __mutex_unlock_slowpath+0x21d/0x750 [ 113.796918][ T6134] ? __fget_files+0x3f6/0x470 [ 113.801626][ T6134] __x64_sys_recvmmsg+0x199/0x250 [ 113.806691][ T6134] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 113.812273][ T6134] ? do_syscall_64+0x100/0x230 [ 113.817078][ T6134] ? do_syscall_64+0xb6/0x230 [ 113.821796][ T6134] do_syscall_64+0xf3/0x230 [ 113.826326][ T6134] ? clear_bhb_loop+0x35/0x90 [ 113.831020][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.836934][ T6134] RIP: 0033:0x7f2acd77def9 [ 113.841451][ T6134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.861257][ T6134] RSP: 002b:00007f2acd1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 113.869696][ T6134] RAX: ffffffffffffffda RBX: 00007f2acd935f80 RCX: 00007f2acd77def9 [ 113.877690][ T6134] RDX: 56442b6c7c8d1d9f RSI: 0000000020000700 RDI: 0000000000000003 [ 113.885669][ T6134] RBP: 00007f2acd1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 113.893672][ T6134] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 113.901752][ T6134] R13: 0000000000000000 R14: 00007f2acd935f80 R15: 00007ffda6325438 [ 113.909764][ T6134] [ 113.922002][ T5728] hsr_slave_1: left promiscuous mode [ 113.940685][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.955114][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.972825][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.995932][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.058416][ T5728] veth1_macvtap: left promiscuous mode [ 114.065026][ T5728] veth0_macvtap: left promiscuous mode [ 114.076629][ T5728] veth1_vlan: left promiscuous mode [ 114.086739][ T5728] veth0_vlan: left promiscuous mode [ 114.797226][ T5240] Bluetooth: hci3: command tx timeout [ 114.955558][ T5728] team0 (unregistering): Port device team_slave_1 removed [ 115.003215][ T5728] team0 (unregistering): Port device team_slave_0 removed [ 115.556006][ T6120] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 115.577691][ T6132] 0: renamed from hsr0 (while UP) [ 115.593653][ T6132] 0: entered allmulticast mode [ 115.604648][ T6132] hsr_slave_0: entered allmulticast mode [ 115.617422][ T6132] hsr_slave_1: entered allmulticast mode [ 115.636338][ T6132] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 115.688071][ T6142] netlink: 'syz.0.224': attribute type 15 has an invalid length. [ 115.862956][ T6070] chnl_net:caif_netlink_parms(): no params data found [ 116.165734][ T6180] __nla_validate_parse: 3 callbacks suppressed [ 116.165756][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 116.222921][ T6180] netlink: 108 bytes leftover after parsing attributes in process `syz.4.231'. [ 116.265224][ T6180] netlink: 108 bytes leftover after parsing attributes in process `syz.4.231'. [ 116.301844][ T6171] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 116.392319][ T6186] FAULT_INJECTION: forcing a failure. [ 116.392319][ T6186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.428507][ T6171] team0: Port device netdevsim0 added [ 116.435883][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.3.232 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 116.446192][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.456284][ T6186] Call Trace: [ 116.459626][ T6186] [ 116.462573][ T6186] dump_stack_lvl+0x241/0x360 [ 116.467282][ T6186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.472594][ T6186] ? __pfx__printk+0x10/0x10 [ 116.477215][ T6186] ? __pfx_lock_release+0x10/0x10 [ 116.482287][ T6186] should_fail_ex+0x3b0/0x4e0 [ 116.486989][ T6186] _copy_from_user+0x2f/0xe0 [ 116.491596][ T6186] copy_msghdr_from_user+0xae/0x680 [ 116.496811][ T6186] ? __pfx___might_resched+0x10/0x10 [ 116.502116][ T6186] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 116.507947][ T6186] ? __might_fault+0xaa/0x120 [ 116.512651][ T6186] do_recvmmsg+0x40f/0xae0 [ 116.517094][ T6186] ? __pfx_lock_release+0x10/0x10 [ 116.522144][ T6186] ? __pfx_do_recvmmsg+0x10/0x10 [ 116.527118][ T6186] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 116.533038][ T6186] ? ksys_write+0x23e/0x2c0 [ 116.537592][ T6186] ? __pfx_lock_release+0x10/0x10 [ 116.542639][ T6186] ? vfs_write+0x7c4/0xc90 [ 116.547097][ T6186] ? __mutex_unlock_slowpath+0x21d/0x750 [ 116.552845][ T6186] ? __fget_files+0x3f6/0x470 [ 116.557556][ T6186] __x64_sys_recvmmsg+0x199/0x250 [ 116.562599][ T6186] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 116.568172][ T6186] ? do_syscall_64+0x100/0x230 [ 116.572975][ T6186] ? do_syscall_64+0xb6/0x230 [ 116.577672][ T6186] do_syscall_64+0xf3/0x230 [ 116.582196][ T6186] ? clear_bhb_loop+0x35/0x90 [ 116.586886][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.592791][ T6186] RIP: 0033:0x7f2acd77def9 [ 116.597216][ T6186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.617002][ T6186] RSP: 002b:00007f2acd1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 116.625426][ T6186] RAX: ffffffffffffffda RBX: 00007f2acd935f80 RCX: 00007f2acd77def9 [ 116.633410][ T6186] RDX: 56442b6c7c8d1d9f RSI: 0000000020000700 RDI: 0000000000000003 [ 116.641492][ T6186] RBP: 00007f2acd1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 116.649471][ T6186] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 116.657452][ T6186] R13: 0000000000000000 R14: 00007f2acd935f80 R15: 00007ffda6325438 [ 116.665632][ T6186] [ 116.753774][ T6185] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 116.787873][ T6185] team0: Port device netdevsim0 removed [ 116.834177][ T6185] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 116.877344][ T5240] Bluetooth: hci3: command tx timeout [ 116.974875][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.027447][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.057757][ T6070] bridge_slave_0: entered allmulticast mode [ 117.078921][ T6070] bridge_slave_0: entered promiscuous mode [ 117.108729][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.119858][ T6207] netlink: 148 bytes leftover after parsing attributes in process `syz.0.235'. [ 117.137313][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.144902][ T6070] bridge_slave_1: entered allmulticast mode [ 117.192059][ T6070] bridge_slave_1: entered promiscuous mode [ 117.313463][ T6211] netlink: 148 bytes leftover after parsing attributes in process `syz.2.237'. [ 117.361583][ T5728] IPVS: stop unused estimator thread 0... [ 117.369687][ T6070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.412481][ T6070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.576844][ T6070] team0: Port device team_slave_0 added [ 117.636944][ T6070] team0: Port device team_slave_1 added [ 117.853408][ T6230] netlink: 148 bytes leftover after parsing attributes in process `syz.4.241'. [ 117.854866][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.911603][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.997414][ T6070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.010734][ T6240] netlink: 'syz.2.243': attribute type 9 has an invalid length. [ 118.042298][ T6240] netlink: 134688 bytes leftover after parsing attributes in process `syz.2.243'. [ 118.064271][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.084462][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.137810][ T6070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.175698][ T6246] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 118.412226][ T6070] hsr_slave_0: entered promiscuous mode [ 118.430602][ T6070] hsr_slave_1: entered promiscuous mode [ 118.957203][ T5240] Bluetooth: hci3: command tx timeout [ 119.042893][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 119.060275][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.252'. [ 119.139614][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 119.601333][ T6299] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 119.704920][ T6304] netlink: 'syz.3.256': attribute type 11 has an invalid length. [ 119.964413][ T6318] netlink: 'syz.4.259': attribute type 21 has an invalid length. [ 120.420941][ T6070] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.464084][ T6070] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.502490][ T6341] gretap0: Device is already in use. [ 120.524036][ T6070] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.572826][ T6345] gretap0: Device is already in use. [ 120.633212][ T6070] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.976936][ T6070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.066939][ T6070] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.149258][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.156560][ T5727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.181644][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.188920][ T5727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.423716][ T6382] xt_hashlimit: max too large, truncated to 1048576 [ 121.676980][ T6400] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 121.695106][ T6400] netlink: 'syz.4.277': attribute type 2 has an invalid length. [ 121.835598][ T6070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.995844][ T6070] veth0_vlan: entered promiscuous mode [ 122.015733][ T6070] veth1_vlan: entered promiscuous mode [ 122.031780][ T6410] netlink: 'syz.4.279': attribute type 1 has an invalid length. [ 122.191129][ T6070] veth0_macvtap: entered promiscuous mode [ 122.250341][ T6070] veth1_macvtap: entered promiscuous mode [ 122.336981][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.377132][ T6421] __nla_validate_parse: 6 callbacks suppressed [ 122.377153][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 122.398541][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.409400][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.420498][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.467427][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.489897][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.507804][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.523951][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.550545][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.579113][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 122.695345][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.730261][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.765881][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.787921][ T6436] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.286'. [ 122.807239][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.820829][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 122.831214][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.841899][ T6436] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.286'. [ 122.851110][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.862703][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.910331][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.916846][ T6441] FAULT_INJECTION: forcing a failure. [ 122.916846][ T6441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.940593][ T6444] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 122.954977][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.956761][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.3.287 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 122.972461][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 122.982535][ T6441] Call Trace: [ 122.985827][ T6441] [ 122.988768][ T6441] dump_stack_lvl+0x241/0x360 [ 122.993476][ T6441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.998748][ T6441] ? __pfx__printk+0x10/0x10 [ 123.003364][ T6441] ? __pfx_lock_release+0x10/0x10 [ 123.008419][ T6441] should_fail_ex+0x3b0/0x4e0 [ 123.013110][ T6441] _copy_from_user+0x2f/0xe0 [ 123.017726][ T6441] copy_msghdr_from_user+0xae/0x680 [ 123.022942][ T6441] ? __pfx___might_resched+0x10/0x10 [ 123.028245][ T6441] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.034115][ T6441] ? __might_fault+0xaa/0x120 [ 123.038812][ T6441] do_recvmmsg+0x40f/0xae0 [ 123.043243][ T6441] ? __pfx_lock_release+0x10/0x10 [ 123.048351][ T6441] ? __pfx_do_recvmmsg+0x10/0x10 [ 123.053318][ T6441] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 123.059231][ T6441] ? ksys_write+0x23e/0x2c0 [ 123.063743][ T6441] ? __pfx_lock_release+0x10/0x10 [ 123.068820][ T6441] ? vfs_write+0x7c4/0xc90 [ 123.073249][ T6441] ? __mutex_unlock_slowpath+0x21d/0x750 [ 123.078900][ T6441] ? __fget_files+0x3f6/0x470 [ 123.083608][ T6441] __x64_sys_recvmmsg+0x199/0x250 [ 123.088644][ T6441] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 123.094206][ T6441] ? do_syscall_64+0x100/0x230 [ 123.099019][ T6441] ? do_syscall_64+0xb6/0x230 [ 123.103723][ T6441] do_syscall_64+0xf3/0x230 [ 123.108247][ T6441] ? clear_bhb_loop+0x35/0x90 [ 123.112939][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.118867][ T6441] RIP: 0033:0x7f2acd77def9 [ 123.123306][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.143191][ T6441] RSP: 002b:00007f2acd1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 123.151626][ T6441] RAX: ffffffffffffffda RBX: 00007f2acd935f80 RCX: 00007f2acd77def9 [ 123.159614][ T6441] RDX: 56442b6c7c8d1d9f RSI: 0000000020000700 RDI: 0000000000000003 [ 123.167611][ T6441] RBP: 00007f2acd1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 123.175585][ T6441] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 123.183689][ T6441] R13: 0000000000000000 R14: 00007f2acd935f80 R15: 00007ffda6325438 [ 123.191690][ T6441] [ 123.215395][ T6070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.234103][ T6070] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.242951][ T6070] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.251779][ T6070] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.342883][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 123.610487][ T6469] netlink: 48 bytes leftover after parsing attributes in process `syz.4.289'. [ 123.620472][ T5728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.662391][ T5728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.689439][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 123.738134][ T6471] netlink: 148 bytes leftover after parsing attributes in process `syz.3.290'. [ 123.870915][ T5732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.901782][ T5732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.774147][ T6530] netlink: 148 bytes leftover after parsing attributes in process `syz.2.294'. [ 124.792848][ T6531] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 126.270899][ T6587] block nbd0: not configured, cannot reconfigure [ 126.451306][ T6594] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 126.703405][ T5732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.759086][ T6601] netlink: 'syz.0.307': attribute type 63 has an invalid length. [ 126.818352][ T6605] syz.0.307 uses old SIOCAX25GETINFO [ 126.989155][ T5732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.214124][ T5732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.422746][ T5732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.479748][ T6621] __nla_validate_parse: 4 callbacks suppressed [ 127.479769][ T6621] netlink: 56 bytes leftover after parsing attributes in process `syz.3.311'. [ 127.777453][ T5732] bridge_slave_1: left allmulticast mode [ 127.799403][ T5732] bridge_slave_1: left promiscuous mode [ 127.817908][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.822153][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.857338][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.867298][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.885789][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.894720][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 127.903144][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.911540][ T5732] bridge_slave_0: left allmulticast mode [ 127.955461][ T5732] bridge_slave_0: left promiscuous mode [ 127.984197][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.430291][ T6645] sctp: [Deprecated]: syz.2.313 (pid 6645) Use of int in maxseg socket option. [ 128.430291][ T6645] Use struct sctp_assoc_value instead [ 129.236267][ T5732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.265867][ T5732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.297805][ T5732] bond0 (unregistering): Released all slaves [ 129.428807][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.927226][ T6667] netlink: 'syz.3.316': attribute type 4 has an invalid length. [ 129.997276][ T5240] Bluetooth: hci3: command tx timeout [ 130.027461][ T5732] hsr_slave_0: left promiscuous mode [ 130.062992][ T5732] hsr_slave_1: left promiscuous mode [ 130.090492][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.125203][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.145483][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.187150][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.228196][ T6673] netlink: 148 bytes leftover after parsing attributes in process `syz.2.317'. [ 130.300877][ T5732] veth1_macvtap: left promiscuous mode [ 130.306494][ T5732] veth0_macvtap: left promiscuous mode [ 130.339175][ T5732] veth1_vlan: left promiscuous mode [ 130.344680][ T5732] veth0_vlan: left promiscuous mode [ 131.698351][ T5732] team0 (unregistering): Port device team_slave_1 removed [ 131.765662][ T5732] team0 (unregistering): Port device team_slave_0 removed [ 132.077240][ T5240] Bluetooth: hci3: command tx timeout [ 132.479080][ T6676] netlink: 'syz.2.318': attribute type 2 has an invalid length. [ 132.524382][ T6678] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 132.550046][ T6680] netlink: 'syz.4.319': attribute type 2 has an invalid length. [ 132.965290][ T6631] chnl_net:caif_netlink_parms(): no params data found [ 133.099174][ T6703] netlink: 'syz.4.324': attribute type 4 has an invalid length. [ 133.122380][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.129330][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.222832][ T6700] netlink: 'syz.4.324': attribute type 4 has an invalid length. [ 133.408865][ T6714] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 133.449932][ T6714] Bluetooth: MGMT ver 1.23 [ 133.474429][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.478811][ T6716] Bluetooth: MGMT ver 1.23 [ 133.486030][ T6716] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 133.494059][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.509796][ T6631] bridge_slave_0: entered allmulticast mode [ 133.529117][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 133.539712][ T6631] bridge_slave_0: entered promiscuous mode [ 133.568114][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.599370][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.631371][ T6631] bridge_slave_1: entered allmulticast mode [ 133.656747][ T6631] bridge_slave_1: entered promiscuous mode [ 133.799436][ T6631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.846849][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 133.885252][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 133.900432][ T6631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.065663][ T6631] team0: Port device team_slave_0 added [ 134.085765][ T6631] team0: Port device team_slave_1 added [ 134.157607][ T5240] Bluetooth: hci3: command tx timeout [ 134.211945][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.256679][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.326551][ T6631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.362148][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.372873][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.424330][ T6631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.633680][ T6631] hsr_slave_0: entered promiscuous mode [ 134.651013][ T6631] hsr_slave_1: entered promiscuous mode [ 135.437729][ T5240] Bluetooth: hci0: command tx timeout [ 135.654814][ T6758] netlink: 104 bytes leftover after parsing attributes in process `syz.3.340'. [ 135.975913][ T6631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.024198][ T6631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.052624][ T6631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.100352][ T6631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.237362][ T5240] Bluetooth: hci3: command tx timeout [ 136.593247][ T6776] macsec1: entered promiscuous mode [ 136.613403][ T6776] macvlan1: entered promiscuous mode [ 136.640884][ T6776] macvlan1: left promiscuous mode [ 136.772183][ T6631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.865386][ T6782] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 136.882453][ T6631] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.933569][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.940822][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.020039][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.027276][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.261407][ T6795] Bluetooth: MGMT ver 1.23 [ 137.286127][ T6799] macvlan2: entered allmulticast mode [ 137.324767][ T6799] veth0_to_hsr: entered promiscuous mode [ 137.333782][ T6799] veth0_to_hsr: entered allmulticast mode [ 137.369159][ T6799] macvlan2: entered promiscuous mode [ 137.378328][ T6790] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 137.418401][ T6799] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 137.509685][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.356'. [ 137.763819][ T6816] tls_set_device_offload_rx: netdev not found [ 137.828223][ T6819] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 137.843731][ T6820] netlink: 148 bytes leftover after parsing attributes in process `syz.0.360'. [ 137.934275][ T6631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.959021][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.359'. [ 138.033929][ T6827] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 138.149318][ T6631] veth0_vlan: entered promiscuous mode [ 138.179761][ T6631] veth1_vlan: entered promiscuous mode [ 138.220652][ T6831] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.364'. [ 138.244153][ T6829] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 138.287475][ T6829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.363'. [ 138.327151][ T6631] veth0_macvtap: entered promiscuous mode [ 138.380904][ T6631] veth1_macvtap: entered promiscuous mode [ 138.474014][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.507142][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.517033][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.554179][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.573725][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.584598][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.609573][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.622005][ T6845] netlink: 'syz.0.367': attribute type 6 has an invalid length. [ 138.638175][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.663298][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.705575][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.731410][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.759810][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.807966][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.836599][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.859663][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.893246][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.911967][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.924579][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.988440][ T6631] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.025772][ T6631] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.057143][ T6631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.066014][ T6631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.304260][ T6864] netlink: 84 bytes leftover after parsing attributes in process `syz.2.372'. [ 139.476752][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.372'. [ 139.896096][ T6880] netlink: 'syz.4.374': attribute type 2 has an invalid length. [ 139.920197][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.948103][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.948735][ T6880] netlink: 244 bytes leftover after parsing attributes in process `syz.4.374'. [ 140.139141][ T5728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.182012][ T6891] netlink: 624 bytes leftover after parsing attributes in process `syz.0.379'. [ 140.193940][ T5728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.745051][ T6908] netlink: 'syz.4.385': attribute type 4 has an invalid length. [ 140.772302][ T6908] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.385'. [ 141.354924][ T6927] netlink: 'syz.0.389': attribute type 29 has an invalid length. [ 141.366748][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 141.484738][ T5728] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.998122][ T5728] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.158820][ T5728] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.310581][ T5728] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.348524][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 142.348956][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.387414][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.392284][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 142.396634][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.412219][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.421718][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.436960][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.674813][ T6963] xt_CT: No such helper "syz0" [ 142.723474][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 142.791198][ T5728] bridge_slave_1: left allmulticast mode [ 142.813208][ T5728] bridge_slave_1: left promiscuous mode [ 142.823762][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.859468][ T5728] bridge_slave_0: left allmulticast mode [ 142.862132][ T6974] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 142.865161][ T5728] bridge_slave_0: left promiscuous mode [ 142.879729][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.888109][ T6974] netlink: 236 bytes leftover after parsing attributes in process `syz.4.399'. [ 144.034597][ T5728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.079051][ T5728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.101712][ T5728] bond0 (unregistering): Released all slaves [ 144.195230][ T7003] tipc: Started in network mode [ 144.217217][ T7003] tipc: Node identity 1, cluster identity 7 [ 144.237790][ T7003] tipc: Node number set to 1 [ 144.477882][ T5244] Bluetooth: hci3: command tx timeout [ 144.578447][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 145.280118][ T5728] hsr_slave_0: left promiscuous mode [ 145.297042][ T5728] hsr_slave_1: left promiscuous mode [ 145.304688][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.317455][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.341837][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.374158][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.413401][ T5728] veth1_macvtap: left promiscuous mode [ 145.422767][ T5728] veth0_macvtap: left promiscuous mode [ 145.431082][ T5728] veth1_vlan: left promiscuous mode [ 145.436554][ T5728] veth0_vlan: left promiscuous mode [ 146.570027][ T5244] Bluetooth: hci3: command tx timeout [ 146.745549][ T5728] team0 (unregistering): Port device team_slave_1 removed [ 146.870605][ T5728] team0 (unregistering): Port device team_slave_0 removed [ 147.865983][ T6955] chnl_net:caif_netlink_parms(): no params data found [ 147.943855][ T7022] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 147.956814][ T7022] macvlan0: entered promiscuous mode [ 147.966257][ T7022] macvlan0: entered allmulticast mode [ 147.991293][ T7022] veth1_vlan: entered allmulticast mode [ 148.034423][ T7022] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 148.044706][ T7023] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 148.054052][ T7023] veth1_vlan: left allmulticast mode [ 148.064832][ T7027] netlink: 'syz.4.413': attribute type 1 has an invalid length. [ 148.332235][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'. [ 148.501660][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.554313][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.587554][ T6955] bridge_slave_0: entered allmulticast mode [ 148.600646][ T6955] bridge_slave_0: entered promiscuous mode [ 148.633741][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.641793][ T5244] Bluetooth: hci3: command tx timeout [ 148.652744][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.660281][ T6955] bridge_slave_1: entered allmulticast mode [ 148.668178][ T6955] bridge_slave_1: entered promiscuous mode [ 148.698163][ T7051] netlink: 148 bytes leftover after parsing attributes in process `syz.4.419'. [ 148.784843][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.804426][ T7057] netlink: 148 bytes leftover after parsing attributes in process `syz.3.420'. [ 148.832193][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.052431][ T6955] team0: Port device team_slave_0 added [ 149.079719][ T7068] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.424'. [ 149.090866][ T6955] team0: Port device team_slave_1 added [ 149.098709][ T7063] netlink: 148 bytes leftover after parsing attributes in process `syz.0.423'. [ 149.122445][ T7068] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 149.315745][ T7079] tipc: Failed to remove unknown binding: 66,1,1/0:1844122631/1844122633 [ 149.330612][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 149.353352][ T7070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.425'. [ 149.365383][ T7079] tipc: Failed to remove unknown binding: 66,1,1/0:1844122631/1844122633 [ 149.366984][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.391165][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.394246][ T7079] tipc: Failed to remove unknown binding: 66,1,1/0:1844122631/1844122633 [ 149.463031][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.509338][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 149.509348][ T7087] netlink: 'syz.2.426': attribute type 63 has an invalid length. [ 149.509368][ T7087] netlink: 48 bytes leftover after parsing attributes in process `syz.2.426'. [ 149.586139][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.621250][ T7076] syzkaller1: entered promiscuous mode [ 149.626799][ T7076] syzkaller1: entered allmulticast mode [ 149.640757][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.650539][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.676920][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.775422][ T6955] hsr_slave_0: entered promiscuous mode [ 149.783131][ T6955] hsr_slave_1: entered promiscuous mode [ 150.170223][ T6955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.188354][ T6955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.198554][ T6955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.208978][ T6955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.301886][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.324526][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.340724][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.347951][ T5732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.364916][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.372109][ T5732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.566812][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.625711][ T6955] veth0_vlan: entered promiscuous mode [ 150.639857][ T6955] veth1_vlan: entered promiscuous mode [ 150.675334][ T6955] veth0_macvtap: entered promiscuous mode [ 150.686340][ T6955] veth1_macvtap: entered promiscuous mode [ 150.712838][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.724562][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.735876][ T5244] Bluetooth: hci3: command tx timeout [ 150.742228][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.752785][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.763185][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.773806][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.784018][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.794500][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.807347][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.823142][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.834450][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.844781][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.855474][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.865681][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.876574][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.886790][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.897934][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.909780][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.931716][ T6955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.940952][ T6955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.950124][ T6955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.959876][ T6955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.035019][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.046868][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.078570][ T5728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.086455][ T5728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.885111][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.607499][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.615885][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.626371][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.635432][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.646939][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.655798][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.830869][ T7097] chnl_net:caif_netlink_parms(): no params data found [ 154.905139][ T7097] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.912692][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.920220][ T7097] bridge_slave_0: entered allmulticast mode [ 154.928276][ T7097] bridge_slave_0: entered promiscuous mode [ 154.936725][ T7097] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.944226][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.951654][ T7097] bridge_slave_1: entered allmulticast mode [ 154.959496][ T7097] bridge_slave_1: entered promiscuous mode [ 154.995978][ T7097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.008834][ T7097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.048781][ T7097] team0: Port device team_slave_0 added [ 155.059478][ T7097] team0: Port device team_slave_1 added [ 155.091460][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.098502][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.124762][ T7097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.139077][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.146062][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.173649][ T7097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.223718][ T7097] hsr_slave_0: entered promiscuous mode [ 155.230855][ T7097] hsr_slave_1: entered promiscuous mode [ 155.239802][ T7097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.247659][ T7097] Cannot create hsr debugfs directory [ 156.189905][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.247564][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.327913][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.420484][ T12] bridge_slave_1: left allmulticast mode [ 156.426324][ T12] bridge_slave_1: left promiscuous mode [ 156.432246][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.442186][ T12] bridge_slave_0: left allmulticast mode [ 156.448734][ T12] bridge_slave_0: left promiscuous mode [ 156.454507][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.717623][ T5240] Bluetooth: hci3: command tx timeout [ 156.845545][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.857640][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.869458][ T12] bond0 (unregistering): Released all slaves [ 157.195279][ T12] hsr_slave_0: left promiscuous mode [ 157.202347][ T12] hsr_slave_1: left promiscuous mode [ 157.208966][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.216410][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.225248][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.232962][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.255528][ T12] veth1_macvtap: left promiscuous mode [ 157.261136][ T12] veth0_macvtap: left promiscuous mode [ 157.266726][ T12] veth1_vlan: left promiscuous mode [ 157.272166][ T12] veth0_vlan: left promiscuous mode [ 157.762985][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.813685][ T12] team0 (unregistering): Port device team_slave_0 removed [ 158.310063][ T7097] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.332965][ T7097] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.349721][ T7097] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.369071][ T7097] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.501625][ T7097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.528278][ T7097] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.552160][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.559368][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.571180][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.578418][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.779578][ T7097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.797785][ T5240] Bluetooth: hci3: command tx timeout [ 158.834334][ T7097] veth0_vlan: entered promiscuous mode [ 158.846610][ T7097] veth1_vlan: entered promiscuous mode [ 158.881972][ T7097] veth0_macvtap: entered promiscuous mode [ 158.893289][ T7097] veth1_macvtap: entered promiscuous mode [ 158.912536][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.926327][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.936875][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.947663][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.958565][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.971005][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.981444][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.995279][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.006833][ T7097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.025079][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.036607][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.047596][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.058408][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.068379][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.079072][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.089202][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.100830][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.112664][ T7097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.128632][ T7097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.138402][ T7097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.147474][ T7097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.156363][ T7097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.228182][ T5732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.236037][ T5732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.273110][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.283079][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.141407][ T2981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.991326][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.000837][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.009000][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.019183][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.027030][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.034945][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.212156][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 163.289440][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.296693][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.304126][ T7110] bridge_slave_0: entered allmulticast mode [ 163.311891][ T7110] bridge_slave_0: entered promiscuous mode [ 163.323102][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.330456][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.338073][ T7110] bridge_slave_1: entered allmulticast mode [ 163.345490][ T7110] bridge_slave_1: entered promiscuous mode [ 163.381699][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.394945][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.435736][ T7110] team0: Port device team_slave_0 added [ 163.444868][ T7110] team0: Port device team_slave_1 added [ 163.475161][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.482293][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.509023][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.521681][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.533505][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.559650][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.606095][ T7110] hsr_slave_0: entered promiscuous mode [ 163.613346][ T7110] hsr_slave_1: entered promiscuous mode [ 164.579171][ T2981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.657374][ T2981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.725047][ T2981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.832407][ T2981] bridge_slave_1: left allmulticast mode [ 164.838264][ T2981] bridge_slave_1: left promiscuous mode [ 164.844018][ T2981] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.853735][ T2981] bridge_slave_0: left allmulticast mode [ 164.860133][ T2981] bridge_slave_0: left promiscuous mode [ 164.865870][ T2981] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.117791][ T5244] Bluetooth: hci3: command tx timeout [ 165.264153][ T2981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.279737][ T2981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.291058][ T2981] bond0 (unregistering): Released all slaves [ 165.508477][ T2981] hsr_slave_0: left promiscuous mode [ 165.514575][ T2981] hsr_slave_1: left promiscuous mode [ 165.526917][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.534575][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.542871][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.550429][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.573463][ T2981] veth1_macvtap: left promiscuous mode [ 165.579587][ T2981] veth0_macvtap: left promiscuous mode [ 165.585196][ T2981] veth1_vlan: left promiscuous mode [ 165.590681][ T2981] veth0_vlan: left promiscuous mode [ 166.113718][ T2981] team0 (unregistering): Port device team_slave_1 removed [ 166.162480][ T2981] team0 (unregistering): Port device team_slave_0 removed [ 166.754602][ T7110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.780842][ T7110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.796454][ T7110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.809029][ T7110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.930458][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.964131][ T7110] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.979193][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.986372][ T5728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.005480][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.012648][ T5732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.197500][ T5244] Bluetooth: hci3: command tx timeout [ 167.224259][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.273370][ T7110] veth0_vlan: entered promiscuous mode [ 167.291954][ T7110] veth1_vlan: entered promiscuous mode [ 167.326228][ T7110] veth0_macvtap: entered promiscuous mode [ 167.337927][ T7110] veth1_macvtap: entered promiscuous mode [ 167.359834][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.370567][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.381226][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.391895][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.402165][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.412843][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.422975][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.433872][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.446161][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.463456][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.474366][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.484643][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.495572][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.506119][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.517006][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.527908][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.539159][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.551251][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.568325][ T7110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.577545][ T7110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.586262][ T7110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.595935][ T7110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.671238][ T5728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.679988][ T5728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.713921][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.722523][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.462356][ T1072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.358586][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.366693][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.376352][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.385526][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.397460][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.405204][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.579378][ T7123] chnl_net:caif_netlink_parms(): no params data found [ 171.653286][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.664814][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.672323][ T7123] bridge_slave_0: entered allmulticast mode [ 171.680406][ T7123] bridge_slave_0: entered promiscuous mode [ 171.689125][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.696285][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.703900][ T7123] bridge_slave_1: entered allmulticast mode [ 171.711647][ T7123] bridge_slave_1: entered promiscuous mode [ 171.746368][ T7123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.759711][ T7123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.798867][ T7123] team0: Port device team_slave_0 added [ 171.808617][ T7123] team0: Port device team_slave_1 added [ 171.848291][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.855507][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.881605][ T7123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.894220][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.901635][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.928748][ T7123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.977422][ T7123] hsr_slave_0: entered promiscuous mode [ 172.019267][ T7123] hsr_slave_1: entered promiscuous mode [ 172.039704][ T7132] Cannot find add_set index 0 as target [ 172.042160][ T7123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.071117][ T7123] Cannot create hsr debugfs directory [ 172.094125][ T7131] delete_channel: no stack [ 172.110769][ T7131] delete_channel: no stack [ 172.298326][ T7145] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.325845][ T7145] netlink: 76 bytes leftover after parsing attributes in process `syz.0.434'. [ 172.396820][ T7148] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.434'. [ 172.430723][ T7145] : entered promiscuous mode [ 172.573528][ T7158] netlink: 148 bytes leftover after parsing attributes in process `syz.3.437'. [ 172.783347][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 172.832830][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 172.867870][ T7176] Bluetooth: MGMT ver 1.23 [ 173.076793][ T1072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.224410][ T1072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.315232][ T1072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.437281][ T5244] Bluetooth: hci3: command tx timeout [ 173.523137][ T1072] bridge_slave_1: left allmulticast mode [ 173.529691][ T1072] bridge_slave_1: left promiscuous mode [ 173.535710][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.550473][ T1072] bridge_slave_0: left allmulticast mode [ 173.561855][ T1072] bridge_slave_0: left promiscuous mode [ 173.568276][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.056562][ T7210] netlink: 148 bytes leftover after parsing attributes in process `syz.0.452'. [ 174.453042][ T1072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.460967][ T7219] sctp: [Deprecated]: syz.3.455 (pid 7219) Use of int in maxseg socket option. [ 174.460967][ T7219] Use struct sctp_assoc_value instead [ 174.484944][ T1072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.498253][ T1072] bond0 (unregistering): Released all slaves [ 174.543312][ T7222] sctp: [Deprecated]: syz.3.455 (pid 7222) Use of int in max_burst socket option. [ 174.543312][ T7222] Use struct sctp_assoc_value instead [ 174.777780][ T7220] pim6reg1: entered promiscuous mode [ 174.789052][ T7220] pim6reg1: entered allmulticast mode [ 174.965520][ T7232] pimreg: entered allmulticast mode [ 175.002501][ T1072] hsr_slave_0: left promiscuous mode [ 175.013167][ T1072] hsr_slave_1: left promiscuous mode [ 175.020250][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.028190][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.040188][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.047756][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.075496][ T1072] veth1_macvtap: left promiscuous mode [ 175.081461][ T1072] veth0_macvtap: left promiscuous mode [ 175.087271][ T1072] veth1_vlan: left promiscuous mode [ 175.092712][ T1072] veth0_vlan: left promiscuous mode [ 175.385692][ T7244] raw_sendmsg: syz.3.460 forgot to set AF_INET. Fix it! [ 175.402747][ T7244] netlink: 44 bytes leftover after parsing attributes in process `syz.3.460'. [ 175.418577][ T7244] netlink: 43 bytes leftover after parsing attributes in process `syz.3.460'. [ 175.434770][ T7244] netlink: 'syz.3.460': attribute type 6 has an invalid length. [ 175.443107][ T7244] netlink: 'syz.3.460': attribute type 5 has an invalid length. [ 175.452190][ T7244] netlink: 43 bytes leftover after parsing attributes in process `syz.3.460'. [ 175.523244][ T5244] Bluetooth: hci3: command tx timeout [ 175.762488][ T1072] team0 (unregistering): Port device team_slave_1 removed [ 175.813018][ T1072] team0 (unregistering): Port device team_slave_0 removed [ 176.281122][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.460'. [ 176.624917][ T7123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.687497][ T7123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.719037][ T7123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.807460][ T7123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.885780][ T7257] dvmrp0: entered allmulticast mode [ 176.906389][ T7261] netlink: 'syz.0.465': attribute type 2 has an invalid length. [ 176.929516][ T7264] : renamed from vlan1 (while UP) [ 177.220565][ T7123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.291997][ T7123] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.340828][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.348207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.396429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.403710][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.490217][ T7290] __nla_validate_parse: 1 callbacks suppressed [ 177.490237][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'. [ 177.575509][ T7123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.597488][ T5244] Bluetooth: hci3: command tx timeout [ 177.608499][ T7123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.644221][ T7296] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.473'. [ 177.744258][ T7301] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 177.940657][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.476'. [ 178.014061][ T7123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.059612][ T7315] hsr_slave_0: left promiscuous mode [ 178.073584][ T7315] hsr_slave_1: left promiscuous mode [ 178.271025][ T7123] veth0_vlan: entered promiscuous mode [ 178.308498][ T7123] veth1_vlan: entered promiscuous mode [ 178.406712][ T7123] veth0_macvtap: entered promiscuous mode [ 178.446156][ T7123] veth1_macvtap: entered promiscuous mode [ 178.514461][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.549639][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.564463][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.589537][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.637206][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.667208][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.709629][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.747266][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.787512][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.689511][ T5244] Bluetooth: hci3: command tx timeout [ 187.115608][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.134900][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.163858][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.196004][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.232353][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.261876][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.293294][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.312915][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.326564][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.345034][ T7351] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 187.365705][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 187.400788][ T7123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.432146][ T7123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.457457][ T7123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.479622][ T7123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.504452][ T7357] netlink: 124 bytes leftover after parsing attributes in process `syz.4.490'. [ 187.547889][ T7357] tipc: Started in network mode [ 187.568151][ T7359] netlink: 96 bytes leftover after parsing attributes in process `syz.4.490'. [ 187.591036][ T7357] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 187.632306][ T7359] netlink: 40 bytes leftover after parsing attributes in process `syz.4.490'. [ 187.667679][ T7357] tipc: Enabled bearer , priority 0 [ 188.469577][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.514216][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.570566][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.583647][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.668864][ T5238] tipc: Node number set to 10922666 [ 189.192248][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.216891][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.233029][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.242735][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.258409][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 189.287770][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.761507][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.970969][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.074289][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.194327][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.285991][ T7397] chnl_net:caif_netlink_parms(): no params data found [ 190.423175][ T12] bridge_slave_1: left allmulticast mode [ 190.438556][ T12] bridge_slave_1: left promiscuous mode [ 190.455048][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.469047][ T12] bridge_slave_0: left allmulticast mode [ 190.474757][ T12] bridge_slave_0: left promiscuous mode [ 190.485155][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.176673][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.185059][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.191477][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.204088][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.213165][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.214521][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.231383][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 191.239947][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.253454][ T12] bond0 (unregistering): Released all slaves [ 191.295334][ T7417] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 191.327285][ T7425] netlink: 'syz.4.504': attribute type 15 has an invalid length. [ 191.358771][ T5240] Bluetooth: hci3: command tx timeout [ 191.551799][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.564118][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.573794][ T7397] bridge_slave_0: entered allmulticast mode [ 191.582712][ T7397] bridge_slave_0: entered promiscuous mode [ 191.635099][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.647523][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.654966][ T7397] bridge_slave_1: entered allmulticast mode [ 191.673197][ T7397] bridge_slave_1: entered promiscuous mode [ 191.736502][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 191.897678][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.907003][ T7447] netlink: 56 bytes leftover after parsing attributes in process `syz.2.510'. [ 191.976343][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.027862][ T12] hsr_slave_0: left promiscuous mode [ 192.040014][ T12] hsr_slave_1: left promiscuous mode [ 192.087441][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.094938][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.148596][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.156083][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.222192][ T12] veth1_macvtap: left promiscuous mode [ 192.237725][ T12] veth0_macvtap: left promiscuous mode [ 192.243550][ T12] veth1_vlan: left promiscuous mode [ 192.277306][ T12] veth0_vlan: left promiscuous mode [ 192.905701][ T12] team0 (unregistering): Port device team_slave_1 removed [ 192.952447][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.289350][ T5244] Bluetooth: hci1: command tx timeout [ 193.447675][ T5244] Bluetooth: hci3: command tx timeout [ 193.455650][ T7397] team0: Port device team_slave_0 added [ 193.469813][ T7397] team0: Port device team_slave_1 added [ 193.575920][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.584588][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.618577][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.657244][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.664268][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.690849][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.838471][ T7397] hsr_slave_0: entered promiscuous mode [ 193.848249][ T7397] hsr_slave_1: entered promiscuous mode [ 194.083716][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 194.182320][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 194.370457][ T7397] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.568410][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.584621][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.594819][ T7397] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.796132][ T7397] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.849567][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.856924][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.868205][ T7426] bridge_slave_0: entered allmulticast mode [ 194.875823][ T7426] bridge_slave_0: entered promiscuous mode [ 194.932667][ T7397] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.971171][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.980541][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.989181][ T7426] bridge_slave_1: entered allmulticast mode [ 194.998118][ T7426] bridge_slave_1: entered promiscuous mode [ 195.091164][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.113037][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.300444][ T7426] team0: Port device team_slave_0 added [ 195.357370][ T5244] Bluetooth: hci1: command tx timeout [ 195.395998][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 195.411572][ T7511] veth0_vlan: entered allmulticast mode [ 195.447495][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 195.496095][ T7426] team0: Port device team_slave_1 added [ 195.518946][ T5244] Bluetooth: hci3: command tx timeout [ 195.568680][ T7511] syz.2.523 (7511) used greatest stack depth: 18224 bytes left [ 195.609334][ T7522] netlink: 'syz.0.525': attribute type 5 has an invalid length. [ 195.734883][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.754465][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.800826][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.815080][ T7397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.828235][ T7534] netlink: 288 bytes leftover after parsing attributes in process `syz.0.527'. [ 195.846066][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.864988][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.896859][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.918500][ T7397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.953303][ T7534] batman_adv: batadv0: Adding interface: macvtap1 [ 195.960295][ T7534] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.989450][ T7534] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 196.034544][ T7397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.064399][ T7397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.183940][ T7426] hsr_slave_0: entered promiscuous mode [ 196.195029][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 196.225945][ T7426] hsr_slave_1: entered promiscuous mode [ 196.261994][ T7426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.277594][ T7426] Cannot create hsr debugfs directory [ 196.405042][ T7555] netlink: 148 bytes leftover after parsing attributes in process `syz.2.532'. [ 196.876121][ T7579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.908479][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.026066][ T7397] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.149206][ T7586] netlink: 'syz.4.542': attribute type 10 has an invalid length. [ 197.181549][ T7586] dummy0: entered promiscuous mode [ 197.195522][ T7586] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 197.229135][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.236405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.311470][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.318707][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.437690][ T5244] Bluetooth: hci1: command tx timeout [ 197.587288][ T7426] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.599214][ T5244] Bluetooth: hci3: command tx timeout [ 197.616811][ T7426] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.643461][ T7426] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.670167][ T7426] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.791843][ T7608] netlink: 'syz.0.548': attribute type 1 has an invalid length. [ 197.807393][ T7608] netlink: 9384 bytes leftover after parsing attributes in process `syz.0.548'. [ 197.872325][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.952129][ T7426] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.974917][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.982326][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.021800][ T7397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.039804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.047002][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.258398][ T7397] veth0_vlan: entered promiscuous mode [ 198.296554][ T7397] veth1_vlan: entered promiscuous mode [ 198.311322][ T7621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 198.337293][ T7622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 198.426743][ T7397] veth0_macvtap: entered promiscuous mode [ 198.462228][ T7397] veth1_macvtap: entered promiscuous mode [ 198.469917][ T7627] Cannot find add_set index 0 as target [ 198.493585][ T7630] Cannot find add_set index 0 as target [ 198.524773][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.543424][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.568386][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.594651][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.607113][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.623559][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.623576][ T5238] IPVS: starting estimator thread 0... [ 198.634709][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.658491][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.706438][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.747398][ T7634] IPVS: using max 16 ests per chain, 38400 per kthread [ 198.760554][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.782008][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.796865][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.815115][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.825296][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.836210][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.846513][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.865722][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.880510][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.936646][ T7397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.962105][ T7397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.977476][ T7397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.996618][ T7397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.056914][ T7426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.202857][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 199.321823][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.353032][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.379111][ T7426] veth0_vlan: entered promiscuous mode [ 199.456377][ T7426] veth1_vlan: entered promiscuous mode [ 199.517411][ T5244] Bluetooth: hci1: command tx timeout [ 199.558408][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.566293][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.729985][ T7426] veth0_macvtap: entered promiscuous mode [ 199.744734][ T7426] veth1_macvtap: entered promiscuous mode [ 199.849345][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.874765][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.897347][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.903929][ T7663] netlink: 68 bytes leftover after parsing attributes in process `syz.3.495'. [ 199.923246][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.942916][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.966412][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.989858][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.017414][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.040395][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.063443][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.091010][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.127023][ T7663] : entered promiscuous mode [ 200.173913][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.214891][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.245218][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.267433][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.290404][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.315543][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.340313][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.358712][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.372660][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.393893][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.424061][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.461576][ T7426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.502166][ T7426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.537194][ T7426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.556197][ T7426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.891484][ T7674] vlan1: entered promiscuous mode [ 201.065758][ T7684] netlink: 76 bytes leftover after parsing attributes in process `syz.0.564'. [ 201.075836][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.563'. [ 201.095712][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 201.126682][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.158311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.257809][ T7684] netlink: 76 bytes leftover after parsing attributes in process `syz.0.564'. [ 201.284451][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 201.305264][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.307470][ T7684] netlink: 76 bytes leftover after parsing attributes in process `syz.0.564'. [ 201.327327][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 201.334608][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.403475][ T7684] netlink: 76 bytes leftover after parsing attributes in process `syz.0.564'. [ 201.696364][ T7705] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3976 [ 201.758174][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 202.072518][ T7724] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 202.196076][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.265281][ T7724] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.295527][ T7732] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 202.321098][ T7732] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 202.386730][ T7726] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 202.411895][ T7726] bond0: (slave team0): Releasing backup interface [ 202.439831][ T7726] bridge0: port 3(team0) entered blocking state [ 202.457380][ T7726] bridge0: port 3(team0) entered disabled state [ 202.474163][ T7726] team0: entered allmulticast mode [ 202.494362][ T7726] team_slave_0: entered allmulticast mode [ 202.513953][ T7726] team_slave_1: entered allmulticast mode [ 202.529121][ T7726] team0: entered promiscuous mode [ 202.547564][ T7726] team_slave_0: entered promiscuous mode [ 202.553478][ T7726] team_slave_1: entered promiscuous mode [ 203.303442][ T1072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.429992][ T1072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.557356][ T1072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.653658][ T1072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.758059][ T1072] bridge_slave_1: left allmulticast mode [ 203.764002][ T1072] bridge_slave_1: left promiscuous mode [ 203.796250][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.854180][ T1072] bridge_slave_0: left allmulticast mode [ 203.867154][ T1072] bridge_slave_0: left promiscuous mode [ 203.875308][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.339779][ T7767] __nla_validate_parse: 64 callbacks suppressed [ 204.339802][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 204.394867][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.409138][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.435750][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.446547][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.457870][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.474870][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.743466][ T1072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.760621][ T1072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.772390][ T1072] bond0 (unregistering): Released all slaves [ 204.874513][ T7763] team0: Device gtp0 is of different type [ 205.336485][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 205.365244][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 205.426725][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 205.831954][ T7800] geneve2: entered promiscuous mode [ 205.847262][ T7800] geneve2: entered allmulticast mode [ 205.948973][ T1072] hsr_slave_0: left promiscuous mode [ 205.963336][ T1072] hsr_slave_1: left promiscuous mode [ 205.985988][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.994542][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.008513][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.023350][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.047149][ T1072] veth1_macvtap: left promiscuous mode [ 206.052820][ T1072] veth0_macvtap: left promiscuous mode [ 206.058724][ T1072] veth1_vlan: left promiscuous mode [ 206.064117][ T1072] veth0_vlan: left promiscuous mode [ 206.560314][ T5244] Bluetooth: hci1: command tx timeout [ 206.670500][ T1072] team0 (unregistering): Port device team_slave_1 removed [ 206.723537][ T1072] team0 (unregistering): Port device team_slave_0 removed [ 207.229202][ T7803] syz_tun: entered promiscuous mode [ 207.235734][ T7803] batadv_slave_0: entered promiscuous mode [ 207.245477][ T7803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.253512][ T7803] Cannot create hsr debugfs directory [ 207.528234][ T7769] chnl_net:caif_netlink_parms(): no params data found [ 207.635138][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'. [ 207.823881][ T7845] netlink: 148 bytes leftover after parsing attributes in process `syz.2.598'. [ 207.936773][ T7847] netlink: 'syz.3.599': attribute type 12 has an invalid length. [ 207.969422][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.988419][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.996303][ T7769] bridge_slave_0: entered allmulticast mode [ 208.006879][ T7769] bridge_slave_0: entered promiscuous mode [ 208.017932][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.025618][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.033627][ T7769] bridge_slave_1: entered allmulticast mode [ 208.044115][ T7769] bridge_slave_1: entered promiscuous mode [ 208.138220][ T7861] netlink: 148 bytes leftover after parsing attributes in process `syz.4.600'. [ 208.191079][ T7865] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 208.220017][ T7865] batman_adv: batadv0: Adding interface: ip6gretap1 [ 208.226670][ T7865] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.264454][ T7865] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 208.281671][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.292009][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 208.300988][ T7864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.312003][ T7864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.323551][ T7864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.333586][ T7864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.341801][ T7864] batman_adv: batadv0: Removing interface: ip6gretap1 [ 208.370771][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.474026][ T7769] team0: Port device team_slave_0 added [ 208.492949][ T7769] team0: Port device team_slave_1 added [ 208.562767][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.570272][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.605010][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.637779][ T5244] Bluetooth: hci1: command tx timeout [ 208.656642][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 208.675172][ T7878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.607'. [ 208.695856][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.707961][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.734449][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.906304][ T7769] hsr_slave_0: entered promiscuous mode [ 208.946955][ T7769] hsr_slave_1: entered promiscuous mode [ 208.964382][ T7769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.984229][ T7769] Cannot create hsr debugfs directory [ 209.092108][ T7896] : entered promiscuous mode [ 209.852126][ T7890] lo speed is unknown, defaulting to 1000 [ 209.864677][ T7890] lo speed is unknown, defaulting to 1000 [ 209.882658][ T7890] lo speed is unknown, defaulting to 1000 [ 209.930000][ T7890] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 209.930274][ T7923] netlink: 'syz.3.608': attribute type 10 has an invalid length. [ 209.974858][ T7890] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 209.988105][ T7923] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 210.023839][ T7890] lo speed is unknown, defaulting to 1000 [ 210.041466][ T7890] lo speed is unknown, defaulting to 1000 [ 210.135046][ T7890] lo speed is unknown, defaulting to 1000 [ 210.144821][ T7890] lo speed is unknown, defaulting to 1000 [ 210.154037][ T7890] lo speed is unknown, defaulting to 1000 [ 210.176690][ T7890] lo speed is unknown, defaulting to 1000 [ 210.201635][ T7890] lo speed is unknown, defaulting to 1000 [ 210.223161][ T7890] lo speed is unknown, defaulting to 1000 [ 210.415749][ T7932] __nla_validate_parse: 1 callbacks suppressed [ 210.415772][ T7932] netlink: 148 bytes leftover after parsing attributes in process `syz.0.619'. [ 210.535076][ T7769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.596629][ T7769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.644173][ T7936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.620'. [ 210.695107][ T7769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.718058][ T5240] Bluetooth: hci1: command tx timeout [ 210.752222][ T7769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.777721][ T7942] lo speed is unknown, defaulting to 1000 [ 212.807693][ T5240] Bluetooth: hci1: command 0x0419 tx timeout [ 212.989582][ T7955] netlink: 'syz.3.625': attribute type 4 has an invalid length. [ 213.012633][ T7959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.626'. [ 213.050860][ T7960] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 213.071669][ T7960] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 213.308574][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.317486][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.338245][ T7978] bridge_slave_1: left allmulticast mode [ 213.344549][ T7978] bridge_slave_1: left promiscuous mode [ 213.351832][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.363057][ T7978] bridge_slave_0: left allmulticast mode [ 213.373080][ T7978] bridge_slave_0: left promiscuous mode [ 213.382615][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.455450][ T7989] netlink: 'syz.4.628': attribute type 3 has an invalid length. [ 213.613126][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.631'. [ 213.734667][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 213.768346][ T7997] batman_adv: batadv0: Adding interface: wlan1 [ 213.776783][ T7997] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.813521][ T7997] batman_adv: batadv0: Interface activated: wlan1 [ 213.877648][ T7997] batman_adv: batadv0: Interface deactivated: wlan1 [ 213.970047][ T7999] batman_adv: batadv0: Removing interface: wlan1 [ 213.995858][ T7997] netlink: 'syz.4.634': attribute type 11 has an invalid length. [ 214.025954][ T8007] wireguard0: entered promiscuous mode [ 214.031917][ T8007] wireguard0: entered allmulticast mode [ 214.073189][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.146929][ T7769] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.201153][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.208402][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.227695][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.234934][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.492412][ T8016] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 214.514929][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.586115][ T7769] veth0_vlan: entered promiscuous mode [ 214.625915][ T7769] veth1_vlan: entered promiscuous mode [ 214.634437][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 214.732514][ T7769] veth0_macvtap: entered promiscuous mode [ 214.752983][ T7769] veth1_macvtap: entered promiscuous mode [ 214.821331][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.850790][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.873628][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.884629][ T5240] Bluetooth: hci1: command 0x0419 tx timeout [ 214.908713][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.920846][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.939085][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.953053][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.965195][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.979352][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.997575][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.020106][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.042446][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.105069][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.141939][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.166962][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.185607][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.199078][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.226326][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.305690][ T7769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.326386][ T7769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.336627][ T7769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.348355][ T7769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.423904][ T8047] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.493397][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 215.532338][ T8047] netlink: 84 bytes leftover after parsing attributes in process `syz.3.647'. [ 215.535883][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 215.569811][ T8047] Cannot find add_set index 0 as target [ 215.645606][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.687301][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.695327][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 215.804371][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.827972][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.002505][ T8065] netlink: 148 bytes leftover after parsing attributes in process `syz.3.651'. [ 216.106683][ T7769] ================================================================== [ 216.114810][ T7769] BUG: KASAN: slab-use-after-free in sco_conn_del+0xa5/0x310 [ 216.122221][ T7769] Write of size 4 at addr ffff888044d0d080 by task syz-executor/7769 [ 216.130312][ T7769] [ 216.132655][ T7769] CPU: 1 UID: 0 PID: 7769 Comm: syz-executor Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 216.143168][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.153226][ T7769] Call Trace: [ 216.156537][ T7769] [ 216.159486][ T7769] dump_stack_lvl+0x241/0x360 [ 216.164193][ T7769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.169419][ T7769] ? __pfx__printk+0x10/0x10 [ 216.174024][ T7769] ? _printk+0xd5/0x120 [ 216.178190][ T7769] ? __virt_addr_valid+0x183/0x530 [ 216.183335][ T7769] ? __virt_addr_valid+0x183/0x530 [ 216.188450][ T7769] print_report+0x169/0x550 [ 216.192962][ T7769] ? __virt_addr_valid+0x183/0x530 [ 216.198075][ T7769] ? __virt_addr_valid+0x183/0x530 [ 216.203186][ T7769] ? __virt_addr_valid+0x45f/0x530 [ 216.208327][ T7769] ? __phys_addr+0xba/0x170 [ 216.212833][ T7769] ? sco_conn_del+0xa5/0x310 [ 216.217432][ T7769] kasan_report+0x143/0x180 [ 216.221970][ T7769] ? sco_conn_del+0xa5/0x310 [ 216.226573][ T7769] kasan_check_range+0x282/0x290 [ 216.231542][ T7769] sco_conn_del+0xa5/0x310 [ 216.235969][ T7769] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 216.241258][ T7769] hci_conn_hash_flush+0xff/0x240 [ 216.246288][ T7769] hci_dev_close_sync+0x9ef/0x11a0 [ 216.251410][ T7769] hci_unregister_dev+0x20b/0x510 [ 216.256463][ T7769] vhci_release+0x83/0xd0 [ 216.260799][ T7769] ? __pfx_vhci_release+0x10/0x10 [ 216.265829][ T7769] __fput+0x24a/0x8a0 [ 216.269866][ T7769] task_work_run+0x24f/0x310 [ 216.274479][ T7769] ? __pfx_task_work_run+0x10/0x10 [ 216.279604][ T7769] ? do_exit+0xa2a/0x27f0 [ 216.284036][ T7769] ? kmem_cache_free+0x145/0x350 [ 216.288984][ T7769] do_exit+0xa2f/0x27f0 [ 216.293148][ T7769] ? __pfx_do_exit+0x10/0x10 [ 216.297942][ T7769] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 216.303953][ T7769] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.310295][ T7769] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.315504][ T7769] ? lockdep_hardirqs_on+0x99/0x150 [ 216.320716][ T7769] do_group_exit+0x207/0x2c0 [ 216.325313][ T7769] __x64_sys_exit_group+0x3f/0x40 [ 216.330341][ T7769] x64_sys_call+0x2634/0x2640 [ 216.335030][ T7769] do_syscall_64+0xf3/0x230 [ 216.339548][ T7769] ? clear_bhb_loop+0x35/0x90 [ 216.344231][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.350131][ T7769] RIP: 0033:0x7f50ef17def9 [ 216.354552][ T7769] Code: Unable to access opcode bytes at 0x7f50ef17decf. [ 216.361657][ T7769] RSP: 002b:00007ffd8691bd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 216.370083][ T7769] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f50ef17def9 [ 216.378084][ T7769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 216.386079][ T7769] RBP: 00007f50ef1dd508 R08: 00007ffd86919b27 R09: 0000000000000003 [ 216.394053][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.402046][ T7769] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd8691bf30 [ 216.410035][ T7769] [ 216.413058][ T7769] [ 216.415377][ T7769] Allocated by task 7898: [ 216.419700][ T7769] kasan_save_track+0x3f/0x80 [ 216.424412][ T7769] __kasan_kmalloc+0x98/0xb0 [ 216.429013][ T7769] __kmalloc_noprof+0x1fc/0x400 [ 216.433865][ T7769] sk_prot_alloc+0xe0/0x210 [ 216.438375][ T7769] sk_alloc+0x38/0x370 [ 216.442442][ T7769] bt_sock_alloc+0x3c/0x340 [ 216.446950][ T7769] sco_sock_create+0xbb/0x390 [ 216.451633][ T7769] bt_sock_create+0x161/0x230 [ 216.456321][ T7769] __sock_create+0x490/0x920 [ 216.460916][ T7769] __sys_socket+0x150/0x3c0 [ 216.465444][ T7769] __x64_sys_socket+0x7a/0x90 [ 216.470239][ T7769] do_syscall_64+0xf3/0x230 [ 216.474751][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.480653][ T7769] [ 216.482985][ T7769] Freed by task 7898: [ 216.486959][ T7769] kasan_save_track+0x3f/0x80 [ 216.491646][ T7769] kasan_save_free_info+0x40/0x50 [ 216.496676][ T7769] poison_slab_object+0xe0/0x150 [ 216.501623][ T7769] __kasan_slab_free+0x37/0x60 [ 216.506394][ T7769] kfree+0x149/0x360 [ 216.510291][ T7769] __sk_destruct+0x479/0x5f0 [ 216.514887][ T7769] sco_sock_release+0x25e/0x320 [ 216.519739][ T7769] sock_close+0xbc/0x240 [ 216.523983][ T7769] __fput+0x24a/0x8a0 [ 216.528030][ T7769] task_work_run+0x24f/0x310 [ 216.532622][ T7769] do_exit+0xa2f/0x27f0 [ 216.536784][ T7769] do_group_exit+0x207/0x2c0 [ 216.541402][ T7769] get_signal+0x16a1/0x1740 [ 216.545906][ T7769] arch_do_signal_or_restart+0x96/0x860 [ 216.551458][ T7769] syscall_exit_to_user_mode+0xc9/0x370 [ 216.557012][ T7769] do_syscall_64+0x100/0x230 [ 216.561615][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.567513][ T7769] [ 216.569850][ T7769] The buggy address belongs to the object at ffff888044d0d000 [ 216.569850][ T7769] which belongs to the cache kmalloc-2k of size 2048 [ 216.583930][ T7769] The buggy address is located 128 bytes inside of [ 216.583930][ T7769] freed 2048-byte region [ffff888044d0d000, ffff888044d0d800) [ 216.597814][ T7769] [ 216.600139][ T7769] The buggy address belongs to the physical page: [ 216.606552][ T7769] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44d08 [ 216.615313][ T7769] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 216.623809][ T7769] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 216.631362][ T7769] page_type: 0xfdffffff(slab) [ 216.636041][ T7769] raw: 00fff00000000040 ffff88801ac42000 dead000000000122 0000000000000000 [ 216.644626][ T7769] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 216.653231][ T7769] head: 00fff00000000040 ffff88801ac42000 dead000000000122 0000000000000000 [ 216.661899][ T7769] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 216.670570][ T7769] head: 00fff00000000003 ffffea0001134201 ffffffffffffffff 0000000000000000 [ 216.679419][ T7769] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 216.688088][ T7769] page dumped because: kasan: bad access detected [ 216.694506][ T7769] page_owner tracks the page as allocated [ 216.700214][ T7769] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7897, tgid 7893 (syz.0.611), ts 209070587879, free_ts 209030896354 [ 216.723154][ T7769] post_alloc_hook+0x1f3/0x230 [ 216.727933][ T7769] get_page_from_freelist+0x2e4c/0x2f10 [ 216.733497][ T7769] __alloc_pages_noprof+0x256/0x6c0 [ 216.738706][ T7769] alloc_slab_page+0x5f/0x120 [ 216.743394][ T7769] allocate_slab+0x5a/0x2f0 [ 216.747901][ T7769] ___slab_alloc+0xcd1/0x14b0 [ 216.752580][ T7769] __slab_alloc+0x58/0xa0 [ 216.756912][ T7769] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 216.763346][ T7769] kmalloc_reserve+0x111/0x2a0 [ 216.768123][ T7769] __alloc_skb+0x1f3/0x440 [ 216.772548][ T7769] netlink_ack+0x13f/0xa30 [ 216.776973][ T7769] audit_receive+0x8ce/0x4110 [ 216.781658][ T7769] netlink_unicast+0x7f6/0x990 [ 216.786427][ T7769] netlink_sendmsg+0x8e4/0xcb0 [ 216.791217][ T7769] __sock_sendmsg+0x221/0x270 [ 216.795910][ T7769] ____sys_sendmsg+0x525/0x7d0 [ 216.800689][ T7769] page last free pid 7893 tgid 7893 stack trace: [ 216.807019][ T7769] free_unref_page+0xd22/0xea0 [ 216.811979][ T7769] __put_partials+0xeb/0x130 [ 216.816580][ T7769] put_cpu_partial+0x17c/0x250 [ 216.821377][ T7769] __slab_free+0x2ea/0x3d0 [ 216.825806][ T7769] qlist_free_all+0x9e/0x140 [ 216.830409][ T7769] kasan_quarantine_reduce+0x14f/0x170 [ 216.835881][ T7769] __kasan_slab_alloc+0x23/0x80 [ 216.840740][ T7769] __kmalloc_noprof+0x1a6/0x400 [ 216.845761][ T7769] tomoyo_encode+0x26f/0x540 [ 216.850374][ T7769] tomoyo_realpath_from_path+0x59e/0x5e0 [ 216.856010][ T7769] tomoyo_path_perm+0x2b7/0x740 [ 216.860866][ T7769] tomoyo_path_symlink+0xde/0x120 [ 216.865896][ T7769] security_path_symlink+0xe3/0x140 [ 216.871100][ T7769] do_symlinkat+0x136/0x3a0 [ 216.875605][ T7769] __x64_sys_symlinkat+0x95/0xb0 [ 216.880554][ T7769] do_syscall_64+0xf3/0x230 [ 216.885080][ T7769] [ 216.887413][ T7769] Memory state around the buggy address: [ 216.893065][ T7769] ffff888044d0cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.901136][ T7769] ffff888044d0d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.909289][ T7769] >ffff888044d0d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.917345][ T7769] ^ [ 216.921428][ T7769] ffff888044d0d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.929501][ T7769] ffff888044d0d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.937587][ T7769] ================================================================== [ 216.950845][ T7769] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 216.958109][ T7769] CPU: 1 UID: 0 PID: 7769 Comm: syz-executor Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 216.968640][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.978725][ T7769] Call Trace: [ 216.982026][ T7769] [ 216.984979][ T7769] dump_stack_lvl+0x241/0x360 [ 216.989704][ T7769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.994950][ T7769] ? __pfx__printk+0x10/0x10 [ 216.999581][ T7769] ? vscnprintf+0x5d/0x90 [ 217.003937][ T7769] panic+0x349/0x860 [ 217.007874][ T7769] ? check_panic_on_warn+0x21/0xb0 [ 217.013016][ T7769] ? __pfx_panic+0x10/0x10 [ 217.017477][ T7769] ? mark_lock+0x9a/0x350 [ 217.021910][ T7769] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 217.027849][ T7769] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 217.033754][ T7769] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 217.040089][ T7769] ? print_report+0x502/0x550 [ 217.044784][ T7769] check_panic_on_warn+0x86/0xb0 [ 217.049727][ T7769] ? sco_conn_del+0xa5/0x310 [ 217.054366][ T7769] end_report+0x77/0x160 [ 217.058626][ T7769] kasan_report+0x154/0x180 [ 217.063142][ T7769] ? sco_conn_del+0xa5/0x310 [ 217.067743][ T7769] kasan_check_range+0x282/0x290 [ 217.072697][ T7769] sco_conn_del+0xa5/0x310 [ 217.077124][ T7769] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 217.082447][ T7769] hci_conn_hash_flush+0xff/0x240 [ 217.087576][ T7769] hci_dev_close_sync+0x9ef/0x11a0 [ 217.092721][ T7769] hci_unregister_dev+0x20b/0x510 [ 217.097863][ T7769] vhci_release+0x83/0xd0 [ 217.102193][ T7769] ? __pfx_vhci_release+0x10/0x10 [ 217.107219][ T7769] __fput+0x24a/0x8a0 [ 217.111224][ T7769] task_work_run+0x24f/0x310 [ 217.115816][ T7769] ? __pfx_task_work_run+0x10/0x10 [ 217.120934][ T7769] ? do_exit+0xa2a/0x27f0 [ 217.125262][ T7769] ? kmem_cache_free+0x145/0x350 [ 217.130207][ T7769] do_exit+0xa2f/0x27f0 [ 217.134369][ T7769] ? __pfx_do_exit+0x10/0x10 [ 217.138980][ T7769] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.144970][ T7769] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.151308][ T7769] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.156511][ T7769] ? lockdep_hardirqs_on+0x99/0x150 [ 217.161808][ T7769] do_group_exit+0x207/0x2c0 [ 217.166419][ T7769] __x64_sys_exit_group+0x3f/0x40 [ 217.171443][ T7769] x64_sys_call+0x2634/0x2640 [ 217.176125][ T7769] do_syscall_64+0xf3/0x230 [ 217.180635][ T7769] ? clear_bhb_loop+0x35/0x90 [ 217.185353][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.191255][ T7769] RIP: 0033:0x7f50ef17def9 [ 217.195674][ T7769] Code: Unable to access opcode bytes at 0x7f50ef17decf. [ 217.202728][ T7769] RSP: 002b:00007ffd8691bd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 217.211175][ T7769] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f50ef17def9 [ 217.219238][ T7769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 217.227210][ T7769] RBP: 00007f50ef1dd508 R08: 00007ffd86919b27 R09: 0000000000000003 [ 217.235187][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.243155][ T7769] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd8691bf30 [ 217.251218][ T7769] [ 217.254618][ T7769] Kernel Offset: disabled [ 217.258943][ T7769] Rebooting in 86400 seconds..