last executing test programs: 2m23.039138144s ago: executing program 2 (id=3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x0, 0x8004}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x4604}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x40}}, 0x0) 2m22.582341483s ago: executing program 2 (id=14): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x3261fb02, 0x3bd, 0xca8}, 0x10) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) mmap(&(0x7f000090f000/0x1000)=nil, 0x1000, 0xf, 0x2a011, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES64=r4], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000080)=""/24, 0x6}) accept(r0, 0x0, 0x0) 2m22.054234232s ago: executing program 2 (id=21): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000100)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='macvlan1\x00', 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, r5}, 0xc) (async) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r3, 0x3}, 0x18) (async, rerun: 64) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0xffffffffffffffff, {0x0, 0x0, 0x1}, 0x3}, 0x18) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bc2a, 0x7fffffe, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008844}, 0x4000000) (async, rerun: 64) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040), 0x4) (rerun: 64) 2m6.953103509s ago: executing program 32 (id=21): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000100)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='macvlan1\x00', 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, r5}, 0xc) (async) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r3, 0x3}, 0x18) (async, rerun: 64) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0xffffffffffffffff, {0x0, 0x0, 0x1}, 0x3}, 0x18) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bc2a, 0x7fffffe, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008844}, 0x4000000) (async, rerun: 64) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040), 0x4) (rerun: 64) 41.820191779s ago: executing program 1 (id=1045): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffffff1}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040)=0xe74, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="67d8298df3308a0ff652474fbf4596a6b83fc75f999df241078b31bb53ae7fe0bdb92948c4773a3cf075ef5ea66a25f6399a5db6a4c2e1b3376f92cd5a6e800e", 0x40, 0x4000, 0x0, 0x0) 41.589580783s ago: executing program 1 (id=1049): syz_emit_ethernet(0x246, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x210, 0x3a, 0x0, @private2, @mcast2, {[@routing={0x3b, 0x8, 0x2, 0x9, 0x0, [@local, @private1, @empty, @empty]}, @fragment={0x89, 0x0, 0x4, 0x1, 0x0, 0x6, 0x68}, @routing={0xff, 0x0, 0x1, 0xff}, @hopopts={0x1d, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x10}, @generic={0x3, 0x74, "7b5874bbfd003355805ae9e5e821c457f9892b6123c6de3621583be092adce5b0a10667d91e13ba5cadb887a5b9367113f83096ca34698a2b2d437ced90cd283e8d4a095d0998664a36ecc509525abc38c5c68e04a0322b37b56a2d56514fb778e937a78df210e6ed5997c7d3dc7c2a2dbe4b4d6"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3c, 0xe, 0x1, 0x78, 0x0, [@dev={0xfe, 0x80, '\x00', 0x41}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @loopback, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x2b, 0x12, 0x1, 0x1, 0x0, [@empty, @loopback, @private2, @remote, @mcast1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2]}], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}}}}}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/114, 0x72}], 0x1, 0xa4, 0xee) 41.417811054s ago: executing program 1 (id=1053): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="0c45755bd552e0c2f424bb3a4fdf8808ee", 0x11, 0x8000, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 33.83366298s ago: executing program 1 (id=1053): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="0c45755bd552e0c2f424bb3a4fdf8808ee", 0x11, 0x8000, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 19.407899633s ago: executing program 1 (id=1053): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="0c45755bd552e0c2f424bb3a4fdf8808ee", 0x11, 0x8000, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 5.797843545s ago: executing program 1 (id=1053): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="0c45755bd552e0c2f424bb3a4fdf8808ee", 0x11, 0x8000, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 4.538439438s ago: executing program 5 (id=1358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x101, 0x8, 0x7}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f0000000240)="4c70984f", 0x4}, {&(0x7f0000000980)="4e29c8e2240da01a935eef09c7c59663cd6d81589f1237e73fb6b3d8872a51a70db167d350109db14323caef3fc9bd59856097c9744a52d8661dcef486ca14f29edf70fd43fff33ad4c387a28c02759efe09be2f4b51f4b0d0725a3d83fe6d42a98fc53bd14bd4b5055e4966879131b11b3a06aa97d43b1fcda891411a6fe55220e10a2c78bad7f28662ba03dacf6b2d7257f0cb7d18c66af2f588c072386cbadb8df969d3691bb189b4306657bed365bef9c99193ee23ce21d427cba2ce07f7b9a44c829424fd6a12fb4bb80291357b72d6ad6fd08c6a16a795acfd5af5c2ebf313b363ec0087cee1fde54534ca0d625abd81f20b507ea0ea3bc640d0a58d54795be04823e89626e05133c5a81c761fa954da2247c95fd419922aaa824fa74d4067d5d2e1ab31b8029387ae6d5c2b71e564ee7604953b6eae7c9d756e72ce0b04c3ebc1fa8c7be29e167aeeb024ff447458d156295a3bc81f956038cd9bbe4c38a0609afa2e72757b5e48256206bf8338fa3146e88222e96d51339d67863d646293f3812464ff3d006ac7570b3938bdec1145cbeb11a086143c34d3aa28274add99bd0de363e45ded2419d08052ae4b3806c217e74578fe422fd4687b59398f4948291567d313700f58934ad671341b5e48da0f43236f4a2d7d77e578e5ad942104c8fe01cd94f25366caa8df6ba9a8f10a0aa5904a2db1670934abf801257b4d89e23f23bff201e12b72fbc4e6f0bb7b78206c5553d46083bd3735f0e51477a2a9beb04538dbaeabe1021e0ff6b86052a81db5fa2d1bca0830d440a99b23f0a98b6408f8c181c5711e8cf48ebf3cc44e2994e1b31b20c3daaca80b5352ea4e6e3c3af663c974ce270f9f28fe63ff8cbabaf800ad3215b12c2f36d050b4aecc349fcd82568533660d3840726725e0c2c5fa5c68cb773c665bce5f4d21202bd79d5d0e88cade4b754a9bdfc0d520c726549cc8095ed813b4cf48629ccfed9458dafe429462bcfa7e5c8c965cfaad0b55ca50f2c0eaa3f2e019a199aebabbc454fc697553ca1b15f6ace88152b4e31220ec11d04616c83886e8db263ce14b258436ea73de0eacfcb766976f8b69cb67e374161b762e478e14d609f614caccddaa5fc7fbb49152bde75cce753ac62661874e4f198e3caf4f834357de5d14d2e2ac74060c09b582fcfdc8ed76090bb7fd7ead2a7e705977626c00385e5d9a1b13b51f2e72b8ca4a4200140e725028ca7194a3485f81bfc39e8e6152b92277a6b140f38f8cd9abdfea1745b3dda42c7b2594312316d21792f3e2e2aaadafe43530e585b0bb57f4475ada7dd5bd0f722165a0306eb337e206a76b0baad3ac5c946dffc6b436c337d04d8f12186ec5a28e70cc520c442b1785a668cf902afee237116de8bdd21724e9e0f34ae0f9a5e7f379b165423560646ba12932e1bc2b7adc2ef0b9a91eb4a9fa2526ab01aca68e90965e8bf8015b2387aa3ee73b00eae5a35bb02c9d2b824941b79e6c6954cc86fee73cf23ad73ed8019deb65d4b4ee1f73ba828c164d1a5cd0a2a2e90effbdc8bd7ad3b67fab9d54e3346307fc996f0a30324a07906aa22f4c784397723323448bd78e2d3f9bc70b9faac5bd4c4362353d42143e61f8a5ba9b71496f6370c919300604e810448707c7a9f24819f4873f4f6bce20952b0f93985864006f9f3b6e20f97f0e1a926f72150b348725e111625d70d3dc6a65160157d4ce7baad3d1105b2027b9beb4e4f54d827abe49e8be7a515ba56b208e9bb04aebb3a010029123c3fad66744269e8f60503bc2a92e1ac513cb160e73caff3fafe0ebc512a2914c4102828c82b37d8cbdaff56f0e9d7b9423e8715dcd8d64181e0607cb7d97fb97f0f925011f5e15253c21d03f06180e884a52e4a6678da159edf749d4e62669d23294a7945c5c63e295578a7e104ae109ee42b0be2a5dba49509b9afb7688033a7114a761220798e9bd604f4d8d87fdf02235365528f42d1ac98607933387098896c5906358ef3554091fb5a04dc0849bfcdc7b0bf41af90904c571e0bf22ff3e3ccd19f99f068586f504589d5fcd3a5781d619ae80d25db9b4151f42f9750adbd4f2131c3cec25da9fe6362034cc4a77c19b14b6469860c3e065c72d9bed153a9fe58cc882f2a62da42dce5e4dbfe7c754a87f86239c1be5e93bcd117fb9a13c2ab3fb85c1abad06e61bec9698bffe26b941c837c345eb4dd94cc10dddd3400904ef3a7ea1f8a4e9be86d697f57c7a32a95ee1e2d43683ff062f6cb138abff0201fbb726dbc7f10cfb172a2a9012a14500224d50b310065e08bb038b2ab7d971a04dcda9bf858042f48f82d5fc616da695224144", 0x681}], 0x2, 0x1) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000280)) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r7 = accept$packet(r6, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001080)=0x14) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000440)={0x1100, 0x4, 0xc000, 0x9}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000400000008000000d1c877365aa79001", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r9 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x1170, 0x1170, 0x160, 0x1170, 0x248, 0x1398, 0x1398, 0x248, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@private1, @mcast2, [], [], 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {0xff}}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x17, 0x5, 0xc, 0x1, 0x6, 0x45, 0x7, 0x10001]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="aa7971630000000000000064cd726598912bb300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000400"/28], 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7e, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x72f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xd, 0xe7, &(0x7f0000000380)=""/231, 0x40f00, 0x15, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xa, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[r3, 0xffffffffffffffff, r4, r6, r8, r11, r12, r13], &(0x7f0000000800)=[{0x0, 0x4, 0x4, 0x7}, {0x4, 0x3, 0xc, 0x4}, {0x2, 0x5, 0x3, 0xb}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.186705897s ago: executing program 5 (id=1362): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010101, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x45}, 0x0, 0x2b}, 0x0, @in=@rand_addr=0x64010102}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14, 0xd, 0x6, 0x3}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 2.925182123s ago: executing program 5 (id=1369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r1}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r4 = socket(0x200000100000011, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendto$packet(r4, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) recvfrom$l2tp(r2, 0x0, 0x0, 0x2061, 0x0, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000000076ae84edd23a", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000500"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r9, 0x58, &(0x7f0000000500)}, 0x10) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000004010010000010086c8c48bb9c92100000a"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 2.921673262s ago: executing program 3 (id=1370): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010005", 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "b20e4b81df947933", "02d19002eec9c437612102a64e5304e73b426fda33de9cf521b815d814480c0b", "8ad4ad84", "a13df4abb8cc3727"}, 0x38) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001080)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401fd, @void, @value}, 0x94) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000380)={0x9, 0x8, 0x3, 0x6, 0x5, 0x0, [{0x2, 0x7fffffffffffffff, 0xb0f}, {0xc, 0x2, 0xfffffffffffffffa, '\x00', 0x2004}, {0x8, 0x4, 0x80000000, '\x00', 0x3002}, {0x8, 0xb, 0x80, '\x00', 0x40}, {0x8000000000000000, 0x100000001, 0x5, '\x00', 0x1085}]}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000040)=0x8000000000000001) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000001100)) 2.816497768s ago: executing program 4 (id=1371): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1fc, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x8040) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x2404c080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) r3 = socket$inet(0x2, 0x1, 0x62b) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) sendmsg$AUDIT_SET(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x3e9, 0x14, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x1, r5, 0x4c2a, 0x40, 0x80, 0x6, 0x0, 0x88b, 0x6}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x48850) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000740)='htcp\x00', 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000007c0)={0x8, &(0x7f0000000780)=[{0x200, 0x5, 0x93, 0xcf}, {0x40, 0x40, 0x2, 0x62aa}, {0x0, 0x0, 0xe, 0x2}, {0x0, 0x1c, 0x6, 0x8}, {0x3, 0x9, 0x45, 0x7}, {0x0, 0x2, 0xcb, 0x8}, {0xf, 0x3, 0x6, 0x4}, {0xffff, 0x81, 0x95, 0x8}]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000800), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x60}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r2, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x48811}, 0x24040000) (async, rerun: 32) socketpair(0xf, 0x80000, 0x1, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bind$inet6(r8, &(0x7f0000000b00)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000b80)={0x0, 0x2c, &(0x7f0000000b40)=[@in6={0xa, 0x4e21, 0xfffffff8, @mcast1, 0x6}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000bc0)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000c00)={r9, 0x9, 0x7, 0x5}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={r10}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000cc0)={'vcan0\x00'}) (async) connect$inet(r8, &(0x7f0000000d00)={0x2, 0x4e23, @loopback}, 0x10) r11 = socket(0x8, 0x4, 0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x13, 0x0, @random="6cf4eed8dbf4d0148f2f3fc2187e7d"}, {0x7, 0x0, @random="a1e947"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eaaeb15351db"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) (async, rerun: 32) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xf8, 0x0, 0x6, 0x6}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000000) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000001180)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000fc0)={0x148, r2, 0x708, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "623f07799318203322836ecb7e0be1bfd111ce2d33cceb89"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "32a15fdfc77de221fc590021cf3d24192131bc1c0b83b527"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f097bd4d58567d73284bf408719ea46f5b6682cb75c70eb2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fb3b558d5e9d3e71039ce38afb2953875278909b4bb602dc"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "258bd05c1e0ccdb3b3c02b727284179730df8cb024297fd7"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008044) (async) connect$inet(r7, &(0x7f00000011c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000001200)) 2.815506828s ago: executing program 3 (id=1372): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x33}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.713316927s ago: executing program 0 (id=1373): r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendto$inet6(r1, &(0x7f0000000100)="9e2831bedb", 0x5, 0x4008044, &(0x7f0000000140)={0xa, 0x4e22, 0x929, @private1={0xfc, 0x1, '\x00', 0x1}, 0x73fb}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffff, @dev}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffeec, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x78}, 0x1, 0xffffffff00000003}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x80000001, 0x4) 2.60800931s ago: executing program 3 (id=1374): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x1d}]}, 0x18}], 0x1, 0x0, 0x0, 0xe9654dd4ab7a1c5b}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000040)) 2.561170359s ago: executing program 5 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x330, 0x370, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 2.529152289s ago: executing program 4 (id=1376): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e23, @private=0xa010102}}) (async, rerun: 32) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000dc0)={{'\x00', 0x3}, {0x6}, 0xf89c32fc1935a898, 0x0, 0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)="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", 0x1be, 0x0, &(0x7f0000000cc0)={0x2, 0x76, {0x0, 0xc, 0x53, "7121760de4400686cb575e182ab3834464d1054e88fe492666e39a128d666084528cd70cab8341b08d5af81f2ba97aa352a4bd871d7cbe9cae0121b92c0005a751b05c1c99408eefe637f1221a659767c0f493", 0x16, "572d5457117769434685bb73beb0edfc79b60290fa49"}, 0x71, "fa62a7dd646caf4478464c7bbfea3b6860dc06b086269edec8107b91ea2bff450a0e40c62e23ee07f995c4ef33d7a885b0d88a5f00149091e2fc94d0022dbb2cbeb4f9e5bfae03012b3eec910cee7a8fadae89648d4d318ac73d3219c7f5d099fe79b92b404ad038a2152336f6078dedaf"}, 0xf3}) (async, rerun: 32) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x498}, {&(0x7f00000002c0)="e4d561e9744108000000e9b4ec081c8eb4534bc5b9284f843e2bc71745", 0x1d}, {&(0x7f0000001e80)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd74120604219", 0x8d}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e36d67d4b880ae396b5c3de2ab65094fa", 0x3c}], 0x4}}], 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="66e0", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)='2', 0x1}], 0x1}}], 0x2, 0x4) (rerun: 64) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000040), 0x10) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) (rerun: 64) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000009c0)={0x0, 0xd9, "9badf2e07fdfb2c2dcc2db5cdcfccd4d53527df5f3a8f6f54aa58da6fa2bd42ca4041e281cea83666132e5d2b1b5449e21df93154f385b1e3e98a4f304f7ab1d2b97ccd060493dadea1ecda1b30b9450fe254f2a03ee9ad369d28b8a7f227dcec80cc4978e6857a96da31f009ee98b5081fc5b8224aa5af05464e99bfab7302fa403471790b2e851fea0ab11b6ab015fff90877053783b1d3bfc32c6329562a5aee0bbb0ff8e1ca8e44e79e86b09ece3c2b105bd14fac8c01f79b743bec5b635f5706e74d035f2899ce2e497b8e567b505f5d238fd9e8032f0"}, &(0x7f0000000100)=0xe1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x8) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x3}, 0x1}], 0x1, 0x0, 0x0) 2.43989916s ago: executing program 0 (id=1377): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e5c}, 0x15) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000000f14010029bd7000fbdbdf250b00450075766572627300000c00450072646d615f636d000800010000000000c806a485c716c0215005355b78b50d24a45ac0679eb340"], 0x30}, 0x1, 0x0, 0x0, 0x851}, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40982, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r2, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) sendmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='E5', 0x2}, {0x0}, {&(0x7f00000002c0)="823e0f9d269099e28841ce74bc97838c17494ef17bb49da29321dc", 0x1b}], 0x3, &(0x7f0000000580)=[{0x10, 0x11, 0x80}, {0x10, 0x84, 0xff}], 0x20}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000008c0)="121bdf28ce", 0x5}], 0x1}}], 0x2, 0xd1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="30000000110b0000000400000008000000003a9818f2fe2498f9000093d57c000001000000", @ANYRES32=0x0], 0x30, 0x4040081}, 0x90f0) 2.313671991s ago: executing program 4 (id=1378): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="1fc624afbb929c5dcf275a6239fa48ae2e9e7955c09e7bc1b3f850a3abee42f6f4fd41f685f6c8d1be6a8e87abb7fa1a4d33f10c885151a1700b775bbbb4e9214be519565b53bb92d7bce6fc062766cacb2de04345de1b4dcf5f4b060f57a24166628a79587fb8039520accb75", @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x1) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:sshd_key_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4801}, 0x5547e4d11b52ed48) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r5) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000ac0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2400c040}, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000200), 0xe) (async) listen(r6, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000100), 0x4) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2.237845274s ago: executing program 3 (id=1379): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/224, 0xe0}], 0x2, &(0x7f00000003c0)=""/139, 0x8b}, 0x9}, {{&(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/24, 0x18}], 0x3}, 0xffffff01}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/186, 0xba}, {&(0x7f0000000940)=""/74, 0x4a}], 0x3, &(0x7f0000000a00)=""/156, 0x9c}, 0x6}, {{&(0x7f0000000ac0)=@pppoe, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/23, 0x17}], 0x1, &(0x7f0000000bc0)=""/192, 0xc0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000000cc0)=""/112, 0x70}, {&(0x7f0000000fc0)}], 0x3, &(0x7f0000000dc0)=""/104, 0x68}, 0x6}, {{&(0x7f0000000e40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000ec0)=""/41, 0x29}, {&(0x7f0000000f00)=""/158, 0x9e}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000001000)=""/26, 0x1a}], 0x4, &(0x7f0000000fc0)=""/26, 0x1a}, 0x5}], 0x7, 0x40000120, &(0x7f0000001280)={0x0, 0x989680}) r6 = epoll_create1(0x0) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)=ANY=[@ANYBLOB="12000000c1b2641a0001000000000000002000040070e8b41efc51f150454595cdd73282009909cc7a17861bdc3e70b829599a31f12ede291016605df67b74b5947d28d7597d2f6ec52c6092f6616cab8a43058d4350a6257d2920836800000000000000"], 0x1c}}, 0x20000000) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r11, @ANYBLOB="b448e7fdb97cc0af0000ef40aa9c41b9"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x240008d4) close(r9) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) epoll_pwait(r6, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) epoll_pwait(r6, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000011c0)={0x9}) (async, rerun: 32) r12 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x3, {0x2, 0xff}, 0xfe}, 0x18) bind$can_j1939(r12, &(0x7f0000000080)={0x1d, r4, 0x4000000, {0x0, 0x0, 0x4}, 0xfe}, 0x18) close(r12) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) (async, rerun: 64) close(r12) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000600)={@empty, 0x1}}) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r13, @ANYBLOB="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"], 0x68}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) 2.192008892s ago: executing program 5 (id=1380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x9, 0x5, 0x48, @local, @mcast1, 0x1, 0x8, 0xb877, 0x9}}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, r2, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.00286121s ago: executing program 4 (id=1381): r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x3, 0x9, 0x0, 0x810, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x4, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000100)=r1, 0x120) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001300)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', r3, 0x8000, 0x80, 0x0, 0x101, {{0x10, 0x4, 0x3, 0x2, 0x40, 0x64, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x82, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @rand_addr=0x64010100]}, @cipso={0x86, 0x19, 0x3, [{0x6, 0xa, "fae001a8577e9b11"}, {0x2, 0x9, "7e58f5a2aa9d91"}]}, @noop, @end]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0x9}, {0xd, 0x10}, {0xfff2, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xc, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000002c00012000000000fdffffff040000800800178005"], 0x1c}], 0x1}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100766c616e000000003c00028006000500810000001c0004800c00010006000000000000000c00019f0f0c0000090000000c0002000000000005000000060001000400000008000500", @ANYRES32=r10], 0x74}}, 0x0) 1.740755872s ago: executing program 3 (id=1382): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000100)) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pK \x00'}, 0x20) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x14}, 0x18) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x10, 0xfffffbee, 0x4, 0x79e7b7df, 0x21000, 0xffffffffffffffff, 0xe1a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x2, 0x4, 0x408, 0x0, 0x108, 0x108, 0x320, 0x108, 0x320, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x2, {0x0, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @dev}}}, {{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2, 0xfffffffb}}}}, 0x458) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000000400000000000000be91000000000000b5020000000000008500000005000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r11, r11, 0x0, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x97a}, [@ldst={0x3, 0x3, 0x4, 0x4, 0x6, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @alu={0x7, 0x0, 0x6, 0x8, 0x9, 0xfffffffffffffffe, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000640)='syzkaller\x00', 0x8, 0xf, &(0x7f0000000680)=""/15, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x4, 0x3e, 0x6}, 0x10, 0xffffffffffffffff, r3, 0x1, &(0x7f0000000940)=[r4, r5, r6, r7, r1, r8, r10, 0xffffffffffffffff, r11], &(0x7f0000000980)=[{0x2, 0x1, 0xd, 0xc}], 0x10, 0xfffffffc, @void, @value}, 0x94) (async) r12 = socket$kcm(0x10, 0x9, 0x0) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x8800) (async) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8000f8ffff0a0b0400000000000000000200000054000480500001800a000100feff6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000001c000580090001006d657461000000000c000280080002400000000d0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000ac600c466f8220070ab816f9ae183907c4f7368801ee3abe6e54ee9ebfb5d5200"], 0xa8}}, 0x0) (async) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) r14 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r14, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x2, @mcast2}}, 0x5b) (async) bind$rxrpc(r14, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) 1.458414522s ago: executing program 0 (id=1383): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000300)=""/157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.361001778s ago: executing program 0 (id=1384): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 429.483927ms ago: executing program 5 (id=1385): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="401ff833226ebcd1196dfc6c814e9aa189a15603c1f6d76465b40903bd53b60171c9d99c0abc0c586b918464c93ee2c5412eea052fa8fe0b9f7a621426fc230985a3"], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r4, 0x1, 0x2a, 0x0, &(0x7f0000000240)) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000540)={@empty, 0x1}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000840)={r6, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r5, &(0x7f0000000300), 0x0}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x4f, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a80140007"], 0x78}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000005c0)={0x0, 0x63cf}, &(0x7f0000000600)=0x8) 295.949566ms ago: executing program 0 (id=1386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf06}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 295.694981ms ago: executing program 3 (id=1387): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x9, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x4001}, 0x4004085) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) sendmmsg$sock(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000003c0)="83", 0x1}], 0x1}}], 0x2, 0x40000) 279.466124ms ago: executing program 4 (id=1388): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) splice(r1, 0x0, r3, 0x0, 0x32, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x98, &(0x7f0000000000), &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8100ab08b1eaf335, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r8, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r8, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) r10 = socket$inet6(0xa, 0x40000080806, 0x0) r11 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r11, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x80, 0x0, @mcast2, 0x8}, 0x28) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) 139.451656ms ago: executing program 0 (id=1389): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x37, 0x9, 0x1, 0x255fdbfb, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000084) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002c40)={'wlan1\x00', &(0x7f0000002bc0)=@ethtool_gstrings={0x1b, 0x1}}) 0s ago: executing program 4 (id=1390): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='batadv_slave_1\x00', 0x10) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async, rerun: 32) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x20) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) listen(r3, 0x5) (async, rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) (async, rerun: 64) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/148, 0x94}], 0x1) (async, rerun: 64) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x7d, &(0x7f0000000080), 0x8) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r6, 0x466e2000) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @empty}}}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd700000000000020000000000000018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYRES8=r8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000000000000000000001800"/28], 0x48) (rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x8}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x34}}, 0x20000000) kernel console output (not intermixed with test programs): r this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.344574][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.395207][ T5828] hsr_slave_0: entered promiscuous mode [ 81.401893][ T5828] hsr_slave_1: entered promiscuous mode [ 81.408275][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.416286][ T5828] Cannot create hsr debugfs directory [ 81.432581][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.439813][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.465848][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.529316][ T5829] hsr_slave_0: entered promiscuous mode [ 81.535993][ T5829] hsr_slave_1: entered promiscuous mode [ 81.542438][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.550784][ T5829] Cannot create hsr debugfs directory [ 81.656085][ T5830] hsr_slave_0: entered promiscuous mode [ 81.663298][ T5830] hsr_slave_1: entered promiscuous mode [ 81.670111][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.677725][ T5830] Cannot create hsr debugfs directory [ 81.905970][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.945024][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.977030][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.009586][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.070151][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.091732][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.114980][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.137905][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.147406][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.164404][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.175958][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.191189][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.271617][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.282840][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.320461][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.332298][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.385985][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.419059][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.442221][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.463213][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.478873][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.540562][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.554953][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.562368][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.602415][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.621469][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.660254][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.667408][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.701759][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.741794][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.749005][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.796718][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.803928][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.826601][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.843355][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.861739][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.897523][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.904870][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.935166][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.959458][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.985359][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.992554][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.012835][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.020397][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.058398][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.065539][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.076385][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.083572][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.129757][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.137034][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.246669][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.262858][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.268902][ T5845] Bluetooth: hci0: command tx timeout [ 83.278839][ T55] Bluetooth: hci3: command tx timeout [ 83.280755][ T5834] Bluetooth: hci4: command tx timeout [ 83.284263][ T55] Bluetooth: hci2: command tx timeout [ 83.290557][ T5841] Bluetooth: hci1: command tx timeout [ 83.330628][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.361841][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.482940][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.548258][ T5842] veth0_vlan: entered promiscuous mode [ 83.587884][ T5842] veth1_vlan: entered promiscuous mode [ 83.668300][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.714613][ T5842] veth0_macvtap: entered promiscuous mode [ 83.773277][ T5842] veth1_macvtap: entered promiscuous mode [ 83.817502][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.881371][ T5829] veth0_vlan: entered promiscuous mode [ 83.904562][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.915953][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.930900][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.940273][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.950136][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.959193][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.976775][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.014259][ T5829] veth1_vlan: entered promiscuous mode [ 84.121311][ T5828] veth0_vlan: entered promiscuous mode [ 84.166361][ T5829] veth0_macvtap: entered promiscuous mode [ 84.193588][ T5829] veth1_macvtap: entered promiscuous mode [ 84.203302][ T5830] veth0_vlan: entered promiscuous mode [ 84.239717][ T5828] veth1_vlan: entered promiscuous mode [ 84.249436][ T5830] veth1_vlan: entered promiscuous mode [ 84.264326][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.276637][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.289287][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.314394][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.327147][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.339131][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.355251][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.363724][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.380784][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.392670][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.403823][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.413066][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.449963][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.457935][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.461211][ T5837] veth0_vlan: entered promiscuous mode [ 84.524225][ T5837] veth1_vlan: entered promiscuous mode [ 84.544870][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.547061][ T5828] veth0_macvtap: entered promiscuous mode [ 84.596651][ T5830] veth0_macvtap: entered promiscuous mode [ 84.616437][ T5828] veth1_macvtap: entered promiscuous mode [ 84.675403][ T5830] veth1_macvtap: entered promiscuous mode [ 84.693511][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.705118][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.715046][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.725611][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.736850][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.747022][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.757754][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.767972][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.779245][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.791098][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.831114][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.841537][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.850980][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.861252][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.875166][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.887574][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.899176][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.909905][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.924110][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.935367][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.948209][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.951409][ T5916] netlink: 'syz.3.4': attribute type 11 has an invalid length. [ 84.969334][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.979394][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.000133][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.010879][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.022883][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.033737][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.043738][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.054628][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.065828][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.105406][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.113995][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.123743][ T5837] veth0_macvtap: entered promiscuous mode [ 85.152693][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.166131][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.175670][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.188276][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.202319][ T5837] veth1_macvtap: entered promiscuous mode [ 85.343853][ T5841] Bluetooth: hci4: command tx timeout [ 85.349808][ T5845] Bluetooth: hci2: command tx timeout [ 85.349845][ T5834] Bluetooth: hci3: command tx timeout [ 85.355258][ T5845] Bluetooth: hci1: command tx timeout [ 85.355298][ T5845] Bluetooth: hci0: command tx timeout [ 85.385182][ T5922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.390492][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.464541][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.488571][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.519282][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.557062][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.582759][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.603709][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.615888][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.635512][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.652934][ T5926] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 85.714625][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.735983][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.755617][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.778317][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.794871][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.807519][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.819648][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.830448][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.841799][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.871519][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.880961][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.891888][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.910372][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.946684][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.960438][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.982901][ T5926] tipc: Started in network mode [ 85.987873][ T5926] tipc: Node identity 7f000001, cluster identity 4711 [ 86.002231][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.006130][ T5926] tipc: Enabled bearer , priority 10 [ 86.016348][ T5934] Zero length message leads to an empty skb [ 86.043970][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.059347][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.200445][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.236822][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.268806][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.307087][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.409478][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.445536][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.596786][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.646352][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.746300][ T5952] sit1: entered promiscuous mode [ 86.757740][ T5952] sit1: entered allmulticast mode [ 86.842853][ T5956] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 87.119707][ T5917] tipc: Node number set to 2130706433 [ 87.192066][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.339769][ T5972] x_tables: unsorted entry at hook 2 [ 87.427016][ T5845] Bluetooth: hci3: command tx timeout [ 87.436395][ T5845] Bluetooth: hci1: command tx timeout [ 87.444290][ T5845] Bluetooth: hci2: command tx timeout [ 87.450118][ T5845] Bluetooth: hci0: command tx timeout [ 87.456232][ T5845] Bluetooth: hci4: command tx timeout [ 87.840750][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 88.060716][ T5994] FAULT_INJECTION: forcing a failure. [ 88.060716][ T5994] name failslab, interval 1, probability 0, space 0, times 1 [ 88.075593][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.1.25 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 88.086165][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.096277][ T5994] Call Trace: [ 88.099603][ T5994] [ 88.102569][ T5994] dump_stack_lvl+0x241/0x360 [ 88.107326][ T5994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.112623][ T5994] ? __pfx__printk+0x10/0x10 [ 88.117244][ T5994] ? ref_tracker_alloc+0x332/0x490 [ 88.122389][ T5994] should_fail_ex+0x3b0/0x4e0 [ 88.127116][ T5994] should_failslab+0xac/0x100 [ 88.131811][ T5994] ? skb_clone+0x20c/0x390 [ 88.136247][ T5994] kmem_cache_alloc_noprof+0x70/0x380 [ 88.141657][ T5994] skb_clone+0x20c/0x390 [ 88.145936][ T5994] __netlink_deliver_tap+0x3cc/0x7f0 [ 88.151244][ T5994] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.156458][ T5994] netlink_deliver_tap+0x19d/0x1b0 [ 88.161604][ T5994] netlink_sendskb+0x68/0x140 [ 88.166361][ T5994] netlink_unicast+0x39d/0x990 [ 88.171164][ T5994] ? __pfx_netlink_unicast+0x10/0x10 [ 88.176513][ T5994] netlink_rcv_skb+0x262/0x430 [ 88.181296][ T5994] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.186785][ T5994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.192194][ T5994] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.197443][ T5994] netlink_unicast+0x7f6/0x990 [ 88.202239][ T5994] ? __pfx_netlink_unicast+0x10/0x10 [ 88.207543][ T5994] ? __virt_addr_valid+0x45f/0x530 [ 88.212676][ T5994] ? __phys_addr_symbol+0x2f/0x70 [ 88.217730][ T5994] ? __check_object_size+0x47a/0x730 [ 88.223042][ T5994] netlink_sendmsg+0x8e4/0xcb0 [ 88.227836][ T5994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.233144][ T5994] ? aa_sock_msg_perm+0x91/0x160 [ 88.238101][ T5994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.243402][ T5994] __sock_sendmsg+0x221/0x270 [ 88.248111][ T5994] ____sys_sendmsg+0x52a/0x7e0 [ 88.252899][ T5994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.258204][ T5994] ? __fget_files+0x2a/0x410 [ 88.262826][ T5994] ? __sys_sendmmsg+0x392/0x720 [ 88.267717][ T5994] ? __might_fault+0xaa/0x120 [ 88.272427][ T5994] __sys_sendmmsg+0x36a/0x720 [ 88.277137][ T5994] ? __pfx___sys_sendmmsg+0x10/0x10 [ 88.282366][ T5994] ? __pfx_lock_release+0x10/0x10 [ 88.287406][ T5994] ? kstrtouint_from_user+0x128/0x190 [ 88.292815][ T5994] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 88.298745][ T5994] ? ksys_write+0x22a/0x2b0 [ 88.303264][ T5994] ? __pfx_lock_release+0x10/0x10 [ 88.308309][ T5994] ? vfs_write+0x730/0xd30 [ 88.312835][ T5994] ? __mutex_unlock_slowpath+0x21e/0x790 [ 88.318512][ T5994] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.324513][ T5994] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.330863][ T5994] ? do_syscall_64+0x100/0x230 [ 88.335654][ T5994] __x64_sys_sendmmsg+0xa0/0xb0 [ 88.340618][ T5994] do_syscall_64+0xf3/0x230 [ 88.345234][ T5994] ? clear_bhb_loop+0x35/0x90 [ 88.349930][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.356074][ T5994] RIP: 0033:0x7f6f7c385d29 [ 88.360539][ T5994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.380175][ T5994] RSP: 002b:00007f6f7d1d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 88.388613][ T5994] RAX: ffffffffffffffda RBX: 00007f6f7c576080 RCX: 00007f6f7c385d29 [ 88.396688][ T5994] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 88.404674][ T5994] RBP: 00007f6f7d1d8090 R08: 0000000000000000 R09: 0000000000000000 [ 88.412660][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.420643][ T5994] R13: 0000000000000000 R14: 00007f6f7c576080 R15: 00007ffc6131fb98 [ 88.428644][ T5994] [ 88.469626][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 88.478776][ T5999] netlink: 18 bytes leftover after parsing attributes in process `syz.4.27'. [ 88.697025][ T6008] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 88.733342][ T6008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.763456][ T6010] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 88.779222][ T6012] sctp: [Deprecated]: syz.4.31 (pid 6012) Use of int in max_burst socket option. [ 88.779222][ T6012] Use struct sctp_assoc_value instead [ 88.805382][ T6016] sctp: [Deprecated]: syz.4.31 (pid 6016) Use of int in max_burst socket option. [ 88.805382][ T6016] Use struct sctp_assoc_value instead [ 88.858226][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 89.042011][ T6025] vlan2: entered allmulticast mode [ 89.070711][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 89.263614][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.40'. [ 89.311264][ T6033] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.39'. [ 89.736062][ T6056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.974057][ T6065] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 90.008045][ T6029] syz.3.37 (6029) used greatest stack depth: 18584 bytes left [ 90.110140][ T6069] netlink: 104 bytes leftover after parsing attributes in process `syz.0.51'. [ 90.121958][ T6069] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 90.205428][ T6071] netlink: 'syz.4.53': attribute type 7 has an invalid length. [ 90.217678][ T6071] netlink: 140 bytes leftover after parsing attributes in process `syz.4.53'. [ 90.245693][ T6074] netlink: 'syz.4.53': attribute type 7 has an invalid length. [ 90.308224][ T6076] batadv0: entered promiscuous mode [ 90.333155][ T6076] batadv0: left promiscuous mode [ 90.630733][ T6096] ipt_ECN: cannot use operation on non-tcp rule [ 90.831490][ T6104] FAULT_INJECTION: forcing a failure. [ 90.831490][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 90.860279][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.4.61 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 90.870974][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.881080][ T6104] Call Trace: [ 90.884422][ T6104] [ 90.887385][ T6104] dump_stack_lvl+0x241/0x360 [ 90.892169][ T6104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.897420][ T6104] ? __pfx__printk+0x10/0x10 [ 90.902162][ T6104] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 90.908386][ T6104] ? __pfx___might_resched+0x10/0x10 [ 90.913724][ T6104] ? aa_label_sk_perm+0x4f3/0x6c0 [ 90.918903][ T6104] should_fail_ex+0x3b0/0x4e0 [ 90.923636][ T6104] should_failslab+0xac/0x100 [ 90.928347][ T6104] kmem_cache_alloc_node_noprof+0x77/0x380 [ 90.934184][ T6104] ? __alloc_skb+0x1c3/0x440 [ 90.938823][ T6104] __alloc_skb+0x1c3/0x440 [ 90.943259][ T6104] ? __pfx___alloc_skb+0x10/0x10 [ 90.948221][ T6104] netlink_sendmsg+0x638/0xcb0 [ 90.953012][ T6104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.958320][ T6104] ? aa_sock_msg_perm+0x91/0x160 [ 90.963288][ T6104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.968596][ T6104] __sock_sendmsg+0x221/0x270 [ 90.973318][ T6104] ____sys_sendmsg+0x52a/0x7e0 [ 90.978123][ T6104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.983434][ T6104] ? __fget_files+0x2a/0x410 [ 90.988053][ T6104] ? __sys_sendmmsg+0x392/0x720 [ 90.992923][ T6104] ? __might_fault+0xaa/0x120 [ 90.997637][ T6104] __sys_sendmmsg+0x36a/0x720 [ 91.002351][ T6104] ? __pfx___sys_sendmmsg+0x10/0x10 [ 91.007578][ T6104] ? __pfx_lock_release+0x10/0x10 [ 91.012620][ T6104] ? kstrtouint_from_user+0x128/0x190 [ 91.018029][ T6104] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 91.024042][ T6104] ? ksys_write+0x22a/0x2b0 [ 91.028574][ T6104] ? __pfx_lock_release+0x10/0x10 [ 91.033680][ T6104] ? vfs_write+0x730/0xd30 [ 91.038120][ T6104] ? __mutex_unlock_slowpath+0x21e/0x790 [ 91.043793][ T6104] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.049796][ T6104] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.056141][ T6104] ? do_syscall_64+0x100/0x230 [ 91.060933][ T6104] __x64_sys_sendmmsg+0xa0/0xb0 [ 91.065806][ T6104] do_syscall_64+0xf3/0x230 [ 91.070375][ T6104] ? clear_bhb_loop+0x35/0x90 [ 91.075071][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.080987][ T6104] RIP: 0033:0x7f3e17b85d29 [ 91.085545][ T6104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.105166][ T6104] RSP: 002b:00007f3e18a63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.113597][ T6104] RAX: ffffffffffffffda RBX: 00007f3e17d75fa0 RCX: 00007f3e17b85d29 [ 91.121592][ T6104] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 91.129629][ T6104] RBP: 00007f3e18a63090 R08: 0000000000000000 R09: 0000000000000000 [ 91.137615][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.145602][ T6104] R13: 0000000000000000 R14: 00007f3e17d75fa0 R15: 00007ffed886d888 [ 91.153770][ T6104] [ 91.240072][ T6111] sctp: [Deprecated]: syz.3.64 (pid 6111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.240072][ T6111] Use struct sctp_sack_info instead [ 91.362802][ T6117] netlink: 'syz.1.67': attribute type 8 has an invalid length. [ 91.619035][ T6131] syz.0.72 uses obsolete (PF_INET,SOCK_PACKET) [ 91.680211][ T6134] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.714632][ T6134] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 91.951358][ T6146] warning: `syz.3.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.408717][ T911] cfg80211: failed to load regulatory.db [ 92.652389][ T6176] sctp: [Deprecated]: syz.0.85 (pid 6176) Use of int in maxseg socket option. [ 92.652389][ T6176] Use struct sctp_assoc_value instead [ 92.697489][ T6180] syz_tun: entered promiscuous mode [ 92.709854][ T6180] batadv_slave_0: entered promiscuous mode [ 93.127726][ T6201] __nla_validate_parse: 5 callbacks suppressed [ 93.127748][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 93.276357][ T6210] netlink: 'syz.4.92': attribute type 10 has an invalid length. [ 93.321663][ T6210] macvlan0: entered promiscuous mode [ 93.328521][ T6210] macvlan0: entered allmulticast mode [ 93.353140][ T6210] veth1_vlan: entered allmulticast mode [ 93.370215][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 93.381003][ T6210] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 93.461500][ T6212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.510078][ T6214] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 93.558268][ T6202] netlink: 'syz.0.93': attribute type 7 has an invalid length. [ 93.566699][ T6202] netlink: 15 bytes leftover after parsing attributes in process `syz.0.93'. [ 93.584553][ T6202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.93'. [ 93.603864][ T6202] netlink: 872 bytes leftover after parsing attributes in process `syz.0.93'. [ 93.614360][ T6202] netlink: 'syz.0.93': attribute type 7 has an invalid length. [ 93.625136][ T6202] netlink: 15 bytes leftover after parsing attributes in process `syz.0.93'. [ 94.699406][ T6262] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 95.199863][ T6296] netlink: 668 bytes leftover after parsing attributes in process `syz.0.112'. [ 95.264135][ T6296] netlink: 668 bytes leftover after parsing attributes in process `syz.0.112'. [ 95.524361][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 95.567951][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 95.759383][ T6325] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 96.050077][ T6343] gtp0: entered promiscuous mode [ 96.055323][ T6343] gtp0: entered allmulticast mode [ 97.621850][ T6420] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 97.690306][ T6420] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.852164][ T6428] syzkaller1: entered promiscuous mode [ 97.857934][ T6428] syzkaller1: entered allmulticast mode [ 97.894479][ T6428] (unnamed net_device) (uninitialized): option ad_select: invalid value (95) [ 98.044980][ T6435] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 98.122563][ T6436] syzkaller1: entered promiscuous mode [ 98.131326][ T6436] syzkaller1: entered allmulticast mode [ 98.156369][ T6435] xt_socket: unknown flags 0x50 [ 98.452876][ T6441] __nla_validate_parse: 9 callbacks suppressed [ 98.452900][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 98.475166][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 98.485894][ T6441] netlink: 'syz.4.147': attribute type 13 has an invalid length. [ 99.359063][ T6459] netlink: 32 bytes leftover after parsing attributes in process `syz.4.152'. [ 99.697711][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4cd400: rx timeout, send abort [ 99.707438][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4cd000: rx timeout, send abort [ 99.716059][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e4cd400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.732252][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e4cd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 100.280478][ T6490] geneve2: entered promiscuous mode [ 100.292219][ T6490] geneve2: entered allmulticast mode [ 100.429849][ T6504] x_tables: unsorted entry at hook 1 [ 100.447518][ T6506] netlink: 312 bytes leftover after parsing attributes in process `syz.3.165'. [ 100.458114][ T6504] netlink: 312 bytes leftover after parsing attributes in process `syz.3.165'. [ 100.641613][ T6515] netlink: 'syz.1.167': attribute type 11 has an invalid length. [ 100.675323][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 100.976891][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 101.284797][ T6551] tipc: Started in network mode [ 101.292494][ T6551] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 101.303974][ T6551] tipc: Enabling of bearer rejected, failed to enable media [ 101.360080][ T6553] : entered promiscuous mode [ 101.439482][ T6559] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 101.474205][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 101.484336][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 101.494046][ T6559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.181'. [ 101.506494][ T6558] syzkaller0: entered promiscuous mode [ 101.512305][ T6558] syzkaller0: entered allmulticast mode [ 101.683740][ T6566] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 102.087620][ T6580] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 102.159430][ C1] Illegal XDP return value 16128 on prog (id 29) dev lo, expect packet loss! [ 102.368051][ T6592] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 102.387348][ T6592] team0: Device ipvlan3 is already an upper device of the team interface [ 102.547253][ T6604] netlink: 'syz.1.199': attribute type 18 has an invalid length. [ 102.571691][ T6599] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 103.349365][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 103.360092][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 103.369290][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 103.409053][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 103.418275][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 103.426829][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.475163][ T6644] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 103.773919][ T6653] netlink: 'syz.1.218': attribute type 9 has an invalid length. [ 103.829500][ T6653] __nla_validate_parse: 9 callbacks suppressed [ 103.829521][ T6653] netlink: 48 bytes leftover after parsing attributes in process `syz.1.218'. [ 103.847501][ T6653] netlink: 6 bytes leftover after parsing attributes in process `syz.1.218'. [ 104.083642][ T6633] chnl_net:caif_netlink_parms(): no params data found [ 104.107856][ T6669] sctp: [Deprecated]: syz.4.221 (pid 6669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.107856][ T6669] Use struct sctp_sack_info instead [ 104.205968][ T29] audit: type=1107 audit(1735242034.552:2): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='†­+&¾È@‚%ºpr·ßDàõCbjsšòæ+Ãm±î²G¾‰Èßßö”d¬ŸèùÏ' [ 104.396396][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 104.449075][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 104.469198][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 104.477305][ T6633] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.478256][ T6692] netlink: 'syz.3.224': attribute type 14 has an invalid length. [ 104.497250][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.538848][ T6633] bridge_slave_0: entered allmulticast mode [ 104.567625][ T6633] bridge_slave_0: entered promiscuous mode [ 104.589202][ T6633] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.618657][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.646371][ T6633] bridge_slave_1: entered allmulticast mode [ 104.676401][ T6633] bridge_slave_1: entered promiscuous mode [ 104.679532][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 104.787157][ T6633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.827818][ T6633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.877876][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 104.887720][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 104.938220][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 104.943672][ T6633] team0: Port device team_slave_0 added [ 104.973103][ T6633] team0: Port device team_slave_1 added [ 105.028150][ T6716] netlink: 'syz.3.232': attribute type 33 has an invalid length. [ 105.036997][ T6633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.045031][ T6716] netlink: 152 bytes leftover after parsing attributes in process `syz.3.232'. [ 105.056086][ T6633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.105419][ T6633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.156122][ T6633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.194078][ T6633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.229236][ T6633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.382749][ T6633] hsr_slave_0: entered promiscuous mode [ 105.439364][ T6633] hsr_slave_1: entered promiscuous mode [ 105.465836][ T6633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.482674][ T6633] Cannot create hsr debugfs directory [ 105.508805][ T5845] Bluetooth: hci5: command tx timeout [ 105.746432][ T6743] raw_sendmsg: syz.4.241 forgot to set AF_INET. Fix it! [ 105.909933][ T6633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.920450][ T6633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.938692][ T6633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.949827][ T6633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.030394][ T6633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.050235][ T6633] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.061673][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.068849][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.087882][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.095070][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.256330][ T6633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.444200][ T6633] veth0_vlan: entered promiscuous mode [ 106.455987][ T6633] veth1_vlan: entered promiscuous mode [ 106.484427][ T6633] veth0_macvtap: entered promiscuous mode [ 106.496276][ T6633] veth1_macvtap: entered promiscuous mode [ 106.512081][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.523949][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.534511][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.545135][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.555098][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.565752][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.575716][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.587468][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.597722][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.608355][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.620247][ T6633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.637498][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.648179][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.658114][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.669779][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.679703][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.691164][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.701542][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.712032][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.721930][ T6633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.732426][ T6633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.743585][ T6633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.754433][ T6633] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.763514][ T6633] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.772342][ T6633] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.781628][ T6633] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.854613][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.869313][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.900719][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.909922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.579828][ T5845] Bluetooth: hci5: command tx timeout [ 109.658858][ T5845] Bluetooth: hci5: command tx timeout [ 111.738560][ T5845] Bluetooth: hci5: command tx timeout [ 123.213511][ T6785] __nla_validate_parse: 1 callbacks suppressed [ 123.213556][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 123.255570][ T6790] netlink: 92 bytes leftover after parsing attributes in process `syz.4.248'. [ 123.277538][ T6791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 123.318919][ T6795] netlink: 92 bytes leftover after parsing attributes in process `syz.4.248'. [ 123.619974][ C1] Unknown status report in ack skb [ 123.637285][ T6789] SET target dimension over the limit! [ 123.947662][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 123.979206][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 124.141979][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.259'. [ 124.155009][ T6829] netlink: 96 bytes leftover after parsing attributes in process `syz.4.259'. [ 124.170278][ T6831] netlink: 'syz.3.260': attribute type 10 has an invalid length. [ 124.229366][ T6831] team0: Device hsr_slave_0 failed to register rx_handler [ 124.485521][ T6842] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 125.002315][ T6867] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 125.049323][ T6867] IPVS: set_ctl: invalid protocol: 8 172.20.20.51:20000 [ 125.171567][ T6839] netlink: 'syz.5.262': attribute type 5 has an invalid length. [ 125.198304][ T6839] netlink: 140 bytes leftover after parsing attributes in process `syz.5.262'. [ 125.770800][ T6889] x_tables: duplicate underflow at hook 3 [ 125.820093][ T6889] xt_bpf: check failed: parse error [ 126.491172][ T6909] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 126.719637][ T6909] team0: Port device netdevsim0 added [ 126.916506][ T6907] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 126.938195][ T6907] team0: Device ipvlan1 failed to register rx_handler [ 126.968712][ T6909] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 128.109953][ T6969] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 128.319035][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 128.337060][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 128.353637][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 128.369527][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 128.378801][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 128.387959][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 128.487973][ T6986] ip6gre1: entered allmulticast mode [ 129.269614][ T7009] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 129.595116][ T7020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 129.618026][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.312'. [ 129.647203][ T7027] netlink: 48 bytes leftover after parsing attributes in process `syz.5.313'. [ 129.717732][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 129.999181][ T7033] ipvlan0: mtu less than device minimum [ 130.148614][ T7055] ip6t_srh: unknown srh invflags A757 [ 131.943341][ T7064] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 133.115865][ T7091] netlink: 'syz.5.332': attribute type 1 has an invalid length. [ 133.129763][ T7091] netlink: 'syz.5.332': attribute type 2 has an invalid length. [ 133.296207][ T7126] sctp: [Deprecated]: syz.0.343 (pid 7126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.296207][ T7126] Use struct sctp_sack_info instead [ 133.361928][ T7129] __nla_validate_parse: 6 callbacks suppressed [ 133.361952][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.344'. [ 133.407899][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.415180][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.504116][ T7135] netlink: set zone limit has 8 unknown bytes [ 133.598079][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.346'. [ 133.611505][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.346'. [ 133.835247][ T7144] netlink: 'syz.5.351': attribute type 1 has an invalid length. [ 133.843126][ T7144] netlink: 224 bytes leftover after parsing attributes in process `syz.5.351'. [ 133.865663][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'. [ 133.966569][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 134.095185][ T7149] netlink: 'syz.5.353': attribute type 3 has an invalid length. [ 134.109471][ T7157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.355'. [ 134.438197][ T7175] Bluetooth: MGMT ver 1.23 [ 134.841435][ T7191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.366'. [ 135.116832][ T7202] team_slave_0: entered promiscuous mode [ 135.122970][ T7202] team_slave_1: entered promiscuous mode [ 135.150056][ T7202] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.377372][ T7220] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.376'. [ 135.382732][ T7223] netlink: 'syz.5.377': attribute type 1 has an invalid length. [ 135.387308][ T7220] netlink: zone id is out of range [ 135.399949][ T7220] netlink: zone id is out of range [ 135.405138][ T7220] netlink: zone id is out of range [ 135.410589][ T7220] netlink: get zone limit has 8 unknown bytes [ 135.577770][ T7226] netlink: 1036 bytes leftover after parsing attributes in process `syz.5.378'. [ 135.600601][ T7226] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 136.423313][ T7263] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 136.470898][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.479494][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.521691][ T7263] bridge0: entered allmulticast mode [ 136.542965][ T7264] netlink: 'syz.3.386': attribute type 5 has an invalid length. [ 136.827936][ T7280] Bluetooth: MGMT ver 1.23 [ 136.857387][ T7277] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 138.194437][ T7329] tipc: Started in network mode [ 138.235273][ T7329] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 138.259703][ T7329] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 138.287243][ T7329] tipc: Enabled bearer , priority 10 [ 138.553532][ T7343] __nla_validate_parse: 3 callbacks suppressed [ 138.553554][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'. [ 138.587945][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'. [ 139.193567][ T7359] syzkaller0: entered allmulticast mode [ 139.264796][ T53] syzkaller0: tun_net_xmit 76 [ 139.275219][ T53] syzkaller0: tun_net_xmit 48 [ 139.284481][ T7359] syzkaller0: create flow: hash 174959878 index 1 [ 139.293642][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.421'. [ 139.294357][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.421'. [ 139.312280][ T911] syzkaller0: tun_net_xmit 76 [ 139.398510][ T5885] tipc: Node number set to 1 [ 139.535863][ T7373] FAULT_INJECTION: forcing a failure. [ 139.535863][ T7373] name failslab, interval 1, probability 0, space 0, times 0 [ 139.565894][ T7373] CPU: 1 UID: 0 PID: 7373 Comm: syz.4.422 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 139.576594][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.586697][ T7373] Call Trace: [ 139.590018][ T7373] [ 139.592988][ T7373] dump_stack_lvl+0x241/0x360 [ 139.597745][ T7373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.603003][ T7373] ? __pfx__printk+0x10/0x10 [ 139.607650][ T7373] ? kmem_cache_alloc_noprof+0x48/0x380 [ 139.613281][ T7373] ? __pfx___might_resched+0x10/0x10 [ 139.618602][ T7373] should_fail_ex+0x3b0/0x4e0 [ 139.623319][ T7373] should_failslab+0xac/0x100 [ 139.628020][ T7373] ? getname_flags+0xb7/0x540 [ 139.632719][ T7373] kmem_cache_alloc_noprof+0x70/0x380 [ 139.638117][ T7373] getname_flags+0xb7/0x540 [ 139.642644][ T7373] do_sys_openat2+0xd2/0x1d0 [ 139.647264][ T7373] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.652478][ T7373] ? __fget_files+0x2a/0x410 [ 139.657093][ T7373] ? __fget_files+0x2a/0x410 [ 139.661716][ T7373] __x64_sys_openat+0x247/0x2a0 [ 139.666598][ T7373] ? __pfx___x64_sys_openat+0x10/0x10 [ 139.671998][ T7373] ? do_syscall_64+0x100/0x230 [ 139.676788][ T7373] ? do_syscall_64+0xb6/0x230 [ 139.681490][ T7373] do_syscall_64+0xf3/0x230 [ 139.686046][ T7373] ? clear_bhb_loop+0x35/0x90 [ 139.690742][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.696741][ T7373] RIP: 0033:0x7f3e17b85d29 [ 139.701168][ T7373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.720805][ T7373] RSP: 002b:00007f3e18a63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.729260][ T7373] RAX: ffffffffffffffda RBX: 00007f3e17d75fa0 RCX: 00007f3e17b85d29 [ 139.737250][ T7373] RDX: 000000000000275a RSI: 0000000020000280 RDI: ffffffffffffff9c [ 139.745234][ T7373] RBP: 00007f3e18a63090 R08: 0000000000000000 R09: 0000000000000000 [ 139.753222][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.761210][ T7373] R13: 0000000000000000 R14: 00007f3e17d75fa0 R15: 00007ffed886d888 [ 139.769245][ T7373] [ 139.777751][ T7371] syzkaller0: delete flow: hash 174959878 index 1 [ 140.573892][ T7378] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.651325][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 140.675369][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 140.930889][ T7383] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.425'. [ 140.958600][ T7383] netlink: zone id is out of range [ 140.963891][ T7383] netlink: zone id is out of range [ 140.969300][ T7383] netlink: zone id is out of range [ 140.978539][ T7383] netlink: zone id is out of range [ 140.983718][ T7383] netlink: zone id is out of range [ 140.999659][ T7383] netlink: zone id is out of range [ 141.004858][ T7383] netlink: zone id is out of range [ 141.011314][ T7383] netlink: get zone limit has 8 unknown bytes [ 141.199634][ T7390] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 141.219539][ T7390] netlink: 'syz.4.427': attribute type 2 has an invalid length. [ 141.231179][ T7390] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 141.245943][ T7390] netlink: 'syz.4.427': attribute type 2 has an invalid length. [ 143.634571][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 144.291235][ T7414] FAULT_INJECTION: forcing a failure. [ 144.291235][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.344136][ T7414] CPU: 1 UID: 0 PID: 7414 Comm: syz.0.434 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 144.354823][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.364928][ T7414] Call Trace: [ 144.368237][ T7414] [ 144.371204][ T7414] dump_stack_lvl+0x241/0x360 [ 144.375932][ T7414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.381170][ T7414] ? __pfx__printk+0x10/0x10 [ 144.385823][ T7414] should_fail_ex+0x3b0/0x4e0 [ 144.390561][ T7414] strncpy_from_user+0x36/0x270 [ 144.395439][ T7414] getname_flags+0xf1/0x540 [ 144.399974][ T7414] do_sys_openat2+0xd2/0x1d0 [ 144.404587][ T7414] ? __pfx_do_sys_openat2+0x10/0x10 [ 144.409804][ T7414] ? __fget_files+0x2a/0x410 [ 144.414419][ T7414] ? __fget_files+0x2a/0x410 [ 144.419031][ T7414] __x64_sys_openat+0x247/0x2a0 [ 144.423903][ T7414] ? __pfx___x64_sys_openat+0x10/0x10 [ 144.429298][ T7414] ? do_syscall_64+0x100/0x230 [ 144.434085][ T7414] ? do_syscall_64+0xb6/0x230 [ 144.438789][ T7414] do_syscall_64+0xf3/0x230 [ 144.443313][ T7414] ? clear_bhb_loop+0x35/0x90 [ 144.448004][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.453919][ T7414] RIP: 0033:0x7f9403b85d29 [ 144.458351][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.477975][ T7414] RSP: 002b:00007f94019d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.486518][ T7414] RAX: ffffffffffffffda RBX: 00007f9403d76080 RCX: 00007f9403b85d29 [ 144.494504][ T7414] RDX: 000000000000275a RSI: 0000000020000280 RDI: ffffffffffffff9c [ 144.502514][ T7414] RBP: 00007f94019d5090 R08: 0000000000000000 R09: 0000000000000000 [ 144.510498][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.518499][ T7414] R13: 0000000000000000 R14: 00007f9403d76080 R15: 00007ffdbd1473e8 [ 144.526504][ T7414] [ 144.666720][ T7421] ip6t_srh: unknown srh invflags A757 [ 144.834095][ T7432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.439'. [ 144.848511][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 144.870273][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 144.892694][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 145.698582][ T5886] IPVS: starting estimator thread 0... [ 145.808782][ T7467] IPVS: using max 20 ests per chain, 48000 per kthread [ 146.160716][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'. [ 146.285784][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'. [ 146.294856][ T7501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.462'. [ 146.462509][ T7509] vlan1: entered promiscuous mode [ 146.572313][ T7508] vlan1: left promiscuous mode [ 146.742246][ T7518] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 146.767072][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.775576][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.869902][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.877194][ T7518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.885586][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.893577][ T7518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.921047][ T7518] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 146.967343][ T7530] netlink: 'syz.5.471': attribute type 2 has an invalid length. [ 147.684817][ T7561] netlink: 'syz.4.481': attribute type 10 has an invalid length. [ 147.840786][ T7561] syz_tun: entered promiscuous mode [ 147.874240][ T7561] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.379862][ T7592] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 148.474816][ T7592] tipc: Started in network mode [ 148.480126][ T7592] tipc: Node identity 7f000001, cluster identity 4711 [ 148.488262][ T7592] tipc: Enabled bearer , priority 10 [ 148.511480][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 148.521497][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 148.570914][ T7598] geneve2: entered promiscuous mode [ 148.659102][ T7603] __nla_validate_parse: 1 callbacks suppressed [ 148.659126][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 148.675435][ T7603] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 148.687393][ T7600] veth0: entered promiscuous mode [ 148.811859][ T7600] veth0: left promiscuous mode [ 148.823171][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 148.859306][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 148.918059][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 148.938609][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 148.972686][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 149.099533][ T7622] netlink: 'syz.5.502': attribute type 32 has an invalid length. [ 149.476244][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.505'. [ 149.515955][ T7633] netlink: 48 bytes leftover after parsing attributes in process `syz.3.505'. [ 149.568573][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.506'. [ 149.598505][ T5885] tipc: Node number set to 2130706433 [ 149.745601][ T7641] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 149.876580][ T7644] SET target dimension over the limit! [ 150.137181][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 150.169430][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 150.180177][ T7649] bridge_slave_1: left allmulticast mode [ 150.202850][ T7649] bridge_slave_1: left promiscuous mode [ 150.228960][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.264905][ T7649] bridge_slave_0: left allmulticast mode [ 150.272148][ T7649] bridge_slave_0: left promiscuous mode [ 150.292690][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.083289][ T7658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.091316][ T7658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.109961][ T7658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.118389][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 151.132519][ T7658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.186725][ T7674] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 151.256262][ T7676] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 151.847678][ T7687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.216948][ T7707] bond1: entered allmulticast mode [ 152.293464][ T7724] netlink: 'syz.0.532': attribute type 29 has an invalid length. [ 152.320052][ T7724] netlink: 'syz.0.532': attribute type 29 has an invalid length. [ 152.328573][ T7725] netlink: 'syz.0.532': attribute type 29 has an invalid length. [ 152.903855][ T7747] xfrm1: entered promiscuous mode [ 152.920705][ T7747] xfrm1: entered allmulticast mode [ 153.214371][ T7752] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 153.255451][ T7754] netdevsim netdevsim5: Firmware load for './file0/../file0' refused, path contains '..' component [ 153.302275][ T7752] No such timeout policy "syz0" [ 153.711221][ T7766] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.734569][ T7766] xt_cgroup: xt_cgroup: no path or classid specified [ 153.950234][ T7776] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 154.026442][ T7785] trusted_key: syz.0.553 sent an empty control message without MSG_MORE. [ 154.254915][ T7790] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 154.855958][ T7825] SET target dimension over the limit! [ 155.113536][ T7839] __nla_validate_parse: 12 callbacks suppressed [ 155.113559][ T7839] netlink: 256 bytes leftover after parsing attributes in process `syz.3.570'. [ 155.347056][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 155.392268][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 155.402382][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 155.580155][ T7860] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 155.668961][ T7860] netlink: 44 bytes leftover after parsing attributes in process `syz.1.576'. [ 155.828924][ T7868] "syz.3.579" (7868) uses obsolete ecb(arc4) skcipher [ 156.069386][ T7879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.581'. [ 156.083185][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 156.101804][ T7879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.581'. [ 156.118436][ T7879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.581'. [ 156.246932][ T7884] netlink: 'syz.5.584': attribute type 1 has an invalid length. [ 156.645330][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.589'. [ 156.662747][ T7903] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 157.188269][ T7924] netlink: 'syz.1.597': attribute type 2 has an invalid length. [ 157.189469][ T7926] nbd: must specify an index to disconnect [ 157.203406][ T7924] netlink: 'syz.1.597': attribute type 8 has an invalid length. [ 157.479320][ T7938] netlink: 'syz.3.603': attribute type 12 has an invalid length. [ 157.639923][ T7947] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 157.698155][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.728986][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.019741][ T7962] tipc: Started in network mode [ 158.024686][ T7962] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 158.037473][ T7962] tipc: Enabling of bearer rejected, failed to enable media [ 158.129922][ T7962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.191102][ T7969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.197660][ T7980] netlink: 'syz.1.615': attribute type 12 has an invalid length. [ 158.613989][ T9] IPVS: starting estimator thread 0... [ 158.728572][ T8004] IPVS: using max 20 ests per chain, 48000 per kthread [ 158.822649][ T8010] netlink: 'syz.1.625': attribute type 2 has an invalid length. [ 159.467288][ T8047] sctp: [Deprecated]: syz.5.638 (pid 8047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.467288][ T8047] Use struct sctp_sack_info instead [ 159.612440][ T8050] netlink: 'syz.4.637': attribute type 10 has an invalid length. [ 159.703298][ T8050] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.722319][ T8065] team0: entered promiscuous mode [ 159.727469][ T8065] team_slave_0: entered promiscuous mode [ 159.734433][ T8065] team_slave_1: entered promiscuous mode [ 159.745905][ T8065] batadv_slave_1: entered promiscuous mode [ 160.373053][ T8103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.455425][ T8106] __nla_validate_parse: 17 callbacks suppressed [ 160.455447][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'. [ 160.698662][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.704986][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 160.736386][ T8070] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 161.159377][ T8136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.667'. [ 161.569052][ T8153] netlink: 'syz.0.673': attribute type 7 has an invalid length. [ 161.592467][ T8153] netlink: 'syz.0.673': attribute type 8 has an invalid length. [ 161.619157][ T8153] netlink: 220 bytes leftover after parsing attributes in process `syz.0.673'. [ 161.634420][ T8162] netlink: 'syz.5.675': attribute type 4 has an invalid length. [ 161.660011][ T8153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.683830][ T8162] netlink: 'syz.5.675': attribute type 4 has an invalid length. [ 161.690001][ T8169] pim6reg: entered allmulticast mode [ 161.817344][ T8191] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.868561][ T8192] netlink: 'syz.3.679': attribute type 10 has an invalid length. [ 161.985739][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.023893][ T8192] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 162.058674][ T8192] syz.3.679 (8192) used greatest stack depth: 18096 bytes left [ 162.529046][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 162.597350][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.692'. [ 162.619442][ T8223] netlink: 'syz.0.690': attribute type 1 has an invalid length. [ 162.641706][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 162.715194][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 162.725035][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.690'. [ 162.764690][ T8223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.991379][ T8243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.698'. [ 163.060629][ T8249] veth0: entered promiscuous mode [ 163.074463][ T8249] veth0: left promiscuous mode [ 163.331926][ T8262] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 163.376292][ T8269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.707'. [ 163.623935][ T8277] tipc: New replicast peer: 255.255.255.255 [ 163.634728][ T8277] tipc: Enabled bearer , priority 10 [ 163.644349][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'. [ 163.683967][ T8283] netlink: 'syz.4.710': attribute type 29 has an invalid length. [ 163.716788][ T8279] netlink: 'syz.4.710': attribute type 29 has an invalid length. [ 163.783336][ T8289] tipc: Enabled bearer , priority 0 [ 163.823991][ T8289] syzkaller0: entered promiscuous mode [ 163.830380][ T8289] syzkaller0: entered allmulticast mode [ 163.837573][ T8289] tipc: Resetting bearer [ 163.851654][ T8288] tipc: Resetting bearer [ 164.224594][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 164.842914][ T5886] tipc: Node number set to 4269801488 [ 165.470299][ T8288] tipc: Disabling bearer [ 165.496041][ T8297] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 165.668171][ T8307] __nla_validate_parse: 4 callbacks suppressed [ 165.668193][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.718'. [ 165.745488][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 165.764351][ T8313] netlink: 'syz.3.720': attribute type 3 has an invalid length. [ 165.779682][ T8310] netlink: 21 bytes leftover after parsing attributes in process `syz.1.719'. [ 165.815136][ T8315] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 165.937308][ T8321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.013786][ T8321] syzkaller0: entered promiscuous mode [ 166.020235][ T8321] syzkaller0: entered allmulticast mode [ 168.522812][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.738'. [ 168.563591][ T8374] netlink: 36 bytes leftover after parsing attributes in process `syz.5.737'. [ 168.618054][ T8374] bridge0: left allmulticast mode [ 168.716842][ T8381] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 168.776373][ T8385] netlink: 76 bytes leftover after parsing attributes in process `syz.0.740'. [ 168.812958][ T8381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.144958][ T8404] x_tables: duplicate underflow at hook 1 [ 169.226707][ T8410] xt_policy: too many policy elements [ 169.528205][ T8422] sctp: [Deprecated]: syz.5.757 (pid 8422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.528205][ T8422] Use struct sctp_sack_info instead [ 169.548525][ T8426] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 169.596982][ T8419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.656413][ T8426] delete_channel: no stack [ 169.814451][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.760'. [ 169.896504][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.760'. [ 169.916125][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.760'. [ 169.936688][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 170.597123][ T8490] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 170.777183][ T8496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 170.854700][ T8496] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 170.890840][ T8496] nbd: couldn't find a device at index 20 [ 170.909609][ T8506] netlink: 'syz.5.778': attribute type 1 has an invalid length. [ 170.928842][ T8496] netlink: 'syz.3.775': attribute type 7 has an invalid length. [ 171.258423][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.507533][ T8542] netlink: 'syz.5.789': attribute type 4 has an invalid length. [ 171.584677][ T8545] x_tables: duplicate underflow at hook 4 [ 171.618836][ T8546] netlink: 'syz.5.789': attribute type 4 has an invalid length. [ 171.736218][ T8549] __nla_validate_parse: 4 callbacks suppressed [ 171.736239][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'. [ 172.298651][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.419399][ T8592] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 172.427602][ T8592] netlink: 'syz.4.804': attribute type 4 has an invalid length. [ 172.435810][ T8592] netlink: 188 bytes leftover after parsing attributes in process `syz.4.804'. [ 172.450476][ T8592] NCSI netlink: No device for ifindex 458760 [ 172.550543][ T8599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.702960][ T8609] xt_ecn: cannot match TCP bits for non-tcp packets [ 172.871124][ T8615] netlink: 'syz.1.810': attribute type 2 has an invalid length. [ 173.338501][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.519951][ T8648] ip6t_srh: unknown srh invflags A757 [ 173.587330][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 173.760962][ T8661] xt_l2tp: invalid flags combination: 4 [ 173.791592][ T8661] ebt_limit: overflow, try lower: 570423552/2483027968 [ 174.116795][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.831'. [ 174.170424][ T8675] tipc: Enabling of bearer rejected, media not registered [ 174.221737][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.263376][ T8681] batadv_slave_1: entered promiscuous mode [ 174.278849][ T8681] batadv_slave_1: entered allmulticast mode [ 174.284104][ T8683] validate_nla: 1 callbacks suppressed [ 174.284126][ T8683] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 174.378413][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 174.412326][ T8683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.491035][ T8688] bond1: (slave gretap1): making interface the new active one [ 174.510772][ T8688] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 174.721635][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 174.801203][ T8711] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 175.126315][ T8729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.848'. [ 175.291128][ T8742] netlink: 'syz.5.851': attribute type 11 has an invalid length. [ 175.300151][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 175.372777][ T8742] netlink: 'syz.5.851': attribute type 10 has an invalid length. [ 175.418412][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.434380][ T8742] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 175.453318][ T8742] team0: Port device netdevsim0 added [ 175.489261][ T8747] netlink: 'syz.0.854': attribute type 5 has an invalid length. [ 175.686664][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.857'. [ 175.899280][ T8774] x_tables: duplicate underflow at hook 1 [ 176.096079][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 176.253558][ T8778] sctp: [Deprecated]: syz.1.860 (pid 8778) Use of int in maxseg socket option. [ 176.253558][ T8778] Use struct sctp_assoc_value instead [ 176.425319][ T8803] netlink: 'syz.5.868': attribute type 10 has an invalid length. [ 176.456689][ T8803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.463708][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.465606][ T8805] netlink: 56 bytes leftover after parsing attributes in process `syz.3.867'. [ 176.480615][ T8805] netlink: 'syz.3.867': attribute type 2 has an invalid length. [ 176.514957][ T8803] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 176.973941][ T8821] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 176.984495][ T8821] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 177.226645][ T8838] hsr0: entered promiscuous mode [ 177.300784][ T8839] __nla_validate_parse: 4 callbacks suppressed [ 177.300806][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.880'. [ 177.385574][ T8847] netlink: 'syz.0.881': attribute type 11 has an invalid length. [ 177.418067][ T8850] ebt_among: dst integrity fail: 101 [ 177.498414][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.186209][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.892'. [ 178.231097][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.892'. [ 178.250074][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 178.262913][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 178.269508][ T8870] netlink: 'syz.5.892': attribute type 7 has an invalid length. [ 178.471012][ T8880] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.538410][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.720692][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 179.314979][ T8926] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 179.424328][ T8933] netlink: 'syz.4.909': attribute type 12 has an invalid length. [ 179.441644][ T5834] Bluetooth: hci5: link tx timeout [ 179.447318][ T5834] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.578462][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.770122][ T8951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.913'. [ 179.978112][ T8961] No such timeout policy "syz0" [ 179.994968][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'. [ 180.556012][ T8991] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 180.574820][ T8991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.925'. [ 180.602393][ T8991] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.618441][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.683372][ T8996] tap0: tun_chr_ioctl cmd 1074025678 [ 180.704549][ T8996] tap0: group set to 0 [ 180.791095][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.930'. [ 181.141535][ T9022] netlink: 'syz.3.936': attribute type 24 has an invalid length. [ 181.182039][ T9026] netlink: 'syz.0.937': attribute type 7 has an invalid length. [ 181.465887][ T9033] bond3: entered promiscuous mode [ 181.471706][ T9033] bond3: entered allmulticast mode [ 181.498474][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 181.658474][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.966170][ T9072] tls_set_device_offload_rx: netdev not found [ 182.331807][ T9076] __nla_validate_parse: 75 callbacks suppressed [ 182.331833][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.953'. [ 182.619908][ T9101] netlink: 'syz.5.962': attribute type 21 has an invalid length. [ 182.641309][ T9101] netlink: 128 bytes leftover after parsing attributes in process `syz.5.962'. [ 182.675836][ T9101] netlink: 3 bytes leftover after parsing attributes in process `syz.5.962'. [ 182.698403][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.871385][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.965'. [ 182.939103][ T9114] netlink: 'syz.4.965': attribute type 8 has an invalid length. [ 182.998132][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.968'. [ 183.097254][ T9131] tipc: Enabling of bearer rejected, failed to enable media [ 183.251974][ T9137] netlink: 'syz.5.972': attribute type 2 has an invalid length. [ 183.350859][ T9151] netlink: 'syz.5.972': attribute type 1 has an invalid length. [ 183.587194][ T9160] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 183.650011][ T9160] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.658881][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 183.738505][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.747054][ T9172] netlink: 72 bytes leftover after parsing attributes in process `syz.1.980'. [ 183.811467][ T9176] netlink: 104 bytes leftover after parsing attributes in process `syz.4.984'. [ 183.958249][ T9183] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.985'. [ 183.977217][ T9183] openvswitch: netlink: Flow actions attr not present in new flow. [ 184.004899][ T9183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.063787][ T9185] netlink: 'syz.0.987': attribute type 11 has an invalid length. [ 184.098537][ T9185] netlink: 224 bytes leftover after parsing attributes in process `syz.0.987'. [ 184.201253][ T9194] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 184.535178][ T9212] netlink: 504 bytes leftover after parsing attributes in process `syz.4.995'. [ 184.571232][ T9213] dvmrp0: entered allmulticast mode [ 184.769301][ T9225] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 184.778462][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.035492][ T9242] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 185.069069][ T9242] tunl0: entered promiscuous mode [ 185.084585][ T9242] netlink: 'syz.5.1005': attribute type 3 has an invalid length. [ 185.253740][ T9250] x_tables: duplicate underflow at hook 3 [ 185.417322][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079bcd800: rx timeout, send abort [ 185.445901][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079bcc800: rx timeout, send abort [ 185.471491][ T9257] batadv_slave_1: entered promiscuous mode [ 185.657172][ T9256] batadv_slave_1: left promiscuous mode [ 185.818501][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.925795][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079bcd800: abort rx timeout. Force session deactivation [ 185.954379][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079bcc800: abort rx timeout. Force session deactivation [ 186.122443][ T9291] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 186.501951][ T9310] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 186.721187][ T9313] tap0: tun_chr_ioctl cmd 1074025676 [ 186.735561][ T9313] tap0: owner set to 0 [ 186.742962][ T9313] tap0: tun_chr_ioctl cmd 35108 [ 186.858421][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.051086][ T9331] lo: entered allmulticast mode [ 187.086893][ T9331] lo: left allmulticast mode [ 187.138817][ T9333] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 187.354430][ T9349] __nla_validate_parse: 8 callbacks suppressed [ 187.354452][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 187.396297][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'. [ 187.421974][ T9349] netlink: 'syz.1.1040': attribute type 20 has an invalid length. [ 187.898439][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.264470][ T9395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'. [ 188.892100][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.904282][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.911188][ T9427] openvswitch: netlink: Message has 1275 unknown bytes. [ 188.922849][ T9427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.932571][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.939687][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.940727][ T9421] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1063'. [ 188.957554][ T9427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1065'. [ 188.967873][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.972131][ T9421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.996015][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 189.004850][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.315924][ T9423] chnl_net:caif_netlink_parms(): no params data found [ 189.456791][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 189.486129][ T9445] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1070'. [ 189.509691][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 189.552860][ T9455] netlink: 'syz.0.1070': attribute type 9 has an invalid length. [ 189.580427][ T9446] netlink: 'syz.0.1070': attribute type 9 has an invalid length. [ 189.608231][ T9445] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1070'. [ 189.646641][ T9445] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1070'. [ 189.706125][ T9423] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.723179][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.752704][ T9423] bridge_slave_0: entered allmulticast mode [ 189.766023][ T9423] bridge_slave_0: entered promiscuous mode [ 189.778099][ T9423] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.795451][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.805555][ T9423] bridge_slave_1: entered allmulticast mode [ 189.832151][ T9423] bridge_slave_1: entered promiscuous mode [ 189.900717][ T9423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.930299][ T9423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.978424][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.122730][ T9423] team0: Port device team_slave_0 added [ 190.165213][ T9423] team0: Port device team_slave_1 added [ 190.296595][ T9423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.338455][ T9423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.421723][ T9423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.467944][ T9423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.488037][ T9423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.559019][ T9423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.731999][ T9423] hsr_slave_0: entered promiscuous mode [ 190.760864][ T9423] hsr_slave_1: entered promiscuous mode [ 190.796002][ T9423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.815836][ T9423] Cannot create hsr debugfs directory [ 191.018398][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 191.135572][ T5834] Bluetooth: hci1: command tx timeout [ 191.325458][ T9423] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.581937][ T9423] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.656846][ T9531] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 191.773233][ T9423] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 191.794170][ T9423] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.992041][ T9511] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 191.994686][ T9423] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.058507][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 192.257842][ T9423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.330161][ T9559] nbd: socks must be embedded in a SOCK_ITEM attr [ 192.382684][ T9423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.409963][ T9423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.428231][ T9423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.610166][ T9423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.628529][ T9423] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.644764][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.651980][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.694671][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.701907][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.790364][ T9423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.810412][ T9423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.098406][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.179874][ T9423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.217330][ T9423] veth0_vlan: entered promiscuous mode [ 193.235228][ T9423] veth1_vlan: entered promiscuous mode [ 193.238626][ T5834] Bluetooth: hci1: command tx timeout [ 193.261659][ T9423] veth0_macvtap: entered promiscuous mode [ 193.271017][ T9423] veth1_macvtap: entered promiscuous mode [ 193.286320][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.297027][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.307437][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.318736][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.329177][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.340319][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.350493][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.361194][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.371572][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.382207][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.393873][ T9423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.404969][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.415584][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.426729][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.437962][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.447935][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.458697][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.468707][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.479217][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.490289][ T9423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.551313][ T9423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.588533][ T9423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.597313][ T9423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.606168][ T9423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.715940][ T9604] __nla_validate_parse: 10 callbacks suppressed [ 193.715964][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1113'. [ 193.893181][ T9610] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1116'. [ 193.948973][ T9610] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1116'. [ 193.974112][ T9610] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1116'. [ 193.999614][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.017615][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.070739][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.111764][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.138507][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.350213][ T9619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.703683][ T9633] syz.4.1123 uses old SIOCAX25GETINFO [ 194.717580][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 194.789252][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.795642][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.931781][ T9640] team_slave_0: entered allmulticast mode [ 195.178410][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.386732][ T9673] No such timeout policy "syz0" [ 195.401319][ T9673] No such timeout policy "syz0" [ 195.422768][ T9673] No such timeout policy "syz0" [ 195.469640][ T9673] No such timeout policy "syz0" [ 195.516231][ T9673] No such timeout policy "syz0" [ 195.554292][ T9673] No such timeout policy "syz0" [ 195.584436][ T9673] No such timeout policy "syz0" [ 195.599902][ T9673] No such timeout policy "syz0" [ 195.615848][ T9673] No such timeout policy "syz0" [ 195.654177][ T9673] No such timeout policy "syz0" [ 195.810917][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.218410][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 196.613602][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 196.704030][ T9708] netlink: 'syz.5.1143': attribute type 8 has an invalid length. [ 196.713781][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.725967][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.738647][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.860513][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.915250][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 196.931884][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.940927][ T5845] Bluetooth: hci5: command 0x0405 tx timeout [ 197.258432][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 197.311869][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1152'. [ 197.365571][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 197.455478][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.555935][ T9711] chnl_net:caif_netlink_parms(): no params data found [ 197.716756][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.796552][ T9763] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1156'. [ 197.814118][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1156'. [ 197.960465][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.283840][ T9711] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.297145][ T9711] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.304405][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 198.315647][ T9711] bridge_slave_0: entered allmulticast mode [ 198.323598][ T9711] bridge_slave_0: entered promiscuous mode [ 198.424743][ T9711] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.440420][ T9711] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.474975][ T9711] bridge_slave_1: entered allmulticast mode [ 198.506107][ T9711] bridge_slave_1: entered promiscuous mode [ 198.650076][ T9816] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 198.689572][ T63] bridge_slave_1: left allmulticast mode [ 198.695829][ T63] bridge_slave_1: left promiscuous mode [ 198.721615][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.809781][ T9826] __nla_validate_parse: 2 callbacks suppressed [ 198.809803][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1171'. [ 198.832271][ T63] bridge_slave_0: left allmulticast mode [ 198.842526][ T63] bridge_slave_0: left promiscuous mode [ 198.856360][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.019964][ T5834] Bluetooth: hci1: command tx timeout [ 199.286026][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 199.338467][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.347883][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'. [ 199.666877][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.682968][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.701146][ T63] bond0 (unregistering): Released all slaves [ 199.720555][ T9711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.734582][ T9824] vlan0: entered allmulticast mode [ 199.752810][ T9839] ip6tnl3: entered promiscuous mode [ 199.770342][ T9839] ip6tnl3: entered allmulticast mode [ 199.961630][ T9711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.134779][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 200.159709][ T9861] syzkaller0: entered promiscuous mode [ 200.165369][ T9861] syzkaller0: entered allmulticast mode [ 200.204502][ T9711] team0: Port device team_slave_0 added [ 200.284763][ T9868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1177'. [ 200.298221][ T9711] team0: Port device team_slave_1 added [ 200.378476][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.407483][ T63] hsr_slave_0: left promiscuous mode [ 200.416030][ T63] hsr_slave_1: left promiscuous mode [ 200.422623][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.432020][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.441650][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.449351][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.478017][ T63] veth1_macvtap: left promiscuous mode [ 200.484284][ T63] veth0_macvtap: left promiscuous mode [ 200.490333][ T63] veth1_vlan: left promiscuous mode [ 200.497262][ T63] veth0_vlan: left promiscuous mode [ 200.921237][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 201.099270][ T5834] Bluetooth: hci1: command tx timeout [ 201.211152][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 201.217927][ T9888] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 201.231250][ T9888] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1182'. [ 201.258027][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 201.296079][ T63] team0 (unregistering): Port device team_slave_1 removed [ 201.310435][ T911] IPVS: starting estimator thread 0... [ 201.371280][ T63] team0 (unregistering): Port device team_slave_0 removed [ 201.403884][ T9892] IPVS: using max 17 ests per chain, 40800 per kthread [ 201.418395][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.858660][ T9711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.865830][ T9711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.904594][ T9711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.918036][ T9711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.925634][ T9711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.952590][ T9711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.981560][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 201.988746][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 202.463768][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.182884][ T5845] Bluetooth: hci1: command tx timeout [ 203.498823][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.987112][ T9711] hsr_slave_0: entered promiscuous mode [ 204.003484][ T9711] hsr_slave_1: entered promiscuous mode [ 204.038918][ T9711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.046564][ T9711] Cannot create hsr debugfs directory [ 204.155813][ T9908] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 204.340836][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1192'. [ 204.538398][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.634473][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'. [ 204.646766][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1198'. [ 204.656749][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1198'. [ 204.704901][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1195'. [ 204.760835][ T9931] team0: Device wg2 is of different type [ 204.869041][ T9945] openvswitch: netlink: IP tunnel dst address not specified [ 205.259736][ T5845] Bluetooth: hci1: command tx timeout [ 205.364222][ T9959] xt_CT: No such helper "pptp" [ 205.578394][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.798655][ T9711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.819685][ T9711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.843400][ T9711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.951845][ T9711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.163107][ T9711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.252696][ T9711] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.295710][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.302922][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.351806][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.359001][ T8176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.514136][ T9711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.618413][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.025198][T10057] delete_channel: no stack [ 207.059319][T10050] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 207.104198][ T9711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.114444][T10061] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1222'. [ 207.115671][T10051] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 207.292915][ T9711] veth0_vlan: entered promiscuous mode [ 207.345176][T10072] syz.5.1224[10072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.345286][T10072] syz.5.1224[10072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.361251][T10072] syz.5.1224[10072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.390878][ T9711] veth1_vlan: entered promiscuous mode [ 207.514435][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 207.525101][T10086] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1227'. [ 207.571786][T10072] syz.5.1224[10072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.571896][T10072] syz.5.1224[10072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.611552][T10084] bridge_slave_1: left allmulticast mode [ 207.658414][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.719022][T10084] bridge_slave_1: left promiscuous mode [ 207.725091][T10084] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.765735][T10084] bridge_slave_0: left allmulticast mode [ 207.806834][T10084] bridge_slave_0: left promiscuous mode [ 207.832261][T10084] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.907452][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1229'. [ 208.098626][ T9711] veth0_macvtap: entered promiscuous mode [ 208.140605][ T9711] veth1_macvtap: entered promiscuous mode [ 208.200615][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.236559][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.266378][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.287893][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.309196][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.323107][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.363633][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.393920][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.447089][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.497250][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.550747][ T9711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.614119][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.647488][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.676517][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.698428][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.721217][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.763502][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.805170][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.814575][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 208.835697][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.875783][T10147] netlink: 'syz.4.1236': attribute type 3 has an invalid length. [ 208.878360][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.956093][ T9711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.017284][ T9711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.038521][ T9711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.054086][ T9711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.063018][ T9711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.302960][T10163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.334629][T10163] batadv_slave_1: entered promiscuous mode [ 209.375540][T10167] IPVS: Error joining to the multicast group [ 209.404827][ T8181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.458525][ T8181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.526555][ T8184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.560920][ T8184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.619353][T10172] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 209.627166][T10175] bridge0: port 1(gretap0) entered blocking state [ 209.627363][T10175] bridge0: port 1(gretap0) entered disabled state [ 209.639074][T10177] netlink: zone id is out of range [ 209.650818][T10177] netlink: zone id is out of range [ 209.655991][T10177] netlink: zone id is out of range [ 209.657014][T10175] gretap0: entered allmulticast mode [ 209.678056][T10175] gretap0: entered promiscuous mode [ 209.680747][T10177] netlink: zone id is out of range [ 209.698878][T10177] netlink: zone id is out of range [ 209.705837][T10177] netlink: zone id is out of range [ 209.718595][T10177] netlink: zone id is out of range [ 209.760651][T10172] bond2: entered promiscuous mode [ 209.765973][T10172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.189441][T10193] xt_TCPMSS: Only works on TCP SYN packets [ 210.511672][ T8184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.821037][ T8184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.001683][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.019162][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.028419][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.064356][T10211] netlink: 'syz.3.1255': attribute type 64 has an invalid length. [ 211.075632][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.084017][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.121489][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.175117][ T8184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.200494][T10220] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 211.294601][ T8184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.479702][T10227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1258'. [ 211.557450][T10227] sit0: entered promiscuous mode [ 211.581228][T10227] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 211.592002][T10227] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1258'. [ 211.697691][ T8184] bridge_slave_1: left allmulticast mode [ 211.704194][ T8184] bridge_slave_1: left promiscuous mode [ 211.711108][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.732009][ T8184] bridge_slave_0: left allmulticast mode [ 211.737731][ T8184] bridge_slave_0: left promiscuous mode [ 211.750097][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.818475][ C1] net_ratelimit: 69 callbacks suppressed [ 211.818500][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.256239][ T8184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.267920][ T8184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.282739][ T8184] bond0 (unregistering): Released all slaves [ 212.546623][T10256] netlink: 'syz.0.1265': attribute type 3 has an invalid length. [ 212.554837][T10256] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1265'. [ 212.646034][T10213] chnl_net:caif_netlink_parms(): no params data found [ 212.801312][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1268'. [ 212.858519][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.061382][ T8184] hsr_slave_0: left promiscuous mode [ 213.096212][ T8184] hsr_slave_1: left promiscuous mode [ 213.103461][ T8184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.114652][ T8184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.158558][ T8184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.172532][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 213.173258][ T8184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.188400][ T55] Bluetooth: hci1: command tx timeout [ 213.208612][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1272'. [ 213.275252][T10290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1273'. [ 213.301881][ T8184] veth1_macvtap: left promiscuous mode [ 213.322136][ T8184] veth0_macvtap: left promiscuous mode [ 213.341002][ T8184] veth1_vlan: left promiscuous mode [ 213.353375][ T8184] veth0_vlan: left promiscuous mode [ 213.903011][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.022215][ T8184] team0 (unregistering): Port device team_slave_1 removed [ 214.062753][ T8184] team0 (unregistering): Port device team_slave_0 removed [ 214.560427][T10269] syzkaller0: entered promiscuous mode [ 214.567232][T10269] syzkaller0: entered allmulticast mode [ 214.938402][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.052287][T10329] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1281'. [ 215.068361][T10329] netlink: 'syz.3.1281': attribute type 1 has an invalid length. [ 215.267665][ T55] Bluetooth: hci1: command tx timeout [ 215.983176][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.018410][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.116985][T10350] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 217.162273][T10340] netlink: 'syz.3.1284': attribute type 3 has an invalid length. [ 217.180196][T10340] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1284'. [ 217.274873][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.309058][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.342618][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 217.348897][ T5845] Bluetooth: hci1: command tx timeout [ 217.377673][T10213] bridge_slave_0: entered allmulticast mode [ 217.405714][T10213] bridge_slave_0: entered promiscuous mode [ 217.429265][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.436467][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.488619][T10213] bridge_slave_1: entered allmulticast mode [ 217.495897][T10213] bridge_slave_1: entered promiscuous mode [ 217.563894][T10372] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 217.840076][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 217.870390][T10213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.892118][T10213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.015017][T10213] team0: Port device team_slave_0 added [ 218.055240][T10213] team0: Port device team_slave_1 added [ 218.060973][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 218.147769][T10213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.163998][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.220758][T10213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.264181][T10400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1296'. [ 218.267888][T10213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.299144][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.344811][T10213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.560778][T10213] hsr_slave_0: entered promiscuous mode [ 218.606727][T10213] hsr_slave_1: entered promiscuous mode [ 218.629114][T10213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.636923][T10213] Cannot create hsr debugfs directory [ 218.690430][T10414] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1297'. [ 218.880502][T10423] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1299'. [ 219.098651][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.243034][T10443] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1301'. [ 219.418915][ T5834] Bluetooth: hci1: command tx timeout [ 219.546435][T10451] netlink: 'syz.0.1304': attribute type 21 has an invalid length. [ 219.560204][T10451] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1304'. [ 219.575925][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 219.720567][T10458] netlink: 'syz.3.1307': attribute type 5 has an invalid length. [ 219.873285][T10462] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 219.874184][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 219.905967][T10463] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1308'. [ 219.930847][T10213] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.969772][T10213] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.996998][T10213] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.021606][T10213] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.138584][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.175879][T10477] Cannot find set identified by id 0 to match [ 220.361566][T10213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.416330][T10213] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.433871][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.441129][ T8181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.459093][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 220.477580][T10456] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 220.498139][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.505381][ T8181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.179785][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.262257][T10213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.294718][T10213] veth0_vlan: entered promiscuous mode [ 221.307764][T10531] batadv1: entered allmulticast mode [ 221.343346][T10528] netlink: 'syz.5.1322': attribute type 24 has an invalid length. [ 221.466019][T10213] veth1_vlan: entered promiscuous mode [ 221.548160][T10213] veth0_macvtap: entered promiscuous mode [ 221.616141][T10549] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 221.776921][T10554] xt_policy: too many policy elements [ 221.831864][T10213] veth1_macvtap: entered promiscuous mode [ 221.870299][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.882606][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.894483][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.911504][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.935033][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.948003][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.958766][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.969565][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.980377][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.001554][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.014924][T10213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.044768][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.069266][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.092806][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.117987][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.132695][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.143791][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.181106][T10213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.212905][T10213] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.218434][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.256286][T10576] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 222.275261][T10213] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.292860][T10213] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.306299][T10213] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.365511][T10576] team0: Device veth0_macvtap failed to register rx_handler [ 222.438846][T10587] __nla_validate_parse: 5 callbacks suppressed [ 222.438868][T10587] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.1337'. [ 222.857269][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.885055][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.998503][ T8181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.016302][ T8181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.118070][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 223.252442][T10627] xt_limit: Overflow, try lower: 0/0 [ 223.258393][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 223.616533][T10634] tipc: Enabled bearer , priority 0 [ 223.646281][T10634] syzkaller0: entered promiscuous mode [ 223.690662][T10638] netlink: 'syz.5.1349': attribute type 8 has an invalid length. [ 223.691161][T10634] syzkaller0: entered allmulticast mode [ 223.912232][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.026987][T10633] tipc: Resetting bearer [ 224.060321][T10633] tipc: Disabling bearer [ 224.162205][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.298423][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 224.426904][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.569351][T10668] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1351'. [ 224.692256][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.095206][ T63] bridge_slave_1: left allmulticast mode [ 225.119801][ T63] bridge_slave_1: left promiscuous mode [ 225.125653][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.162022][T10695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.240996][ T63] bridge_slave_0: left allmulticast mode [ 225.260779][T10701] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1360'. [ 225.278501][ T63] bridge_slave_0: left promiscuous mode [ 225.284310][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.330561][T10701] netlink: zone id is out of range [ 225.335759][T10701] netlink: zone id is out of range [ 225.338452][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.389073][T10701] netlink: zone id is out of range [ 225.409595][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.409725][T10701] netlink: zone id is out of range [ 225.423771][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.430819][T10701] netlink: get zone limit has 8 unknown bytes [ 225.447613][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.488486][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.564691][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.575992][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.316034][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.331704][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.343948][ T63] bond0 (unregistering): Released all slaves [ 226.378406][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.617282][T10756] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1368'. [ 226.675872][T10756] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1368'. [ 227.345949][T10808] netlink: 'syz.5.1380': attribute type 16 has an invalid length. [ 227.376636][T10808] netlink: 'syz.5.1380': attribute type 17 has an invalid length. [ 227.402293][ T63] hsr_slave_0: left promiscuous mode [ 227.418885][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.444561][ T63] hsr_slave_1: left promiscuous mode [ 227.465696][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.499840][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.509875][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.517401][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.615525][ T63] veth1_macvtap: left promiscuous mode [ 227.635937][ T63] veth0_macvtap: left promiscuous mode [ 227.641849][ T63] veth1_vlan: left promiscuous mode [ 227.647224][ T63] veth0_vlan: left promiscuous mode [ 227.672001][ T5834] Bluetooth: hci1: command tx timeout [ 228.458417][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.482586][ T63] team0 (unregistering): Port device team_slave_1 removed [ 228.536257][ T63] team0 (unregistering): Port device team_slave_0 removed [ 229.080618][T10708] chnl_net:caif_netlink_parms(): no params data found [ 229.247715][T10844] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1385'. [ 229.270182][T10844] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1385'. [ 229.290498][T10844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.455381][T10853] xt_CT: No such helper "snmp" [ 229.488459][ T5988] unregister_netdevice: waiting for vxcan1 to become free. Usage count = 2 [ 229.498420][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 229.537404][T10708] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.628862][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.672027][T10708] bridge_slave_0: entered allmulticast mode [ 229.720326][T10708] bridge_slave_0: entered promiscuous mode [ 229.788543][ T5834] Bluetooth: hci1: command tx timeout [ 230.538414][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.881771][T10862] bond0: (slave syz_tun): Releasing backup interface [ 230.912951][T10848] syz_tun (unregistering): left promiscuous mode [ 230.992607][ T63] bridge_slave_0: left allmulticast mode [ 231.005343][ T63] bridge_slave_0: left promiscuous mode [ 231.011309][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.091084][ T63] bond0 (unregistering): Released all slaves [ 231.578407][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.618402][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.658413][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 234.698388][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.739814][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.778442][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.818390][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 238.858431][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available