last executing test programs: 1m22.676642614s ago: executing program 0 (id=197): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1000}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000020000002100000005fe8000000000000000000000000000aa0c0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e200000000300000000000000000000000000000000001000"/272], 0x110) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4600f0ff0f8c5409d100"/20, @ANYRES32=0x0, @ANYBLOB="a00001000000000008002000d8000000140012800a00010069706f696200000004000280"], 0x3c}}, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x4) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x56) (rerun: 64) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x84) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x2, 0x8001, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@private2, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000051) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1\x00', 0x7101}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 1m22.118604751s ago: executing program 2 (id=367): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x80, 0x0, 0x0, 0x5}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x1, 0x0, 0x7f, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 1m7.594780142s ago: executing program 2 (id=367): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x80, 0x0, 0x0, 0x5}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x1, 0x0, 0x7f, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 1m6.765713508s ago: executing program 0 (id=197): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1000}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000020000002100000005fe8000000000000000000000000000aa0c0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e200000000300000000000000000000000000000000001000"/272], 0x110) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4600f0ff0f8c5409d100"/20, @ANYRES32=0x0, @ANYBLOB="a00001000000000008002000d8000000140012800a00010069706f696200000004000280"], 0x3c}}, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x4) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x56) (rerun: 64) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x84) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x2, 0x8001, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@private2, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000051) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1\x00', 0x7101}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 54.079684574s ago: executing program 2 (id=367): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x80, 0x0, 0x0, 0x5}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x1, 0x0, 0x7f, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 53.083785324s ago: executing program 0 (id=197): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1000}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000020000002100000005fe8000000000000000000000000000aa0c0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e200000000300000000000000000000000000000000001000"/272], 0x110) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4600f0ff0f8c5409d100"/20, @ANYRES32=0x0, @ANYBLOB="a00001000000000008002000d8000000140012800a00010069706f696200000004000280"], 0x3c}}, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x4) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x56) (rerun: 64) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x84) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x2, 0x8001, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@private2, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000051) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1\x00', 0x7101}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 40.863045128s ago: executing program 2 (id=367): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x80, 0x0, 0x0, 0x5}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x1, 0x0, 0x7f, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 39.701171266s ago: executing program 0 (id=197): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1000}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000020000002100000005fe8000000000000000000000000000aa0c0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e200000000300000000000000000000000000000000001000"/272], 0x110) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4600f0ff0f8c5409d100"/20, @ANYRES32=0x0, @ANYBLOB="a00001000000000008002000d8000000140012800a00010069706f696200000004000280"], 0x3c}}, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x4) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x56) (rerun: 64) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x84) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x2, 0x8001, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@private2, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000051) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1\x00', 0x7101}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 26.937961684s ago: executing program 2 (id=367): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x80, 0x0, 0x0, 0x5}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x1, 0x0, 0x7f, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 25.18744304s ago: executing program 0 (id=197): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1000}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000020000002100000005fe8000000000000000000000000000aa0c0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e200000000300000000000000000000000000000000001000"/272], 0x110) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4600f0ff0f8c5409d100"/20, @ANYRES32=0x0, @ANYBLOB="a00001000000000008002000d8000000140012800a00010069706f696200000004000280"], 0x3c}}, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x4) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x56) (rerun: 64) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x84) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x2, 0x8001, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@private2, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000051) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1\x00', 0x7101}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 10.536421796s ago: executing program 2 (id=367): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x80, 0x0, 0x0, 0x5}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x1, 0x0, 0x7f, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 9.515298022s ago: executing program 0 (id=197): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1000}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000020000002100000005fe8000000000000000000000000000aa0c0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e200000000300000000000000000000000000000000001000"/272], 0x110) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4600f0ff0f8c5409d100"/20, @ANYRES32=0x0, @ANYBLOB="a00001000000000008002000d8000000140012800a00010069706f696200000004000280"], 0x3c}}, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x4) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x56) (rerun: 64) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x84) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x2, 0x8001, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@private2, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000051) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1\x00', 0x7101}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 3.124284478s ago: executing program 4 (id=1199): pselect6(0x40, &(0x7f0000000300)={0x6, 0x2, 0x3, 0xcf21, 0xfffffffffffffff8, 0x0, 0x8001, 0x4}, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000040)={0x8, 0x8, 0x4, 0x5, 0xffffffff, 0x665, 0xffffffff, 0x200}, &(0x7f0000000080)={0x0, 0x7, 0x6, 0x9, 0x1, 0x0, 0x7, 0x5}, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xfa97, 0x7f, 0x7, 0x4, 0x7fffffffffffffff, 0x5}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0xf8]}, 0x8}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000200005da7bd007a0a1cd60000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000000085000000170000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)={[{0x6dc6ccd6b3914056, 'net_cls'}, {0x2b, 'pids'}, {0x2b, 'perf_event'}, {0x2d, 'freezer'}, {0x2b, 'perf_event'}, {0xc7c60067142e235e, 'cpuacct'}, {0x2b, 'pids'}, {0x2d, 'blkio'}, {0x2d, 'net'}]}, 0x4b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.745215302s ago: executing program 3 (id=1203): r0 = socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x3) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000078c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="ff45"], 0x48}, 0x1, 0x0, 0x0, 0x2400c041}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x1000, 0x81, &(0x7f0000000bc0)="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", &(0x7f0000000440)=""/129, 0x800, 0x0, 0x11, 0x54, &(0x7f0000000280)="a2d03a3c3ac95b14b4b0c9f885824d18a1", &(0x7f0000000540)="32f900c62e2d57873bfe8873748959da5bf20a61079fd051a068d7dce38ddc9072f9a1a3bae44ed6bb0ddffb217b7512695bffa5a59a942968028115469f47ed76d3693492da66c8e5d1ef28b81663a430f65bca", 0x1, 0x0, 0x401}, 0x50) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x6, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x2d}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2.640607771s ago: executing program 1 (id=1205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000f80)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000fc0)="0625639d6a2e44db63a935e2224275a5956c81fdaa5d7ac7ef3324751719593e922cb6fe4bc3183c3ae90206ddb4d5218aadb34c9b74fe6eecc955c35af5482164d2ac1ab990e8c49271", 0x4a}, {&(0x7f0000001040)="4d95a3383f5ed9ad3c449658ba87e49f93b43a8929aa83ae33c724325cd9b03cf60f5a24c5fc61d842f97f5edbb6ce77e32a9b46ace37d86c83a667cb82a5b1453f6e650b603ea0edc2e7703780ba9287bbc611e1ec1680aae7498dbb67b0d61ad780425c5fa5ce55215ed14defafc7b541032fd65fe17e39dfe0672c1f938a911fa708e25f7c72b492482f4ebcaaabe44c826ab481c", 0x96}], 0x2, &(0x7f00000011c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x29, 0x4, '\x00', [@hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x24743c28}}, @dstopts={{0x20, 0x29, 0x37, {0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0xa}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x9a, 0xa, 0x0, 0x9, 0x0, [@remote, @mcast1, @empty, @mcast1, @empty]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x16, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x158}}], 0x1, 0x80) ppoll(&(0x7f0000000180)=[{r0, 0xd4d8}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xb0, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@nested={0x96, 0x12, 0x0, 0x1, [@generic="a437fa54a0cc5d1124ab2b2806e7f423b6e257262cccca9a82234d912f8d4196192c1ddd5dcb13d7f0921142632c5ebd28b4b4513d200e3c56c2dfd37d0f42fb34dc396d5a11005f6bfe5993e5c04528fba03ac92ee6ed1d968a7554517590de2c1900000000", @nested={0x29, 0xde, 0x0, 0x1, [@generic="d3915f12712a643d4966212c4f25b0f088ecbcca05e2c38719e4adaad0c012779c2e654b7a"]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendto$inet6(r0, &(0x7f0000001380)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="180200002000000000000000000000008500000036000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x9, 0xc, 0x4, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x7, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x1, 0x4, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x8, 0x7ff, 0x44, 0x2, 0x9, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x5, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x7, 0x5c20, 0x7b, 0x0, 0xe, 0x4, 0x6, 0x391, 0x0, 0x20000000, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x0, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x4, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x10000, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x3, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x6, 0x3, 0x0, 0x2, 0x9, 0xa6, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0x2, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0x4, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb, 0x4}, 0x6, 0x3}}]}]}}]}, 0x478}}, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x3, [0x5, 0x6297, 0x2]}}) shutdown(r0, 0x1) 2.104887465s ago: executing program 4 (id=1206): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket$packet(0x11, 0x1, 0x300) close(r5) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000005000000020000000000000100000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000440), 0x77, r8}, 0x38) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000000000000000000080000000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad9585000000030000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r14, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x81, @mcast2, 0x7}}, 0x3, 0x7}, 0x90) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, 0x0, 0x0) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r15, 0x84, 0x10, 0x0, &(0x7f0000000800)) 1.068834332s ago: executing program 4 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe82, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x795e, 0x38) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000180000000000000000000000711207000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='percpu_alloc_percpu\x00', r5}, 0x18) 835.930192ms ago: executing program 3 (id=1208): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="3eac405eea5e6e689402594bc70985fa0ac6ad616a4de9e212b497f2b5878e991c0ecf5e3fd409aee8fa36044e2aceeffb0187aab0f4ffbff1fee5f2ddf46a41eec9bceb9f6747d2557d09cd95b673a144175f77e6c38b8f15d8e0a46eb2d2c233694e8d9083c4a59f8bc6a204fd98bfce2bb4fe0f64052d3a3980f76c588913ec519e15ce30fd5c94a0fff3460b5fd04791823f954fec73efd76926ee095cd6b09fb10b6754a50f00000000000000b385a9ea837ed6be4924f1df67cc54b2b8e9f947aa6eabe95b840ff6e9fc0a16d1d994bbf07d5ae079bbf6364ef72ea8120000000000000000", @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x20040000) 778.9775ms ago: executing program 1 (id=1209): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='workqueue_activate_work\x00', r1, 0x0, 0x2}, 0x18) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0x8d, &(0x7f0000000300)={@remote, @local, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@snap={0x0, 0xab, "b3", "04a570", 0x8917, "b81439c164409a0f5efca9cac15ec32d2b60efcbff8699d2c59cda18892eed5596e31e2e5a354fa0fe905546b87b2987e6af59c535779fd773b67ccfef933823728256e6921c22e4083274cd038f1dfa11ba124d1c83f3420004bfd5ea121648dcac13ccee04fd02a8efdb3508312d"}}}}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x16}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x694}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa24}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x44800) 697.78718ms ago: executing program 3 (id=1210): socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x2) epoll_create1(0x0) epoll_create(0x7) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x0, 0x4}, {0x6}]}, 0x10) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="000229c11c829862bd7000fedbdf"], 0x14}, 0x1, 0x0, 0x0, 0x9}, 0x28001) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)) getpid() gettid() r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 650.224594ms ago: executing program 4 (id=1211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800007efa652694cb879300000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f00000015c0)=""/4096, 0x9}) 571.825621ms ago: executing program 1 (id=1212): r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001800)=0x4101, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001800)=0x4101, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x100}) 449.13466ms ago: executing program 3 (id=1213): r0 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5, 0x4}, 0x20) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x80, &(0x7f0000000b80)=""/128, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 446.088447ms ago: executing program 4 (id=1214): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'nr0\x00', 0x6}) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x3, 0x2, {0xa, 0x4e24, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, 0x32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@can_newroute={0x44, 0x18, 0x200, 0xfeac, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "5a3574d3a29e0406"}, 0x4}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1}, 0x7, 0x2, 0x0, 0x0, "ae8c15f94b32ae37"}, 0xf9cd33f933caf791}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c0}, 0x4040000) connect$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @any, 0x7}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) socket$inet6(0xa, 0x0, 0x1c1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x1d, 0x0, "3acd0853765082ea087c6232b905358ccdfc191534f2cda0a37fa215021f21180c2d26db8be3d23aaea0b23858b34a3ceea046ba3afddcdb39adcce5e14d6ad13573c7f215fc43d43e83c9c49c26140c"}, 0xd8) sendmmsg$inet(r1, &(0x7f0000000680)=[{{0xfffffffffffffffe, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="ed24cc357d0f4b95504a1b1a9d3552c005a060040dc0323005d216fa34bdd8d34c71a420564f83bd225d9b7797125ea63c90194d3515ab25a5e17b9793b6c4a5d4c5ed388bf63c6d1731632da4aac07bfc261dd08654078acab83503b9dc3343b60102e745d29eea7b2b29a63e9b76eaea89bb1b70ed9f2a2b90c7fda4dd7ce2aef70186a29a082775dae55da28999cd", 0x90}, {&(0x7f00000004c0)="2fb64938cbd39baf83", 0x9}, {&(0x7f0000000500)="e48c172f96885588f03cb492058f05bd8bdcae946a371c823e296d596e069a1592f6333564644ad20e23a0a2b49a77df3ebb4aeb64edb933e15686400f033e15ca1b256655be9ac362ffc831e47973fc5890273f93290b13b21c5b2888f59a0a17c7172ab484f11de87f5491fb0b88288360f6639f3794e88df2f24cb17e37b413a957015a35e29d8fd0ebd908", 0x8d}], 0x3, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}], 0x48}}], 0x1, 0x4005) r6 = openat$cgroup_ro(r1, &(0x7f00000006c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r2, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x26, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf8a, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r6}, @exit, @alu={0x7, 0x0, 0x1, 0x7, 0x8, 0x1c, 0x1}, @ldst={0x1, 0x3, 0x3, 0xa, 0x2, 0x0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x6a, 0xe4, &(0x7f0000000a40)=""/228, 0x41100, 0xd5095365ac841223, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x1, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[r2, r1, r6, r2, r9], &(0x7f0000000cc0)=[{0x5, 0x5, 0x0, 0x2}], 0x10, 0x3, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000dc0)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x3, @local, 0x4}], 0x2c) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x4, 0x9, 0x2, 0x0, [{0x22d8, 0x10000, 0xe610}, {0x6, 0x8, 0x3, '\x00', 0x2000}]}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000ec0)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) recvmsg$unix(r1, &(0x7f0000002480)={&(0x7f0000000f00), 0x6e, &(0x7f0000002340)=[{&(0x7f0000000f80)=""/235, 0xeb}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/59, 0x3b}, {&(0x7f00000020c0)=""/137, 0x89}, {&(0x7f0000002180)=""/19, 0x13}, {&(0x7f00000021c0)=""/102, 0x66}, {&(0x7f0000002240)=""/198, 0xc6}], 0x7, &(0x7f00000023c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20001000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r10, &(0x7f00000025c0)={&(0x7f00000024c0), 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) socket$kcm(0x29, 0x7, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002640), r11) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000002940)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002900)={&(0x7f0000002680)={0x258, r13, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xee59eabd9fae41af}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) 389.125548ms ago: executing program 3 (id=1215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x83, &(0x7f0000000040), 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="080000001e000100000000000000000002000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$inet(0x2, 0xa, 0x400) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) socket$unix(0x1, 0x5, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000001200000000000000", @ANYRES32, @ANYBLOB="0101000000000000000000000000000000000000b2eea3f6ed233579cdf184cd3232f8ccc0a71b8cf1fafd0c7bca5fa72eb5ae3f3b06a2173338bdba609665ad1740525086dd09c5e6bbc9e1778d5890ae88ea95c5812ff032107d57d35fc42f9830d9269701e0ba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0x26, 0x2000, 0x0, @value=r0}, 0x20) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001200010a00000000000000008000000020f143f3a2507e921121fbc222bcd6c7e517690c258be98a99e1395aa544d63641c9ad"], 0x26}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x5, 0x3, 0x5, 0x5, 0x4, 0xa, 0x3, 0x7, 0x7f, 0x8, 0x80, 0x7, 0x1, 0x7d}, 0xe) sendmsg$can_bcm(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r3], 0x4640}, 0x2, 0x0, 0x0, 0x4040041}, 0x4005) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd25, 0x25dbdbfa, {0x4}}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0x0, 0x0, 0x39, 0x0, "72d09163636c2e4f64fcb4697c64f92b2dcadb581517144667bd7ea88c80eca7506abf78cb3bc6e4df156514cf6f9c6563b970a37c63b90c17f1a144f916f111ea70ebf09ebe2b3e9297241a66615951"}, 0xd8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 378.348354ms ago: executing program 1 (id=1216): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_submit_inode_data\x00'}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x4000004) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='ext4_remove_blocks\x00', r3, 0x0, 0x5}, 0x18) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, r5, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0xe8) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800f300", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0800b100640101027a016b8008004900", @ANYBLOB="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", @ANYBLOB="4db6136678434504240c5295541b15f35406ce33ddde7a4a62a1b0f63572a267be0b12499ccef6ea4af1423ad1c79940031283dba6b41e7d4a4908008500", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000002d0000008bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130000000"], 0x8f0}], 0x1}, 0x0) accept$inet(r4, &(0x7f0000000bc0)={0x2, 0x0, @multicast2}, &(0x7f0000000c00)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000d40)=0xe8) 172.478881ms ago: executing program 1 (id=1217): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmmsg$sock(r2, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20048050) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$unix(r5, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f00000000a44c9b922880a5327d735a75d47711ccffb8c9244c7ea0051c447f9edb924b1947dcab7c146bef1e1ed65c50d8562d9448b0f96ec12455ec7ca8eff32e07a9d1ab5880c4366b40b3e778c4974cb933c79e51e761dcc5d87dac37db0000000000", 0xb1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = accept4$ax25(r1, &(0x7f0000000ac0)={{0x3, @bcast}, [@remote, @bcast, @remote, @null, @bcast, @default, @null, @null]}, &(0x7f0000000b40)=0x48, 0x80000) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000b80)={@default, @null, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @default]}) mmap(&(0x7f000033b000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0xa0886000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r7, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0xfdef}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0xdc, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}, @NFT_MSG_NEWSETELEM={0xa4, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x214, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x142}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x1a4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0xf4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff5f1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ae0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e40000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb5a}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x61}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a0}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x99}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff9a9e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5d5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWFLOWTABLE={0xc0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40100}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, @NFT_MSG_DELCHAIN={0xbc, 0x5, 0xa, 0x6f4a9e93b36629bb, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xdec3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELFLOWTABLE={0x258, 0x18, 0xa, 0x804, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_HOOK={0x1d0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x868}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r9 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)='%', 0x1}, {&(0x7f0000000080)="78565caefabc7e", 0x7}], 0x2, 0x0, 0x0, 0x900}, 0x0) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x5, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'ip6gre0\x00', 0x0, 0x4, 0xd, 0x0, 0x15c17237, 0x11, @empty, @mcast2, 0x10, 0x8000, 0x1, 0x3}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000cc0)={@private2={0xfc, 0x2, '\x00', 0x1}, r10}, 0x14) 171.509881ms ago: executing program 3 (id=1218): r0 = socket$inet6(0xa, 0x4, 0x6) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0xd8, 0x1e0, 0xffffffff, 0xd8, 0x2d8, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x112, 0x40d, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x14, @multicast1, @multicast1, @gre_key=0xe9, @port=0x4e21}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0x400, 0x1}}, @common=@inet=@udplite={{0x30}, {[0x4e24, 0x4e23], [0x4e20, 0x4e20]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @multicast2, @empty, @port=0x4e23, @port=0x4e21}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @local, @local, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x1, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @local, @remote, @icmp_id=0x66, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x5, @local, 0xdc8}], 0x2c) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000780)=@raw=[@generic={0x5, 0x7, 0xc, 0x9, 0x1}], &(0x7f00000007c0)='GPL\x00', 0x4, 0x5e, &(0x7f0000000800)=""/94, 0x41100, 0x64, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x10, 0xfffffffb, 0x7}, 0x10, 0x1b807, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff], 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup=r5, r3, 0x24, 0xa, r4, @void, @value=r6}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) sendmmsg(r2, &(0x7f0000003980)=[{{&(0x7f0000000a80)=@ieee802154={0x24, @short={0x2, 0x1, 0xfffe}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000b00)="9fadde8851bb7a0f7c72b5f2a05aa148ccbc3403772349e8159f7334e23f26dc0bf766bbd84ce418f351cbb8a3fe56bbc004387c8c67b5bdfe3e3beb3ceff7b44c70a4121460cd23e9984ac0dccc342627b06464bc1e5d62a2866a0a5621de742b29a3e0b3a92b309b8af1c323887e5569d086cc3586026ea6a31ab43c1e5257ab0af4bca8d64b9079e9930d5dfea3afc0b757c344bbb30c8d4a378e65ac9db5af5131b705d4c38d6f", 0xa9}, {&(0x7f0000000bc0)="9cf2d3fc57c2083612f64dd0fdaca652647febe5572c98de22a0cd461a2c177f95bd3994a0786c3aad4dcd5417bdbe6d033b414cf4f9006ae187a3792174d95e09ab09856629ce601e6e065af6ba5f39ee7d4fa31315626d4b4d60554f30258672", 0x61}, {&(0x7f0000000c40)="a84a1ee60ac768cea5f1ca215564c4603e2775fbca0ea2e8f14d3c865afc1eda3d6faa5144e55bfb67ecced4fe9b357c2cd34a24caf74948e06fab33054df5a23b1c659e7deea55447ea55dc6ea2acd4f09b95305104ee104977c84ed5a2b3aa5977f578d6b7a4c56cc3a2c5bb0f487959a7e20f9850407edb2f91860688bb9fa7fc5ba518b889eabfc3d663186ec6b37c4f161b45b01766250d6f5c7ed6617509ddffce00b9d197c2946d851583e83149312d4b2fba574790", 0xb9}, {&(0x7f0000000d00)="c7dc69fc250215e75051b05221da4aff8b7ce400561d04efb035892bf27629dc626c592fbfba8411f51aaa249a758d68b06e0e9f4262406e16c64e23ee1d9c600e0b5b5e02a7ee4a4dc46d5dfb64a7ad7aafc12500013813eb4f8661e2303c3c5e0abb116f8e40930a2f774eef7b28e1b2bbdf4782a83cb3f7cb48591954a61e1ac54da6bd168688af8e54fca41bbaac4086f6954f1aa4b759f7fe22c7fcddf6370feb7890249e0c549aed03b0bdacaa8dfb7fbea1c032cdc4bbcf9716377b46c4", 0xc1}, {&(0x7f0000000e00)="7d91246e774d0d3f", 0x8}, {&(0x7f0000000e40)="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", 0x1000}], 0x6}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001ec0)="5d366092b20730ed99f12799c71b04a5a56acda1fcf77fd09ee37b835b1fc98897c5f9f5", 0x24}, {&(0x7f0000001f00)="1bb073009072511caf7115f475fca592912e5b5c1ef029ecf05f92765cea0d5123ec2cf7402120bd59bf8110467e4640332581399ec896a7ab0f9e92fac77e3a03c4d461001b57fd3bdc5b8a8f47d12a16eae297ad8ecaf624b4d446b177c99a2042762a2ebf5cb6f8897b886568c7273872e9deee6c41abf4d95757d2524bf5008338b17bdfba020a28bb4c5c86b60dfaac19107ec7cae968e839f61b0732ab501ff0df850adc086b130b373675f1667f553d22d81a9e56229ca530a345e605252af2c3a44a93857a29249c6bef127265392106104dab833c82e56dbba6420c6b61703561cf2c58", 0xe8}], 0x2, &(0x7f0000002040)=[{0xe8, 0x1, 0x7, "4a3b07f42a59537c430a42ccca6059eba4b05d166666316dc18aa65018761e7b291cb6cb4dfd28fc4f53007a66a233c1cdb59cb934334cb3137a6ac975badfd23b0c957fbcd127a0412e45aeb9fc082dc8d6cb4a82d0433a3b6ef3e559f706234954a28e008d8370c459c9bb4933ebf0a6ce8b96f15fdfb4d14f9a99412e492cc3a8b9e168de32dc46e071630822c6bcbb261a91da38246cfd25ed2d20fd38fc99b5b563ddbf198375e363e95d2d40ddeb3f89c865445352270f2acaf57c7e0873e25d2c30a0ed186c0a6f3cb90fba4f72ac81ff54"}], 0xe8}}, {{&(0x7f0000002140)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000021c0)="4fce5d415433a5622b3243aab8cbe7a801bffafae4d80a6f77cb3997e81024dd0cb476936917d43efb087859da7b60424c678de5a23c179847a54c99bdce67c7d5e871eb19aa0492ae5bdf252352dafaf095c5febb446804ba9c54a6ed3fb23be989732497c0ffe392357f634c925e620f7cc5ad492389a35959877975660414a3f502", 0x83}, {&(0x7f0000002280)="eaf716a652dc1993beeb2967bcc9c2237286c5396e6b4c810278637925b123861397e542c08e5262d22a306c33ebeb3728b20182fd545496f191be674f61559ffa4dcbf4dacfa7e1633e9cabf5cb1bc1306c411faa3d", 0x56}, {&(0x7f0000002300)="e6a7b80556df9343e12697fe26901ea05a57ac18f0fecb2b25db8dc07957aa58985ab5f4ce7b48be4cbacde741d3676c46bc46e96574ff84c4520bb74e87c037fab438f66fec4b5760ad9aa454353e32c1833d58bb7a6f3cfe30bfadc3ec60f68a66e8d37df814a251b94eb69945400beaac42a3182e25156502e3bdae527c69691f418aeb8c4c236b05a8719ee2f533dc943d05b62fd98dc943eb212414aaa9c5c940e98737f073a21977d5b1962b315111ccf152d417d1519a4a671f92b64df31e751bd0442dece740a50baa78e200be4a8a1966e06835cd93", 0xda}, {&(0x7f0000002400)="651eac54fb73a76e59de1d81a908a647a8f625f11e42d813ba1e5a4381b7e4819d3378559e7b60c71ab55b719b8a4c6de61e0a43c4da954b3651f64b03ec54b94dabaf7a937b181515ebf94b221489592f0c0d3558743969b2de311b79faaad3805c30d28b109910749fca7941d1132a30e4ec679ba251627a5b88107067e91700b63e870820ef2fe6", 0x89}], 0x4, &(0x7f0000002500)=[{0x20, 0x117, 0x3c, "4097b55fba3357349ea3c35bb809"}, {0x88, 0x112, 0x7, "7939256a28193c6fc397bc9b373e3f5aae06d340900ad16ecd031888d2bc44fba075ecf52d57268cc34f88ba486511927ffdf2063983b80afcd8a97fad79708b726cb13d88e474d715ad31a684954bf9e92a1de948bdafb027df4bc7021351bc1bc481bbd1c120f091e38176db31811badac0ac9e6"}, {0x30, 0x116, 0xcb4e, "a2bd5a4523ea8c3b21aa09f598eee8966dbcea8cb8d249e8dc8dc47ba61c"}, {0xe0, 0x110, 0xa, "2068ddf0219dcb9ca7d58e08ac2cfd1054ca51b5e49bcc7d80dbb4d2a40c0b99eb0e79530bcb9420a1f830f5be3dafa86f8e7a35a11195332110edfb1142eea50343b3ff68f55914167c2957ffe36f2ca2742a9c0aea80a1a26ef8f8d098da4c4e931536b134d9a31e8929ba1bf76a35db937499e1c8567ee9c64bde0a0249487f7f315c970052dd00d41ea066a14209ffff57d38be89f49dc9be630123eac626a27c208dbd5d07f12d001233819364ef5342dee1d06b2274d73de8ab4a98fb323386566c4894afcba4858e00585"}, {0x10, 0x10d, 0x1}, {0x108, 0x84, 0x0, "25b5624f3d17d92a8a50d7747cc6b6b46d7beea7e0f8d5506c2108167cc9fd4de1c4c974d0538f35c0e26abf4703746711d41512bc0e74bb8fac62f0adb4f5d567842d3a3948de48f56a2d16a796e559f5975e4e906fb6ed2e81ec09419cfc28db25e51ca4114c3626d9f45d65022f5c73bf0c9e4dcd4d802e08891a5d6ad675f487ccdc75913ab2e397c249d9ac5f79c4fa2218d07bf4800484432c68d11ff2942bd768d1776e18ac68f0234514a3d5908e5bf622008c0e15b655c55c7660339dfa97e6a0a9ced5e7bab853d5f2f0e0a1fc2d46feeabc819398e0d450758e4fe234c15e97bcf9bc41e1a23c7b4bf71fd9da52"}, {0xe0, 0x115, 0x0, "01ff43621639e6369f4de3706fafbaa3292bdd659167a0d7218cb03f37817df81212af9d9798d8ef9ea786774b6ccf198f1ab968a545854591737fc7a464e09b79849014bddfdef9ded0632534c2d4da8148f4eac4a3d0f8938e013282a64fc0b18c7e47de2ecc0b7afb6fc0776ac8970517a345fafbc5046b784f846377ef2c856b0d4d945cd83af5a2db88db35862bb134282ad922995af66cef8588a3cee3c5bbd9cdcfc6b73971732576c2c2f2d5d7609928353c6d9cf2885c13beabdec8485856d4f983b40a397db565149a"}, {0x1010, 0x104, 0x0, "4218c6cdb753939f24850616523006e91c74e53caf904a0a2c0803e8c3fd18dc8082459a4be3ec85fbcb297b70daa597b77541e77249acc9cd005616edfed92f133a341482ad5c1d0e51eee54166381feaf18ed47850b8ccee463f9ebb9e4a003c1285102bf4fb833dc87f1f2c2f908100dacc60cc2affce4c5c9dd7f3bbfb74d2526869612a738f2c756da94c13e0e8d1be185109f723157765f9f936850fc4e1cb6790c88ee6919452f8680e6fcc1893a03932ee23bff2a0ed7ce163a719e7afb03288ebcce23b20879cac58135be1383e625ab29e4b64c81eb0712b1e5627ef5ea2a763cc038ed2003bbf0d52e17fe829ae35071b11e0f8a5cb16e197d18257baacbeef2ff72fc874df119c845ba9c2f5fb5e90012c40ff9e4a01396b0182de9d796a7fdbf81c291e9c2ec02cce8f4a982fad8a6f280029d05bb7d766fda523c58bf73d38a62229019d51add49f82fde822eecdd5834e0eeef2ea12876423dc6b8526b44da02d5b3e29745f193507f9f95366b36870477a5da15a72e5e631a447e675c98cf801ce8fbeb311d9f19bc2b5c2d7181cce9cbb09dbfe11eceb027482fe4fd387f03627260391910e74ae6c6742b3fd98a876ac4eba9ead93b45d8c1367dd96cebf387730013ac142a0f7b712d6664bbfa764831471604f280cee6f3971e401025ffcf046658e9ff729d1225e1e1a112b6409a6754536bad2564cf838ad12adf748964c06f35f72bad2c725334287f3765aa964f09fb83336df5115b27a84025ee4f2fbd86b19c7f0a472f603143c2c72b1cf7cc347d26b2ec8c017a6aced59683871587fa5553b8c713723d92b9f91022aa50cb4d14537c55ce29ac4b5da416174a8d41404451b19718197c1a735b6ff57cc365e27ec7278f6b5893e949f4a9fed6b12a4d91235177d9da7e52e58bf7656c50125a6acb1ea0905d6f6c945857439ddeea9ee1c65490cd5f40257779f8b54df7c67c4be2fdc0fb1c0f2776ea8f81be53e2c6ee7cd3d15b43758733407969d0b951408f5f5bcb67249207b3791be4fd3daf1bebe733010dead888b7adc2417d661ea409c14afbc0a9c8aefe7a9f8bdf95b9fdd53a586eaeaec316a9b356ce9e883c8e856068ca1817757bc2d54d6b17a30019df8cc8f171790770d2d234dc3ad10ab4996381e1794d098ab7708300183cfb78354244cadb0e9c6dcb4096a493016239687ec0c0ec8f1cf981ace8932f219ebc66ec9926f1fd7962346dc6ea173461e163db11c9b4f1f112c2710af1b81ebd28ce7194008414eb9ec1f0e729f163c6e5bb07933bda06232dd6b91659880c69e775480516c07eef8e4961b08c348cbe19400a4ca6ce94079290cc440b8af1da5dc24d865e308ab14592ad718409643e087e0cdb36fbafb1ecd3dc100976c9a53c819cfe75778280cf79454605b0addb5f0cfab5f328560abd75e02cc5a3ffd647cd2ab885d2972df3eec80516e6947163d8be759e476fd540f016af4a561198502a998a78359944ebd07edfb3b358fa261ed21d87d8751015c0e2f8349b3f4763ae98e61f03af2efb3bda26d39a7f814ed3e267a98a5e996d889ab510195360a830941bfd333fc34568c91293297e3b9a4f9a4a8e384d1521a25a4c1609c4cb138dd2e558e9253334d5899c27e974532a4f716e20120e7faa6458746e3f896e1c3963cea6be07a8ed26f6ebb0aa43498e3ae1add3306cca3d325f790b1975cd026af19154c04abe8afe00b1c0dee0d44924e9cce1a6d463fb4a3cac484533a1cf3bdf74a50179f2a778cb317c5999241007a03d8ec2e6ef1527d098d3d49b4cbd25518b8342688b82277e956abd7a7c222acaeba3a1e1be94de6e59b37ad96b6fd0bc9fc0e1ccf7188179707ff3a75217af8664f1acd7910864ec63dcf15264e61d51d32b62b0fdc7c38324759aa9e34124e984b6c8cc5e1d75cb560669547d66892c5116585d753320df6953a855e1e608a95e3414b8ab862ab6242a3629880b17188bcc073fcde7f3d72676e7048954870fc46e95f2bffab56899b454e4ec987c944c393ebe6c4afafb0d177fa1c2d69b0a34bb35daf12a9a0f8a1ae2490fa06ad4189fc0a9cefeaaf949904f7b5720dd8ccb5656c15d70fc08f269ef8c19a2cac8fa40f6926325ec3166adbc0c196cd6cf0b5ebb3497d9608f24c978c370a9581cb70e0da2653886d86ccd5092a48cc762085a174a0b2c4e7b7a206c87d84e6fb1192c2e532751425ff25327a8d1d96cbbe38b60a3a9daf49172f749a8e3d3b49dfbec842da71a4daae2147accb161d0c3450b717d6e73b7e058d87570e1a07bdd7f674de6c03cd57ad24caaeab85614fecaa8862d9e6549c029bf6540a60c8f931183cd59a48bf4fa69e783305fa6ed24a0643127559edafc0bc1b63e7837fd7d1ec80dc4fdebc4ec3c2433e633c07ad44dc697c82be4d5a01b167ae049f36ab6f777faf91069e3ac92a3991dd35f4ab56240dce5cb7158e70f43550a9ed503c2d5a47b9a06230a9820ebde32b6691428e91c4f763cd78e60afa6272a2852d09565c9565411bec05c3fcf0cc241bb8af5efe77ad7ef97980fe376332d951f7e68c6c894c5c4f92cf03c491130d0fd283ca2c000924e618dfea84796d9780da8e150e4f5634b22a6361ddc807db8fb73f22cbec36342ceead68ec6bfc789d6c36c5687640cff95e24d5b0652e1931c7b678111490c8baeab2f3e4d16064a9902b4cfbc657d462fdeca402d66c7685582e484ce6b6e52097868c76b49f8166d08b04013153eef1921ff71a67b997fad218223e7945be263a72ae2a588a14cccfccbfa96240cfb4cc44f03b37c5cd652acb8eb1c20967f3b1017d6d8dd1128fa77d6716980aaddcf588f6df657ee6f15d4d8217ba72b84bb8b945c75d0bacb22fd606217cabbb137d28b881f47e9f0c36d0550ab94578eabce4a6722081c72bc9f9385b08149c68a80d19022e18a5e729c39cf2d89e236c0f22f5a1bd52ae3abb6228da95273b83a92f49c5453a0364edcb4301c299d3cbba1caff969ff11711082af03a6128abd9a747a3df5964444148cbc66dd17f293e015c7dc79e2b2ff2dd9483af74605dddfead8255f5f7efb744e63030501f483ac141b189d64a9b1cf38ec108ec0278afa45a7d42280b59f7304dcbc18083a2a7097ad7e7176d49fb7a90e961de6498c7ee79679d8040f761cbb76470c3b262450cedfe68f4226955e5ce4cb865c52274358a0f5a193cc8062f184aa280e649a8bb54411424c0165c82f3902f40a5075997c7c8805c048b46073b26f9dfe69096e7eda1f2ff91ed5b7a548d4b94a4c1625860fdf04feb7bbd61f1e462965cbb2f719024f52d705f623571ee4ab780154169130b285e9b93f7d49f3edd1f9f5b46ab329ab38e7c0316e4327d96703b5c0d07e18a0c68e1bc9206f8127b0250c033e98acdd70cee83c2ba1f945b33a678562e4da58f087f18583f70549431c2d1ebcc96e5192f6e058898a5db3593ab31ee70df1e32079f361f0f203d847c3ec1638623113d19a1e22d6386d52fde802984e464712ac8aa79c5530bb2326e6a0343f71cc68da3dada0a168b73d9fe09e2410f4d1b65205c77fc3a7a8ca816c7de9aed0ce549423f99c0c67f2b5fe17fff6ba83d0abcada46d37dea6db348b3318be748a6d4121a8c17801f1d14af6db2354d5eb911e4fc5f48a145560ade213efd18a2f39db1168e5e393d36b751d741c03aedf867cd39c96343a56fd95664c4ba0d5b598dbe329be815836b70988d0c72dd22351e2ad8f3f601c34ee01edfee71a476f039218db9e4c358ca893b4d8db410579adaf616b51200c793d1e4d7a776a7588698ab9ec1ade8abd19b717f9fd74d058fb38c965acd24cd8b1f4c2d056e3b96065be331ea04e4a0f6aaead180868bb2a026a915df32ae929e4b6aef7ce2ae1522c1f45f8ad5759e6bb26a2bc3801e17972bc7583822ee056bbc3e93644a382b0d6e1afcb797b7afb8378ba9f6782e55a5f1d54ac36ca1e8240bbe3841708d670142219f79fe7d8b818b99923faf727dc27ed82291a8d3f7672950d69103042d4449530a92bea58510dd6730498256b89795307d97f04fbde85ec5b572cd767efe3ab4cf9e92927da764e3a7d95d368ae35e4e06e6fc5cc8f2096f01967af0b741651849aeab9c4a98072b6af613f7b456f438d8498f04e29ff4ef07ff84ce13a7edb2fc0cd86a1eab3f4ae52bbd08d80a0b8164de3ef7db98a3946634098b76b1c89b4cc7c8114ba6f22301edd5ec5436cde9fefb0a7365c7a7cff6d5be1f379011f591510ad4a7d75185d175dec7886e1248e6e50dcc7be7aece974a80498d692921a7b1c2ad4cb9c5f6f2b24b582a0e2de70e5ea78abb8700fa78c02fdb6068768bf36c99a40e3b21f3c0d090b6d47aaecdc93bce2f38aea7713ac67e213ee69cbc86c233118a340609effaa2f8d6e3974e1b8a55664d50924ae519f753240d2cb82a1aa4574273e676c4ab2c50472ac915fba21b7d0030f0171432c0a6dc5ff679db1e671b79dda2762237e4d8aac9266277924ff0f35576296a680eb6eb52080bc63782cc3a99f0cc31c83971c67a75267b5f4f7ed9f702a30e9f39196166c93d1c4df3c1624c3130a1d8112bc094dca08f43c98c5f2cc5d21173924cdd8d585aa2e3be633eef03f45dabe616ba128627aaa351d16879bc282c481d364d2119b10993cdb99d16582e6e6e9785d941f5bf7c74d58f386b06f3fb61eee25f86f15ed2134248806571d27bff4ce17b87128b6b261b2b435aa6116fa37fa6d9956e0e579eb16d9aeb19d334bae596b86aadf5f4a9b1387d47739a6e3a33cd0545fe9305b341041e84dc3c405d484df815e2777b96bb8d7b4d311eb835389452894c698efa20a7fe8bca8256c3a53e685b38190a84f25e83a22e7808253c111df31d31f43637d501d1bca672edbec64e808385a3b68640b4995ea53eff3eb870012f44c50ef1cc253edbaa7d6cd5c3fdc0b4d02418a9bcb46cbb33c71bc9c96d25ac264e3ae0132466582fc8256b47a3d2c631a431e8a10232de0af4e179f9bea7c48233830e707da7c4a154ea50f54159a27d8f488ba95241abbf6378fa0e37a1dd4287448521362b8f08e1d14e42182c6ff05adc86a810273468a73a1e83718d7da4dd75fac30394df77864e6b0814ecde55f3656b2c5449bab01db40373ffe18b54a6b656fdf2433d664db9925edc332c0df2ad3dfc8b1e7f54fd6f38a9b66fa1d6e3153bcac99c40f2ef48ec0d0e005615a45d295856a6fc0449d5e4e4240417bedc3d957d9389ac1d73aa1d12f5b54239bb499c8526941ba2c06940e3d47a39ada0480ec8b39b1023506a4f86e339162be7e18bf2fd1655efdd3d13b223f43990ee8b34239a57e2dd6aabf47392938724b89d2bd3689a90c397d6db569aabde8c6826fe233af3ff0fd22e53407433ce40e18301e7687f4bd3418d04b25b0a97bfca830aeef583714c9774a4baa214416d8650d1e54dfbfda07b741e2bd0718612d31840c597131c91148d51d895f8b428482f47633cbfbd0cc0a385b8292d9de8e9c01e0943ad77291fb53addb4f5a107c97c468f69f83639c73b9cf2e4cd92fe2034f5be62fdf0fa534951b431c8fa0cfcfe407e246faeb0966feec5a37d0eaeb456cac3446f7931be2e6b9d4ed2fa0b688d7613c406231a58a6782357f34848ecfc4eba0902d15cff09b638f9b7f1b5445bd58a15e5bac85989ffa20f2fa2a5250789897dc899acb3827c7b0d5b0d4314e1e9b8c6c8cfeb02"}, {0x88, 0x102, 0x5, "2da4254102b0569d29d71d318243ee66b2bd99983d0e11e7c342a377934ed3502726432ac83f1651017210dbbbd7743fbf5ab1b63968603e11df4f3a90a86663f54ba62ac5c6e6bbc1fe96a22a44bcba43f8761d11738e860f805a7be8ab56a0c40b016112f71099c711cbab2c30746a714aee"}], 0x1448}}], 0x3, 0xc1) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000003a40), &(0x7f0000003a80)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$tipc(r3, &(0x7f0000003ac0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x3, 0x1}}, 0x10) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) poll(&(0x7f0000003b00)=[{r1, 0x8042}, {r2, 0x2000}, {0xffffffffffffffff, 0x8408}, {r2, 0x2128}, {r7, 0x110}], 0x5, 0x9) socket$alg(0x26, 0x5, 0x0) r8 = socket$kcm(0x29, 0x7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000003b40), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003b80)='wg1\x00', 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003e80)={r3, 0xe0, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000003bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000003c00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000003c80)=[{}, {}], 0x10, 0x10, &(0x7f0000003cc0), &(0x7f0000003d00), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000003d40)}}, 0x10) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r10, 0x89e2, &(0x7f0000003ec0)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000003fc0)={'ip6gre0\x00', &(0x7f0000003f40)={'ip6_vti0\x00', r9, 0x4, 0x9, 0xac, 0x8, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x10, 0x5, 0x6}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000042c0)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004280)={&(0x7f0000004000)={0x248, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffeffff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47800}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000}, 0xaf3e03c5d6de556e) 72.90931ms ago: executing program 4 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x800) sendto$x25(r1, &(0x7f0000000180)="fdfb77c8e47d9e7a9c2b178eee9e92", 0xf, 0x57c7af3c4b493329, &(0x7f00000001c0), 0x12) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x4, 0x4, 0x400, 0x500, 0x8, 0x7780015, r3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3, @ANYBLOB="e759b4fd76f59392327ef587363404dd6e826d54d2f953f3b75bd712e8e305d1691e085a7f25a1d21b6a01a60573f846e61d2576b7ac1e2d9ab004607496ab180b4f38897b9e46f356f818ce08e99784d764a885b6c199f727ede11bdf1c17e12bdb3c19259b7aabcf60f08ec3e5fca6a2090000000000"], 0x3c}, 0x1, 0xba01}, 0x0) 0s ago: executing program 1 (id=1220): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e21, @local}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): g as an active interface with an up link [ 186.444972][ T8879] sctp: [Deprecated]: syz.3.744 (pid 8879) Use of int in max_burst socket option deprecated. [ 186.444972][ T8879] Use struct sctp_assoc_value instead [ 186.486456][ T5831] Bluetooth: hci0: command tx timeout [ 186.520663][ T8708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.540404][ T8708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.662898][ T8894] openvswitch: netlink: Actions may not be safe on all matching packets [ 186.772806][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.808745][ T8740] team0: Port device team_slave_0 added [ 186.826198][ T8893] ip6gretap0: entered promiscuous mode [ 186.833890][ T8893] syz_tun: entered promiscuous mode [ 186.865344][ T8708] team0: Port device team_slave_0 added [ 186.888818][ T8708] team0: Port device team_slave_1 added [ 186.907722][ T8740] team0: Port device team_slave_1 added [ 187.065028][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.103588][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.143602][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.174626][ T8740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.195087][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.216293][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.249320][ T8740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.354394][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.382648][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.399838][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.433410][ T5831] Bluetooth: hci2: command tx timeout [ 187.442431][ T8708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.525936][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.539730][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.566666][ T8708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.611944][ T8740] hsr_slave_0: entered promiscuous mode [ 187.618747][ T8740] hsr_slave_1: entered promiscuous mode [ 187.625229][ T8740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.633087][ T8740] Cannot create hsr debugfs directory [ 187.658623][ T8939] ip6gre3: entered allmulticast mode [ 187.807406][ T8708] hsr_slave_0: entered promiscuous mode [ 187.814699][ T8708] hsr_slave_1: entered promiscuous mode [ 187.821328][ T8708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.828965][ T8708] Cannot create hsr debugfs directory [ 187.988535][ T36] bridge_slave_1: left allmulticast mode [ 187.994642][ T36] bridge_slave_1: left promiscuous mode [ 188.000584][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.013415][ T36] bridge_slave_0: left allmulticast mode [ 188.019222][ T36] bridge_slave_0: left promiscuous mode [ 188.025557][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.207646][ T8961] Bluetooth: MGMT ver 1.23 [ 188.476291][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.491764][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.505885][ T36] bond0 (unregistering): Released all slaves [ 188.553933][ T5831] Bluetooth: hci0: command tx timeout [ 188.703916][ T8976] netlink: 'syz.3.764': attribute type 30 has an invalid length. [ 188.719594][ T8976] netlink: 'syz.3.764': attribute type 30 has an invalid length. [ 188.748420][ T8976] netlink: 'syz.3.764': attribute type 30 has an invalid length. [ 188.758148][ T8976] netlink: 'syz.3.764': attribute type 30 has an invalid length. [ 188.776619][ T8976] netlink: 'syz.3.764': attribute type 30 has an invalid length. [ 188.786085][ T8976] netlink: 'syz.3.764': attribute type 30 has an invalid length. [ 188.822080][ T8978] bridge0: port 4(erspan0) entered blocking state [ 188.832411][ T8978] bridge0: port 4(erspan0) entered disabled state [ 188.839006][ T8978] erspan0: entered allmulticast mode [ 188.848348][ T8978] erspan0: entered promiscuous mode [ 188.861935][ T8978] bridge0: port 4(erspan0) entered blocking state [ 188.868508][ T8978] bridge0: port 4(erspan0) entered forwarding state [ 188.912861][ T8983] erspan0: left allmulticast mode [ 188.918667][ T8983] erspan0: left promiscuous mode [ 188.926211][ T8983] bridge0: port 4(erspan0) entered disabled state [ 189.115306][ T8979] syzkaller0: entered promiscuous mode [ 189.147198][ T8979] syzkaller0: entered allmulticast mode [ 189.243986][ T36] hsr_slave_0: left promiscuous mode [ 189.250656][ T36] hsr_slave_1: left promiscuous mode [ 189.266583][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.276870][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.286236][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.293865][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.313636][ T36] veth1_macvtap: left promiscuous mode [ 189.319182][ T36] veth0_macvtap: left promiscuous mode [ 189.324984][ T36] veth1_vlan: left promiscuous mode [ 189.330398][ T36] veth0_vlan: left promiscuous mode [ 189.519847][ T5831] Bluetooth: hci2: command tx timeout [ 189.747670][ T36] team0 (unregistering): Port device team_slave_1 removed [ 189.785300][ T36] team0 (unregistering): Port device team_slave_0 removed [ 190.184511][ T8979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.639528][ T5831] Bluetooth: hci0: command tx timeout [ 191.501323][ T9012] Bluetooth: MGMT ver 1.23 [ 191.589848][ T5831] Bluetooth: hci2: command tx timeout [ 191.948484][ T9032] __nla_validate_parse: 9 callbacks suppressed [ 191.948505][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 192.045604][ T9034] hsr0 speed is unknown, defaulting to 1000 [ 192.315880][ T8740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.362022][ T9052] bond0: option arp_interval: invalid value (18446744071760826879) [ 192.370788][ T9052] bond0: option arp_interval: allowed values 0 - 2147483647 [ 192.378186][ T8740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.413757][ T8740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.436579][ T8740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.486392][ T8708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.528523][ T8708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.560057][ T8708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.586410][ T8708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.758894][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.835579][ T8740] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.876452][ T8708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.912873][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.920070][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.942617][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.949833][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.050852][ T8708] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.082000][ T9067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.790'. [ 193.141188][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.148383][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.204863][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.212104][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.277646][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 193.376617][ T8708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.457820][ T9090] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 193.476178][ T9090] bridge2: entered allmulticast mode [ 193.707268][ T8740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.877904][ T8740] veth0_vlan: entered promiscuous mode [ 193.898070][ T8740] veth1_vlan: entered promiscuous mode [ 193.972298][ T8708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.145086][ T8740] veth0_macvtap: entered promiscuous mode [ 194.225877][ T8740] veth1_macvtap: entered promiscuous mode [ 194.254350][ T8708] veth0_vlan: entered promiscuous mode [ 194.293167][ T8708] veth1_vlan: entered promiscuous mode [ 194.307166][ T9126] sctp: [Deprecated]: syz.3.804 (pid 9126) Use of int in max_burst socket option. [ 194.307166][ T9126] Use struct sctp_assoc_value instead [ 194.330872][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.364655][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.386112][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.403135][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.417242][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.441936][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.483051][ T9129] vlan0: entered promiscuous mode [ 194.488373][ T9129] bond0: entered promiscuous mode [ 194.501291][ T9130] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 194.512802][ T9129] bond_slave_0: entered promiscuous mode [ 194.531076][ T9129] bond_slave_1: entered promiscuous mode [ 194.538630][ T9129] vlan0: entered allmulticast mode [ 194.547914][ T9129] bond0: entered allmulticast mode [ 194.553899][ T9129] bond_slave_0: entered allmulticast mode [ 194.569157][ T9129] bond_slave_1: entered allmulticast mode [ 194.596052][ T9125] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 194.642543][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.664391][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.688990][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.715131][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.747080][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.794953][ T8740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.828493][ T8740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.867778][ T8740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.889535][ T8740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.947199][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 195.199213][ T8708] veth0_macvtap: entered promiscuous mode [ 195.270478][ T8708] veth1_macvtap: entered promiscuous mode [ 195.313245][ T9160] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 195.359573][ T9160] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 195.392273][ T9160] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 195.404639][ T9160] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 195.453170][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.3.812'. [ 195.480298][ T9165] trusted_key: syz.3.812 sent an empty control message without MSG_MORE. [ 195.499152][ T8708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.529565][ T8708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.549444][ T8708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.560579][ T8708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.570533][ T8708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.582501][ T8708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.597210][ T8708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.722030][ T8708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.749652][ T8708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.784088][ T8708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.804998][ T8708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.825494][ T8708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.854908][ T8708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.908222][ T8708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.945524][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.986596][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.022052][ T8708] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.037576][ T8708] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.062856][ T8708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.079496][ T8708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.111900][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.128935][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.345046][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.365157][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.450351][ T9206] tipc: Cannot configure node identity twice [ 196.466078][ T9203] hsr0 speed is unknown, defaulting to 1000 [ 196.475844][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.486117][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.486890][ T9212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.822'. [ 196.509011][ T9206] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 196.526239][ T9208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.822'. [ 196.542657][ T9206] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 196.552710][ T9206] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 196.846541][ T6177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.007880][ T6177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.165532][ T6177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.299151][ T6177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.480097][ T6177] bridge_slave_1: left allmulticast mode [ 197.487134][ T6177] bridge_slave_1: left promiscuous mode [ 197.493132][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.508705][ T6177] bridge_slave_0: left allmulticast mode [ 197.516379][ T6177] bridge_slave_0: left promiscuous mode [ 197.528386][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.720323][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.734689][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.744056][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.756823][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.764662][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.944814][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.956383][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.967667][ T6177] bond0 (unregistering): Released all slaves [ 198.008035][ T9231] hsr0 speed is unknown, defaulting to 1000 [ 198.217023][ T9239] netlink: 4288 bytes leftover after parsing attributes in process `syz.1.824'. [ 198.287233][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.824'. [ 198.301336][ T9237] veth3: entered allmulticast mode [ 198.316409][ T9237] bridge0: port 4(veth3) entered blocking state [ 198.325192][ T9237] bridge0: port 4(veth3) entered disabled state [ 198.337720][ T9237] veth3: entered promiscuous mode [ 198.345225][ T9237] bridge0: port 4(veth3) entered blocking state [ 198.351732][ T9237] bridge0: port 4(veth3) entered forwarding state [ 198.474547][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 198.569871][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.585915][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.593537][ T6177] hsr_slave_0: left promiscuous mode [ 198.600136][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.607483][ T6177] hsr_slave_1: left promiscuous mode [ 198.614401][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.622458][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.628030][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 198.640023][ T8742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.647773][ T8742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.672490][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.680299][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.716669][ T6177] veth1_macvtap: left promiscuous mode [ 198.725726][ T6177] veth0_macvtap: left promiscuous mode [ 198.736345][ T6177] veth1_vlan: left promiscuous mode [ 198.743468][ T6177] veth0_vlan: left promiscuous mode [ 199.247769][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 199.291374][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 199.663435][ T9247] netlink: 'syz.3.827': attribute type 12 has an invalid length. [ 199.673733][ T9247] netlink: 132 bytes leftover after parsing attributes in process `syz.3.827'. [ 199.684501][ T9248] ip_vti0: entered promiscuous mode [ 199.776856][ T13] bridge0: port 4(veth3) entered disabled state [ 199.835431][ T8742] Bluetooth: hci0: command tx timeout [ 199.862281][ T9249] hsr0 speed is unknown, defaulting to 1000 [ 199.900132][ T9231] chnl_net:caif_netlink_parms(): no params data found [ 199.904810][ T9276] netlink: 'syz.1.834': attribute type 21 has an invalid length. [ 199.958330][ T9276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.834'. [ 200.005317][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 200.095072][ T9279] ipvlan2: entered promiscuous mode [ 200.108201][ T9279] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 200.117586][ T9279] team0: Device ipvlan2 is already an upper device of the team interface [ 200.173273][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 200.302489][ T9290] nbd: must specify an index to disconnect [ 200.329480][ T8742] block nbd0: Receive control failed (result -104) [ 200.364167][ T9299] raw_sendmsg: syz.3.840 forgot to set AF_INET. Fix it! [ 200.457177][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.464968][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.474251][ T9231] bridge_slave_0: entered allmulticast mode [ 200.482417][ T9231] bridge_slave_0: entered promiscuous mode [ 200.528997][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.536637][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.550351][ T9231] bridge_slave_1: entered allmulticast mode [ 200.558551][ T9231] bridge_slave_1: entered promiscuous mode [ 200.627429][ T9306] hsr0 speed is unknown, defaulting to 1000 [ 200.695553][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.710340][ T8742] Bluetooth: hci2: command tx timeout [ 200.749999][ T6177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.786106][ T9307] hsr0 speed is unknown, defaulting to 1000 [ 200.830945][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.923198][ T9316] netlink: 'syz.4.845': attribute type 10 has an invalid length. [ 201.016569][ T6177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.058058][ T9231] team0: Port device team_slave_0 added [ 201.124895][ T9231] team0: Port device team_slave_1 added [ 201.214353][ T6177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.350915][ T9249] chnl_net:caif_netlink_parms(): no params data found [ 201.410252][ T6177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.450378][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.470925][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.515970][ T9231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.545334][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.556523][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.596453][ T9231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.668857][ T9329] netlink: 'syz.4.848': attribute type 2 has an invalid length. [ 201.787507][ T9334] netlink: 244 bytes leftover after parsing attributes in process `syz.4.850'. [ 201.800410][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 201.884411][ T9334] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 201.900693][ T9334] team0: Port device batadv1 added [ 201.909981][ T8742] Bluetooth: hci0: command tx timeout [ 201.935031][ T9231] hsr_slave_0: entered promiscuous mode [ 201.942071][ T9231] hsr_slave_1: entered promiscuous mode [ 201.948409][ T9231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.956214][ T9231] Cannot create hsr debugfs directory [ 202.060001][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.075215][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.082787][ T9249] bridge_slave_0: entered allmulticast mode [ 202.099033][ T9249] bridge_slave_0: entered promiscuous mode [ 202.128242][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.136141][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.144019][ T9249] bridge_slave_1: entered allmulticast mode [ 202.152629][ T9249] bridge_slave_1: entered promiscuous mode [ 202.356730][ T9249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.368801][ T6177] bridge_slave_1: left allmulticast mode [ 202.386671][ T6177] bridge_slave_1: left promiscuous mode [ 202.392949][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.409021][ T6177] bridge_slave_0: left allmulticast mode [ 202.415562][ T6177] bridge_slave_0: left promiscuous mode [ 202.421498][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.799487][ T8742] Bluetooth: hci2: command tx timeout [ 202.844032][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.856890][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.867599][ T6177] bond0 (unregistering): Released all slaves [ 202.939261][ T9249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.157066][ T9249] team0: Port device team_slave_0 added [ 203.177279][ T9362] sctp: [Deprecated]: syz.1.856 (pid 9362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.177279][ T9362] Use struct sctp_sack_info instead [ 203.183480][ T9249] team0: Port device team_slave_1 added [ 203.399066][ T6177] hsr_slave_0: left promiscuous mode [ 203.406885][ T6177] hsr_slave_1: left promiscuous mode [ 203.414304][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.423349][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.445480][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.454385][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.476405][ T6177] veth1_macvtap: left promiscuous mode [ 203.482167][ T6177] veth0_macvtap: left promiscuous mode [ 203.487951][ T6177] veth1_vlan: left promiscuous mode [ 203.493349][ T6177] veth0_vlan: left promiscuous mode [ 203.751814][ T9377] netlink: 'syz.1.857': attribute type 27 has an invalid length. [ 203.993142][ T8742] Bluetooth: hci0: command tx timeout [ 204.056077][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 204.095958][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 204.473347][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.481391][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.508706][ T9249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.522995][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.536501][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.565866][ T9249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.594271][ T9370] tun0: tun_chr_ioctl cmd 1074025677 [ 204.599894][ T9370] tun0: linktype set to 804 [ 204.662813][ T9377] bridge0: port 3(erspan0) entered disabled state [ 204.693880][ T9377] sit0: left promiscuous mode [ 204.720856][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.730063][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.870216][ T8742] Bluetooth: hci2: command tx timeout [ 204.897911][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.944605][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.241074][ T9377] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.250439][ T9377] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.259548][ T9377] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.277631][ T9377] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.352512][ T9377] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 205.370358][ T9377] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.380108][ T9377] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.389018][ T9377] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.398160][ T9377] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.408619][ T9377] vxlan0: left promiscuous mode [ 205.419614][ T9377] vxlan0: left allmulticast mode [ 205.432292][ T9377] gre1: left allmulticast mode [ 205.447524][ T9377] vxcan1: left allmulticast mode [ 205.463956][ T9377] macsec1: left promiscuous mode [ 205.468980][ T9377] macsec1: left allmulticast mode [ 205.485999][ T9377] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 205.497381][ T9377] macsec2: left promiscuous mode [ 205.504749][ T9377] macsec2: left allmulticast mode [ 205.521526][ T9377] macvlan2: left promiscuous mode [ 205.526621][ T9377] macvlan2: left allmulticast mode [ 205.540101][ T9377] ip6tnl1: left promiscuous mode [ 205.545087][ T9377] ip6tnl1: left allmulticast mode [ 205.580301][ T9377] vlan0: left promiscuous mode [ 205.588545][ T9377] bond0: left promiscuous mode [ 205.594067][ T9377] bond_slave_0: left promiscuous mode [ 205.608579][ T9377] bond_slave_1: left promiscuous mode [ 205.614581][ T9377] vlan0: left allmulticast mode [ 205.626133][ T9377] bond0: left allmulticast mode [ 205.631681][ T9377] bond_slave_0: left allmulticast mode [ 205.637312][ T9377] bond_slave_1: left allmulticast mode [ 205.644068][ T9377] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 205.653885][ T9377] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 205.663711][ T9377] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 205.673127][ T9377] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 205.771513][ T8478] hsr0 speed is unknown, defaulting to 1000 [ 205.777921][ T8478] syz1: Port: 1 Link DOWN [ 205.847228][ T9391] xt_TCPMSS: Only works on TCP SYN packets [ 205.905532][ T9394] __nla_validate_parse: 1 callbacks suppressed [ 205.905553][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 205.966027][ T9394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.045391][ T9249] hsr_slave_0: entered promiscuous mode [ 206.053062][ T9249] hsr_slave_1: entered promiscuous mode [ 206.063468][ T9249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.071379][ T9249] Cannot create hsr debugfs directory [ 206.082964][ T8742] Bluetooth: hci0: command tx timeout [ 206.484200][ T9231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.517943][ T9231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.560824][ T9231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.573269][ T9231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.632889][ T8742] Bluetooth: hci1: command 0x0406 tx timeout [ 206.638973][ T8742] Bluetooth: hci3: command 0x0406 tx timeout [ 206.676032][ T9422] xt_limit: Overflow, try lower: 0/0 [ 206.734600][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.773449][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.786610][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.793853][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.795258][ T9424] netlink: 'syz.1.869': attribute type 4 has an invalid length. [ 206.828752][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.835971][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.949800][ T5831] Bluetooth: hci2: command tx timeout [ 206.974557][ T9249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.012092][ T9249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.049112][ T9231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.097189][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 207.161100][ T9249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.208887][ T9249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.355666][ T9438] netlink: 'syz.4.873': attribute type 10 has an invalid length. [ 207.390332][ T9438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.873'. [ 207.439571][ T9438] batadv0: entered promiscuous mode [ 207.444852][ T9438] batadv0: entered allmulticast mode [ 207.461878][ T9441] netlink: 'syz.4.873': attribute type 10 has an invalid length. [ 207.473778][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.526442][ T9438] bridge0: port 4(batadv0) entered blocking state [ 207.541302][ T9438] bridge0: port 4(batadv0) entered disabled state [ 207.571321][ T9441] bridge0: port 4(batadv0) entered blocking state [ 207.577940][ T9441] bridge0: port 4(batadv0) entered forwarding state [ 207.594994][ T9441] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 207.601216][ T2989] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 207.614071][ T2989] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 207.674905][ T9249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.700577][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.803339][ T9249] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.807983][ T9447] No such timeout policy "syz1" [ 207.836313][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.843607][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.877367][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.884715][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.936491][ T9449] erspan0: left allmulticast mode [ 207.947378][ T9449] erspan0: left promiscuous mode [ 207.953574][ T9449] bridge0: port 3(erspan0) entered disabled state [ 208.046636][ T9231] veth0_vlan: entered promiscuous mode [ 208.111687][ T9231] veth1_vlan: entered promiscuous mode [ 208.128271][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 208.158555][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 208.190154][ T9455] netlink: 'syz.3.876': attribute type 14 has an invalid length. [ 208.200611][ T9455] netlink: 'syz.3.876': attribute type 13 has an invalid length. [ 208.222767][ T9231] veth0_macvtap: entered promiscuous mode [ 208.272962][ T9231] veth1_macvtap: entered promiscuous mode [ 208.298914][ T9460] Bluetooth: MGMT ver 1.23 [ 208.359285][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.381735][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.405786][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.443849][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.456314][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.467771][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.483924][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 208.513077][ T9231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.526677][ T9231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.538601][ T9231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.557177][ T9231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.605547][ T9249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.676091][ T9468] hsr0 speed is unknown, defaulting to 1000 [ 208.881038][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.902529][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.987109][ T9249] veth0_vlan: entered promiscuous mode [ 209.018060][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.054854][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.073411][ T9249] veth1_vlan: entered promiscuous mode [ 209.151317][ T9481] netlink: 'syz.1.885': attribute type 3 has an invalid length. [ 209.496568][ T9249] veth0_macvtap: entered promiscuous mode [ 209.528402][ T9249] veth1_macvtap: entered promiscuous mode [ 209.578758][ T9249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.601576][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 209.606268][ T9249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.635125][ T9249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.646077][ T9249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.657698][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.665351][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 209.728920][ T9498] netlink: 'syz.4.889': attribute type 18 has an invalid length. [ 209.736302][ T9249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.761949][ T9501] netlink: 168 bytes leftover after parsing attributes in process `syz.1.890'. [ 209.789573][ T9249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.822564][ T9249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.841705][ T9505] xt_socket: unknown flags 0x8 [ 209.847355][ T9249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.872685][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.924645][ T9249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.950513][ T9249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.970540][ T9249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.983796][ T9249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.092934][ T9508] netlink: 'syz.3.893': attribute type 12 has an invalid length. [ 210.257270][ T6177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.327341][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.894'. [ 210.473879][ T6177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.543855][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.576307][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.604634][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.612793][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.668181][ T6177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.851446][ T6177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.028428][ T6177] bridge_slave_1: left allmulticast mode [ 211.042796][ T6177] bridge_slave_1: left promiscuous mode [ 211.048628][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.065432][ T6177] bridge_slave_0: left allmulticast mode [ 211.073473][ T6177] bridge_slave_0: left promiscuous mode [ 211.079449][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.397059][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.407000][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.431518][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.440142][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.449033][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.528870][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.541464][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.552179][ T6177] bond0 (unregistering): Released all slaves [ 211.597890][ T9523] hsr0 speed is unknown, defaulting to 1000 [ 211.813934][ T9523] chnl_net:caif_netlink_parms(): no params data found [ 211.872387][ T6177] hsr_slave_0: left promiscuous mode [ 211.878312][ T6177] hsr_slave_1: left promiscuous mode [ 211.885392][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.895046][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.930620][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.938073][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.990580][ T9533] netlink: 'syz.4.897': attribute type 18 has an invalid length. [ 212.032683][ T6177] veth1_macvtap: left promiscuous mode [ 212.043945][ T6177] veth0_macvtap: left promiscuous mode [ 212.054394][ T6177] veth1_vlan: left promiscuous mode [ 212.064367][ T6177] veth0_vlan: left promiscuous mode [ 212.351973][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.363713][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.372581][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.395163][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.412445][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.688319][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 212.737493][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 213.226403][ T9545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.900'. [ 213.237840][ T9545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.900'. [ 213.300520][ T9549] netlink: 88 bytes leftover after parsing attributes in process `syz.4.899'. [ 213.379010][ T9550] ip6tnl2: entered promiscuous mode [ 213.396645][ T9540] hsr0 speed is unknown, defaulting to 1000 [ 213.419352][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.429612][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.436882][ T9523] bridge_slave_0: entered allmulticast mode [ 213.469169][ T9523] bridge_slave_0: entered promiscuous mode [ 213.489274][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.511634][ T55] Bluetooth: hci0: command tx timeout [ 213.518627][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.535591][ T9523] bridge_slave_1: entered allmulticast mode [ 213.547780][ T9523] bridge_slave_1: entered promiscuous mode [ 213.719281][ T9523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.752929][ T9523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.794562][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.907'. [ 213.968326][ T9523] team0: Port device team_slave_0 added [ 214.011943][ T9523] team0: Port device team_slave_1 added [ 214.084996][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 214.099246][ T9560] hsr0 speed is unknown, defaulting to 1000 [ 214.251910][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.261027][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.291128][ T9523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.311392][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 214.338341][ T6177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.398915][ T9586] netlink: 64 bytes leftover after parsing attributes in process `syz.4.913'. [ 214.425920][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.438428][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.469959][ T55] Bluetooth: hci2: command tx timeout [ 214.474646][ T9523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.513185][ T9584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.582843][ T6177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.609146][ T9586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.618212][ T9586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.631935][ T9586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.640902][ T9586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.751395][ T6177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.897888][ T6177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.039467][ T9523] hsr_slave_0: entered promiscuous mode [ 215.071761][ T9523] hsr_slave_1: entered promiscuous mode [ 215.084169][ T9523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.093642][ T9523] Cannot create hsr debugfs directory [ 215.590990][ T5831] Bluetooth: hci0: command tx timeout [ 215.889535][ T55] block nbd1: Receive control failed (result -32) [ 215.990439][ T6177] bridge_slave_1: left allmulticast mode [ 215.996145][ T6177] bridge_slave_1: left promiscuous mode [ 216.036414][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.092636][ T6177] bridge_slave_0: left allmulticast mode [ 216.098430][ T6177] bridge_slave_0: left promiscuous mode [ 216.130522][ T9631] netlink: 'syz.4.922': attribute type 11 has an invalid length. [ 216.134572][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.560901][ T55] Bluetooth: hci2: command tx timeout [ 216.602345][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.613517][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.624565][ T6177] bond0 (unregistering): Released all slaves [ 216.683918][ T9540] chnl_net:caif_netlink_parms(): no params data found [ 216.836442][ T9646] vlan2: entered promiscuous mode [ 216.842012][ T9646] bridge0: entered promiscuous mode [ 216.847481][ T9646] vlan2: entered allmulticast mode [ 216.852902][ T9646] bridge0: entered allmulticast mode [ 216.902339][ T9646] bond0: (slave bridge0): Releasing backup interface [ 216.916526][ T9646] bridge0: port 4(batadv0) entered disabled state [ 216.938460][ T9646] bridge_slave_0: left allmulticast mode [ 216.946824][ T9646] bridge_slave_0: left promiscuous mode [ 216.962475][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.987250][ T9646] bridge_slave_1: left allmulticast mode [ 216.998628][ T9646] bridge_slave_1: left promiscuous mode [ 217.006346][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.022523][ T9646] bond0: (slave bond_slave_0): Releasing backup interface [ 217.036083][ T9646] bond0: (slave bond_slave_1): Releasing backup interface [ 217.052531][ T9646] team0: Port device team_slave_0 removed [ 217.070757][ T9646] team0: Port device team_slave_1 removed [ 217.076975][ T9646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.091101][ T9646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.130618][ T9646] team0: Port device vlan0 removed [ 217.138379][ T9646] team0: Port device geneve0 removed [ 217.160167][ T9646] bond2: left allmulticast mode [ 217.165071][ T9646] bond2: left promiscuous mode [ 217.170376][ T9646] bridge0: port 3(bond2) entered disabled state [ 217.198721][ T9646] team0: Port device batadv1 removed [ 217.440385][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.453571][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.467678][ T9540] bridge_slave_0: entered allmulticast mode [ 217.479992][ T9540] bridge_slave_0: entered promiscuous mode [ 217.517113][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.525556][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.534352][ T9540] bridge_slave_1: entered allmulticast mode [ 217.542389][ T9540] bridge_slave_1: entered promiscuous mode [ 217.552443][ T9523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.611086][ T6177] hsr_slave_0: left promiscuous mode [ 217.619895][ T6177] hsr_slave_1: left promiscuous mode [ 217.628330][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.640658][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.652355][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.663537][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.680299][ T55] Bluetooth: hci0: command tx timeout [ 217.702217][ T6177] veth1_macvtap: left promiscuous mode [ 217.708006][ T6177] veth0_macvtap: left promiscuous mode [ 217.714302][ T6177] veth1_vlan: left promiscuous mode [ 217.719919][ T6177] veth0_vlan: left promiscuous mode [ 218.555042][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 218.584282][ T9675] No such timeout policy "syz1" [ 218.607413][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 218.630601][ T55] Bluetooth: hci2: command tx timeout [ 219.015461][ T9523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.030617][ T9523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.097876][ T9523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.112284][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.137635][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.313809][ T9540] team0: Port device team_slave_0 added [ 219.345342][ T9540] team0: Port device team_slave_1 added [ 219.436917][ T9689] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 219.493021][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.506451][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.533204][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.581417][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.588412][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.636614][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.750593][ T55] Bluetooth: hci0: command tx timeout [ 219.764556][ T9540] hsr_slave_0: entered promiscuous mode [ 219.780710][ T9540] hsr_slave_1: entered promiscuous mode [ 219.798812][ T9540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.812274][ T9540] Cannot create hsr debugfs directory [ 220.277432][ T9720] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.346755][ T9523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.370233][ T9723] netlink: 476 bytes leftover after parsing attributes in process `syz.4.946'. [ 220.416736][ T9723] bond_slave_0: entered promiscuous mode [ 220.426952][ T9723] netlink: 64 bytes leftover after parsing attributes in process `syz.4.946'. [ 220.445195][ T9723] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 220.475659][ T9725] xt_ipcomp: unknown flags F7 [ 220.544259][ T9728] nftables ruleset with unbound chain [ 220.559319][ T9523] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.681796][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.689005][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.710286][ T55] Bluetooth: hci2: command tx timeout [ 220.727959][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.735133][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.754600][ T9738] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 220.776072][ T9736] veth1_to_bond: entered allmulticast mode [ 220.815222][ T9741] veth1_to_bond: entered promiscuous mode [ 220.861918][ T9742] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 220.873598][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 220.882669][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 220.891728][ T9736] netlink: 'syz.1.951': attribute type 5 has an invalid length. [ 220.926696][ T9735] veth1_to_bond: left promiscuous mode [ 220.937945][ T9735] veth1_to_bond: left allmulticast mode [ 220.979525][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.953'. [ 221.028665][ T9744] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.037797][ T9744] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.046673][ T9744] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.055519][ T9744] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.337700][ T9540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.383528][ T9540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.437421][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 221.438052][ T9540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.456794][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 221.479204][ T9752] netlink: 44 bytes leftover after parsing attributes in process `syz.4.955'. [ 221.505373][ T9540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.775016][ T9523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.958820][ T9523] veth0_vlan: entered promiscuous mode [ 222.023758][ T9523] veth1_vlan: entered promiscuous mode [ 222.063966][ T9771] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.115722][ T9773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.133891][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.143054][ T9523] veth0_macvtap: entered promiscuous mode [ 222.164575][ T9523] veth1_macvtap: entered promiscuous mode [ 222.204023][ T9540] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.241714][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.254412][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.268701][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.279042][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.286276][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.305634][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.312874][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.340666][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.351963][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.364354][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.376196][ T9781] syzkaller0: entered allmulticast mode [ 222.397054][ T9523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.414115][ T9523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.425998][ T9523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.434921][ T9523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.458069][ T9781] syzkaller0: left allmulticast mode [ 222.608367][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.630123][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.698635][ T9784] tipc: Enabled bearer , priority 10 [ 222.702931][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.729650][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.879096][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.026439][ T9540] veth0_vlan: entered promiscuous mode [ 223.043279][ T9540] veth1_vlan: entered promiscuous mode [ 223.143320][ T9540] veth0_macvtap: entered promiscuous mode [ 223.157460][ T9540] veth1_macvtap: entered promiscuous mode [ 223.166182][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 223.202753][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.226555][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.236893][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.247538][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.261149][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.291919][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 223.323330][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.340287][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.358659][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.375459][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.387206][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.412921][ T9540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.426274][ T9540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.438861][ T9540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.454539][ T9540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.529299][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.636580][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.686464][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.705431][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.782203][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.821939][ T8474] tipc: Node number set to 2886997007 [ 223.870590][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.896487][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.907745][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.340363][ T36] bridge_slave_1: left allmulticast mode [ 224.346049][ T36] bridge_slave_1: left promiscuous mode [ 224.352206][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.362156][ T36] bridge_slave_0: left allmulticast mode [ 224.367872][ T36] bridge_slave_0: left promiscuous mode [ 224.374234][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.880280][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.889661][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.908738][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.921935][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.933851][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.995805][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.007065][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.021078][ T36] bond0 (unregistering): Released all slaves [ 225.073798][ T9816] hsr0 speed is unknown, defaulting to 1000 [ 225.306931][ T36] hsr_slave_0: left promiscuous mode [ 225.317648][ T36] hsr_slave_1: left promiscuous mode [ 225.324154][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.331620][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.342309][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.352093][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.372233][ T36] veth1_macvtap: left promiscuous mode [ 225.377764][ T36] veth0_macvtap: left promiscuous mode [ 225.384020][ T36] veth1_vlan: left promiscuous mode [ 225.389408][ T36] veth0_vlan: left promiscuous mode [ 225.914768][ T36] team0 (unregistering): Port device team_slave_1 removed [ 225.989113][ T36] team0 (unregistering): Port device team_slave_0 removed [ 226.158073][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.178111][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.186283][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.200125][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.208916][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.548549][ T9816] chnl_net:caif_netlink_parms(): no params data found [ 226.596682][ T9836] hsr0 speed is unknown, defaulting to 1000 [ 226.712240][ T9843] __nla_validate_parse: 1 callbacks suppressed [ 226.712259][ T9843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.980'. [ 226.877084][ T9855] xt_cluster: node mask cannot exceed total number of nodes [ 226.959906][ T9859] xt_cluster: node mask cannot exceed total number of nodes [ 226.984244][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.003627][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.018344][ T9816] bridge_slave_0: entered allmulticast mode [ 227.030222][ T55] Bluetooth: hci0: command tx timeout [ 227.038731][ T9816] bridge_slave_0: entered promiscuous mode [ 227.081953][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.089107][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.112370][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.982'. [ 227.124341][ T9816] bridge_slave_1: entered allmulticast mode [ 227.131825][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 227.150495][ T9816] bridge_slave_1: entered promiscuous mode [ 227.343516][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.385247][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.431626][ T9868] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 227.791196][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.818416][ T9816] team0: Port device team_slave_0 added [ 227.900107][ T9816] team0: Port device team_slave_1 added [ 227.926516][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.969551][ T9891] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 228.058190][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.197915][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.249151][ T9836] chnl_net:caif_netlink_parms(): no params data found [ 228.285883][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.300027][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.310756][ T55] Bluetooth: hci2: command tx timeout [ 228.393834][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.448233][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.456117][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.484716][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.567554][ T9915] pim6reg9: entered allmulticast mode [ 228.648907][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 228.721234][ T9925] Bluetooth: MGMT ver 1.23 [ 228.779524][ T9816] hsr_slave_0: entered promiscuous mode [ 228.810930][ T9816] hsr_slave_1: entered promiscuous mode [ 228.817847][ T9816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.844725][ T9816] Cannot create hsr debugfs directory [ 228.880026][ T9920] veth3: left promiscuous mode [ 228.892320][ T9920] bridge0: port 4(veth3) entered disabled state [ 228.904449][ T9920] vlan2: left promiscuous mode [ 228.909286][ T9920] bond0: left promiscuous mode [ 228.914405][ T9920] bond_slave_0: left promiscuous mode [ 228.920563][ T9920] bond_slave_1: left promiscuous mode [ 228.926714][ T9920] bridge0: port 3(vlan2) entered disabled state [ 228.936388][ T9920] bridge_slave_1: left allmulticast mode [ 228.947177][ T9920] bridge_slave_1: left promiscuous mode [ 228.954950][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.966495][ T9920] bridge_slave_0: left allmulticast mode [ 228.972608][ T9920] bridge_slave_0: left promiscuous mode [ 228.978389][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.114480][ T5831] Bluetooth: hci0: command tx timeout [ 229.130244][ T9932] vlan3: entered promiscuous mode [ 229.135323][ T9932] bridge0: entered promiscuous mode [ 229.141027][ T9932] vlan3: entered allmulticast mode [ 229.146179][ T9932] bridge0: entered allmulticast mode [ 229.231036][ T9939] FAULT_INJECTION: forcing a failure. [ 229.231036][ T9939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.253758][ T9939] CPU: 1 UID: 0 PID: 9939 Comm: syz.3.1004 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 229.253790][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 229.253803][ T9939] Call Trace: [ 229.253811][ T9939] [ 229.253819][ T9939] dump_stack_lvl+0x189/0x250 [ 229.253852][ T9939] ? __lock_acquire+0xaac/0xd20 [ 229.253883][ T9939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.253911][ T9939] ? __pfx__printk+0x10/0x10 [ 229.253932][ T9939] ? __might_fault+0xb0/0x130 [ 229.253970][ T9939] should_fail_ex+0x414/0x560 [ 229.254006][ T9939] _copy_from_user+0x2d/0xb0 [ 229.254033][ T9939] ___sys_sendmsg+0x158/0x2a0 [ 229.254061][ T9939] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.254126][ T9939] ? __fget_files+0x2a/0x420 [ 229.254151][ T9939] ? __fget_files+0x3a0/0x420 [ 229.254188][ T9939] __x64_sys_sendmsg+0x19b/0x260 [ 229.254215][ T9939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.254257][ T9939] ? do_syscall_64+0xba/0x210 [ 229.254290][ T9939] do_syscall_64+0xf6/0x210 [ 229.254319][ T9939] ? clear_bhb_loop+0x45/0xa0 [ 229.254344][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.254364][ T9939] RIP: 0033:0x7fc52258e969 [ 229.254381][ T9939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.254407][ T9939] RSP: 002b:00007fc5203f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.254428][ T9939] RAX: ffffffffffffffda RBX: 00007fc5227b5fa0 RCX: 00007fc52258e969 [ 229.254443][ T9939] RDX: 0000000000040844 RSI: 0000200000000240 RDI: 0000000000000004 [ 229.254456][ T9939] RBP: 00007fc5203f6090 R08: 0000000000000000 R09: 0000000000000000 [ 229.254468][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.254480][ T9939] R13: 0000000000000000 R14: 00007fc5227b5fa0 R15: 00007ffcc40ac908 [ 229.254510][ T9939] [ 229.498363][ T9946] Bluetooth: MGMT ver 1.23 [ 229.570532][ T36] bridge_slave_1: left allmulticast mode [ 229.576231][ T36] bridge_slave_1: left promiscuous mode [ 229.582122][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.596863][ T9949] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1007'. [ 229.616342][ T36] bridge_slave_0: left allmulticast mode [ 229.622297][ T36] bridge_slave_0: left promiscuous mode [ 229.628101][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.818641][ T9958] netlink: 'syz.4.1008': attribute type 10 has an invalid length. [ 230.179053][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.192416][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.204720][ T36] bond0 (unregistering): Released all slaves [ 230.229233][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.250556][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.258129][ T9836] bridge_slave_0: entered allmulticast mode [ 230.269225][ T9836] bridge_slave_0: entered promiscuous mode [ 230.287444][ T9966] netlink: 'syz.1.1010': attribute type 2 has an invalid length. [ 230.368759][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.389491][ T5831] Bluetooth: hci2: command tx timeout [ 230.400525][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.407820][ T9836] bridge_slave_1: entered allmulticast mode [ 230.429317][ T9836] bridge_slave_1: entered promiscuous mode [ 230.483611][ T9969] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1011'. [ 230.701545][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.721559][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.789672][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 230.868802][ T9983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1015'. [ 230.978991][ T9836] team0: Port device team_slave_0 added [ 231.112694][ T9836] team0: Port device team_slave_1 added [ 231.173715][ T36] hsr_slave_0: left promiscuous mode [ 231.182763][ T9991] FAULT_INJECTION: forcing a failure. [ 231.182763][ T9991] name failslab, interval 1, probability 0, space 0, times 0 [ 231.196795][ T55] Bluetooth: hci0: command 0x040f tx timeout [ 231.209639][ T36] hsr_slave_1: left promiscuous mode [ 231.221702][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.238875][ T9991] CPU: 0 UID: 0 PID: 9991 Comm: syz.3.1017 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 231.238907][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 231.238921][ T9991] Call Trace: [ 231.238929][ T9991] [ 231.238938][ T9991] dump_stack_lvl+0x189/0x250 [ 231.238976][ T9991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.239006][ T9991] ? __pfx__printk+0x10/0x10 [ 231.239033][ T9991] ? __pfx___might_resched+0x10/0x10 [ 231.239057][ T9991] should_fail_ex+0x414/0x560 [ 231.239091][ T9991] should_failslab+0xa8/0x100 [ 231.239120][ T9991] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 231.239147][ T9991] ? __alloc_skb+0x112/0x2d0 [ 231.239174][ T9991] __alloc_skb+0x112/0x2d0 [ 231.239200][ T9991] netlink_sendmsg+0x5c6/0xb30 [ 231.239233][ T9991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.239258][ T9991] ? aa_sock_msg_perm+0x94/0x160 [ 231.239281][ T9991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.239304][ T9991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.239326][ T9991] __sock_sendmsg+0x219/0x270 [ 231.239370][ T9991] ____sys_sendmsg+0x505/0x830 [ 231.239399][ T9991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.239432][ T9991] ? import_iovec+0x74/0xa0 [ 231.239463][ T9991] ___sys_sendmsg+0x21f/0x2a0 [ 231.239491][ T9991] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.239555][ T9991] ? __fget_files+0x2a/0x420 [ 231.239580][ T9991] ? __fget_files+0x3a0/0x420 [ 231.239618][ T9991] __x64_sys_sendmsg+0x19b/0x260 [ 231.239646][ T9991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.239690][ T9991] ? do_syscall_64+0xba/0x210 [ 231.239724][ T9991] do_syscall_64+0xf6/0x210 [ 231.239754][ T9991] ? clear_bhb_loop+0x45/0xa0 [ 231.239779][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.239798][ T9991] RIP: 0033:0x7fc52258e969 [ 231.239817][ T9991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.239835][ T9991] RSP: 002b:00007fc5203f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.239856][ T9991] RAX: ffffffffffffffda RBX: 00007fc5227b5fa0 RCX: 00007fc52258e969 [ 231.239871][ T9991] RDX: 0000000000040844 RSI: 0000200000000240 RDI: 0000000000000004 [ 231.239885][ T9991] RBP: 00007fc5203f6090 R08: 0000000000000000 R09: 0000000000000000 [ 231.239897][ T9991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.239908][ T9991] R13: 0000000000000000 R14: 00007fc5227b5fa0 R15: 00007ffcc40ac908 [ 231.239939][ T9991] [ 231.299927][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.497297][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 231.526806][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.534379][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.587654][ T36] veth1_macvtap: left promiscuous mode [ 231.605438][ T36] veth0_macvtap: left promiscuous mode [ 231.611889][ T36] veth1_vlan: left promiscuous mode [ 231.617524][ T36] veth0_vlan: left promiscuous mode [ 232.075500][ T36] team0 (unregistering): Port device team_slave_1 removed [ 232.115581][ T36] team0 (unregistering): Port device team_slave_0 removed [ 232.239519][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 232.480319][ T8742] Bluetooth: hci2: command tx timeout [ 232.541892][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1020'. [ 232.638983][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.647449][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.676379][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.717086][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 232.737669][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.770501][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.819307][T10012] No such timeout policy "syz0" [ 232.828097][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.006370][ T9836] hsr_slave_0: entered promiscuous mode [ 233.013260][ T9836] hsr_slave_1: entered promiscuous mode [ 233.020145][ T9836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.027831][ T9836] Cannot create hsr debugfs directory [ 233.269749][ T8742] Bluetooth: hci0: command 0x040f tx timeout [ 233.334341][ T9816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.365740][ T9816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.391212][T10031] geneve0: entered allmulticast mode [ 233.396776][ T9816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.438198][ T9816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.865159][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.888879][ T9816] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.905101][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.912392][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.944481][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.951799][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.216800][ T9836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 234.247299][ T9836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 234.267294][ T9836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 234.291201][ T9836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 234.429054][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.550720][ T8742] Bluetooth: hci2: command tx timeout [ 234.633795][ T9816] veth0_vlan: entered promiscuous mode [ 234.673166][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.699086][ T9816] veth1_vlan: entered promiscuous mode [ 234.744536][ T9836] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.810297][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.817543][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.837676][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.844903][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.976206][ T9816] veth0_macvtap: entered promiscuous mode [ 235.003953][ T9816] veth1_macvtap: entered promiscuous mode [ 235.077644][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.098301][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.114883][T10081] FAULT_INJECTION: forcing a failure. [ 235.114883][T10081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.140415][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.147596][T10081] CPU: 1 UID: 0 PID: 10081 Comm: syz.4.1043 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 235.147629][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 235.147643][T10081] Call Trace: [ 235.147651][T10081] [ 235.147659][T10081] dump_stack_lvl+0x189/0x250 [ 235.147695][T10081] ? __lock_acquire+0xaac/0xd20 [ 235.147730][T10081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.147762][T10081] ? __pfx__printk+0x10/0x10 [ 235.147786][T10081] ? __might_fault+0xb0/0x130 [ 235.147827][T10081] should_fail_ex+0x414/0x560 [ 235.147867][T10081] _copy_from_iter+0x1db/0x15a0 [ 235.147900][T10081] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 235.147930][T10081] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 235.147959][T10081] ? __pfx__copy_from_iter+0x10/0x10 [ 235.147985][T10081] ? __build_skb_around+0x257/0x3e0 [ 235.148014][T10081] ? netlink_sendmsg+0x642/0xb30 [ 235.148036][T10081] ? skb_put+0x11b/0x210 [ 235.148063][T10081] netlink_sendmsg+0x6b2/0xb30 [ 235.148097][T10081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.148124][T10081] ? aa_sock_msg_perm+0x94/0x160 [ 235.148149][T10081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.148173][T10081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.148197][T10081] __sock_sendmsg+0x219/0x270 [ 235.148232][T10081] ____sys_sendmsg+0x505/0x830 [ 235.148265][T10081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.148301][T10081] ? import_iovec+0x74/0xa0 [ 235.148340][T10081] ___sys_sendmsg+0x21f/0x2a0 [ 235.148369][T10081] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.148438][T10081] ? __fget_files+0x2a/0x420 [ 235.148464][T10081] ? __fget_files+0x3a0/0x420 [ 235.148505][T10081] __x64_sys_sendmsg+0x19b/0x260 [ 235.148535][T10081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.148580][T10081] ? do_syscall_64+0xba/0x210 [ 235.148616][T10081] do_syscall_64+0xf6/0x210 [ 235.148648][T10081] ? clear_bhb_loop+0x45/0xa0 [ 235.148674][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.148695][T10081] RIP: 0033:0x7fe00638e969 [ 235.148715][T10081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.148734][T10081] RSP: 002b:00007fe007110038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.148758][T10081] RAX: ffffffffffffffda RBX: 00007fe0065b5fa0 RCX: 00007fe00638e969 [ 235.148773][T10081] RDX: 0000000000040844 RSI: 0000200000000240 RDI: 0000000000000004 [ 235.148788][T10081] RBP: 00007fe007110090 R08: 0000000000000000 R09: 0000000000000000 [ 235.148800][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.148813][T10081] R13: 0000000000000000 R14: 00007fe0065b5fa0 R15: 00007ffffd23c958 [ 235.148847][T10081] [ 235.389609][ T8742] Bluetooth: hci0: command 0x040f tx timeout [ 235.456312][T10086] hsr0 speed is unknown, defaulting to 1000 [ 235.467049][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.501861][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.533730][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.581160][ T9816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.590559][ T9816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.600250][ T9816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.609481][ T9816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.055577][T10113] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1049'. [ 236.098060][T10113] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1049'. [ 236.127667][T10113] netlink: 'syz.4.1049': attribute type 1 has an invalid length. [ 236.136336][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.154203][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.170204][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.226768][T10119] ip6erspan0: entered promiscuous mode [ 236.231854][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1049'. [ 236.273290][T10112] hsr0 speed is unknown, defaulting to 1000 [ 236.522736][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.532571][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.803940][ T9836] veth0_vlan: entered promiscuous mode [ 236.851484][ T9836] veth1_vlan: entered promiscuous mode [ 237.036229][ T9836] veth0_macvtap: entered promiscuous mode [ 237.072973][ T9836] veth1_macvtap: entered promiscuous mode [ 237.136783][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.158435][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.176533][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.185941][T10140] FAULT_INJECTION: forcing a failure. [ 237.185941][T10140] name failslab, interval 1, probability 0, space 0, times 0 [ 237.188324][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.227626][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.297371][T10140] CPU: 1 UID: 0 PID: 10140 Comm: syz.4.1054 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 237.297403][T10140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.297416][T10140] Call Trace: [ 237.297424][T10140] [ 237.297433][T10140] dump_stack_lvl+0x189/0x250 [ 237.297473][T10140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.297503][T10140] ? __pfx__printk+0x10/0x10 [ 237.297527][T10140] ? __pfx___might_resched+0x10/0x10 [ 237.297546][T10140] ? fs_reclaim_acquire+0x7d/0x100 [ 237.297580][T10140] should_fail_ex+0x414/0x560 [ 237.297617][T10140] should_failslab+0xa8/0x100 [ 237.297646][T10140] __kmalloc_noprof+0xcb/0x4f0 [ 237.297670][T10140] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 237.297707][T10140] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 237.297744][T10140] genl_family_rcv_msg_doit+0xb8/0x300 [ 237.297780][T10140] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.297811][T10140] ? rcu_is_watching+0x15/0xb0 [ 237.297845][T10140] ? apparmor_capable+0x137/0x1b0 [ 237.297873][T10140] ? bpf_lsm_capable+0x9/0x20 [ 237.297901][T10140] ? security_capable+0x7e/0x2e0 [ 237.297929][T10140] genl_rcv_msg+0x60e/0x790 [ 237.297964][T10140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.297990][T10140] ? __pfx_ieee802154_llsec_del_seclevel+0x10/0x10 [ 237.298032][T10140] netlink_rcv_skb+0x219/0x490 [ 237.298054][T10140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.298083][T10140] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.298131][T10140] ? down_read+0x1ad/0x2e0 [ 237.298164][T10140] genl_rcv+0x28/0x40 [ 237.298189][T10140] netlink_unicast+0x758/0x8d0 [ 237.298240][T10140] netlink_sendmsg+0x805/0xb30 [ 237.298274][T10140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.298301][T10140] ? aa_sock_msg_perm+0x94/0x160 [ 237.298324][T10140] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.298346][T10140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.298367][T10140] __sock_sendmsg+0x219/0x270 [ 237.298406][T10140] ____sys_sendmsg+0x505/0x830 [ 237.298437][T10140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.298473][T10140] ? import_iovec+0x74/0xa0 [ 237.298503][T10140] ___sys_sendmsg+0x21f/0x2a0 [ 237.298531][T10140] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.298598][T10140] ? __fget_files+0x2a/0x420 [ 237.298622][T10140] ? __fget_files+0x3a0/0x420 [ 237.298661][T10140] __x64_sys_sendmsg+0x19b/0x260 [ 237.298688][T10140] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.298733][T10140] ? do_syscall_64+0xba/0x210 [ 237.298767][T10140] do_syscall_64+0xf6/0x210 [ 237.298796][T10140] ? clear_bhb_loop+0x45/0xa0 [ 237.298821][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.298841][T10140] RIP: 0033:0x7fe00638e969 [ 237.298859][T10140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.298877][T10140] RSP: 002b:00007fe007110038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.298898][T10140] RAX: ffffffffffffffda RBX: 00007fe0065b5fa0 RCX: 00007fe00638e969 [ 237.298913][T10140] RDX: 0000000000040844 RSI: 0000200000000240 RDI: 0000000000000004 [ 237.298926][T10140] RBP: 00007fe007110090 R08: 0000000000000000 R09: 0000000000000000 [ 237.298939][T10140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.298951][T10140] R13: 0000000000000000 R14: 00007fe0065b5fa0 R15: 00007ffffd23c958 [ 237.298984][T10140] [ 237.634656][T10142] netlink: 'syz.1.1055': attribute type 33 has an invalid length. [ 237.644837][T10142] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1055'. [ 237.685917][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 237.775796][T10147] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 237.817755][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.852654][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.862766][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.873442][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.884880][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.902196][ T9836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.915487][ T9836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.924483][ T9836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.935000][ T9836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.042820][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.062092][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.079573][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.108631][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.119507][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.206784][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.264705][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.333604][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.428777][ T36] bridge_slave_1: left allmulticast mode [ 238.434621][ T36] bridge_slave_1: left promiscuous mode [ 238.440735][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.451041][ T36] bridge_slave_0: left allmulticast mode [ 238.456693][ T36] bridge_slave_0: left promiscuous mode [ 238.462575][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.941976][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.959843][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.997596][ T36] bond0 (unregistering): Released all slaves [ 239.434704][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.445707][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.454982][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.463333][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.471892][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.515508][ T36] hsr_slave_0: left promiscuous mode [ 239.530158][ T36] hsr_slave_1: left promiscuous mode [ 239.536746][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.550100][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.561251][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.568726][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.596639][ T36] veth1_macvtap: left promiscuous mode [ 239.602428][ T36] veth0_macvtap: left promiscuous mode [ 239.608231][ T36] veth1_vlan: left promiscuous mode [ 239.613789][ T36] veth0_vlan: left promiscuous mode [ 240.079071][ T36] team0 (unregistering): Port device team_slave_1 removed [ 240.123101][ T36] team0 (unregistering): Port device team_slave_0 removed [ 240.578763][T10171] hsr0 speed is unknown, defaulting to 1000 [ 240.681786][T10179] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1064'. [ 240.713757][T10179] netlink: 'syz.1.1064': attribute type 1 has an invalid length. [ 240.926011][T10189] hsr0 speed is unknown, defaulting to 1000 [ 241.132978][ T8742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.150489][ T8742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.158965][ T8742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.168215][ T8742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.180812][ T8742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.262911][T10195] hsr0 speed is unknown, defaulting to 1000 [ 241.515026][ T55] Bluetooth: hci0: command tx timeout [ 241.527308][T10171] chnl_net:caif_netlink_parms(): no params data found [ 241.555028][T10216] FAULT_INJECTION: forcing a failure. [ 241.555028][T10216] name failslab, interval 1, probability 0, space 0, times 0 [ 241.555216][T10197] hsr0 speed is unknown, defaulting to 1000 [ 241.578589][T10216] CPU: 1 UID: 0 PID: 10216 Comm: syz.1.1071 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 241.578619][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 241.578643][T10216] Call Trace: [ 241.578649][T10216] [ 241.578656][T10216] dump_stack_lvl+0x189/0x250 [ 241.578685][T10216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.578707][T10216] ? __pfx__printk+0x10/0x10 [ 241.578727][T10216] ? __pfx___might_resched+0x10/0x10 [ 241.578740][T10216] ? fs_reclaim_acquire+0x7d/0x100 [ 241.578765][T10216] should_fail_ex+0x414/0x560 [ 241.578793][T10216] should_failslab+0xa8/0x100 [ 241.578815][T10216] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 241.578834][T10216] ? __alloc_skb+0x112/0x2d0 [ 241.578853][T10216] __alloc_skb+0x112/0x2d0 [ 241.578872][T10216] netlink_ack+0x146/0xa50 [ 241.578885][T10216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.578918][T10216] netlink_rcv_skb+0x2a0/0x490 [ 241.578933][T10216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.578953][T10216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.578987][T10216] ? down_read+0x1ad/0x2e0 [ 241.579011][T10216] genl_rcv+0x28/0x40 [ 241.579028][T10216] netlink_unicast+0x758/0x8d0 [ 241.579060][T10216] netlink_sendmsg+0x805/0xb30 [ 241.579083][T10216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.579101][T10216] ? aa_sock_msg_perm+0x94/0x160 [ 241.579117][T10216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.579134][T10216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.579150][T10216] __sock_sendmsg+0x219/0x270 [ 241.579180][T10216] ____sys_sendmsg+0x505/0x830 [ 241.579202][T10216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.579227][T10216] ? import_iovec+0x74/0xa0 [ 241.579249][T10216] ___sys_sendmsg+0x21f/0x2a0 [ 241.579269][T10216] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.579315][T10216] ? __fget_files+0x2a/0x420 [ 241.579333][T10216] ? __fget_files+0x3a0/0x420 [ 241.579366][T10216] __x64_sys_sendmsg+0x19b/0x260 [ 241.579393][T10216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.579434][T10216] ? do_syscall_64+0xba/0x210 [ 241.579467][T10216] do_syscall_64+0xf6/0x210 [ 241.579496][T10216] ? clear_bhb_loop+0x45/0xa0 [ 241.579521][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.579538][T10216] RIP: 0033:0x7f6a1358e969 [ 241.579552][T10216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.579564][T10216] RSP: 002b:00007f6a14402038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.579580][T10216] RAX: ffffffffffffffda RBX: 00007f6a137b5fa0 RCX: 00007f6a1358e969 [ 241.579590][T10216] RDX: 0000000000040844 RSI: 0000200000000240 RDI: 0000000000000004 [ 241.579599][T10216] RBP: 00007f6a14402090 R08: 0000000000000000 R09: 0000000000000000 [ 241.579608][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.579616][T10216] R13: 0000000000000000 R14: 00007f6a137b5fa0 R15: 00007ffe27e312f8 [ 241.579640][T10216] [ 242.165740][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.357940][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.407437][T10234] syzkaller0: entered promiscuous mode [ 242.414743][T10234] syzkaller0: entered allmulticast mode [ 242.465910][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.557959][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.584643][T10171] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.592372][T10171] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.600246][T10171] bridge_slave_0: entered allmulticast mode [ 242.607713][T10171] bridge_slave_0: entered promiscuous mode [ 242.617043][T10171] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.624354][T10171] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.636970][T10171] bridge_slave_1: entered allmulticast mode [ 242.645352][T10171] bridge_slave_1: entered promiscuous mode [ 242.680722][T10252] tipc: Started in network mode [ 242.685778][T10252] tipc: Node identity 66f0b9c8854, cluster identity 4711 [ 242.697157][T10252] tipc: Enabled bearer , priority 0 [ 242.714302][T10171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.727733][T10171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.787801][T10171] team0: Port device team_slave_0 added [ 242.794475][T10252] syzkaller0: entered promiscuous mode [ 242.801649][T10252] syzkaller0: entered allmulticast mode [ 242.841998][T10171] team0: Port device team_slave_1 added [ 243.271328][ T55] Bluetooth: hci2: command tx timeout [ 243.592327][ T55] Bluetooth: hci0: command tx timeout [ 243.831303][ T8474] tipc: Node number set to 3820009928 [ 244.211040][T10251] tipc: Resetting bearer [ 244.226185][T10251] tipc: Disabling bearer [ 244.343267][T10171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.350954][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.377047][T10171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.418520][T10171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.435761][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.519842][T10171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.585542][T10197] chnl_net:caif_netlink_parms(): no params data found [ 244.596736][T10276] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 244.666511][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 244.700631][ T13] bridge_slave_1: left allmulticast mode [ 244.707315][ T13] bridge_slave_1: left promiscuous mode [ 244.727026][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.743790][ T13] bridge_slave_0: left allmulticast mode [ 244.759716][ T13] bridge_slave_0: left promiscuous mode [ 244.765703][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.890683][T10288] xt_l2tp: invalid flags combination: c [ 245.250565][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.266766][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.277710][ T13] bond0 (unregistering): Released all slaves [ 245.314461][T10280] hsr0 speed is unknown, defaulting to 1000 [ 245.349788][ T55] Bluetooth: hci2: command tx timeout [ 245.411563][T10171] hsr_slave_0: entered promiscuous mode [ 245.417995][T10171] hsr_slave_1: entered promiscuous mode [ 245.436738][T10171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.448983][T10171] Cannot create hsr debugfs directory [ 245.624102][T10302] set match dimension is over the limit! [ 245.670192][ T55] Bluetooth: hci0: command tx timeout [ 245.705302][T10305] sock: sock_timestamping_bind_phc: sock not bind to device [ 245.774384][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1091'. [ 245.794557][T10302] pim6reg: entered allmulticast mode [ 245.801641][T10197] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.819092][T10197] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.829287][T10197] bridge_slave_0: entered allmulticast mode [ 245.837471][T10197] bridge_slave_0: entered promiscuous mode [ 245.885934][T10197] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.908520][T10197] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.932579][T10197] bridge_slave_1: entered allmulticast mode [ 245.966963][T10197] bridge_slave_1: entered promiscuous mode [ 246.068996][T10315] FAULT_INJECTION: forcing a failure. [ 246.068996][T10315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.116309][T10315] CPU: 0 UID: 0 PID: 10315 Comm: syz.1.1094 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 246.116339][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 246.116351][T10315] Call Trace: [ 246.116359][T10315] [ 246.116367][T10315] dump_stack_lvl+0x189/0x250 [ 246.116405][T10315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.116433][T10315] ? __pfx__printk+0x10/0x10 [ 246.116467][T10315] should_fail_ex+0x414/0x560 [ 246.116503][T10315] _copy_to_user+0x31/0xb0 [ 246.116532][T10315] simple_read_from_buffer+0xe1/0x170 [ 246.116561][T10315] proc_fail_nth_read+0x1df/0x250 [ 246.116590][T10315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.116620][T10315] ? rw_verify_area+0x258/0x650 [ 246.116641][T10315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.116670][T10315] vfs_read+0x1fd/0x980 [ 246.116696][T10315] ? __pfx___mutex_lock+0x10/0x10 [ 246.116725][T10315] ? __pfx_vfs_read+0x10/0x10 [ 246.116748][T10315] ? __fget_files+0x2a/0x420 [ 246.116778][T10315] ? __fget_files+0x3a0/0x420 [ 246.116801][T10315] ? __fget_files+0x2a/0x420 [ 246.116835][T10315] ksys_read+0x145/0x250 [ 246.116859][T10315] ? __pfx_ksys_read+0x10/0x10 [ 246.116885][T10315] ? do_syscall_64+0xba/0x210 [ 246.116917][T10315] do_syscall_64+0xf6/0x210 [ 246.116946][T10315] ? clear_bhb_loop+0x45/0xa0 [ 246.116970][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.116997][T10315] RIP: 0033:0x7f6a1358d37c [ 246.117015][T10315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 246.117032][T10315] RSP: 002b:00007f6a14402030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.117052][T10315] RAX: ffffffffffffffda RBX: 00007f6a137b5fa0 RCX: 00007f6a1358d37c [ 246.117067][T10315] RDX: 000000000000000f RSI: 00007f6a144020a0 RDI: 0000000000000003 [ 246.117079][T10315] RBP: 00007f6a14402090 R08: 0000000000000000 R09: 0000000000000000 [ 246.117090][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.117102][T10315] R13: 0000000000000000 R14: 00007f6a137b5fa0 R15: 00007ffe27e312f8 [ 246.117134][T10315] [ 246.395915][ T13] hsr_slave_0: left promiscuous mode [ 246.421863][ T13] hsr_slave_1: left promiscuous mode [ 246.433422][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.455356][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.504621][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.525339][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.563422][ T13] veth1_macvtap: left promiscuous mode [ 246.569033][ T13] veth0_macvtap: left promiscuous mode [ 246.574744][ T13] veth1_vlan: left promiscuous mode [ 246.580285][ T13] veth0_vlan: left promiscuous mode [ 247.063215][ T13] team0 (unregistering): Port device team_slave_1 removed [ 247.100650][ T13] team0 (unregistering): Port device team_slave_0 removed [ 247.432903][ T8742] Bluetooth: hci2: command tx timeout [ 247.488119][T10197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.528466][T10197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.529911][ T55] block nbd2: Receive control failed (result -32) [ 247.749704][ T55] Bluetooth: hci0: command tx timeout [ 247.792821][T10197] team0: Port device team_slave_0 added [ 247.834658][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 247.853044][T10197] team0: Port device team_slave_1 added [ 247.887969][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1105'. [ 247.909196][T10357] hsr0 speed is unknown, defaulting to 1000 [ 248.000134][T10362] xt_TCPMSS: Only works on TCP SYN packets [ 248.051211][T10353] netlink: 'syz.3.1105': attribute type 10 has an invalid length. [ 248.085144][T10197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.097625][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.125300][T10197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.187106][T10363] bond0: (slave bond_slave_0): Releasing backup interface [ 248.198771][T10363] bond_slave_0: left allmulticast mode [ 248.234644][T10363] bond0: (slave bond_slave_1): Releasing backup interface [ 248.256709][T10363] bond_slave_1: left allmulticast mode [ 248.272364][T10363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.286399][T10363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.296680][T10363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.313494][T10363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.368666][T10197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.401908][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.437222][T10197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.681356][T10197] hsr_slave_0: entered promiscuous mode [ 248.687926][T10197] hsr_slave_1: entered promiscuous mode [ 248.703905][T10197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.719146][T10197] Cannot create hsr debugfs directory [ 248.816647][T10380] xt_CT: No such helper "snmp" [ 248.926784][T10392] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1116'. [ 248.979118][T10391] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1115'. [ 249.001922][T10391] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1115'. [ 249.027246][T10394] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1117'. [ 249.035363][T10391] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1115'. [ 249.044519][T10396] netlink: 'syz.4.1115': attribute type 1 has an invalid length. [ 249.061426][T10394] batman_adv: batadv0: Adding interface: wlan0 [ 249.081124][T10394] batman_adv: batadv0: Interface activated: wlan0 [ 249.173792][T10391] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1115'. [ 249.238124][T10396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.267301][T10398] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 249.511428][ T55] Bluetooth: hci2: command tx timeout [ 249.829162][T10171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.871747][T10171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.902218][T10171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.925405][T10171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.940980][T10417] netlink: 'syz.3.1120': attribute type 4 has an invalid length. [ 249.967880][T10421] __nla_validate_parse: 5 callbacks suppressed [ 249.967898][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 249.994523][T10418] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1120'. [ 250.013581][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'. [ 250.148413][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'. [ 250.169781][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'. [ 250.214974][T10426] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 250.229720][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 250.250165][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 250.313725][T10435] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 250.334431][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1125'. [ 250.380091][T10432] hsr0 speed is unknown, defaulting to 1000 [ 250.497742][T10442] team0: Port device gtp0 added [ 250.516756][T10171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.612822][T10197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.638641][T10171] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.667165][T10197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.689665][T10197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.725669][T10197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.738890][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.746161][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.826476][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.833718][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.003703][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1133'. [ 251.086298][T10466] 8021q: VLANs not supported on wlan1 [ 251.312425][T10197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.394478][T10197] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.437910][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.445160][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.461420][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.468626][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.882549][T10171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.032915][T10510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1142'. [ 252.076372][T10171] veth0_vlan: entered promiscuous mode [ 252.131514][T10171] veth1_vlan: entered promiscuous mode [ 252.155333][T10197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.204090][T10518] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 252.225387][T10171] veth0_macvtap: entered promiscuous mode [ 252.232890][T10518] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 252.291266][T10171] veth1_macvtap: entered promiscuous mode [ 252.352245][T10197] veth0_vlan: entered promiscuous mode [ 252.369026][T10171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.382829][T10171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.418932][T10197] veth1_vlan: entered promiscuous mode [ 252.440868][T10171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.461563][T10171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.478829][T10171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.495955][T10171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.600880][T10532] sit0: entered promiscuous mode [ 252.613983][T10532] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 252.707716][T10171] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 252.729572][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.757550][T10197] veth0_macvtap: entered promiscuous mode [ 252.774103][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.795826][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.814482][T10197] veth1_macvtap: entered promiscuous mode [ 252.885855][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.905921][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.917040][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.935466][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.955060][T10197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.963985][T10545] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 252.978473][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.004636][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.041253][T10197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.088830][T10197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.107878][T10197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.128067][T10197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.137086][T10197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.501674][T10197] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 253.534589][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.558469][T10563] syzkaller1: entered promiscuous mode [ 253.574839][T10563] syzkaller1: entered allmulticast mode [ 253.637317][T10571] ip6tnl1: entered promiscuous mode [ 253.646861][T10571] ip6tnl1: entered allmulticast mode [ 253.811069][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.818936][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.914462][ T6177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.015269][ T6177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.033697][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.044744][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.256154][ T6177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.464215][ T6177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.649515][ T6177] bridge_slave_1: left allmulticast mode [ 254.655234][ T6177] bridge_slave_1: left promiscuous mode [ 254.666803][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.677730][ T6177] bridge_slave_0: left allmulticast mode [ 254.689955][ T6177] bridge_slave_0: left promiscuous mode [ 254.695752][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.992929][ T8742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.001550][ T8742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.012440][ T8742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.028699][ T8742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.041226][ T8742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.129634][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.141306][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.151716][ T6177] bond0 (unregistering): Released all slaves [ 255.193515][T10586] hsr0 speed is unknown, defaulting to 1000 [ 255.434775][T10586] chnl_net:caif_netlink_parms(): no params data found [ 255.479004][ T6177] hsr_slave_0: left promiscuous mode [ 255.488590][ T6177] hsr_slave_1: left promiscuous mode [ 255.495551][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.503843][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.512214][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.519827][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.539280][ T6177] veth1_macvtap: left promiscuous mode [ 255.545900][ T6177] veth0_macvtap: left promiscuous mode [ 255.551619][ T6177] veth1_vlan: left promiscuous mode [ 255.556898][ T6177] veth0_vlan: left promiscuous mode [ 255.757024][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.178273][ T8742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.204176][ T8742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.213145][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 256.224665][ T8742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.243687][ T8742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.257455][ T8742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.286658][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 256.703863][T10596] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 256.815613][T10602] hsr0 speed is unknown, defaulting to 1000 [ 256.850903][T10610] __nla_validate_parse: 3 callbacks suppressed [ 256.850923][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1168'. [ 256.986394][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.996056][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.011885][T10586] bridge_slave_0: entered allmulticast mode [ 257.033497][T10586] bridge_slave_0: entered promiscuous mode [ 257.043313][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.050839][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.058207][T10586] bridge_slave_1: entered allmulticast mode [ 257.065661][T10586] bridge_slave_1: entered promiscuous mode [ 257.109602][ T55] Bluetooth: hci0: command tx timeout [ 257.247276][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.277181][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.423491][T10586] team0: Port device team_slave_0 added [ 257.467952][T10586] team0: Port device team_slave_1 added [ 257.638505][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.653294][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.686852][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.713656][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.736049][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.763237][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.802797][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 257.894981][T10602] chnl_net:caif_netlink_parms(): no params data found [ 257.973521][T10586] hsr_slave_0: entered promiscuous mode [ 257.980563][T10586] hsr_slave_1: entered promiscuous mode [ 257.986724][T10586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.995183][T10586] Cannot create hsr debugfs directory [ 258.039478][T10644] hsr0 speed is unknown, defaulting to 1000 [ 258.191577][ T6177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.196476][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1183'. [ 258.311802][ T55] Bluetooth: hci2: command tx timeout [ 258.372489][ T6177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.738244][ T6177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.003507][T10602] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.045372][T10602] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.075379][T10602] bridge_slave_0: entered allmulticast mode [ 259.158226][T10602] bridge_slave_0: entered promiscuous mode [ 259.196613][ T55] Bluetooth: hci0: command tx timeout [ 259.227072][T10602] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.251055][T10602] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.258353][T10602] bridge_slave_1: entered allmulticast mode [ 259.267913][T10602] bridge_slave_1: entered promiscuous mode [ 259.348451][T10675] netlink: 'syz.4.1185': attribute type 3 has an invalid length. [ 259.534510][ T6177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.569327][T10602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.579230][T10678] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 259.660853][T10602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.720777][T10602] team0: Port device team_slave_0 added [ 259.734420][T10602] team0: Port device team_slave_1 added [ 259.847277][T10602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.855174][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.881446][T10602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.895520][T10602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.902899][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.938342][T10602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.194681][T10602] hsr_slave_0: entered promiscuous mode [ 260.201556][T10602] hsr_slave_1: entered promiscuous mode [ 260.208047][T10602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.225023][T10602] Cannot create hsr debugfs directory [ 260.232038][ T6177] bridge_slave_1: left allmulticast mode [ 260.248436][ T6177] bridge_slave_1: left promiscuous mode [ 260.255144][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.280948][ T6177] bridge_slave_0: left allmulticast mode [ 260.286622][ T6177] bridge_slave_0: left promiscuous mode [ 260.300401][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.318596][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 260.338758][T10703] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1194'. [ 260.391632][ T55] Bluetooth: hci2: command tx timeout [ 260.678143][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.689631][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.700559][ T6177] bond0 (unregistering): Released all slaves [ 260.898205][T10713] xt_hashlimit: max too large, truncated to 1048576 [ 260.934557][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 261.269988][ T55] Bluetooth: hci0: command tx timeout [ 261.473532][ T6177] hsr_slave_0: left promiscuous mode [ 261.484423][ T6177] hsr_slave_1: left promiscuous mode [ 261.490808][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.498401][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.506984][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.514834][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.549202][ T6177] veth1_macvtap: left promiscuous mode [ 261.555013][ T6177] veth0_macvtap: left promiscuous mode [ 261.562466][ T6177] veth1_vlan: left promiscuous mode [ 261.567980][ T6177] veth0_vlan: left promiscuous mode [ 262.249524][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1206'. [ 262.279520][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 262.472180][ T55] Bluetooth: hci2: command tx timeout [ 262.580227][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 262.661560][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 263.351754][ T55] Bluetooth: hci0: command tx timeout [ 263.463689][T10761] netlink: 'syz.1.1209': attribute type 10 has an invalid length. [ 263.489213][T10761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1209'. [ 263.509072][T10761] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 263.520152][T10761] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1209'. [ 263.545961][T10586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.575877][T10586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.613415][T10765] batman_adv: batadv0: Adding interface: dummy0 [ 263.620022][T10765] batman_adv: batadv0: Interface activated: dummy0 [ 263.662716][T10586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.693077][T10586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.894040][T10780] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1216'. [ 263.904654][T10780] unsupported nlmsg_type 40 [ 264.103790][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.176439][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.228674][T10790] ------------[ cut here ]------------ [ 264.231772][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.234468][T10790] memcpy: detected field-spanning write (size 128) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 264.241332][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.295525][T10602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.308730][T10790] WARNING: CPU: 0 PID: 10790 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 264.319336][T10790] Modules linked in: [ 264.321893][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.323951][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.4.1219 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 264.331107][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.351937][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 264.363162][T10790] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 264.368849][T10790] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 264.389582][T10790] RSP: 0018:ffffc90003d47920 EFLAGS: 00010246 [ 264.395712][T10790] RAX: 2641dbb3f9147000 RBX: ffff88805628f468 RCX: 0000000000080000 [ 264.404465][T10790] RDX: ffffc9000d1cd000 RSI: 000000000001bfcd RDI: 000000000001bfce [ 264.413045][T10790] RBP: 0000000000000000 R08: ffffffff8f7f2377 R09: 1ffffffff1efe46e [ 264.421247][T10790] R10: dffffc0000000000 R11: fffffbfff1efe46f R12: 0000000000000080 [ 264.429255][T10790] R13: 1ffff920007a8f4e R14: ffffc90003d47a94 R15: 0000000000000080 [ 264.437276][T10790] FS: 00007fe0071106c0(0000) GS:ffff8881260c4000(0000) knlGS:0000000000000000 [ 264.446291][T10790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.452964][T10790] CR2: 000000110c2ca78e CR3: 00000000282a4000 CR4: 00000000003526f0 [ 264.461032][T10790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.469027][T10790] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.477121][T10790] Call Trace: [ 264.480491][T10790] [ 264.483473][T10790] ip6_route_info_create+0x629/0xa70 [ 264.488821][T10790] ip6_route_add+0x29/0x2f0 [ 264.493382][T10790] ? ipv6_route_ioctl+0x313/0x480 [ 264.498438][T10790] ipv6_route_ioctl+0x35c/0x480 [ 264.503396][T10790] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 264.508835][T10790] inet6_ioctl+0x219/0x280 [ 264.513364][T10790] ? __pfx_inet6_ioctl+0x10/0x10 [ 264.518347][T10790] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.524424][T10790] sock_do_ioctl+0xd9/0x300 [ 264.528967][T10790] ? __pfx_sock_do_ioctl+0x10/0x10 [ 264.534143][T10790] ? __lock_acquire+0xaac/0xd20 [ 264.539021][T10790] sock_ioctl+0x576/0x790 [ 264.543423][T10790] ? __pfx_sock_ioctl+0x10/0x10 [ 264.548320][T10790] ? __fget_files+0x3a0/0x420 [ 264.549610][ T55] Bluetooth: hci2: command tx timeout [ 264.553715][T10790] ? __fget_files+0x2a/0x420 [ 264.563252][T10790] ? bpf_lsm_file_ioctl+0x9/0x20 [ 264.568227][T10790] ? __pfx_sock_ioctl+0x10/0x10 [ 264.573156][T10790] __se_sys_ioctl+0xf9/0x170 [ 264.577764][T10790] do_syscall_64+0xf6/0x210 [ 264.582326][T10790] ? clear_bhb_loop+0x45/0xa0 [ 264.587040][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.593033][T10790] RIP: 0033:0x7fe00638e969 [ 264.597456][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.617166][T10790] RSP: 002b:00007fe007110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.625693][T10790] RAX: ffffffffffffffda RBX: 00007fe0065b5fa0 RCX: 00007fe00638e969 [ 264.633907][T10790] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000004 [ 264.641972][T10790] RBP: 00007fe006410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 264.650036][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.658037][T10790] R13: 0000000000000000 R14: 00007fe0065b5fa0 R15: 00007ffffd23c958 [ 264.666077][T10790] [ 264.669127][T10790] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.676437][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.4.1219 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 264.688531][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 264.698599][T10790] Call Trace: [ 264.701909][T10790] [ 264.704845][T10790] dump_stack_lvl+0x99/0x250 [ 264.709464][T10790] ? __asan_memcpy+0x40/0x70 [ 264.714070][T10790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.719288][T10790] ? __pfx__printk+0x10/0x10 [ 264.723902][T10790] panic+0x2db/0x790 [ 264.727836][T10790] ? __pfx_panic+0x10/0x10 [ 264.732266][T10790] ? show_trace_log_lvl+0x4fb/0x550 [ 264.737495][T10790] __warn+0x31b/0x4b0 [ 264.741493][T10790] ? ipv6_addr_prefix+0x124/0x1d0 [ 264.746532][T10790] ? ipv6_addr_prefix+0x124/0x1d0 [ 264.751573][T10790] report_bug+0x2be/0x4f0 [ 264.755915][T10790] ? ipv6_addr_prefix+0x124/0x1d0 [ 264.760956][T10790] ? ipv6_addr_prefix+0x124/0x1d0 [ 264.765993][T10790] ? ipv6_addr_prefix+0x126/0x1d0 [ 264.771032][T10790] handle_bug+0x84/0x160 [ 264.775281][T10790] exc_invalid_op+0x1a/0x50 [ 264.779801][T10790] asm_exc_invalid_op+0x1a/0x20 [ 264.784654][T10790] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 264.790298][T10790] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 264.809920][T10790] RSP: 0018:ffffc90003d47920 EFLAGS: 00010246 [ 264.815997][T10790] RAX: 2641dbb3f9147000 RBX: ffff88805628f468 RCX: 0000000000080000 [ 264.823973][T10790] RDX: ffffc9000d1cd000 RSI: 000000000001bfcd RDI: 000000000001bfce [ 264.831951][T10790] RBP: 0000000000000000 R08: ffffffff8f7f2377 R09: 1ffffffff1efe46e [ 264.839930][T10790] R10: dffffc0000000000 R11: fffffbfff1efe46f R12: 0000000000000080 [ 264.847922][T10790] R13: 1ffff920007a8f4e R14: ffffc90003d47a94 R15: 0000000000000080 [ 264.855935][T10790] ip6_route_info_create+0x629/0xa70 [ 264.861295][T10790] ip6_route_add+0x29/0x2f0 [ 264.865834][T10790] ? ipv6_route_ioctl+0x313/0x480 [ 264.870872][T10790] ipv6_route_ioctl+0x35c/0x480 [ 264.875739][T10790] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 264.881151][T10790] inet6_ioctl+0x219/0x280 [ 264.885584][T10790] ? __pfx_inet6_ioctl+0x10/0x10 [ 264.890546][T10790] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.896547][T10790] sock_do_ioctl+0xd9/0x300 [ 264.901070][T10790] ? __pfx_sock_do_ioctl+0x10/0x10 [ 264.906196][T10790] ? __lock_acquire+0xaac/0xd20 [ 264.911155][T10790] sock_ioctl+0x576/0x790 [ 264.915504][T10790] ? __pfx_sock_ioctl+0x10/0x10 [ 264.920380][T10790] ? __fget_files+0x3a0/0x420 [ 264.925065][T10790] ? __fget_files+0x2a/0x420 [ 264.929666][T10790] ? bpf_lsm_file_ioctl+0x9/0x20 [ 264.934612][T10790] ? __pfx_sock_ioctl+0x10/0x10 [ 264.939563][T10790] __se_sys_ioctl+0xf9/0x170 [ 264.944171][T10790] do_syscall_64+0xf6/0x210 [ 264.948709][T10790] ? clear_bhb_loop+0x45/0xa0 [ 264.953399][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.959300][T10790] RIP: 0033:0x7fe00638e969 [ 264.963723][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.983339][T10790] RSP: 002b:00007fe007110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.991761][T10790] RAX: ffffffffffffffda RBX: 00007fe0065b5fa0 RCX: 00007fe00638e969 [ 264.999745][T10790] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000004 [ 265.007723][T10790] RBP: 00007fe006410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 265.015697][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.023676][T10790] R13: 0000000000000000 R14: 00007fe0065b5fa0 R15: 00007ffffd23c958 [ 265.031670][T10790] [ 265.034962][T10790] Kernel Offset: disabled [ 265.039292][T10790] Rebooting in 86400 seconds..