last executing test programs: 1m21.770830616s ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x39}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xdf}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc9}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x20000801) 1m12.53088696s ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x39}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xdf}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc9}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x20000801) 1m2.722258481s ago: executing program 3 (id=625): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write(r1, &(0x7f0000000140)="9dcafc92507b8fb28fdfd1085bf8cbf132c21a362c6e60c9a012e5269849bb7c965dbda99e3ce7b0800a81642a1ede89cf8c88d6294f3707489bd6166060566a6661ec75d294a6b935adab9a1ceeaf54299fb10ef8a6c760490d2163f3b9233ae24d533b6d544d3322a7e70d44b685d7be209f203d40e4bf233376e4bc639f5292d6ccaeed3434bdc1eb4740997fb0a3f762dca4047fa6e47d1a30fe50369547c87ebd368045a5553ee26ea24c88d418e6c8347c26e29014192f08927493edf6b30ca09db15f11d85d2b7e0c8a4722176e8f1cae9dcc449fa7682fa653c025dc16a6a3cec28d985722abfac919c7", 0xee) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r3) 1m2.589987326s ago: executing program 3 (id=626): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000b6a80f26495ae800"/35], 0x48) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000140)=@null) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa101000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m1.951484264s ago: executing program 3 (id=633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1ec, r2, 0x402, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3e600000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe03}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x52, 0x3, "50582a21eecf86037390c87cd90ce811510e77afe1969a08a6d82e34b5fb26de7325b6c629ca648f672e0ae705c5ac46a47ca63c85404b44b8c06b27fc80df90474b1fa24dba13995beed94ab4b2"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "660ae096a8a6ec777b3f9110f0d40c2419e32043c0266e9ef5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x77, 0x3, "42a5fd17f278bbef3db5926a54d8625d4c408d08099f7817f40f8e3f405fdff47f5f918456d621a3d3ca89173ec72f77d489dee1cad8f141536e56038327905e2248cd0680a47aaf6d00fdaa940419f5e4906378a937d85c0d4c978ad840641667134c8a683ac85ea52ffe88fa97b6a01bfa4f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfc8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4044884}, 0x4000008) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x1}}]}, 0x158}}, 0x0) 1m0.254771067s ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x39}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xdf}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc9}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x20000801) 47.729315635s ago: executing program 3 (id=633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1ec, r2, 0x402, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3e600000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe03}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x52, 0x3, "50582a21eecf86037390c87cd90ce811510e77afe1969a08a6d82e34b5fb26de7325b6c629ca648f672e0ae705c5ac46a47ca63c85404b44b8c06b27fc80df90474b1fa24dba13995beed94ab4b2"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "660ae096a8a6ec777b3f9110f0d40c2419e32043c0266e9ef5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x77, 0x3, "42a5fd17f278bbef3db5926a54d8625d4c408d08099f7817f40f8e3f405fdff47f5f918456d621a3d3ca89173ec72f77d489dee1cad8f141536e56038327905e2248cd0680a47aaf6d00fdaa940419f5e4906378a937d85c0d4c978ad840641667134c8a683ac85ea52ffe88fa97b6a01bfa4f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfc8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4044884}, 0x4000008) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x1}}]}, 0x158}}, 0x0) 44.61718928s ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x39}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xdf}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc9}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x20000801) 33.382547979s ago: executing program 3 (id=633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1ec, r2, 0x402, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3e600000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe03}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x52, 0x3, "50582a21eecf86037390c87cd90ce811510e77afe1969a08a6d82e34b5fb26de7325b6c629ca648f672e0ae705c5ac46a47ca63c85404b44b8c06b27fc80df90474b1fa24dba13995beed94ab4b2"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "660ae096a8a6ec777b3f9110f0d40c2419e32043c0266e9ef5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x77, 0x3, "42a5fd17f278bbef3db5926a54d8625d4c408d08099f7817f40f8e3f405fdff47f5f918456d621a3d3ca89173ec72f77d489dee1cad8f141536e56038327905e2248cd0680a47aaf6d00fdaa940419f5e4906378a937d85c0d4c978ad840641667134c8a683ac85ea52ffe88fa97b6a01bfa4f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfc8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4044884}, 0x4000008) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x1}}]}, 0x158}}, 0x0) 30.502619404s ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x39}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xdf}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc9}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x20000801) 17.460996183s ago: executing program 1 (id=992): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000280)=0x40, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14}, {0x14}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x58}}, 0x0) 17.187122992s ago: executing program 1 (id=994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000401c00126ef70b0002800600050088a800fc09000100aaaaaaaaaa000000000000"], 0x48}}, 0x84) r1 = accept(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000180)={{}, {0x2488}, 0x84, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)="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", 0x196, 0x0, &(0x7f0000000500)={0x2, 0xfb, {0x1, 0xc, 0x4c, "fda5951d79611b6e7a38e8943232300cacfdd40aecef1e0c653ad2cbf04e0a01d8598c85f2b0722c5fd42f1e9020114e22b4c89480f5d86361a13b7bf59da7a99f0008a34a6f7419888cf727", 0xa2, "51ce45378675e62901f5f30428c1150233183a2eba24c2ff7adb210272f1096d35f29e39a35a154d87065620ff6dac304625f04b7c6f6ac6975052cefa44efb0b41de7e2827c739b2cc0e08e1dac2724bf86d5884c4ae747fb73b78d81aedd558b32a5490bbbf6f9766a0edae2ff20997e9a5c7a5fd8de850c327ab588a8fc846c144ccaf91ffd80c59e12923c65ee334790781464a803fa525ba603a215a95b358b"}, 0x7c, "762e046413949e9947c0b959514e7e92fc436042304458ef0d80996f903d120ec4ca27528be82f095f02cebb48469cdcb7091e77cd865115089fa84e610372214d538e345f4759108cab683163e0e535110fac8d98b5dd8c8ecbaddb5d0854055cf2c39adbba7bf5eb39f6b40dc070f9be82a9bd2a89fe14ec81213d"}, 0x183}) 17.040664795s ago: executing program 1 (id=996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xb9, &(0x7f00000002c0), &(0x7f0000000080)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16.801913811s ago: executing program 1 (id=999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x18}}], 0x1, 0x4000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = socket(0x10, 0x3, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) recvmmsg(r8, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0xb59c5ebcb75eed54}, 0x2589}], 0x1, 0x40000000, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x8000) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02"], 0x10) close(r5) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x7}, 0x8) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r10, r9, 0x2, 0x6, 0x4000, @void, @value}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFALIASn={0x4}]}, 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x1000, 0x0, &(0x7f0000000e40)="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", &(0x7f0000000040), 0x4, 0x0, 0x27, 0x7e, &(0x7f0000000140)="4c3cc52f4e7cb0a7937573ca7b6e9efa2a8071e9d65bbe6c4abf8ea06273ea35b539fe916faa58", &(0x7f00000005c0)="7c3af3bd05da7ff3aea92120a021ef70d3ffdb4bed8472b7938c6d5f5c09af752f2ceb5c689ce5139dbfd93be7cc0579937cfe953329b0d8312e4b364afc7dd3f6348982eb5bc68658307bbb06f4c6145aabab716e95f0a1df1719e81200b0038646f8dd1db1bf2f292471254b64897daa6bfa7d6596ec084f6915a43444", 0x4, 0x0, 0x6}, 0x50) 16.801384682s ago: executing program 3 (id=633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1ec, r2, 0x402, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3e600000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe03}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x52, 0x3, "50582a21eecf86037390c87cd90ce811510e77afe1969a08a6d82e34b5fb26de7325b6c629ca648f672e0ae705c5ac46a47ca63c85404b44b8c06b27fc80df90474b1fa24dba13995beed94ab4b2"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "660ae096a8a6ec777b3f9110f0d40c2419e32043c0266e9ef5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x77, 0x3, "42a5fd17f278bbef3db5926a54d8625d4c408d08099f7817f40f8e3f405fdff47f5f918456d621a3d3ca89173ec72f77d489dee1cad8f141536e56038327905e2248cd0680a47aaf6d00fdaa940419f5e4906378a937d85c0d4c978ad840641667134c8a683ac85ea52ffe88fa97b6a01bfa4f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfc8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4044884}, 0x4000008) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x1}}]}, 0x158}}, 0x0) 16.460226714s ago: executing program 1 (id=1001): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x5, 0x4) 16.433515254s ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x39}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xdf}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc9}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x20000801) 16.123596311s ago: executing program 1 (id=1004): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000500"/17, @ANYRES16], 0x1c}}, 0x0) 2.669772939s ago: executing program 4 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/76}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xffff}, {0x3, 0xfffe}, {0xffe0, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 2.106704798s ago: executing program 4 (id=1077): unshare(0x2c060000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x10000, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x7600) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES64=r0, @ANYRES8=r1, @ANYRES64=r0, @ANYRES64=r0, @ANYRES8=r1, @ANYRES32=r1, @ANYRES16=r0, @ANYRES64=r0], 0x8c}}, 0x0) (rerun: 32) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 32) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000005c0), 0x10) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 1.807700069s ago: executing program 4 (id=1078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}}, 0x1c}}, 0x0) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000083000000, 0xfffffdef) 1.49535316s ago: executing program 0 (id=1079): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc4, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async, rerun: 32) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) (rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x9, 0x10, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r0}, @cb_func={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x17}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ldst={0x3, 0x3, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x2, 0x7, 0x7, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000440)='syzkaller\x00', 0xffffffff, 0xa7, &(0x7f0000000480)=""/167, 0x40f00, 0x14, '\x00', r5, @cgroup_sock=0x22, r6, 0x8, &(0x7f0000000880)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x3, 0x7fff, 0x6}, 0x10, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r9}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa5, 0xa5, 0x3, [@datasec={0xa, 0x3, 0x0, 0xf, 0x1, [{0x5, 0x6, 0x1ff}, {0x3}, {0x2, 0xdf6, 0x4}], 'J'}, @var={0xd, 0x0, 0x0, 0xe, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0xe, 0x3, 0x2}, @restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @func={0xc, 0x0, 0x0, 0xc, 0x3}, @union={0xd, 0x2, 0x0, 0x5, 0x1, 0x7, [{0x9, 0x3, 0x80}, {0x3, 0x3, 0x7}]}]}, {0x0, [0x30]}}, 0x0, 0xc3, 0x0, 0x1, 0x80, 0x0, @void, @value}, 0x28) (async) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) close(r11) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r13, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r12, &(0x7f0000000300), 0x0}, 0x20) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r8, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00fe0005000000ea482d7d4548e2a8a21d57217d8d975e1baae1f9215121871ca4e472cdb2898588d0720bb0447c0b371c95e2f29b30a5dd65897a6a4bbc8474bfb9bc56b7af79edf28855fa3f34eea37fcc8b71b252ef7345920505e74c1d22046b2f18860788cd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r14}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.257136131s ago: executing program 0 (id=1080): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x31, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa38383f399ad5bd35f21907c7988d1300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x31, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa38383f399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$netlink(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="14010000310001000000000000000000020100800c0000000000000000000000140004"], 0x114}], 0x1}, 0x0) socketpair(0x18, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000008004519002c00000000002f9078ac160001e00000012001880b0018903dcc4f11b80500000007000000000000004a470b12e0feae8efa21d342d869806808128131d4e4239c5a25330ace54ff3a9b31654289c156e322fe619842968ea0859b0bc36b2b4b2038d72884c04c0295f858233621707471898d35430cc4a78e2d052308d1678333df8ce2a8a6b94f8f7c7b9cc9ea9ef343a7adb842514c2d337105d58d"], 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000008004519002c00000000002f9078ac160001e00000012001880b0018903dcc4f11b80500000007000000000000004a470b12e0feae8efa21d342d869806808128131d4e4239c5a25330ace54ff3a9b31654289c156e322fe619842968ea0859b0bc36b2b4b2038d72884c04c0295f858233621707471898d35430cc4a78e2d052308d1678333df8ce2a8a6b94f8f7c7b9cc9ea9ef343a7adb842514c2d337105d58d"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f00000000c0)={r10, 0xb, 0x0, 0xb3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r11, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc004000) 936.570926ms ago: executing program 0 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000002540)={0x7, 'vlan0\x00', {0xb}, 0x90}) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x1, 0x0) (async, rerun: 32) r3 = socket$inet(0x2, 0x80001, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r4, 0x4}, &(0x7f00000000c0)=0x8) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000a40)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) 815.402546ms ago: executing program 4 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @local}}, [0x8000000000000000, 0x9, 0x4, 0xf41, 0x8000000000000000, 0x2c, 0x7, 0x0, 0x100000001, 0x9, 0xa6, 0x2, 0x9, 0x6, 0xb]}, &(0x7f0000000040)=0x100) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0xfffffbff, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4, 0x7fff}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$packet(0x11, 0x1, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000300000000000fc90780a010101ac1414aa050090b439abf5372dc2f8000002000000110000e000000100000000df096b5e746ea0d7228469bca1cb26855c1736dd97aae1cef09e0f7e34b14d2e95b80ba7b6c3f3de5ac39f7b43fe0b17a9851374294f8595bcfaac3a331810902ac347ce5b6daff57ce1665cef95ad73f81c96d9"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 606.794395ms ago: executing program 0 (id=1083): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000006, 0x40010, 0xffffffffffffffff, 0x42f6b000) (async) recvfrom$x25(r2, &(0x7f0000000500)=""/217, 0xd9, 0x2, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x200}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r9 = socket$inet6(0xa, 0x6, 0x0) listen(r9, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, 0x2a, 0x9, 0xfffffffc, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x125, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x40}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000001000000090000004a00000020fcff00a777082a9046b7b2cfbb48eb6e886420439f52163ce7ebf608f3ac9bda5e70e3f818da9773be9a2c43c88ebdb15ab7ee000deac76f3edce0f39313c470f6020ef2a6227a32d2c3c6883a714cfe6a0083756887e616194c85dc97b6e343e05446a60d3752f1098b6684075f28b064dbeffe5ee1402219a87796cc930fd741f1343b5062e3686dc1fe6a0877738184c1d89ab8c82d54a3b260511e13fbb198714a5138be412ee8ff5aed48f0d995936445958ff69deb291f00eddec93e12ed063df5e4ae934bdb28bf19c5554cfd4dc60ebed20ee18a95", @ANYRES32=r4, @ANYBLOB="ff7f00"/20, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0100000005000000040000000500"/28], 0x50) (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000100000a0000000000955c9bc8ee99bfbc986b2481c00d7740b96084dc376bd8be"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r12, @ANYBLOB="0e00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="714ecf0dac81744ca318782babf8b4181314959ff14d69a7949ef0552eeca552d42fd9036106748092513933659e34658c54298ac3058a934be390fbc98acd29516e7c0aec523e2b98d971db282bee13312b300ff4ac2c87636d9ef94ef86ee9f9c7b74f877aff41b14f167a7e50770678", @ANYRES64=0x0], 0x20) (async, rerun: 32) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050040a98ac44fba956500f7e89983de7c0b95d8", @ANYRES32=r11, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000000000000000000000400000091100600000000009500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x3, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r13, &(0x7f0000000700), &(0x7f0000000600)=@udp6=r14}, 0x20) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 419.756029ms ago: executing program 4 (id=1084): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000000000000000000000400000091100600000000009500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x1b, 0x8a, 0x4000069}, 0x2c) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e35f41b193ff79bc71ec6a6bc3d57886de3d7b4c98c6464757da46bf"}}]}]}, 0x5c}}, 0x824) (async) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0x1000, 0x6, 0x10001}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1bee49cac564740842eca90000", @ANYRES16=r5, @ANYRESHEX], 0xac}, 0x1, 0x0, 0x0, 0x20001080}, 0x8040) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x2004c050) (async) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 211.467657ms ago: executing program 0 (id=1085): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000040)) (async, rerun: 64) setsockopt$inet_mreqsrc(r0, 0x11, 0x28, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) (rerun: 64) r4 = socket(0x15, 0x80002, 0xfffffffc) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)="ff57", 0x2}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) 211.149077ms ago: executing program 4 (id=1086): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20315}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x4) 0s ago: executing program 0 (id=1087): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x7f, 0x2, 0x0, 0x4006, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000690003"], 0x18}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x34000}], 0x1}, 0x0) close(r0) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) kernel console output (not intermixed with test programs): ated: batadv_slave_0 [ 87.776944][ T7070] netlink: 'syz.4.334': attribute type 30 has an invalid length. [ 87.832879][ T7070] __nla_validate_parse: 9 callbacks suppressed [ 87.832899][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 88.250994][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.339'. [ 88.275919][ T7097] netlink: 52 bytes leftover after parsing attributes in process `syz.3.339'. [ 88.284838][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 88.302958][ T7097] vlan0: entered allmulticast mode [ 88.309664][ T7097] veth0_vlan: entered allmulticast mode [ 88.319330][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.328961][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.352434][ T7036] bridge_slave_0: entered allmulticast mode [ 88.376315][ T7036] bridge_slave_0: entered promiscuous mode [ 88.390014][ T7105] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.550094][ T11] hsr_slave_0: left promiscuous mode [ 88.585617][ T11] hsr_slave_1: left promiscuous mode [ 88.595983][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.605842][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.609071][ T5840] Bluetooth: hci3: command tx timeout [ 88.622391][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.631490][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.672836][ T11] veth1_macvtap: left promiscuous mode [ 88.687105][ T11] veth0_macvtap: left promiscuous mode [ 88.692706][ T11] veth1_vlan: left promiscuous mode [ 88.707942][ T11] veth0_vlan: left promiscuous mode [ 88.718670][ T7134] netlink: 'syz.3.348': attribute type 3 has an invalid length. [ 88.734103][ T7134] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.348'. [ 89.124715][ T11] team0 (unregistering): Port device team_slave_1 removed [ 89.163754][ T11] team0 (unregistering): Port device team_slave_0 removed [ 89.509620][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.517119][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.524379][ T7036] bridge_slave_1: entered allmulticast mode [ 89.532731][ T7036] bridge_slave_1: entered promiscuous mode [ 89.667346][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.700152][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.882565][ T7036] team0: Port device team_slave_0 added [ 89.911190][ T7036] team0: Port device team_slave_1 added [ 90.685741][ T5840] Bluetooth: hci3: command tx timeout [ 90.851504][ T7155] IPVS: Error connecting to the multicast addr [ 90.948502][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.975305][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.088401][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.130237][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.155151][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.214014][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.380919][ T7181] netlink: zone id is out of range [ 91.411260][ T7036] hsr_slave_0: entered promiscuous mode [ 91.418198][ T7181] netlink: zone id is out of range [ 91.436373][ T7181] netlink: zone id is out of range [ 91.451601][ T7036] hsr_slave_1: entered promiscuous mode [ 91.453293][ T7185] netlink: zone id is out of range [ 91.471981][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.477374][ T7181] netlink: zone id is out of range [ 91.483080][ T7036] Cannot create hsr debugfs directory [ 91.494765][ T7185] netlink: zone id is out of range [ 91.546709][ T7185] netlink: del zone limit has 4 unknown bytes [ 91.567775][ T7181] netlink: set zone limit has 4 unknown bytes [ 92.034911][ T7214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.371'. [ 92.085425][ T7214] netlink: 43 bytes leftover after parsing attributes in process `syz.0.371'. [ 92.120350][ T7219] IPVS: set_ctl: invalid protocol: 43 172.20.20.11:21 [ 92.130908][ T7214] netlink: 'syz.0.371': attribute type 6 has an invalid length. [ 92.153280][ T7214] netlink: 43 bytes leftover after parsing attributes in process `syz.0.371'. [ 92.339365][ T7225] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 92.351746][ T7225] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 92.361400][ T7225] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 92.370950][ T7225] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 92.380348][ T7225] geneve2: entered promiscuous mode [ 92.400439][ T7225] geneve2: entered allmulticast mode [ 92.425515][ T7229] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 92.433200][ T7229] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.376'. [ 92.512478][ T7235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.601827][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 92.614281][ T7234] netlink: 'syz.1.377': attribute type 3 has an invalid length. [ 92.631343][ T7234] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.640663][ T7234] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.649580][ T7234] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.658362][ T7234] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.776773][ T5840] Bluetooth: hci3: command tx timeout [ 92.999917][ T7036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.023243][ T7036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.036089][ T7036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.045266][ T7258] netlink: 'syz.1.384': attribute type 9 has an invalid length. [ 93.053017][ T7258] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.384'. [ 93.062543][ T7258] openvswitch: netlink: Message has 8 unknown bytes. [ 93.088650][ T7036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.301843][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.321449][ T7268] netlink: 'syz.0.386': attribute type 14 has an invalid length. [ 93.383171][ T7269] netlink: 'syz.0.386': attribute type 14 has an invalid length. [ 93.486153][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.522156][ T7280] netlink: 'syz.4.389': attribute type 4 has an invalid length. [ 93.613089][ T7287] xt_l2tp: unknown flags: 18 [ 93.631587][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.638789][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.659468][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.666683][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.059443][ T7311] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.394'. [ 94.097293][ T7311] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 94.125632][ T7311] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.394'. [ 94.171558][ T7317] team0: Device sit1 is of different type [ 94.236953][ T7316] netlink: 'syz.0.395': attribute type 4 has an invalid length. [ 94.269443][ T7308] netlink: 'syz.1.394': attribute type 10 has an invalid length. [ 94.302453][ T7308] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 94.397969][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.473812][ T7333] netlink: 44 bytes leftover after parsing attributes in process `syz.4.400'. [ 94.509113][ T7333] netlink: 43 bytes leftover after parsing attributes in process `syz.4.400'. [ 94.536815][ T7333] netlink: 'syz.4.400': attribute type 6 has an invalid length. [ 94.544512][ T7333] netlink: 'syz.4.400': attribute type 5 has an invalid length. [ 94.552170][ T7036] veth0_vlan: entered promiscuous mode [ 94.572265][ T7036] veth1_vlan: entered promiscuous mode [ 94.603685][ T7333] netlink: 43 bytes leftover after parsing attributes in process `syz.4.400'. [ 94.666857][ T7036] veth0_macvtap: entered promiscuous mode [ 94.678902][ T7350] net_ratelimit: 1 callbacks suppressed [ 94.678920][ T7350] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 94.732952][ T7036] veth1_macvtap: entered promiscuous mode [ 94.845451][ T5840] Bluetooth: hci3: command tx timeout [ 94.891585][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.931920][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.944217][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.963305][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.981311][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.994409][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.015577][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.056263][ T7376] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 95.075482][ T7376] hsr0: entered promiscuous mode [ 95.120348][ T7376] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 95.163490][ T7376] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 95.203825][ T7376] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 95.234320][ T7376] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 95.251734][ T7353] veth0_to_hsr: entered promiscuous mode [ 95.258586][ T7386] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 95.259747][ T7353] veth0_to_hsr: left promiscuous mode [ 95.272458][ T7386] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.409'. [ 95.290375][ T7389] netlink: 68 bytes leftover after parsing attributes in process `syz.4.407'. [ 95.383390][ T7363] hsr_slave_0 (unregistering): left promiscuous mode [ 95.398864][ T7371] netlink: 64 bytes leftover after parsing attributes in process `syz.0.406'. [ 95.434179][ T7371] netlink: 64 bytes leftover after parsing attributes in process `syz.0.406'. [ 95.480129][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.528671][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.552640][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.563714][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.585180][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.627928][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.651966][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.664685][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.679652][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.747416][ T7036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.767925][ T7036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.785597][ T7036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.817357][ T7036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.961968][ T7420] pim6reg1: entered promiscuous mode [ 96.010158][ T7420] pim6reg1: entered allmulticast mode [ 96.073420][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.105114][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.238502][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.277581][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.361205][ T7440] bond0: entered promiscuous mode [ 96.372304][ T7440] bond_slave_0: entered promiscuous mode [ 96.378928][ T7440] bond_slave_1: entered promiscuous mode [ 96.690444][ T7461] veth1: entered promiscuous mode [ 96.707672][ T7463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.728440][ T7463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.740684][ T7465] netlink: 'syz.3.424': attribute type 11 has an invalid length. [ 96.749677][ T7465] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 96.978440][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.999955][ T7473] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 97.099674][ T7473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.121062][ T7476] bond1: (slave bridge1): making interface the new active one [ 97.136120][ T7476] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 97.280044][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.289624][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.302601][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.311198][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.333708][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.341621][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.349513][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.392523][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.453225][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.543136][ T7480] chnl_net:caif_netlink_parms(): no params data found [ 97.669029][ T11] bridge_slave_1: left allmulticast mode [ 97.674845][ T11] bridge_slave_1: left promiscuous mode [ 97.684961][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.696810][ T11] bridge_slave_0: left allmulticast mode [ 97.702492][ T11] bridge_slave_0: left promiscuous mode [ 97.709139][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.898274][ T7496] openvswitch: netlink: Actions may not be safe on all matching packets [ 97.972336][ T7498] Cannot find add_set index 0 as target [ 98.151096][ T7506] __nla_validate_parse: 1 callbacks suppressed [ 98.151115][ T7506] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.432'. [ 98.280206][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.291970][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.307831][ T11] bond0 (unregistering): Released all slaves [ 98.324566][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.332464][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.340436][ T7480] bridge_slave_0: entered allmulticast mode [ 98.348943][ T7480] bridge_slave_0: entered promiscuous mode [ 98.357684][ T7504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.432'. [ 98.467840][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.480097][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.497015][ T7480] bridge_slave_1: entered allmulticast mode [ 98.505907][ T7480] bridge_slave_1: entered promiscuous mode [ 98.593172][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.437'. [ 98.731544][ T7480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.792613][ T7480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.905524][ T7527] netlink: 44 bytes leftover after parsing attributes in process `syz.3.439'. [ 99.064676][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 99.121996][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 99.203239][ T7480] team0: Port device team_slave_0 added [ 99.265340][ T11] hsr_slave_0: left promiscuous mode [ 99.283566][ T11] hsr_slave_1: left promiscuous mode [ 99.303143][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.325419][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.336337][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.344564][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.390708][ T11] veth1_macvtap: left promiscuous mode [ 99.396514][ T11] veth0_macvtap: left promiscuous mode [ 99.402319][ T11] veth1_vlan: left promiscuous mode [ 99.410168][ T5840] Bluetooth: hci3: command tx timeout [ 99.420781][ T11] veth0_vlan: left promiscuous mode [ 99.890300][ T11] team0 (unregistering): Port device team_slave_1 removed [ 99.940857][ T11] team0 (unregistering): Port device team_slave_0 removed [ 100.330277][ T7480] team0: Port device team_slave_1 added [ 100.383705][ T7573] netlink: 144 bytes leftover after parsing attributes in process `syz.3.447'. [ 100.529361][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.544365][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.583608][ T7480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.597617][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.604765][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.633064][ T7480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.662124][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 101.009696][ T7480] hsr_slave_0: entered promiscuous mode [ 101.062994][ T7480] hsr_slave_1: entered promiscuous mode [ 101.070505][ T7480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.082158][ T7480] Cannot create hsr debugfs directory [ 101.090912][ T7605] validate_nla: 1 callbacks suppressed [ 101.090931][ T7605] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 101.139377][ T7605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.436355][ T7628] netlink: 'syz.3.460': attribute type 21 has an invalid length. [ 101.448181][ T7627] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 101.485502][ T5840] Bluetooth: hci3: command tx timeout [ 101.502157][ T7627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.577243][ T7639] netlink: 56 bytes leftover after parsing attributes in process `syz.0.461'. [ 101.606559][ T5887] IPVS: starting estimator thread 0... [ 101.670169][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 101.706851][ T7646] IPVS: using max 18 ests per chain, 43200 per kthread [ 102.067289][ T7671] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 102.121840][ T7674] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 102.368528][ T7686] IPv6: sit1: Disabled Multicast RS [ 102.518324][ T7480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.540698][ T7480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.598674][ T7480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.664645][ T7480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.957909][ T7480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.120228][ T7480] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.153544][ T7480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.164223][ T7480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.184234][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.191429][ T6462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.258761][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.265952][ T6462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.349900][ T7725] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 103.374718][ T7725] __nla_validate_parse: 8 callbacks suppressed [ 103.374736][ T7725] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.484'. [ 103.396253][ T7725] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 103.569195][ T5840] Bluetooth: hci3: command tx timeout [ 103.614133][ T7480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.736924][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 103.803319][ T7480] veth0_vlan: entered promiscuous mode [ 103.859743][ T7480] veth1_vlan: entered promiscuous mode [ 103.974202][ T7480] veth0_macvtap: entered promiscuous mode [ 104.003600][ T7774] netlink: 792 bytes leftover after parsing attributes in process `syz.1.491'. [ 104.029941][ T7480] veth1_macvtap: entered promiscuous mode [ 104.047530][ T7774] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 104.089847][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.120617][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.161846][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.179891][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.215604][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.228106][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.240890][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.305361][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.345442][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.395195][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.415808][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.428530][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.439674][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.451515][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.469802][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.501921][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.573689][ T7480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.592204][ T7480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.601661][ T7480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.612551][ T7805] Cannot find add_set index 4 as target [ 104.619132][ T7480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.643594][ T7793] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 104.907163][ T6483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.965043][ T6483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.047845][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.076890][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.092714][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.443624][ T7840] netlink: 'syz.4.507': attribute type 32 has an invalid length. [ 105.469976][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 105.496010][ T7840] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 105.551384][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 105.563035][ T7838] bridge_slave_1: left allmulticast mode [ 105.571615][ T7838] bridge_slave_1: left promiscuous mode [ 105.578788][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.612906][ T7838] bridge_slave_0: left allmulticast mode [ 105.621003][ T7838] bridge_slave_0: left promiscuous mode [ 105.628411][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.680941][ T7853] xt_CT: No such helper "snmp" [ 105.789876][ T7853] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 105.798971][ T7853] netlink: 'syz.1.509': attribute type 2 has an invalid length. [ 105.967338][ T7870] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.514'. [ 106.313292][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.692312][ T7908] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 106.795908][ T7914] sch_fq: defrate 0 ignored. [ 107.141335][ T7919] team0: Port device team_slave_0 removed [ 107.213574][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.219131][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.245339][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.254195][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.263694][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.274443][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.284436][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.525803][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.588611][ T7952] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.530'. [ 107.675497][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 107.725463][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 107.839598][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.891255][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 107.901333][ T7933] chnl_net:caif_netlink_parms(): no params data found [ 108.436944][ T11] bridge_slave_1: left allmulticast mode [ 108.442733][ T11] bridge_slave_1: left promiscuous mode [ 108.449353][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.493229][ T11] bridge_slave_0: left allmulticast mode [ 108.499428][ T11] bridge_slave_0: left promiscuous mode [ 108.511733][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.862465][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.874269][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.886000][ T11] bond0 (unregistering): Released all slaves [ 108.896286][ T8003] __nla_validate_parse: 4 callbacks suppressed [ 108.896304][ T8003] netlink: 2 bytes leftover after parsing attributes in process `syz.3.538'. [ 109.043357][ T8003] veth0_vlan (unregistering): left allmulticast mode [ 109.097811][ T8012] vlan2: entered promiscuous mode [ 109.411049][ T5840] Bluetooth: hci3: command tx timeout [ 109.418365][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.426209][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.438125][ T7933] bridge_slave_0: entered allmulticast mode [ 109.445332][ T7933] bridge_slave_0: entered promiscuous mode [ 109.453486][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.463437][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.470737][ T7933] bridge_slave_1: entered allmulticast mode [ 109.478341][ T7933] bridge_slave_1: entered promiscuous mode [ 109.771009][ T8059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.808393][ T8059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.880595][ T7933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.910769][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 109.984029][ T7933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.228487][ T11] hsr_slave_0: left promiscuous mode [ 110.234699][ T11] hsr_slave_1: left promiscuous mode [ 110.253328][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.266548][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.279633][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.295341][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.332496][ T8090] netlink: zone id is out of range [ 110.337202][ T11] veth1_macvtap: left promiscuous mode [ 110.338614][ T8090] netlink: zone id is out of range [ 110.354441][ T11] veth0_macvtap: left promiscuous mode [ 110.355388][ T8090] netlink: zone id is out of range [ 110.367519][ T11] veth1_vlan: left promiscuous mode [ 110.373018][ T11] veth0_vlan: left promiscuous mode [ 110.376429][ T8090] netlink: zone id is out of range [ 110.405531][ T8090] netlink: zone id is out of range [ 110.424071][ T8090] netlink: zone id is out of range [ 110.440285][ T8090] netlink: zone id is out of range [ 110.451614][ T8090] netlink: zone id is out of range [ 110.462677][ T8090] netlink: zone id is out of range [ 110.472895][ T8090] netlink: zone id is out of range [ 110.943714][ T11] team0 (unregistering): Port device team_slave_1 removed [ 110.988563][ T11] team0 (unregistering): Port device team_slave_0 removed [ 111.494794][ T5840] Bluetooth: hci3: command tx timeout [ 111.527558][ T7933] team0: Port device team_slave_0 added [ 111.577466][ T7933] team0: Port device team_slave_1 added [ 111.746201][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.753199][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.795342][ T7933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.808377][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.823782][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.824616][ T8126] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 111.866693][ T8126] netlink: 9320 bytes leftover after parsing attributes in process `syz.3.570'. [ 111.881468][ T8126] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 111.922165][ T7933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.935971][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 111.991347][ T8125] netlink: 'syz.4.571': attribute type 5 has an invalid length. [ 112.130074][ T8135] netlink: 'syz.1.573': attribute type 5 has an invalid length. [ 112.194022][ T7933] hsr_slave_0: entered promiscuous mode [ 112.239664][ T7933] hsr_slave_1: entered promiscuous mode [ 112.263714][ T7933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.301795][ T7933] Cannot create hsr debugfs directory [ 112.432901][ T8153] netlink: 'syz.3.576': attribute type 4 has an invalid length. [ 112.626688][ T8166] nbd: device at index 3 is going down [ 112.684985][ T8169] netlink: 'syz.0.581': attribute type 4 has an invalid length. [ 112.819777][ T8179] xt_l2tp: v2 tid > 0xffff: 150994944 [ 112.838570][ T8173] tipc: Enabling of bearer rejected, media not registered [ 112.899907][ T8173] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 112.977258][ T8173] bond0: (slave netdevsim0): Releasing backup interface [ 113.011253][ T8173] team0: Port device netdevsim0 added [ 113.245837][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'. [ 113.565516][ T5840] Bluetooth: hci3: command tx timeout [ 113.881639][ T8242] netlink: 'syz.4.600': attribute type 12 has an invalid length. [ 113.956459][ T8242] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.600'. [ 114.014790][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.602'. [ 114.095579][ T7933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.127637][ T7933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.167670][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 114.192162][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 114.384410][ T7933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.402882][ T8266] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 114.424225][ T7933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.680421][ T7933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.724406][ T7933] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.755327][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.762507][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.856063][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.863207][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.089429][ T8302] netlink: 96 bytes leftover after parsing attributes in process `syz.1.613'. [ 115.331926][ T7933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.453658][ T8323] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.616'. [ 115.538227][ T7933] veth0_vlan: entered promiscuous mode [ 115.591434][ T7933] veth1_vlan: entered promiscuous mode [ 115.645745][ T5854] Bluetooth: hci3: command tx timeout [ 115.713008][ T7933] veth0_macvtap: entered promiscuous mode [ 115.733651][ T7933] veth1_macvtap: entered promiscuous mode [ 115.874524][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.925252][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.955119][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.990679][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.017541][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.037415][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.076390][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.174880][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.189810][ T8340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.623'. [ 116.215516][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.264798][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.266180][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.627'. [ 116.286752][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.298762][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.310159][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.321957][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.348383][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.351913][ T8367] trusted_key: syz.4.627 sent an empty control message without MSG_MORE. [ 116.371106][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.468153][ T7933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.468516][ T8367] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 116.502701][ T8367] netlink: 9312 bytes leftover after parsing attributes in process `syz.4.627'. [ 116.507615][ T7933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.545239][ T8367] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 116.555749][ T7933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.561769][ T8365] netlink: 9312 bytes leftover after parsing attributes in process `syz.4.627'. [ 116.574940][ T7933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.696208][ T8388] netlink: 9384 bytes leftover after parsing attributes in process `syz.0.631'. [ 116.928296][ T6480] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.943805][ T6480] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 117.034735][ T6463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.054735][ T6463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.117909][ T8406] Cannot find del_set index 65531 as target [ 117.132893][ T6480] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.152865][ T6480] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 117.172561][ T8405] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 117.230336][ T6480] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.253483][ T6480] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 117.444056][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.456410][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.471741][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.488535][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.499211][ T6480] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.509744][ T5154] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.517521][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.524735][ T6480] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 117.577342][ T6463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.599927][ T6463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.725419][ T5154] Bluetooth: hci3: command 0x0405 tx timeout [ 118.144807][ T8454] tipc: Invalid UDP bearer configuration [ 118.144854][ T8454] tipc: Enabling of bearer rejected, failed to enable media [ 118.188186][ T6480] bridge_slave_1: left allmulticast mode [ 118.193890][ T6480] bridge_slave_1: left promiscuous mode [ 118.208765][ T8458] validate_nla: 3 callbacks suppressed [ 118.208782][ T8458] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 118.213951][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.217977][ T8458] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 118.251056][ T6480] bridge_slave_0: left allmulticast mode [ 118.257057][ T6480] bridge_slave_0: left promiscuous mode [ 118.262784][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.684121][ T6480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.697359][ T6480] bond_slave_0: left promiscuous mode [ 118.707353][ T6480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.718701][ T6480] bond_slave_1: left promiscuous mode [ 118.728021][ T6480] bond0 (unregistering): Released all slaves [ 118.960628][ T8418] chnl_net:caif_netlink_parms(): no params data found [ 119.072942][ T8480] sctp: [Deprecated]: syz.1.651 (pid 8480) Use of int in max_burst socket option deprecated. [ 119.072942][ T8480] Use struct sctp_assoc_value instead [ 119.224337][ T8490] netlink: 'syz.4.653': attribute type 3 has an invalid length. [ 119.249598][ T8490] __nla_validate_parse: 2 callbacks suppressed [ 119.249615][ T8490] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.653'. [ 119.467483][ T6480] veth0: left promiscuous mode [ 119.481239][ T6480] batadv_slave_1: left promiscuous mode [ 119.496879][ T6480] hsr_slave_1: left promiscuous mode [ 119.503306][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.522038][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.551024][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.565827][ T5154] Bluetooth: hci4: command tx timeout [ 119.576202][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.585718][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.594474][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.603890][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.611430][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.626413][ T5154] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 119.634727][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.664356][ T8511] delete_channel: no stack [ 119.676814][ T6480] veth1_macvtap: left promiscuous mode [ 119.686094][ T6480] veth0_macvtap: left promiscuous mode [ 120.134557][ T6480] team0 (unregistering): Port device team_slave_1 removed [ 120.509764][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.521369][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.535005][ T8418] bridge_slave_0: entered allmulticast mode [ 120.555655][ T8418] bridge_slave_0: entered promiscuous mode [ 120.568001][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.575401][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.582966][ T8418] bridge_slave_1: entered allmulticast mode [ 120.590997][ T8418] bridge_slave_1: entered promiscuous mode [ 120.743788][ T8531] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 120.761189][ T8531] netlink: 512 bytes leftover after parsing attributes in process `syz.1.660'. [ 120.777579][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.659'. [ 120.790952][ T8528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.799887][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.807971][ T8528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.836967][ T8418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.860477][ T8418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.873451][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 120.967225][ T8418] team0: Port device team_slave_0 added [ 120.996725][ T8418] team0: Port device team_slave_1 added [ 121.147282][ T8549] netlink: 76 bytes leftover after parsing attributes in process `syz.1.663'. [ 121.177288][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.184274][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.238516][ T8418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.267827][ T8556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.664'. [ 121.334988][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.353931][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.426203][ T8418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.453617][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 121.494348][ T8563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.665'. [ 121.506421][ T6480] IPVS: stop unused estimator thread 0... [ 121.606035][ T8568] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 121.647159][ T5840] Bluetooth: hci4: command tx timeout [ 121.678196][ T8568] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.665'. [ 121.725300][ T5840] Bluetooth: hci3: command tx timeout [ 121.936521][ T8587] xt_TCPMSS: Only works on TCP SYN packets [ 122.093753][ T8595] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.674'. [ 122.104584][ T8595] net_ratelimit: 18 callbacks suppressed [ 122.104608][ T8595] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 122.294136][ T8418] hsr_slave_0: entered promiscuous mode [ 122.306904][ T8418] hsr_slave_1: entered promiscuous mode [ 122.329323][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 122.428418][ T6480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.645156][ T6480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.793911][ T6480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.911053][ T6480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.962010][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.991250][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.005859][ T5840] Bluetooth: hci2: command tx timeout [ 123.028591][ T8508] bridge_slave_0: entered allmulticast mode [ 123.037596][ T8508] bridge_slave_0: entered promiscuous mode [ 123.113831][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.142720][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.182372][ T8508] bridge_slave_1: entered allmulticast mode [ 123.198399][ T8508] bridge_slave_1: entered promiscuous mode [ 123.224044][ T5890] IPVS: starting estimator thread 0... [ 123.261279][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.335883][ T8661] IPVS: using max 22 ests per chain, 52800 per kthread [ 123.344976][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.498571][ T8508] team0: Port device team_slave_0 added [ 123.578727][ T8508] team0: Port device team_slave_1 added [ 123.738678][ T5840] Bluetooth: hci4: command tx timeout [ 123.768742][ T6480] bridge_slave_1: left allmulticast mode [ 123.775458][ T6480] bridge_slave_1: left promiscuous mode [ 123.781290][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.797215][ T6480] bridge_slave_0: left allmulticast mode [ 123.805449][ T5840] Bluetooth: hci3: command tx timeout [ 123.814151][ T6480] bridge_slave_0: left promiscuous mode [ 123.820113][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.989551][ T8701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.089223][ T8705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.404650][ T6480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.419472][ T6480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.430344][ T6480] bond0 (unregistering): Released all slaves [ 124.440379][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.455204][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.481881][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.633143][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.650091][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.682380][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.036202][ T8508] hsr_slave_0: entered promiscuous mode [ 125.046113][ T8729] xt_hashlimit: max too large, truncated to 1048576 [ 125.053998][ T8508] hsr_slave_1: entered promiscuous mode [ 125.062650][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.070687][ T8508] Cannot create hsr debugfs directory [ 125.141848][ T6480] hsr_slave_0: left promiscuous mode [ 125.153572][ T6480] hsr_slave_1: left promiscuous mode [ 125.163007][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.171314][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.181730][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.190126][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.210536][ T6480] veth1_macvtap: left promiscuous mode [ 125.216477][ T6480] veth0_macvtap: left promiscuous mode [ 125.222233][ T6480] veth1_vlan: left promiscuous mode [ 125.227694][ T6480] veth0_vlan: left promiscuous mode [ 125.641694][ T6480] team0 (unregistering): Port device team_slave_1 removed [ 125.683193][ T6480] team0 (unregistering): Port device team_slave_0 removed [ 125.810141][ T5840] Bluetooth: hci4: command tx timeout [ 125.886910][ T5840] Bluetooth: hci3: command tx timeout [ 126.130306][ T8730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.468492][ T8752] __nla_validate_parse: 5 callbacks suppressed [ 126.468511][ T8752] netlink: 2 bytes leftover after parsing attributes in process `syz.4.710'. [ 126.522761][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.712'. [ 126.570439][ T8756] netlink: 7 bytes leftover after parsing attributes in process `syz.0.712'. [ 126.665509][ T8418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.697123][ T8418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.729073][ T8767] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 126.767267][ T8418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.785800][ T8418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.848035][ T8769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.717'. [ 127.167815][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.185320][ T8418] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.200280][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.207528][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.224613][ T8786] netlink: 'syz.1.721': attribute type 13 has an invalid length. [ 127.254901][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.262137][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.302892][ T8508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.348796][ T8508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 127.401856][ T8508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 127.514818][ T8508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.595914][ T8810] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 127.650430][ T6480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.669598][ T6480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.808867][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.896309][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.966629][ T5840] Bluetooth: hci3: command tx timeout [ 128.010011][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.017405][ T6462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.087928][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.095150][ T6462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.251260][ T8418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.452218][ T8418] veth0_vlan: entered promiscuous mode [ 128.461538][ T8856] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.737'. [ 128.494733][ T8418] veth1_vlan: entered promiscuous mode [ 128.519743][ T8859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.738'. [ 128.545210][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 128.565278][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 128.589267][ T8863] netlink: 'syz.4.738': attribute type 9 has an invalid length. [ 128.599088][ T8863] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.738'. [ 128.609619][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.648469][ T8418] veth0_macvtap: entered promiscuous mode [ 128.737224][ T8418] veth1_macvtap: entered promiscuous mode [ 128.799405][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.813919][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.825726][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.837089][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.849128][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.893734][ T8508] veth0_vlan: entered promiscuous mode [ 128.920887][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.948268][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.982430][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.015873][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.038891][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.084361][ T8418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.111530][ T8418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.133148][ T8418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.161683][ T8418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.207397][ T8508] veth1_vlan: entered promiscuous mode [ 129.263994][ T8894] netem: change failed [ 129.297226][ T8897] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.746'. [ 129.484453][ T8508] veth0_macvtap: entered promiscuous mode [ 129.494178][ T8508] veth1_macvtap: entered promiscuous mode [ 129.513299][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.524049][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.534107][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.544602][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.554555][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.565295][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.576568][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.586359][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.597024][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.607501][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.618005][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.627949][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.638532][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.650776][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.661312][ T8908] netlink: 'syz.0.749': attribute type 33 has an invalid length. [ 129.703452][ T8916] netlink: 'syz.4.747': attribute type 14 has an invalid length. [ 129.739027][ T8508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.753483][ T8508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.805918][ T8508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.814673][ T8508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.084365][ T6462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.100000][ T6462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.196653][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.204547][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.437054][ T6463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.463958][ T6463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.640196][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.661965][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.281475][ T8963] veth1: left promiscuous mode [ 131.303203][ T8963] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 131.530386][ T9000] __nla_validate_parse: 5 callbacks suppressed [ 131.530407][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.760'. [ 131.610206][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.628826][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.637267][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.663457][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.679483][ T5154] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.689128][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.718405][ T9009] dccp_v6_rcv: dropped packet with invalid checksum [ 133.087354][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.534355][ T6484] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.720254][ T6484] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.746262][ T5154] Bluetooth: hci3: command tx timeout [ 133.889905][ T6484] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.150193][ T6484] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.174561][ T9082] Cannot find del_set index 4 as target [ 134.184470][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 134.402960][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.411667][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.419346][ T9003] bridge_slave_0: entered allmulticast mode [ 134.426335][ T9003] bridge_slave_0: entered promiscuous mode [ 134.433579][ T6484] bridge_slave_1: left allmulticast mode [ 134.439494][ T6484] bridge_slave_1: left promiscuous mode [ 134.446427][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.458671][ T6484] bridge_slave_0: left allmulticast mode [ 134.464325][ T6484] bridge_slave_0: left promiscuous mode [ 134.470430][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.794599][ T6484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.807998][ T6484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.819829][ T6484] bond0 (unregistering): Released all slaves [ 134.879213][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.898171][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.937945][ T9003] bridge_slave_1: entered allmulticast mode [ 134.954890][ T9101] syz.1.776 (9101) used greatest stack depth: 19008 bytes left [ 134.964761][ T9003] bridge_slave_1: entered promiscuous mode [ 134.976314][ T9099] netlink: 120 bytes leftover after parsing attributes in process `syz.1.776'. [ 135.220121][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.267308][ T9118] sock: sock_timestamping_bind_phc: sock not bind to device [ 135.292410][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.370449][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'. [ 135.421989][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.433331][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.442658][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.451870][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.460952][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 135.468434][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.556081][ T9003] team0: Port device team_slave_0 added [ 135.564856][ T9123] netlink: 76 bytes leftover after parsing attributes in process `syz.0.783'. [ 135.652914][ T6484] hsr_slave_0: left promiscuous mode [ 135.687550][ T6484] hsr_slave_1: left promiscuous mode [ 135.706822][ T9146] netlink: 'syz.1.787': attribute type 9 has an invalid length. [ 135.720961][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.724906][ T9146] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.787'. [ 135.735659][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.753647][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.761543][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.791765][ T6484] veth1_macvtap: left promiscuous mode [ 135.797932][ T6484] veth0_macvtap: left promiscuous mode [ 135.804040][ T6484] veth1_vlan: left promiscuous mode [ 135.810746][ T5840] Bluetooth: hci3: command tx timeout [ 135.817387][ T6484] veth0_vlan: left promiscuous mode [ 136.312379][ T6484] team0 (unregistering): Port device team_slave_1 removed [ 136.353186][ T6484] team0 (unregistering): Port device team_slave_0 removed [ 136.659835][ T9166] netlink: 80 bytes leftover after parsing attributes in process `syz.0.788'. [ 136.819546][ T9168] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 136.895261][ T9003] team0: Port device team_slave_1 added [ 136.908744][ T9146] netlink: 'syz.1.787': attribute type 29 has an invalid length. [ 136.922252][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 136.963586][ T9146] syz.1.787 (9146) used greatest stack depth: 17952 bytes left [ 137.051035][ T9173] tap0: tun_chr_ioctl cmd 1074025677 [ 137.057751][ T9173] tap0: linktype set to 65534 [ 137.063428][ T9172] netlink: 'syz.0.790': attribute type 4 has an invalid length. [ 137.086126][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.105399][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.141403][ T9183] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 137.145655][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.149939][ T9183] openvswitch: netlink: Actions may not be safe on all matching packets [ 137.168256][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.168274][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.168297][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.391687][ T9003] hsr_slave_0: entered promiscuous mode [ 137.408357][ T9003] hsr_slave_1: entered promiscuous mode [ 137.530277][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 137.542509][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 137.565470][ T5840] Bluetooth: hci4: command tx timeout [ 137.818795][ T6484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.890013][ T5840] Bluetooth: hci3: command tx timeout [ 138.048524][ T6484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.207044][ T6484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.370596][ T6484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.394332][ T9126] chnl_net:caif_netlink_parms(): no params data found [ 138.866422][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.884258][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.893977][ T9126] bridge_slave_0: entered allmulticast mode [ 138.905988][ T9126] bridge_slave_0: entered promiscuous mode [ 138.942948][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.952670][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.963573][ T9126] bridge_slave_1: entered allmulticast mode [ 138.971331][ T9126] bridge_slave_1: entered promiscuous mode [ 139.111426][ T9003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.298319][ T9003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.318552][ T9003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.340983][ T9126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.358635][ T9289] netlink: 44 bytes leftover after parsing attributes in process `syz.4.817'. [ 139.392628][ T6484] bridge_slave_1: left allmulticast mode [ 139.402813][ T6484] bridge_slave_1: left promiscuous mode [ 139.422479][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.441049][ T6484] bridge_slave_0: left allmulticast mode [ 139.451231][ T6484] bridge_slave_0: left promiscuous mode [ 139.463600][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.645483][ T5840] Bluetooth: hci4: command tx timeout [ 139.890795][ T6484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.902400][ T6484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.913957][ T6484] bond0 (unregistering): Released all slaves [ 139.924453][ T9003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.940392][ T9126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.949984][ T9298] netlink: 'syz.1.820': attribute type 26 has an invalid length. [ 139.966473][ T5840] Bluetooth: hci3: command tx timeout [ 139.975223][ T9302] netlink: 'syz.4.821': attribute type 13 has an invalid length. [ 139.993858][ T9302] netlink: 'syz.4.821': attribute type 58 has an invalid length. [ 140.017107][ T9302] netlink: 152 bytes leftover after parsing attributes in process `syz.4.821'. [ 140.153568][ T9308] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 140.194807][ T9126] team0: Port device team_slave_0 added [ 140.221055][ T9126] team0: Port device team_slave_1 added [ 140.349876][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.357648][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.420447][ T9126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.561396][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.576692][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.610726][ T9126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.672627][ T6484] hsr_slave_0: left promiscuous mode [ 140.680001][ T6484] hsr_slave_1: left promiscuous mode [ 140.687589][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.696215][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.705015][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.713146][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.738712][ T6484] veth1_macvtap: left promiscuous mode [ 140.746238][ T6484] veth0_macvtap: left promiscuous mode [ 140.751850][ T6484] veth1_vlan: left promiscuous mode [ 140.758256][ T6484] veth0_vlan: left promiscuous mode [ 141.287522][ T6484] team0 (unregistering): Port device team_slave_1 removed [ 141.326914][ T6484] team0 (unregistering): Port device team_slave_0 removed [ 141.725519][ T5840] Bluetooth: hci4: command tx timeout [ 141.804244][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.822524][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.854911][ T9003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.865355][ T9003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.927369][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.934511][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.957760][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.964898][ T6463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.031827][ T9126] hsr_slave_0: entered promiscuous mode [ 142.053903][ T9126] hsr_slave_1: entered promiscuous mode [ 142.093092][ T9126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.112170][ T9126] Cannot create hsr debugfs directory [ 142.119294][ T9357] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.833'. [ 142.148367][ T9357] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 142.168657][ T9351] netlink: 44 bytes leftover after parsing attributes in process `syz.4.832'. [ 142.410015][ T9373] netlink: 'syz.0.837': attribute type 3 has an invalid length. [ 142.432696][ T9373] netlink: 132 bytes leftover after parsing attributes in process `syz.0.837'. [ 142.492082][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 142.503117][ T9376] netlink: 32 bytes leftover after parsing attributes in process `syz.4.838'. [ 142.737896][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.038673][ T9403] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.844'. [ 143.048031][ T9403] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 143.129202][ T9003] veth0_vlan: entered promiscuous mode [ 143.178504][ T9003] veth1_vlan: entered promiscuous mode [ 143.358868][ T9003] veth0_macvtap: entered promiscuous mode [ 143.419578][ T9003] veth1_macvtap: entered promiscuous mode [ 143.436675][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.475168][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.495477][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.513693][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 143.515130][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.544710][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.560036][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.847'. [ 143.593744][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.622824][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.637909][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.650272][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.671688][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.704083][ T9415] syzkaller1: entered promiscuous mode [ 143.725829][ T9415] syzkaller1: entered allmulticast mode [ 143.766969][ T9003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.780523][ T9003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.791939][ T9003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.807707][ T5840] Bluetooth: hci4: command tx timeout [ 143.808448][ T9003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.914840][ T9126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.942863][ T9126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.970295][ T9126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.988370][ T9126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.141965][ T6463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.169304][ T6463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.197479][ T9457] pim6reg1: entered promiscuous mode [ 144.202833][ T9457] pim6reg1: entered allmulticast mode [ 144.347665][ T6479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.358364][ T6479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.418674][ T9126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.497125][ T9126] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.546581][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.553751][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.572844][ T9480] netlink: 'syz.0.859': attribute type 46 has an invalid length. [ 144.642157][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.649355][ T6479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.744626][ T9484] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 144.943975][ T9500] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 145.131304][ T9126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.239430][ T9126] veth0_vlan: entered promiscuous mode [ 145.284997][ T9126] veth1_vlan: entered promiscuous mode [ 145.389080][ T6463] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.546192][ T9126] veth0_macvtap: entered promiscuous mode [ 145.576578][ T9126] veth1_macvtap: entered promiscuous mode [ 145.666115][ T6463] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.731559][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.773060][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.809232][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.829308][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 145.835115][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.857266][ T9547] netlink: 56 bytes leftover after parsing attributes in process `syz.0.872'. [ 145.866953][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.883281][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.903634][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.984257][ T6463] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.030016][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.059457][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.100486][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.155141][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.188208][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.215746][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.216640][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.237824][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.245968][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.255677][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.266650][ T5154] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.275392][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.326373][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.338844][ T9126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.347751][ T9126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.356548][ T9126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.365346][ T9126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.444607][ T9564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.482503][ T9564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.547017][ T6463] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.604134][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.686179][ T9586] C: renamed from team_slave_0 (while UP) [ 146.694395][ T9586] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 146.709906][ T9586] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 146.885043][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.901371][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.946359][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.958000][ T6463] bridge_slave_1: left allmulticast mode [ 146.963697][ T6463] bridge_slave_1: left promiscuous mode [ 146.979131][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.989315][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.009002][ T6463] bridge_slave_0: left allmulticast mode [ 147.014810][ T6463] bridge_slave_0: left promiscuous mode [ 147.026805][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.455394][ T9615] __nla_validate_parse: 1 callbacks suppressed [ 147.455413][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 147.471035][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 147.483834][ T6463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.497728][ T6463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.508753][ T6463] bond0 (unregistering): Released all slaves [ 147.524312][ T9608] netlink: 'syz.0.882': attribute type 8 has an invalid length. [ 147.803101][ T9626] netlink: 84 bytes leftover after parsing attributes in process `syz.0.885'. [ 147.999518][ T9566] chnl_net:caif_netlink_parms(): no params data found [ 148.294802][ T6463] hsr_slave_0: left promiscuous mode [ 148.315531][ T6463] hsr_slave_1: left promiscuous mode [ 148.334661][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.344857][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.363546][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.372334][ T5154] Bluetooth: hci3: command tx timeout [ 148.390251][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.446232][ T6463] veth1_macvtap: left promiscuous mode [ 148.457474][ T6463] veth0_macvtap: left promiscuous mode [ 148.469144][ T6463] veth1_vlan: left promiscuous mode [ 148.479742][ T6463] veth0_vlan: left promiscuous mode [ 148.951481][ T6463] team0 (unregistering): Port device team_slave_1 removed [ 148.990351][ T6463] team0 (unregistering): Port device team_slave_0 removed [ 149.349511][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.361483][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.377629][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.399489][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.421667][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.429555][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.541098][ T9655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.891'. [ 149.559198][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 149.884089][ T9683] sit1: entered promiscuous mode [ 149.911786][ T9683] sit1: entered allmulticast mode [ 149.971701][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 149.982601][ T9566] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.989178][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 150.002588][ T9566] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.010170][ T9566] bridge_slave_0: entered allmulticast mode [ 150.018124][ T9566] bridge_slave_0: entered promiscuous mode [ 150.039138][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 150.048329][ T9688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.896'. [ 150.057753][ T9688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.896'. [ 150.075984][ T9688] vlan2: entered allmulticast mode [ 150.084372][ T9566] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.091769][ T9566] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.099038][ T9566] bridge_slave_1: entered allmulticast mode [ 150.106357][ T9566] bridge_slave_1: entered promiscuous mode [ 150.304810][ T9566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.342929][ T9705] sch_fq: defrate 0 ignored. [ 150.395395][ T9566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.445512][ T5840] Bluetooth: hci3: command tx timeout [ 150.577918][ T9666] chnl_net:caif_netlink_parms(): no params data found [ 150.590559][ T9720] netlink: 'syz.0.900': attribute type 9 has an invalid length. [ 150.608836][ T9566] team0: Port device team_slave_0 added [ 150.627555][ T9566] team0: Port device team_slave_1 added [ 150.667034][ T9713] geneve2: entered promiscuous mode [ 150.808450][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.819506][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.854009][ T9566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.871683][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.885003][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.911526][ T9566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.965323][ T9728] tipc: Started in network mode [ 150.970721][ T9728] tipc: Node identity 26c5fb2fb1a8, cluster identity 4711 [ 150.989581][ T9728] tipc: Enabled bearer , priority 0 [ 151.058569][ T9728] tipc: Resetting bearer [ 151.175619][ T6463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.220305][ T9727] tipc: Resetting bearer [ 151.364735][ T9753] dccp_invalid_packet: P.CsCov 5 exceeds packet length 16 [ 151.491390][ T5840] Bluetooth: hci4: command tx timeout [ 152.069176][ T969] tipc: Node number set to 2540567343 [ 152.526990][ T5840] Bluetooth: hci3: command tx timeout [ 152.890774][ T9727] tipc: Disabling bearer [ 152.912518][ T9743] vcan0: entered allmulticast mode [ 152.990097][ T6463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.112236][ T6463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.160767][ T9566] hsr_slave_0: entered promiscuous mode [ 153.170352][ T9566] hsr_slave_1: entered promiscuous mode [ 153.208210][ T6463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.256833][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.270876][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.280144][ T9666] bridge_slave_0: entered allmulticast mode [ 153.298409][ T9666] bridge_slave_0: entered promiscuous mode [ 153.358887][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.381894][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.410553][ T9666] bridge_slave_1: entered allmulticast mode [ 153.428479][ T9790] __nla_validate_parse: 3 callbacks suppressed [ 153.428496][ T9790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.917'. [ 153.448127][ T9666] bridge_slave_1: entered promiscuous mode [ 153.511646][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.533726][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.565274][ T5840] Bluetooth: hci4: command tx timeout [ 153.677696][ T9666] team0: Port device team_slave_0 added [ 153.696976][ T9666] team0: Port device team_slave_1 added [ 153.783483][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.793070][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.836232][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.878031][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.885020][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.929592][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.058037][ T6463] bridge_slave_1: left allmulticast mode [ 154.084090][ T6463] bridge_slave_1: left promiscuous mode [ 154.094363][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.102030][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 154.125782][ T9831] netlink: 'syz.4.925': attribute type 4 has an invalid length. [ 154.148495][ T6463] bridge_slave_0: left allmulticast mode [ 154.154324][ T6463] bridge_slave_0: left promiscuous mode [ 154.167368][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.402316][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 154.459165][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 154.599507][ T6463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.605307][ T5840] Bluetooth: hci3: command tx timeout [ 154.620701][ T6463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.632235][ T6463] bond0 (unregistering): Released all slaves [ 154.985005][ T9666] hsr_slave_0: entered promiscuous mode [ 154.992660][ T9666] hsr_slave_1: entered promiscuous mode [ 155.004547][ T9666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.035677][ T9666] Cannot create hsr debugfs directory [ 155.307669][ T9878] netlink: 200 bytes leftover after parsing attributes in process `syz.1.934'. [ 155.352231][ T9878] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 155.360619][ T9878] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.934'. [ 155.370343][ T9878] netlink: 'syz.1.934': attribute type 8 has an invalid length. [ 155.412272][ T6463] hsr_slave_0: left promiscuous mode [ 155.418600][ T6463] hsr_slave_1: left promiscuous mode [ 155.430733][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.458463][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.489090][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.510456][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.550528][ T6463] veth1_macvtap: left promiscuous mode [ 155.573181][ T6463] veth0_macvtap: left promiscuous mode [ 155.584804][ T6463] veth1_vlan: left promiscuous mode [ 155.601995][ T6463] veth0_vlan: left promiscuous mode [ 155.646907][ T5840] Bluetooth: hci4: command tx timeout [ 155.809321][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 156.212967][ T6463] team0 (unregistering): Port device team_slave_1 removed [ 156.252112][ T6463] team0 (unregistering): Port device team_slave_0 removed [ 156.614099][ T9880] netlink: 'syz.4.936': attribute type 27 has an invalid length. [ 156.630709][ T9880] netlink: 152 bytes leftover after parsing attributes in process `syz.4.936'. [ 156.655663][ T9880] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 156.737656][ T9910] netlink: 'syz.1.940': attribute type 3 has an invalid length. [ 156.766948][ T9910] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.940'. [ 157.217235][ T9944] netlink: 'syz.1.947': attribute type 11 has an invalid length. [ 157.234145][ T9566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.258101][ T9566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.275977][ T9942] netlink: 'syz.0.946': attribute type 21 has an invalid length. [ 157.303739][ T9947] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 157.317086][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 157.352111][ T9566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.483138][ T9566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.511058][ T9960] netlink: 'syz.4.951': attribute type 21 has an invalid length. [ 157.589601][ T9960] netlink: 'syz.4.951': attribute type 21 has an invalid length. [ 157.601313][ T9963] netlink: 'syz.1.952': attribute type 5 has an invalid length. [ 157.727253][ T5840] Bluetooth: hci4: command tx timeout [ 157.997400][ T9566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.015135][ T9666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.050421][ T9666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.103913][ T9566] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.134233][ T9990] openvswitch: netlink: Message has 8 unknown bytes. [ 158.172204][ T9666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.197295][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.204460][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.242669][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.249878][ T6479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.321167][ T9666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.501282][T10008] team0: Port device vlan2 added [ 158.763800][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.816740][ T9666] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.874529][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.881739][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.957208][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.964393][ T6479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.083693][ T9666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.150792][T10037] __nla_validate_parse: 9 callbacks suppressed [ 159.150811][T10037] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.965'. [ 159.179070][ T9566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.196847][T10037] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.965'. [ 159.248469][T10045] netlink: 68 bytes leftover after parsing attributes in process `syz.0.966'. [ 159.369104][T10045] netlink: 44 bytes leftover after parsing attributes in process `syz.0.966'. [ 159.528684][ T9566] veth0_vlan: entered promiscuous mode [ 159.580879][T10057] batadv_slave_1: entered promiscuous mode [ 159.618141][ T9566] veth1_vlan: entered promiscuous mode [ 159.626526][T10057] batadv_slave_1: left promiscuous mode [ 159.747034][ T9666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.828977][ T9566] veth0_macvtap: entered promiscuous mode [ 159.870848][T10070] validate_nla: 35 callbacks suppressed [ 159.870868][T10070] netlink: 'syz.4.972': attribute type 29 has an invalid length. [ 159.892653][T10074] netlink: 'syz.4.972': attribute type 29 has an invalid length. [ 159.907658][ T9566] veth1_macvtap: entered promiscuous mode [ 160.104914][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.134902][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.157505][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.183197][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.211947][ T9566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.235749][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 160.307729][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.329769][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.342017][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.364615][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.396450][ T9566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.422905][T10102] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.979'. [ 160.438629][ T9666] veth0_vlan: entered promiscuous mode [ 160.474564][ T9566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.477778][T10107] xt_socket: unknown flags 0x50 [ 160.487501][ T9566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.497073][ T9566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.525948][ T9566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.568902][ T9666] veth1_vlan: entered promiscuous mode [ 160.604920][T10113] xt_socket: unknown flags 0x50 [ 160.618479][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 160.644030][ T9666] veth0_macvtap: entered promiscuous mode [ 160.671544][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 160.683243][ T9666] veth1_macvtap: entered promiscuous mode [ 160.812806][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.834401][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.849337][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.860253][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.871160][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.881781][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.893557][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.924889][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.940519][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.948411][T10129] netlink: 'syz.0.987': attribute type 9 has an invalid length. [ 160.950895][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.969458][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.004407][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.036610][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.051232][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.063812][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.081659][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.099138][ T9666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.113583][ T9666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.122848][ T9666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.132039][ T9666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.234006][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.244798][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.277567][ T6480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.295664][ T6480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.347776][T10143] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.385267][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.405222][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.602023][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 161.699847][T10156] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.919565][ T6479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.964438][T10165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.077391][ T6479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.188349][ T6479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.307391][ T6479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.474923][ T6479] bridge_slave_1: left allmulticast mode [ 162.482745][ T6479] bridge_slave_1: left promiscuous mode [ 162.496142][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.517424][ T6479] bridge_slave_0: left allmulticast mode [ 162.523124][ T6479] bridge_slave_0: left promiscuous mode [ 162.565385][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.734324][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.758828][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.768577][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.779697][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.787820][ T5154] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.795266][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.836746][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 163.025919][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.042306][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.043634][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.057091][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.058860][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.073196][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.073451][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.098992][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.106657][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.107176][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.126308][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.133800][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.353402][ T6479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.364744][ T6479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.375466][ T6479] bond0 (unregistering): Released all slaves [ 163.740310][T10204] netlink: 'syz.4.1011': attribute type 9 has an invalid length. [ 163.966619][ T6479] hsr_slave_0: left promiscuous mode [ 164.013989][ T6479] hsr_slave_1: left promiscuous mode [ 164.026327][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.037355][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.056112][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.089120][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.148722][ T6479] veth1_macvtap: left promiscuous mode [ 164.154308][ T6479] veth0_macvtap: left promiscuous mode [ 164.161731][ T6479] veth1_vlan: left promiscuous mode [ 164.167169][ T6479] veth0_vlan: left promiscuous mode [ 164.571075][ T6479] team0 (unregistering): Port device team_slave_1 removed [ 164.609426][ T6479] team0 (unregistering): Port device team_slave_0 removed [ 164.927381][ T5846] Bluetooth: hci1: command tx timeout [ 165.151974][T10244] veth0: entered promiscuous mode [ 165.173666][ T5846] Bluetooth: hci3: command tx timeout [ 165.179747][ T5840] Bluetooth: hci4: command tx timeout [ 165.189793][T10244] batadv_slave_1: entered promiscuous mode [ 165.312387][T10185] chnl_net:caif_netlink_parms(): no params data found [ 165.335130][T10243] batadv_slave_1: left promiscuous mode [ 165.341624][T10243] veth0: left promiscuous mode [ 165.388662][T10176] chnl_net:caif_netlink_parms(): no params data found [ 165.526614][T10186] chnl_net:caif_netlink_parms(): no params data found [ 165.783805][ T6479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.861823][T10292] __nla_validate_parse: 2 callbacks suppressed [ 165.861843][T10292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1026'. [ 165.905293][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.915455][T10185] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.922693][T10185] bridge_slave_0: entered allmulticast mode [ 165.952210][T10185] bridge_slave_0: entered promiscuous mode [ 166.014798][ T6479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.086987][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.098315][T10185] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.106052][T10185] bridge_slave_1: entered allmulticast mode [ 166.113301][T10185] bridge_slave_1: entered promiscuous mode [ 166.151173][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.158723][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.166276][T10176] bridge_slave_0: entered allmulticast mode [ 166.173359][T10176] bridge_slave_0: entered promiscuous mode [ 166.181824][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.189622][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.196983][T10176] bridge_slave_1: entered allmulticast mode [ 166.204065][T10176] bridge_slave_1: entered promiscuous mode [ 166.266473][ T6479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.346158][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.358452][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.379465][ T6479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.441188][T10186] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.451568][T10186] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.469887][T10186] bridge_slave_0: entered allmulticast mode [ 166.477433][T10186] bridge_slave_0: entered promiscuous mode [ 166.493823][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.529532][T10186] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.545794][T10186] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.563751][T10186] bridge_slave_1: entered allmulticast mode [ 166.568717][T10315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1031'. [ 166.576412][T10186] bridge_slave_1: entered promiscuous mode [ 166.606608][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.710873][T10185] team0: Port device team_slave_0 added [ 166.720037][T10185] team0: Port device team_slave_1 added [ 166.805989][T10176] team0: Port device team_slave_0 added [ 166.996229][T10332] sctp: [Deprecated]: syz.0.1035 (pid 10332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.996229][T10332] Use struct sctp_sack_info instead [ 167.006099][ T5840] Bluetooth: hci1: command tx timeout [ 167.179226][T10186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.191383][T10186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.234316][T10176] team0: Port device team_slave_1 added [ 167.241441][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.245927][ T5840] Bluetooth: hci4: command tx timeout [ 167.253871][ T5846] Bluetooth: hci3: command tx timeout [ 167.257988][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.305455][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.319257][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.327322][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.355248][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.376529][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1037'. [ 167.395632][T10186] team0: Port device team_slave_0 added [ 167.403409][T10186] team0: Port device team_slave_1 added [ 167.447404][ T6479] bridge_slave_1: left allmulticast mode [ 167.471033][ T6479] bridge_slave_1: left promiscuous mode [ 167.478172][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.497643][T10356] openvswitch: netlink: nsh attr 188 is out of range max 3 [ 167.497673][ T6479] bridge_slave_0: left allmulticast mode [ 167.517456][ T6479] bridge_slave_0: left promiscuous mode [ 167.523943][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.603320][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'. [ 167.886311][ T6479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.899026][ T6479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.909545][ T6479] bond0 (unregistering): Released all slaves [ 167.972109][T10186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.984020][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.013200][T10186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.027167][T10186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.034857][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.067825][T10186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.082535][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.089624][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.117683][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.209930][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.217047][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.253453][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.281789][T10185] hsr_slave_0: entered promiscuous mode [ 168.304441][T10185] hsr_slave_1: entered promiscuous mode [ 168.368842][T10186] hsr_slave_0: entered promiscuous mode [ 168.375291][T10186] hsr_slave_1: entered promiscuous mode [ 168.381713][T10186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.386838][T10376] netlink: 'syz.0.1045': attribute type 9 has an invalid length. [ 168.389710][T10186] Cannot create hsr debugfs directory [ 168.403461][T10376] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1045'. [ 168.488269][T10176] hsr_slave_0: entered promiscuous mode [ 168.494593][T10176] hsr_slave_1: entered promiscuous mode [ 168.504389][T10176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.514611][T10176] Cannot create hsr debugfs directory [ 168.658507][ T6479] hsr_slave_0: left promiscuous mode [ 168.671309][ T6479] hsr_slave_1: left promiscuous mode [ 168.686520][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.694306][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.711447][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.721444][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.758042][ T6479] veth1_macvtap: left promiscuous mode [ 168.763732][ T6479] veth0_macvtap: left promiscuous mode [ 168.777521][ T6479] veth1_vlan: left promiscuous mode [ 168.782858][ T6479] veth0_vlan: left promiscuous mode [ 169.085352][ T5846] Bluetooth: hci1: command tx timeout [ 169.327797][ T5840] Bluetooth: hci4: command tx timeout [ 169.334090][ T5846] Bluetooth: hci3: command tx timeout [ 169.469587][ T6479] team0 (unregistering): Port device team_slave_1 removed [ 169.515799][ T6479] team0 (unregistering): Port device team_slave_0 removed [ 169.909370][T10185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.920012][T10185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.172390][ T5846] Bluetooth: hci1: command tx timeout [ 171.398230][T10408] syzkaller0: entered promiscuous mode [ 171.404852][T10408] syzkaller0: entered allmulticast mode [ 171.411334][ T5846] Bluetooth: hci3: command tx timeout [ 171.417080][ T5840] Bluetooth: hci4: command tx timeout [ 173.024226][T10185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.036733][T10185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.061039][T10415] netlink: 'syz.0.1050': attribute type 10 has an invalid length. [ 173.087473][T10415] team0: Device veth0_macvtap failed to register rx_handler [ 173.189148][T10185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.205198][T10185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.344115][T10185] team0: Port device netdevsim0 removed [ 173.351667][ T5933] hid-generic 0005:0B57:FFF9.0001: item fetching failed at offset 0/1 [ 173.354867][T10185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.372378][ T5933] hid-generic 0005:0B57:FFF9.0001: probe with driver hid-generic failed with error -22 [ 173.379416][T10185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.747819][T10439] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1056'. [ 173.766945][T10439] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1056'. [ 173.776648][T10442] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 173.780568][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 173.824800][T10441] geneve2: entered promiscuous mode [ 173.874395][T10448] netlink: 'syz.0.1058': attribute type 9 has an invalid length. [ 173.882441][T10448] netlink: 134640 bytes leftover after parsing attributes in process `syz.0.1058'. [ 174.148518][T10454] dummy0: entered promiscuous mode [ 174.154316][T10454] vlan2: entered promiscuous mode [ 174.163407][T10454] vlan2: entered allmulticast mode [ 174.173534][T10454] dummy0: entered allmulticast mode [ 174.181778][T10454] dummy0: left allmulticast mode [ 174.187810][T10454] dummy0: left promiscuous mode [ 174.413939][T10473] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 174.432820][T10473] openvswitch: netlink: Actions may not be safe on all matching packets [ 174.758641][T10186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.792525][T10186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.818394][T10186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.853510][T10186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.877253][T10484] syz_tun: entered promiscuous mode [ 174.882571][T10484] macsec1: entered promiscuous mode [ 174.895041][T10484] macsec1: entered allmulticast mode [ 174.901453][T10484] syz_tun: entered allmulticast mode [ 174.915928][T10484] syz_tun: left allmulticast mode [ 174.921185][T10484] syz_tun: left promiscuous mode [ 175.004020][T10185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.030890][T10185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.123496][T10498] netlink: 'syz.4.1068': attribute type 4 has an invalid length. [ 175.141619][T10185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.144617][T10498] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1068'. [ 175.161058][T10185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.311988][T10176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.350596][T10176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.378542][T10176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.448112][T10176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.480864][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 175.584616][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1071'. [ 175.640084][T10186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.721587][T10186] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.739883][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 175.740198][T10185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.848062][T10186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.858716][T10186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.876340][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.883486][ T6462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.894001][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.901192][ T6462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.938117][T10176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.957648][T10185] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.019931][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.027114][ T6462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.080024][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.111423][T10185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.145241][T10185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.190257][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.197441][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.246690][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.253829][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.281842][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.288997][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.343120][T10186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.351624][T10553] netlink: 'syz.4.1075': attribute type 6 has an invalid length. [ 176.457803][T10550] team0: Port device team_slave_1 removed [ 176.620215][T10186] veth0_vlan: entered promiscuous mode [ 176.680058][T10186] veth1_vlan: entered promiscuous mode [ 176.741279][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.816305][T10186] veth0_macvtap: entered promiscuous mode [ 176.868649][T10186] veth1_macvtap: entered promiscuous mode [ 176.971509][T10176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.991846][T10186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.004441][T10186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.014892][T10186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.028038][T10186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.049842][T10186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.067584][T10185] veth0_vlan: entered promiscuous mode [ 177.122023][T10185] veth1_vlan: entered promiscuous mode [ 177.142897][T10186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.180593][T10186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.206146][T10186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.229489][T10186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.250364][T10186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.290893][T10186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.311425][T10186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.336226][T10186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.344979][T10186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.461156][T10185] veth0_macvtap: entered promiscuous mode [ 177.524019][T10185] veth1_macvtap: entered promiscuous mode [ 177.550380][T10603] netlink: 'syz.0.1080': attribute type 4 has an invalid length. [ 177.568099][T10176] veth0_vlan: entered promiscuous mode [ 177.581712][T10603] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1080'. [ 177.666221][T10176] veth1_vlan: entered promiscuous mode [ 177.683698][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.698783][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.774771][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.805753][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.842468][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.860329][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.888568][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.908785][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.923222][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.038513][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.080491][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.091532][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.102339][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.112286][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.122807][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.134021][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.145932][T10185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.154662][T10185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.163508][T10185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.164214][T10630] x_tables: duplicate entry at hook 2 [ 178.172480][T10185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.201959][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.225192][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.305344][ T5889] IPVS: starting estimator thread 0... [ 178.308536][T10176] veth0_macvtap: entered promiscuous mode [ 178.395287][T10642] IPVS: using max 22 ests per chain, 52800 per kthread [ 178.402743][T10176] veth1_macvtap: entered promiscuous mode [ 178.536626][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.565621][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.591478][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.621446][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.642915][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.660116][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.671262][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.683706][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.702768][T10176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.711694][T10429] ================================================================== [ 178.719805][T10429] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6c0/0xd70 [ 178.727307][T10429] Read of size 8 at addr ffff8880300a0060 by task khidpd_0b57fff9/10429 [ 178.735650][T10429] [ 178.738091][T10429] CPU: 1 UID: 0 PID: 10429 Comm: khidpd_0b57fff9 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 178.749306][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.759822][T10429] Call Trace: [ 178.763110][T10429] [ 178.766049][T10429] dump_stack_lvl+0x241/0x360 [ 178.770740][T10429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.775954][T10429] ? __pfx__printk+0x10/0x10 [ 178.780571][T10429] ? _printk+0xd5/0x120 [ 178.784740][T10429] ? __virt_addr_valid+0x183/0x530 [ 178.789886][T10429] ? __virt_addr_valid+0x183/0x530 [ 178.794996][T10429] print_report+0x169/0x550 [ 178.799488][T10429] ? __virt_addr_valid+0x183/0x530 [ 178.804592][T10429] ? __virt_addr_valid+0x183/0x530 [ 178.809708][T10429] ? __virt_addr_valid+0x45f/0x530 [ 178.814807][T10429] ? __phys_addr+0xba/0x170 [ 178.819300][T10429] ? __mutex_lock+0x6c0/0xd70 [ 178.823970][T10429] kasan_report+0x143/0x180 [ 178.828472][T10429] ? __mutex_lock+0x6c0/0xd70 [ 178.833142][T10429] __mutex_lock+0x6c0/0xd70 [ 178.837642][T10429] ? __mutex_lock+0x52a/0xd70 [ 178.842318][T10429] ? l2cap_unregister_user+0x6a/0x1c0 [ 178.847684][T10429] ? __pfx___mutex_lock+0x10/0x10 [ 178.852787][T10429] ? __pfx___timer_delete_sync+0x10/0x10 [ 178.858414][T10429] l2cap_unregister_user+0x6a/0x1c0 [ 178.863621][T10429] hidp_session_thread+0x450/0x490 [ 178.868731][T10429] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 178.874617][T10429] ? __pfx_hidp_session_thread+0x10/0x10 [ 178.880251][T10429] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 178.886134][T10429] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 178.892383][T10429] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 178.898635][T10429] ? __kthread_parkme+0x169/0x1d0 [ 178.903672][T10429] ? __pfx_hidp_session_thread+0x10/0x10 [ 178.909306][T10429] kthread+0x2f0/0x390 [ 178.913378][T10429] ? __pfx_hidp_session_thread+0x10/0x10 [ 178.919095][T10429] ? __pfx_kthread+0x10/0x10 [ 178.923682][T10429] ret_from_fork+0x4b/0x80 [ 178.928094][T10429] ? __pfx_kthread+0x10/0x10 [ 178.932680][T10429] ret_from_fork_asm+0x1a/0x30 [ 178.937443][T10429] [ 178.940454][T10429] [ 178.942767][T10429] Allocated by task 10186: [ 178.947166][T10429] kasan_save_track+0x3f/0x80 [ 178.951831][T10429] __kasan_kmalloc+0x98/0xb0 [ 178.956427][T10429] __kmalloc_noprof+0x1fc/0x400 [ 178.961280][T10429] hci_alloc_dev_priv+0x27/0x2030 [ 178.966313][T10429] vhci_create_device+0x116/0x6a0 [ 178.971339][T10429] vhci_write+0x3cf/0x490 [ 178.975665][T10429] vfs_write+0xaeb/0xd30 [ 178.979904][T10429] ksys_write+0x183/0x2b0 [ 178.984223][T10429] do_syscall_64+0xf3/0x230 [ 178.988808][T10429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.994725][T10429] [ 178.997040][T10429] Freed by task 10186: [ 179.001091][T10429] kasan_save_track+0x3f/0x80 [ 179.005760][T10429] kasan_save_free_info+0x40/0x50 [ 179.010776][T10429] __kasan_slab_free+0x59/0x70 [ 179.015532][T10429] kfree+0x1a0/0x440 [ 179.019424][T10429] hci_release_dev+0x1525/0x16b0 [ 179.024351][T10429] bt_host_release+0x83/0x90 [ 179.028941][T10429] device_release+0x99/0x1c0 [ 179.033707][T10429] kobject_put+0x22f/0x480 [ 179.038115][T10429] vhci_release+0x88/0xd0 [ 179.042453][T10429] __fput+0x23f/0x880 [ 179.046440][T10429] task_work_run+0x24f/0x310 [ 179.051020][T10429] do_exit+0xa2f/0x28e0 [ 179.055167][T10429] do_group_exit+0x207/0x2c0 [ 179.059753][T10429] __x64_sys_exit_group+0x3f/0x40 [ 179.064773][T10429] x64_sys_call+0x2634/0x2640 [ 179.069454][T10429] do_syscall_64+0xf3/0x230 [ 179.073966][T10429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.079853][T10429] [ 179.082168][T10429] Last potentially related work creation: [ 179.087865][T10429] kasan_save_stack+0x3f/0x60 [ 179.092535][T10429] __kasan_record_aux_stack+0xac/0xc0 [ 179.097905][T10429] insert_work+0x3e/0x330 [ 179.102240][T10429] __queue_work+0xb66/0xf50 [ 179.106751][T10429] queue_work_on+0x1c2/0x380 [ 179.111343][T10429] process_scheduled_works+0xa63/0x1850 [ 179.116887][T10429] worker_thread+0x870/0xd30 [ 179.121483][T10429] kthread+0x2f0/0x390 [ 179.125539][T10429] ret_from_fork+0x4b/0x80 [ 179.129949][T10429] ret_from_fork_asm+0x1a/0x30 [ 179.134708][T10429] [ 179.137018][T10429] Second to last potentially related work creation: [ 179.143584][T10429] kasan_save_stack+0x3f/0x60 [ 179.148251][T10429] __kasan_record_aux_stack+0xac/0xc0 [ 179.153645][T10429] insert_work+0x3e/0x330 [ 179.157964][T10429] __queue_work+0xc8b/0xf50 [ 179.162455][T10429] call_timer_fn+0x18e/0x650 [ 179.167045][T10429] __run_timer_base+0x695/0x8e0 [ 179.171900][T10429] run_timer_softirq+0xb7/0x170 [ 179.176744][T10429] handle_softirqs+0x2c5/0x980 [ 179.181499][T10429] __irq_exit_rcu+0xf4/0x1c0 [ 179.186081][T10429] irq_exit_rcu+0x9/0x30 [ 179.190314][T10429] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 179.195939][T10429] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.201909][T10429] [ 179.204217][T10429] The buggy address belongs to the object at ffff8880300a0000 [ 179.204217][T10429] which belongs to the cache kmalloc-8k of size 8192 [ 179.218259][T10429] The buggy address is located 96 bytes inside of [ 179.218259][T10429] freed 8192-byte region [ffff8880300a0000, ffff8880300a2000) [ 179.232131][T10429] [ 179.234447][T10429] The buggy address belongs to the physical page: [ 179.240855][T10429] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880300a4000 pfn:0x300a0 [ 179.250907][T10429] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 179.259391][T10429] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 179.267891][T10429] page_type: f5(slab) [ 179.271862][T10429] raw: 00fff00000000240 ffff88801ac42280 ffffea00019d4410 ffffea0001924c10 [ 179.280432][T10429] raw: ffff8880300a4000 0000000000020001 00000001f5000000 0000000000000000 [ 179.289003][T10429] head: 00fff00000000240 ffff88801ac42280 ffffea00019d4410 ffffea0001924c10 [ 179.297660][T10429] head: ffff8880300a4000 0000000000020001 00000001f5000000 0000000000000000 [ 179.306320][T10429] head: 00fff00000000003 ffffea0000c02801 ffffffffffffffff 0000000000000000 [ 179.314978][T10429] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 179.323631][T10429] page dumped because: kasan: bad access detected [ 179.330036][T10429] page_owner tracks the page as allocated [ 179.335734][T10429] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7170, tgid 7168 (syz.4.360), ts 91112096392, free_ts 91070505515 [ 179.356910][T10429] post_alloc_hook+0x1f3/0x230 [ 179.361674][T10429] get_page_from_freelist+0x303f/0x3190 [ 179.367209][T10429] __alloc_pages_noprof+0x292/0x710 [ 179.372396][T10429] alloc_pages_mpol_noprof+0x3e8/0x680 [ 179.377849][T10429] alloc_slab_page+0x6a/0x120 [ 179.382514][T10429] allocate_slab+0x5a/0x2f0 [ 179.387006][T10429] ___slab_alloc+0xcd1/0x14b0 [ 179.391674][T10429] __slab_alloc+0x58/0xa0 [ 179.395994][T10429] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 179.402400][T10429] krealloc_noprof+0x88/0x120 [ 179.407072][T10429] check_stack_access_within_bounds+0x5be/0x980 [ 179.413312][T10429] check_mem_access+0x907/0x2140 [ 179.418252][T10429] do_check+0x726a/0xfeb0 [ 179.422574][T10429] do_check_common+0x14bd/0x1dd0 [ 179.427500][T10429] bpf_check+0x18cde/0x1e710 [ 179.432076][T10429] bpf_prog_load+0x1667/0x20f0 [ 179.436833][T10429] page last free pid 5844 tgid 5844 stack trace: [ 179.443141][T10429] free_unref_page+0xcfb/0xf20 [ 179.447902][T10429] __put_partials+0xeb/0x130 [ 179.452486][T10429] put_cpu_partial+0x17c/0x250 [ 179.457238][T10429] __slab_free+0x2ea/0x3d0 [ 179.461644][T10429] qlist_free_all+0x9a/0x140 [ 179.466220][T10429] kasan_quarantine_reduce+0x14f/0x170 [ 179.471666][T10429] __kasan_slab_alloc+0x23/0x80 [ 179.476504][T10429] __kmalloc_noprof+0x1a6/0x400 [ 179.481344][T10429] tomoyo_encode+0x26f/0x540 [ 179.485922][T10429] tomoyo_realpath_from_path+0x59e/0x5e0 [ 179.491544][T10429] tomoyo_path2_perm+0x393/0xbb0 [ 179.496468][T10429] tomoyo_path_rename+0x198/0x1e0 [ 179.501621][T10429] security_path_rename+0x266/0x4e0 [ 179.506825][T10429] do_renameat2+0x94a/0x13f0 [ 179.511508][T10429] __x64_sys_rename+0x82/0x90 [ 179.516181][T10429] do_syscall_64+0xf3/0x230 [ 179.520681][T10429] [ 179.522993][T10429] Memory state around the buggy address: [ 179.528612][T10429] ffff88803009ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.536673][T10429] ffff88803009ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.544720][T10429] >ffff8880300a0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.552763][T10429] ^ [ 179.559938][T10429] ffff8880300a0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.567982][T10429] ffff8880300a0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.576025][T10429] ================================================================== [ 179.587322][T10429] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 179.594545][T10429] CPU: 1 UID: 0 PID: 10429 Comm: khidpd_0b57fff9 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 179.605749][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.615824][T10429] Call Trace: [ 179.619115][T10429] [ 179.622056][T10429] dump_stack_lvl+0x241/0x360 [ 179.626754][T10429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.631967][T10429] ? __pfx__printk+0x10/0x10 [ 179.636569][T10429] ? vscnprintf+0x5d/0x90 [ 179.641008][T10429] panic+0x349/0x880 [ 179.644911][T10429] ? check_panic_on_warn+0x21/0xb0 [ 179.650034][T10429] ? __pfx_panic+0x10/0x10 [ 179.654461][T10429] ? mark_lock+0x9a/0x360 [ 179.658802][T10429] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 179.664714][T10429] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 179.670628][T10429] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 179.676975][T10429] ? print_report+0x502/0x550 [ 179.681675][T10429] check_panic_on_warn+0x86/0xb0 [ 179.686634][T10429] ? __mutex_lock+0x6c0/0xd70 [ 179.691327][T10429] end_report+0x77/0x160 [ 179.695767][T10429] kasan_report+0x154/0x180 [ 179.700374][T10429] ? __mutex_lock+0x6c0/0xd70 [ 179.705077][T10429] __mutex_lock+0x6c0/0xd70 [ 179.709597][T10429] ? __mutex_lock+0x52a/0xd70 [ 179.714291][T10429] ? l2cap_unregister_user+0x6a/0x1c0 [ 179.719691][T10429] ? __pfx___mutex_lock+0x10/0x10 [ 179.724824][T10429] ? __pfx___timer_delete_sync+0x10/0x10 [ 179.730542][T10429] l2cap_unregister_user+0x6a/0x1c0 [ 179.735767][T10429] hidp_session_thread+0x450/0x490 [ 179.740897][T10429] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 179.746817][T10429] ? __pfx_hidp_session_thread+0x10/0x10 [ 179.752481][T10429] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 179.758398][T10429] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 179.764664][T10429] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 179.770938][T10429] ? __kthread_parkme+0x169/0x1d0 [ 179.775990][T10429] ? __pfx_hidp_session_thread+0x10/0x10 [ 179.781646][T10429] kthread+0x2f0/0x390 [ 179.785736][T10429] ? __pfx_hidp_session_thread+0x10/0x10 [ 179.791386][T10429] ? __pfx_kthread+0x10/0x10 [ 179.795997][T10429] ret_from_fork+0x4b/0x80 [ 179.800433][T10429] ? __pfx_kthread+0x10/0x10 [ 179.805033][T10429] ret_from_fork_asm+0x1a/0x30 [ 179.809824][T10429] [ 179.813008][T10429] Kernel Offset: disabled [ 179.817326][T10429] Rebooting in 86400 seconds..