last executing test programs: 1m17.279611484s ago: executing program 3 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80002011}) listen(r2, 0x0) shutdown(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x4000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0xc050) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 1m1.857399615s ago: executing program 3 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80002011}) listen(r2, 0x0) shutdown(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x4000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0xc050) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 48.755622798s ago: executing program 4 (id=260): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70bd26, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0xfffffffffffffe80, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x0, 0x8, 0x0, 0x1, [{0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x69a3f27e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x6e}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x70}]}]}]}, 0x38}}, 0x810) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='`']}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200000002"], 0x10) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200000002"], 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) (async) r10 = openat$cgroup_ro(r4, &(0x7f00000004c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x2, 0x7, 0x4, 0x242a, r9, 0x200, '\x00', r3, r10, 0x45, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="1c0000801800318011001d007d21235e235c2c2f2c29272f00000000"], 0x34}], 0x1}, 0x0) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8000, r0}, 0x18) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000440)=r12, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@private, @multicast2, 0x0}, &(0x7f0000000140)=0xc) r14 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) (async) r15 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$SIOCAX25ADDUID(r14, 0x89e1, &(0x7f0000000140)={0x3, @bcast, r16}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="080007007f00000108001900", @ANYRES32=r11, @ANYBLOB="06001c004e23000008000400", @ANYRES32=r13, @ANYBLOB="08001900", @ANYRES32=r16, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="859464d173af65ec6e1ad7e6df17ffc292"], 0x140}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) (rerun: 64) 48.546724526s ago: executing program 4 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a050000000000000000000100fffc5400010073797a30000000004c000000030a010100000000000000000100000008000b40000000047ab722668fa1f4ba00c14b103d14000480080002400000000008000140001c0008800c0002400000000014fda2f30c000240000000000000000014000000110001"], 0x94}}, 0x0) 48.195739128s ago: executing program 4 (id=267): unshare(0x20000400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x341200, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000008000300", @ANYRES32=r1, @ANYBLOB="14ca5e8008000100ffffffff0800020000000001"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300000000fcffffff0c00000008000300e4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="08000000000003e500180e420043"], 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000694000/0x1000)=nil, 0x1000, 0x3800003, 0x28011, r13, 0xf1b07000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r12, 0x0) mmap(&(0x7f000074a000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, 0xffffffffffffffff, 0xfbd06000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r10], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000dbf30776f3a48515ef", @ANYRES16=r14, @ANYBLOB="020029bd7000ffdbdf250f0000000800320000000000050029000100000005002a000100000008000600", @ANYRES32=r6, @ANYBLOB="45002f000000000008003b0009000000080003ba", @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x66a6e8aa7d9e2c3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100)=0x1, 0x4) 47.580834461s ago: executing program 3 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80002011}) listen(r2, 0x0) shutdown(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x4000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0xc050) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 33.591053757s ago: executing program 3 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80002011}) listen(r2, 0x0) shutdown(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x4000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0xc050) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 32.778408819s ago: executing program 4 (id=267): unshare(0x20000400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x341200, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000008000300", @ANYRES32=r1, @ANYBLOB="14ca5e8008000100ffffffff0800020000000001"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300000000fcffffff0c00000008000300e4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="08000000000003e500180e420043"], 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000694000/0x1000)=nil, 0x1000, 0x3800003, 0x28011, r13, 0xf1b07000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r12, 0x0) mmap(&(0x7f000074a000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, 0xffffffffffffffff, 0xfbd06000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r10], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000dbf30776f3a48515ef", @ANYRES16=r14, @ANYBLOB="020029bd7000ffdbdf250f0000000800320000000000050029000100000005002a000100000008000600", @ANYRES32=r6, @ANYBLOB="45002f000000000008003b0009000000080003ba", @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x66a6e8aa7d9e2c3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100)=0x1, 0x4) 19.933687587s ago: executing program 3 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80002011}) listen(r2, 0x0) shutdown(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x4000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0xc050) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 18.622755656s ago: executing program 4 (id=267): unshare(0x20000400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x341200, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000008000300", @ANYRES32=r1, @ANYBLOB="14ca5e8008000100ffffffff0800020000000001"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300000000fcffffff0c00000008000300e4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="08000000000003e500180e420043"], 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000694000/0x1000)=nil, 0x1000, 0x3800003, 0x28011, r13, 0xf1b07000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r12, 0x0) mmap(&(0x7f000074a000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, 0xffffffffffffffff, 0xfbd06000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r10], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000dbf30776f3a48515ef", @ANYRES16=r14, @ANYBLOB="020029bd7000ffdbdf250f0000000800320000000000050029000100000005002a000100000008000600", @ANYRES32=r6, @ANYBLOB="45002f000000000008003b0009000000080003ba", @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x66a6e8aa7d9e2c3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100)=0x1, 0x4) 14.193158248s ago: executing program 0 (id=494): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x84) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x30}}, 0x880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022c010000ffdbdf250a00000008000300", @ANYRES32=r11, @ANYBLOB="0a000600080211000001000004000b000800090054e6f84f"], 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x2000c880) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 13.210326325s ago: executing program 0 (id=502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) unshare(0x62040200) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) close(r1) 10.33732121s ago: executing program 0 (id=519): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000003c0)='XK', 0x2}, {0x0, 0x60}], 0x2}}], 0x1, 0x80) (async) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000003c0)='XK', 0x2}, {0x0, 0x60}], 0x2}}], 0x1, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22040880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x80000001}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x80000001}, 0x18) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) (async) r6 = socket$netlink(0x10, 0x3, 0x7) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRESHEX], 0x40}}, 0x4000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) (async) unshare(0xc000000) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r7, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[], 0x10}}], 0x1, 0x40084) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) socket$kcm(0x2, 0x1, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.547200595s ago: executing program 3 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80002011}) listen(r2, 0x0) shutdown(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x4000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0xc050) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 4.855171731s ago: executing program 4 (id=267): unshare(0x20000400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x341200, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000008000300", @ANYRES32=r1, @ANYBLOB="14ca5e8008000100ffffffff0800020000000001"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300000000fcffffff0c00000008000300e4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="08000000000003e500180e420043"], 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000694000/0x1000)=nil, 0x1000, 0x3800003, 0x28011, r13, 0xf1b07000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r12, 0x0) mmap(&(0x7f000074a000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, 0xffffffffffffffff, 0xfbd06000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r10], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000dbf30776f3a48515ef", @ANYRES16=r14, @ANYBLOB="020029bd7000ffdbdf250f0000000800320000000000050029000100000005002a000100000008000600", @ANYRES32=r6, @ANYBLOB="45002f000000000008003b0009000000080003ba", @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x66a6e8aa7d9e2c3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100)=0x1, 0x4) 3.07174294s ago: executing program 2 (id=551): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f00000003c0)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x2, 0x0}, 0x8) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}], &(0x7f0000000140)='GPL\x00', 0x6, 0x83, &(0x7f0000000300)=""/131, 0xcafb6431ea28fa0b, 0x48, '\x00', r3, @cgroup_device=0x6, r4, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x3, 0x19f}, 0x10, r5, r1, 0x0, &(0x7f0000000580)=[r6], 0x0, 0x10, 0x5, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85000000750000008500000008000000957d054c04aaeb18a3705cc981a705ff5d8e1a3e75602c3c91742f03120bf29f6bb3fc8760968bd11f39e202a5f0f4e38a1f7c9e1ab31074b06cb907c2d8d77e5124d30fdb7e4e2f503df74bf2dbf4e059ce8104ca58ad6a06839f3780a7dd4264fbb8374b3edbde06ac6ae115ceb776cc70145704bafec6fc63ffe8cff5c157949dde9e5c24516846f0880fdf4821d4ca1e90056d41c75d37cae1e35a050ae93e9a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd72, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x18, 0x0, &(0x7f0000000940)=0x56) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r7}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)={0x1b, 0x0, 0x0, 0x1, 0x0, r6, 0x6, '\x00', 0x0, r6, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) connect$netrom(r0, &(0x7f0000000280)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) 2.901885502s ago: executing program 2 (id=553): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="a7e2a85a22dd"}) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYRES64=r3], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'veth0_to_bridge\x00', @random="1100"}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x5) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)={0x20000015}) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002061) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000600"}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001052dbd7000fedbcf25fc2f000006000480ff"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x800) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r11, @ANYBLOB="02002dbd7000fcdbdf250e000000050035000c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) write$cgroup_int(r1, &(0x7f0000000000)=0x5, 0x12) sendfile(r1, r0, 0x0, 0x1) 2.01160477s ago: executing program 1 (id=554): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1d, 0x2, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet6(0xa, 0x806, 0x0) listen(r1, 0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x3c, r6, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x6, 0x800}, &(0x7f0000000340)=0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x4, 0x43, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000001800)=""/31, &(0x7f0000000240)=0x1f) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x8004) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000f00)={0x490, 0x14, 0x2, 0x70bd2d, 0x25dfdbfd, {0xa, 0x1e}, [@INET_DIAG_REQ_BYTECODE={0x86, 0x1, "1c65d5e2c5021966b33f5df294fb7938b4cd404c7fc2f575e8cd64ede750e144366baaae8353260a4ceb99219c72a02bfc75085e7c43e93cb742753ed41f5dab5e39147b02cfa7ce6e55e04ceeb75f53a09d079f2ec1c501c9ce946765e6447ba4384e5efc572271c97d260ee50122b9e91f26e190c065a1ad9ee11c4fefb16b731d"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "2738c09e3b2e3836581782a4ccadf0be783f5105a746527bfaf3297dbcb890f3d48ae57598eda801bf15ec2b91001b0f8ef3324a9898978d2b2200d3c16c69e12ebfe4ce159d29829ba4e6038d7c57ea75b75cbb9a349ae1648d17aa025db8a13d9a86685b084cdc51264c709b102560a77eb5a3d852d5b7978df2d802c3d08e49122f1103e58f12106f6da9b9e06eddac65d101315370db9c9dbb42cc27e89f3d1143ad82426e7dc33b91bb9ed3a0b41d4fe6c71d505e864e8d1de68d183f073b671503f8504fef8dbcf5b17beabf3621d10dc33b2f0789687057c0aa0b3f8cb5fdaa34b95d6c243aab88e7c56b669b136ff67704f8"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "75c89aed2bd9bad312718e00e51971cb2cad003b22fd89f5b692c82b2da476013ab6dfbdffc381925903d36c55629ebbb3955073767fc4a2beb567bc57a9bcd6829f80275a19eb92859ba1a390e55a0b3beb75b287ac9192eaa52463c5a37d62ee9dedb9fac7031fa6d50fdafadd708b5009aa58f58f8ff8df9fc95642ae844e4800a326499bab5a00bbefacf0371f55ba2c64bea8caa0d7195ce04257732d7190932f6f3fe67feb26b12e945a748563cf6e4d7cb7ad7c14b7f75424d27d8ebd153cc64615a5f9bc1555439a7c4f7dd546b1f8f515d8959e35834ef55dcc61a5d95f70578ecfedde6272b62f129494efb09210a7319814"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "111ba9701f4c61fa09829f0cd7d6b9fa8aa1fa552e69d787b24116dc5f4ee02632890ddc510da8bad8a062488b4960b81f7c79c50a4528cf2fd58478e815e3dbc20c589c2172fdd84880f5f52f90045913eb88fe6a3ebd399dc76dd5f41865de21a0f8dfdba093016d74aee3492b72f0e2890b7b2da428200fcbfc70f6c59c96"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xae, 0x1, "b3b001b752c54a8777637bc0c9f5888061dceaa0af420a283f76b5a4a7e520863aa25d7a0743f519777308b8e9c059620af3f42ba491f2173a2759384c4be0cf2d8dc2a005629b37ffc2213c2cb4bbb4a256547eedded989be1eccbbfaeaf1674c08cdd654f415ce03c8a08925ff188e2004208bf21f0547da4d3648df3514d94460c99a9da346cada2803ef94c12d43282f7872b345be9c4719d1db2a181bf4c862ec43acc604d73df5"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "f2062c9757727968b23ef5a1560fd78567ac60fcb91318c2ff75b95cf78df91c6312a82e163a0bce6da5ecab4b00a27b8a4b7bde21e663a4a83e7df96e8dcc1c9e4ac43ffcf7b7d4ba89641fc3dd1fbdea4b9c02fb510a615199586a97f371dadf63f4fe7f50edcca6df17c3908b632a41ac74581766e4c3c25aeba4eca2a224ff43621aff35ac4281c682b64beea411808fa381db8370f1cedbafe7720e865500590f700eb28459d036d35025bf312c49f5e2711fe0a00c7e0f4a444939a814"}]}, 0x490}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) r10 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e"], 0x54}}, 0x0) 1.936418205s ago: executing program 0 (id=555): r0 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r3) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fc6454644e27f8336280642bf025dbdf250900006b0e004fc501006e657464657673696d0000000f0002006e657464657673696d30000008"], 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000) (async) r6 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003000000003800000700000011000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000009d00000000000000a7404be1759a9b1dbff2f3f3479981fe86caa7fff53cdf4d118b077544d08f05f6b248cb660be20658406598b9f91313e2"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="31ec1a50ab8b"}, 0x14) 1.194846121s ago: executing program 0 (id=556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macvtap0\x00'}) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 64) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[], 0xb4}}, 0x0) (rerun: 64) 1.193091396s ago: executing program 2 (id=557): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000012c0)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x7, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x68}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xbacf}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff0e2, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000100)='GPL\x00', 0xbe, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001380)=[r0, r1, r2, r3, r4], &(0x7f00000013c0)=[{0x0, 0x2, 0x3, 0x7}, {0x2, 0x3, 0x8, 0x6}, {0x1, 0x4, 0x0, 0x2}, {0x2, 0x5, 0x1, 0xb}], 0x10, 0x8001, @void, @value}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000800010300000300140000004500002800000000008490783fffffffac1414aa02000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54009d5a8418da5affaa2a88b8b02801307a00009078001c"], 0x36) 1.05110474s ago: executing program 1 (id=558): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000100010000000000000000000000000000000000000001"], 0x28}}, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='siox_set_data\x00', r6}, 0x18) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYBLOB="00022abd7004fcdfdf250100000006000a004e24000014000700ff02000000000023966e5c5910e8b9000000000000000001050002000a0000000500040000000000000000091400090000000000000000000000000000000000695add0800858faee0532cff7f000000000000b805783ed8fec0bee9b7ee861065ded52c96f7a6939d5a2cb5fa9ee886eb87d66655a155188394c8a253e71cc1a474d3fd03c27a1a121b72a2"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x8000) (async) r7 = socket(0x10, 0x3, 0xc) write(r7, &(0x7f0000000040), 0x0) (async) unshare(0x40020000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) unshare(0x62040200) (async) socket$packet(0x11, 0x2, 0x300) 889.351405ms ago: executing program 0 (id=559): r0 = socket(0x2b, 0x801, 0x1) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x4}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0xc004) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xbd}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x68060200) unshare(0x6a040000) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='veth1_to_team\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x104, 0x4, 0x3f0, 0x220, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="cab170e97230", @multicast1, @remote, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 0x0, 0x0, {@mac=@remote, {[0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfc5, 0x2, 0x3ff, 0xa91ea8562d24adad, 0x4, 0x400000, r1}) 823.577824ms ago: executing program 2 (id=560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x40498c4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2, 0xff}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010000", 0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000001c0)={r9, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x2, &(0x7f00000003c0)={r9, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, {0x4}}]}]}, 0x48}}, 0x0) socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, &(0x7f0000000480)) sendto$inet6(r1, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x35, &(0x7f0000000040)=@fragment={0x2e, 0x0, 0xf, 0x1, 0x0, 0x1a, 0x64}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000050000000900010073797a300000000038000000030a01080000000000000000050000020900010073797a30000000000900030073797a32000000000400048008000a4000000004140000001100010000000000000000000000000a95aaffea821901bb464cf602faeabaae23f255b4819f8fa541b5b3269fc784759dfd77166b7465b328ac10ffba79658ca185", @ANYRESDEC=r0, @ANYRESOCT=r1], 0x80}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r12, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20008000) 823.14441ms ago: executing program 1 (id=561): socketpair(0x25, 0xa, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) (async) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25890000000c009900050000003c00000088001d8048000080050009000000000005000a000100000005000c000200000005000900000000000c00030001000000000000050007006d00000005000c000000000005000b0001000000180000800400040005000b000100000005000c00010000001800008005000900000000000c000300f9ffffffffffffff0c000080050008008e00000000"], 0xa8}, 0x1, 0x0, 0x0, 0x200000b4}, 0x24040000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) 741.274135ms ago: executing program 1 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x208080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x24000894) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @rose={'rose', 0x0}, 0x6, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080084000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000400)=""/244, &(0x7f0000000540)=0xf4) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="ec9dafdd17be"}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xe4, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x456}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 548.77533ms ago: executing program 2 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000038}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x3, 0x1, 0x5, 0x0, 0x0, {0x9, 0x0, 0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x1, 0x6, 0x5c]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x6, 0x3894721c, 0x7, 0x7fff, 0x8001, 0x2]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x79a}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000050}, 0x1) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000240)={'ip_vti0\x00', 0x8, 0x4}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000004c0)={r0, 0x1, 0x1, 0x7}) (rerun: 64) write$cgroup_devices(r4, &(0x7f0000000500)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000540)={0xffffffffffffffff, 0x1, 0x64}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', r3, 0x4, 0x8, 0x40, 0x4f66c3b0, 0x11, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0x1, 0x9}}) sendmsg$inet(r5, &(0x7f0000001900)={&(0x7f0000000640)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000680)="b5b3ee9a1b69be80b66635ada014d746f2cd45345ea2cde07aac27844ca04a2a3af7d231ddd0eac8b4a667e73e002ecc9dcaab2d530f5c51f852857f2e8bbf043a44936285e533a1bb0a1223d47ef4152ae65684561c2dba5a", 0x59}, {&(0x7f0000000700)="b4ceb656bf87764e56f1a21122b67f8959c22db5f45517ed3eef9e31db24ad2427a80d3b7f999103b1f3b872575dc3fe160dc5111365587751c9dc1519ec16e4de840bdf995a7d8a3b10ea4129031f75de83ab7606a3772eddba4b2e7a529017161d5a9398874ce4e3e3de1a18c3f36bb38b314f47f7d2506b81c6", 0x7b}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="ecf5eefbb2947de907f52a7631bfc59cc234a907c200da7fdaaba298b431c7b3b897757e33c7c39c4db59e5e68b915f453ddb751ec75fff9fcab060dfc166c29cbfb3973ec67200736009cfd0746e17ed2ebe21ebfd4b5ad1d623a698e098c8622dd1a46ba30a1", 0x67}, {&(0x7f0000001800)}], 0x5, &(0x7f00000018c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010102}}}], 0x38}, 0x4004) (async, rerun: 64) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000001940)={0x3, 0x7}) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd2c, 0x25dfdbff, {0x80, 0x20, 0x10, 0x6, 0xfe, 0x3, 0xfd, 0x8, 0x100}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x40000) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x2) (rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000001a80)={0x0, r1}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={r5, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000001b80)=[{}, {}], 0x10, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0x17, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001e40)={'syztnl0\x00', &(0x7f0000001dc0)={'syztnl0\x00', r8, 0x4, 0x6, 0xd, 0x1ff, 0x60, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0xf69, 0x1}}) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), r4) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000001fc0)={&(0x7f0000001e80), 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x5c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x7ab582fa7fd66e00}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8084) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002040), r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r10, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x11) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r11, &(0x7f0000002140)=@generic, &(0x7f00000021c0)=0x80) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40805}, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000002340)={'sit0\x00', &(0x7f0000002300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x7, 0x1a}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b8, 0x330, 0x330, 0x330, 0x0, 0x0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, &(0x7f0000002380), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x40}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'hsr0\x00', {0xff}, {0xff}, 0x62, 0x2, 0x28}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x80000000, 0x80, @multicast2, 0x4e20}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, 0x0, 0xff, 'veth1_to_team\x00', 'ip6gretap0\x00', {}, {}, 0x6, 0x2, 0xc}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4b97, 0x6, @broadcast, 0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) (async, rerun: 32) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000002940)) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000002980)={0x2, 'team_slave_1\x00', {0x10001}, 0x2}) 194.620632ms ago: executing program 2 (id=564): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r0], 0x64}, 0x1, 0x0, 0x0, 0x8850}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000080)="29000300010003", 0x7) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000000)="05000000010006", 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x28, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x7}, {0x4, 0x2}, {0xf, 0xd}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x1d, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085cbea9564f5000000b6000000b7080000000000007b8af8ff00000000b70800050000e0ff7a8af0ff00000000bfa100000010000007010000f8ff074689a18b74d2ffffbfa400000000000007040000f0ffffff2e7513775e5ac4cd5bb7020000080000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x18, &(0x7f00000006c0), &(0x7f0000000380)=""/24, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="345b12e00e9439909b7c563ddca20d7766240220e39686fc668e7c1327a06e0e3063abaf", @ANYRES16=r9, @ANYBLOB="010000000000100000000100000006000a004e22000008000800e0000002050004000200000008000600ac1414aa"], 0x34}}, 0x0) (async) socket$inet(0x10, 0x3, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='fsi_master_gpio_clock_zeros\x00', r4, 0x0, 0x8000001}, 0x13) r12 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r12, 0x29, 0x22, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100000000b3000000000000000a6c000000060a0104000000000000000002000000400000803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000800034000000000080006400000000208000240000000020900010073795d30000000000900020073797a32000000001400000092a8d26011000100000000000000000010979ff684bc449d89387b80e998b58b63d5340a0168fc34dab2227df3b340e46c53c56c"], 0x94}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) 153.001457ms ago: executing program 1 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1c}, 0xf9615c7d5a08aabd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x380, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000640)=[{&(0x7f0000000880)="666cd07b5cca2403df3cfd0c7b90355909af7584dfecd93ac26ad586ed799a170e8a7980811c004c6f11a4c39a0e46b1a82d5cd77d25d61f5a74e1d4f13a5ec3d728f9913704364de0e9e3cd6711797439ea95d44ab29136eee1012d93dfdf8b5ea5c3bfa53fa82c8cec525fed4ecce5f79205056442174461d4be17e221f23cf2d855b56749dadb3000fc2f7e438324dce71f7b945b95ba38e08f5f829182ff04b11c2aba7b580bfdcef7b3757837b5c406eb14efb6f82fdbd2e77e02959fd2204d42c09e84e453b9f44ec5261ab6c3e39bdb83c656f954f2fa9a7d6e473be3eb755a60bd44bbf7d945f52bf12cf041943d5425b9d74f7bbee04a", 0xfb}, {&(0x7f0000000980)="266c6a1c5d48bf433f63e3044a04ac84202e391a40dd31a2ded2ff18bc9cd3c84a111a8a8f0bfeda45ec3119751519d928e03a78dc477e46bd3af935710a84a578c6f96a3d035e73b4a77459421de67d0b98b9c59dc94c3ce52693d950d9bc1580a8ca3c2eec4c3c9575c04cd90cff2cb7b064bb84b73dd8642a0ed90793658cad329c7093971164b382d1316e6d882b23a05d0219efe6bd9841aa318464b1b1afc669fd69b2b1b8ec9b2b3698fac8d22a1b14", 0xb3}, {&(0x7f0000000d40)="576eea9ba92e88680eeb0858776c279eece9c3273e78f02f08dac81961f4bd96652e0f6f050590d07d073ac80aa0490146966dd8a624e5dd472b9344a17f53983b909bb05203f7cd069746d11f2880b4bbf44ef2df408a0ac34fb493782b60443d", 0x61}], 0x3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r3, 0x20, &(0x7f0000000300)={&(0x7f00000003c0)=""/148, 0x94, 0x0, &(0x7f0000000480)=""/86, 0x56}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x50}}, 0x4000000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0xc) connect$x25(r7, &(0x7f0000000a80), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x40080c2) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000001401002dbd7000fedb250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2564208e0113a2b25c8ec79c52aae17de1f76194f6cc634911345f7fcf0cf9e6ec2ea4fc51978d15834fefa0ef23fad560ec5464d9b367b401136365635179094109600f72b093f709e44adb57fac0e24ae09c6ca2f51562b7fdb61d3e596c7aff719499", @ANYRES16=0x0, @ANYBLOB="b800dd2e770000190001000000000000000000e0000002000000000000000000000000fc02000000000000000000000000000100000000000000000a00200000000000", @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000a3e01000000000000000000000000000200000000000800000000000000000000000000fcb80a16a92cf619000000000000000000000000fe0500ffffe64d40ef00000010f925dd0be60bb4", @ANYBLOB="8048c210a687f58fd154ffcd3b128bd139f6ed75d0bb04e1ef45f867f5efad6f2e5503445777f2e2e4895df82f1098d7d0d85ddef47d332482e24d1a40069e5e66b67801920c00716a8ccf99ae704901ad200f409a31564f67cf01836881336c42452082923623910570"], 0xb8}}, 0x4004045) r12 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10, 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r12, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) 0s ago: executing program 1 (id=566): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8d5b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000007100)={0x0, 0x0, &(0x7f00000070c0)={&(0x7f0000007080)=@setlink={0x30, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): entered promiscuous mode [ 86.523976][ T5838] veth0_vlan: entered promiscuous mode [ 86.535646][ T5824] veth0_macvtap: entered promiscuous mode [ 86.553282][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.561495][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.576590][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.588471][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.615861][ T5824] veth1_macvtap: entered promiscuous mode [ 86.623868][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.632991][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.643697][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.656243][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.672650][ T5838] veth1_vlan: entered promiscuous mode [ 86.683018][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.694334][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.703061][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.713319][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.730239][ T5829] veth0_macvtap: entered promiscuous mode [ 86.751664][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.761353][ T5840] Bluetooth: hci0: command tx timeout [ 86.768242][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.778004][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.786981][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.823503][ T5829] veth1_macvtap: entered promiscuous mode [ 86.837689][ T5840] Bluetooth: hci1: command tx timeout [ 86.837699][ T5835] Bluetooth: hci2: command tx timeout [ 86.876364][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.887513][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.897787][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.909949][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.923538][ T5840] Bluetooth: hci4: command tx timeout [ 86.924782][ T5835] Bluetooth: hci3: command tx timeout [ 86.932010][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.985700][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.011001][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.021370][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.037952][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.050412][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.071017][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.083637][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.098264][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.109357][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.119970][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.130757][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.142442][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.182089][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.192763][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.202896][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.215419][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.225393][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.235987][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.247597][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.283241][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.295390][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.307735][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.316835][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.350126][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.359750][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.368972][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.378396][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.407912][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.416700][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.428756][ T5838] veth0_macvtap: entered promiscuous mode [ 87.459819][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.483079][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.500547][ T5838] veth1_macvtap: entered promiscuous mode [ 87.516580][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.525954][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.602429][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.620616][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.680886][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.683843][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.698431][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.725741][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.736578][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.746517][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.757036][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.767669][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.778136][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.789523][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.805474][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.816539][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.826686][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.839006][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.848942][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.859638][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.870639][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.881208][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.893152][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.918893][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.929981][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.941386][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.950539][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.003338][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.036152][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.101910][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.119373][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.128959][ T5915] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 88.166994][ T5915] veth1_vlan: entered allmulticast mode [ 88.191372][ T5915] team0: Device veth1_vlan failed to register rx_handler [ 88.229868][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.251595][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.291303][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 88.298507][ T5912] Bluetooth: MGMT ver 1.23 [ 88.321569][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.330470][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.363104][ T5915] syz.1.2 (5915) used greatest stack depth: 20296 bytes left [ 88.547309][ T5925] pimreg: entered allmulticast mode [ 88.607054][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.646042][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.702829][ T5929] pimreg: left allmulticast mode [ 88.807543][ T5931] netlink: 'syz.4.5': attribute type 23 has an invalid length. [ 88.831220][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.841506][ T5927] ªªªªªª: renamed from lo (while UP) [ 88.847790][ T5835] Bluetooth: hci0: command tx timeout [ 88.863772][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.915208][ T5835] Bluetooth: hci1: command tx timeout [ 88.915837][ T5840] Bluetooth: hci2: command tx timeout [ 88.995477][ T5840] Bluetooth: hci4: command tx timeout [ 89.004366][ T5840] Bluetooth: hci3: command tx timeout [ 89.034975][ T5937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.216528][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.359444][ T5947] Illegal XDP return value 4294967294 on prog (id 4) dev N/A, expect packet loss! [ 89.731615][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 89.763286][ T5954] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.772450][ T5954] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.781679][ T5954] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.791069][ T5954] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.849834][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 89.990911][ T5954] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.000555][ T5954] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.009544][ T5954] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.019985][ T5954] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.259182][ T5961] Zero length message leads to an empty skb [ 90.556175][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 90.677212][ T5975] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.686100][ T5975] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.695512][ T5975] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.700031][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 90.704558][ T5975] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.731660][ T5975] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.742431][ T5975] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.752918][ T5975] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.763667][ T5975] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.012289][ T5988] netlink: 'syz.0.20': attribute type 12 has an invalid length. [ 91.053550][ T5988] netlink: 248 bytes leftover after parsing attributes in process `syz.0.20'. [ 91.056879][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 91.144098][ T5994] bridge_slave_1: left allmulticast mode [ 91.156920][ T5994] bridge_slave_1: left promiscuous mode [ 91.173187][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.216504][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 91.226468][ T5999] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 91.227211][ T5994] bridge_slave_0: left allmulticast mode [ 91.238716][ T5999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.249639][ T5994] bridge_slave_0: left promiscuous mode [ 91.257691][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.803933][ T978] cfg80211: failed to load regulatory.db [ 91.881695][ T6017] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20003 [ 91.905136][ T6015] bond0: (slave bond_slave_0): Releasing backup interface [ 91.953936][ T6015] bond0: (slave bond_slave_1): Releasing backup interface [ 92.028306][ T6015] team0: Port device team_slave_0 removed [ 92.089989][ T6015] team0: Port device team_slave_1 removed [ 92.117238][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.135770][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.154565][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.163398][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.541720][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 92.896763][ T6054] netlink: 104 bytes leftover after parsing attributes in process `syz.2.39'. [ 92.951884][ T6054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.316946][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 93.324010][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.391540][ T978] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 93.424280][ T978] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 93.431750][ T978] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 93.462202][ T978] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 93.471225][ T978] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 93.480294][ T978] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 93.488506][ T978] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 93.497089][ T978] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 93.518767][ T978] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 93.683548][ T6092] __nla_validate_parse: 1 callbacks suppressed [ 93.683567][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 93.700297][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 93.775555][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 93.928187][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 94.060967][ T6100] syz.0.47: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 94.100260][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.118202][ T6100] CPU: 0 UID: 0 PID: 6100 Comm: syz.0.47 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 94.118235][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 94.118253][ T6100] Call Trace: [ 94.118265][ T6100] [ 94.118274][ T6100] dump_stack_lvl+0x189/0x250 [ 94.118323][ T6100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.118354][ T6100] ? __pfx__printk+0x10/0x10 [ 94.118376][ T6100] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 94.118411][ T6100] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 94.118448][ T6100] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 94.118485][ T6100] warn_alloc+0x214/0x310 [ 94.118522][ T6100] ? __pfx_warn_alloc+0x10/0x10 [ 94.118551][ T6100] ? kasan_save_track+0x4f/0x80 [ 94.118574][ T6100] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 94.118598][ T6100] ? xskq_create+0x56/0x170 [ 94.118626][ T6100] ? __x64_sys_setsockopt+0x18b/0x220 [ 94.118649][ T6100] ? do_syscall_64+0xf6/0x210 [ 94.118677][ T6100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.118710][ T6100] __vmalloc_node_range_noprof+0x125/0x12c0 [ 94.118774][ T6100] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.118807][ T6100] ? __kasan_kmalloc+0x93/0xb0 [ 94.118838][ T6100] vmalloc_user_noprof+0x74/0x80 [ 94.118867][ T6100] ? xskq_create+0xbf/0x170 [ 94.118899][ T6100] xskq_create+0xbf/0x170 [ 94.118929][ T6100] xsk_init_queue+0xb0/0x110 [ 94.118959][ T6100] xsk_setsockopt+0x43f/0x710 [ 94.118988][ T6100] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.119026][ T6100] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 94.119049][ T6100] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.119076][ T6100] do_sock_setsockopt+0x257/0x3e0 [ 94.119103][ T6100] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 94.119124][ T6100] ? __fget_files+0x2a/0x420 [ 94.119160][ T6100] ? __fget_files+0x3a0/0x420 [ 94.119185][ T6100] ? __fget_files+0x2a/0x420 [ 94.119221][ T6100] __x64_sys_setsockopt+0x18b/0x220 [ 94.119251][ T6100] do_syscall_64+0xf6/0x210 [ 94.119282][ T6100] ? clear_bhb_loop+0x45/0xa0 [ 94.119308][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.119327][ T6100] RIP: 0033:0x7f5f6298e969 [ 94.119354][ T6100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.119371][ T6100] RSP: 002b:00007f5f637f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.119393][ T6100] RAX: ffffffffffffffda RBX: 00007f5f62bb6240 RCX: 00007f5f6298e969 [ 94.119408][ T6100] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 94.119421][ T6100] RBP: 00007f5f62a10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 94.119434][ T6100] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.119447][ T6100] R13: 0000000000000001 R14: 00007f5f62bb6240 R15: 00007ffcc57307d8 [ 94.119480][ T6100] [ 94.426052][ T6100] Mem-Info: [ 94.429311][ T6100] active_anon:4516 inactive_anon:0 isolated_anon:0 [ 94.429311][ T6100] active_file:1287 inactive_file:38305 isolated_file:0 [ 94.429311][ T6100] unevictable:768 dirty:1569 writeback:0 [ 94.429311][ T6100] slab_reclaimable:9846 slab_unreclaimable:97285 [ 94.429311][ T6100] mapped:24439 shmem:1426 pagetables:768 [ 94.429311][ T6100] sec_pagetables:0 bounce:0 [ 94.429311][ T6100] kernel_misc_reclaimable:0 [ 94.429311][ T6100] free:1360960 free_pcp:1295 free_cma:0 [ 94.488140][ T6100] Node 0 active_anon:17864kB inactive_anon:0kB active_file:5148kB inactive_file:153148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97756kB dirty:6268kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10596kB pagetables:3072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 94.527852][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.567246][ T6100] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 94.747183][ T6100] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.789348][ T6100] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 94.814284][ T6100] Node 0 DMA32 free:1472860kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:18880kB inactive_anon:0kB active_file:5344kB inactive_file:153056kB unevictable:1536kB writepending:6268kB present:3129332kB managed:2564100kB mlocked:0kB bounce:0kB free_pcp:4904kB local_pcp:3584kB free_cma:0kB [ 94.853202][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.890356][ T6100] lowmem_reserve[]: 0 0 0 0 0 [ 94.902540][ T6100] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 94.964817][ T6100] lowmem_reserve[]: 0 0 0 0 0 [ 94.967376][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.969606][ T6100] Node 1 [ 94.979940][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.984270][ T6100] Normal free:3908636kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.020728][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.040309][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.048977][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.055823][ T6100] lowmem_reserve[]: 0 0 0 0 0 [ 95.077252][ T6100] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.129109][ T6100] Node 0 DMA32: 2*4kB (UM) 4*8kB (UME) 1*16kB (U) 17*32kB (UE) 9*64kB (UE) 23*128kB (ME) 8*256kB (ME) 8*512kB (UM) 4*1024kB (UM) 6*2048kB (UM) 353*4096kB (M) = 1472536kB [ 95.188379][ T6100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 95.232899][ T6100] Node 1 Normal: 229*4kB (UE) 61*8kB (UME) 34*16kB (UME) 239*32kB (UME) 121*64kB (UME) 31*128kB (UME) 15*256kB (UM) 5*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3908668kB [ 95.277388][ T6100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.288737][ T6100] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.301268][ T6100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.310988][ T6100] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.321233][ T6100] 42245 total pagecache pages [ 95.326145][ T6100] 0 pages in swap cache [ 95.330327][ T6100] Free swap = 124996kB [ 95.334711][ T6100] Total swap = 124996kB [ 95.338892][ T6100] 2097051 pages RAM [ 95.342721][ T6100] 0 pages HighMem/MovableOnly [ 95.348633][ T6100] 424368 pages reserved [ 95.352841][ T6100] 0 pages cma reserved [ 95.596295][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.788412][ T5880] IPVS: starting estimator thread 0... [ 95.841482][ T6138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.907174][ T6137] IPVS: using max 25 ests per chain, 60000 per kthread [ 96.562981][ T36] bridge_slave_1: left allmulticast mode [ 96.580831][ T36] bridge_slave_1: left promiscuous mode [ 96.590328][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.607148][ T6158] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 96.621909][ T36] bridge_slave_0: left allmulticast mode [ 96.644355][ T6158] netlink: 'syz.2.66': attribute type 3 has an invalid length. [ 96.651960][ T6158] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 96.656233][ T36] bridge_slave_0: left promiscuous mode [ 96.686510][ T6158] netlink: 200 bytes leftover after parsing attributes in process `syz.2.66'. [ 96.693529][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.714624][ T6158] NCSI netlink: No device for ifindex 0 [ 97.174193][ T5835] Bluetooth: hci2: command tx timeout [ 97.689122][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.702475][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.712631][ T36] bond0 (unregistering): Released all slaves [ 97.736725][ T6111] chnl_net:caif_netlink_parms(): no params data found [ 98.012104][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 98.295099][ T6199] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 98.439187][ T6208] can: request_module (can-proto-3) failed. [ 98.786976][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.816583][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.843017][ T6111] bridge_slave_0: entered allmulticast mode [ 98.866104][ T6111] bridge_slave_0: entered promiscuous mode [ 98.876044][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.883351][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.892362][ T6111] bridge_slave_1: entered allmulticast mode [ 98.905396][ T6111] bridge_slave_1: entered promiscuous mode [ 98.922505][ T6236] macsec1: entered allmulticast mode [ 98.929957][ T6236] macvlan0: entered allmulticast mode [ 98.936249][ T6236] veth1_vlan: entered allmulticast mode [ 98.976922][ T6236] macvlan0: left allmulticast mode [ 98.982547][ T6236] veth1_vlan: left allmulticast mode [ 99.245199][ T5840] Bluetooth: hci2: command tx timeout [ 99.261542][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 99.372851][ T36] hsr_slave_0: left promiscuous mode [ 99.396215][ T36] hsr_slave_1: left promiscuous mode [ 99.412903][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.437321][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.449168][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.470210][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.560866][ T36] veth1_macvtap: left promiscuous mode [ 99.570853][ T36] veth0_macvtap: left promiscuous mode [ 99.578360][ T36] veth1_vlan: left promiscuous mode [ 99.589521][ T36] veth0_vlan: left promiscuous mode [ 100.110876][ T36] team0 (unregistering): Port device team_slave_1 removed [ 100.154721][ T36] team0 (unregistering): Port device team_slave_0 removed [ 100.354433][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.838205][ T6111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.863105][ T6111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.117856][ T6111] team0: Port device team_slave_0 added [ 101.192898][ T6111] team0: Port device team_slave_1 added [ 101.211545][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 101.316963][ T5835] Bluetooth: hci2: command tx timeout [ 101.327603][ T6303] netlink: 52 bytes leftover after parsing attributes in process `syz.1.96'. [ 101.381838][ T6292] 8021q: VLANs not supported on vxcan1 [ 101.414726][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.421725][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.454599][ T6111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.536294][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.543383][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.605531][ T6111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.659150][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'. [ 101.839227][ T6315] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 101.858482][ T6315] bridge1: entered allmulticast mode [ 102.207789][ T6111] hsr_slave_0: entered promiscuous mode [ 102.215375][ T6111] hsr_slave_1: entered promiscuous mode [ 102.254743][ T6111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.262751][ T6111] Cannot create hsr debugfs directory [ 103.091235][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 103.104724][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 103.113816][ T6367] netlink: 2 bytes leftover after parsing attributes in process `syz.4.109'. [ 103.404216][ T5835] Bluetooth: hci2: command tx timeout [ 103.455948][ T6381] netlink: 'syz.1.112': attribute type 32 has an invalid length. [ 103.518927][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 104.005200][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 104.022676][ T6392] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 104.614859][ T6407] tun0: tun_chr_ioctl cmd 1074812117 [ 105.011343][ T6111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.062028][ T6111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.158922][ T6111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.243357][ T6111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.499773][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 105.708036][ T6111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.806352][ T6111] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.844046][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.851288][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.921368][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.928574][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.073421][ T6445] netlink: 'syz.2.125': attribute type 3 has an invalid length. [ 106.836962][ T6473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.132'. [ 106.911220][ T6111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.095836][ T6111] veth0_vlan: entered promiscuous mode [ 107.127803][ T6111] veth1_vlan: entered promiscuous mode [ 107.282628][ T6111] veth0_macvtap: entered promiscuous mode [ 107.348383][ T6111] veth1_macvtap: entered promiscuous mode [ 107.441087][ T6494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.137'. [ 107.451050][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.494379][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.524355][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.541356][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.137'. [ 107.554344][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.584337][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.609354][ T6498] netlink: 'syz.1.137': attribute type 7 has an invalid length. [ 107.614304][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.657867][ T6498] netlink: 'syz.1.137': attribute type 8 has an invalid length. [ 107.660453][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.740374][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.744232][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 107.787971][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.818658][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.862745][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.911193][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.952089][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.983685][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.032484][ T6494] netlink: 152 bytes leftover after parsing attributes in process `syz.1.137'. [ 108.055873][ T6494] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 108.126954][ T6111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.164088][ T6111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.204484][ T6111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.213265][ T6111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.246648][ T6504] netlink: 'syz.2.139': attribute type 3 has an invalid length. [ 108.254697][ T6504] netlink: 732 bytes leftover after parsing attributes in process `syz.2.139'. [ 108.322031][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 108.375678][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 108.561164][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.598770][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.719086][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.753760][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.803395][ T6521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.142'. [ 109.139699][ T6529] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.236833][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.390386][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.538335][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.930375][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.535152][ T12] bridge_slave_1: left allmulticast mode [ 110.540877][ T12] bridge_slave_1: left promiscuous mode [ 110.602806][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.682203][ T12] bridge_slave_0: left allmulticast mode [ 110.699336][ T12] bridge_slave_0: left promiscuous mode [ 110.736715][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.759618][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.768531][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.776999][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.788874][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.797514][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.278520][ T6577] syz.4.155 uses obsolete (PF_INET,SOCK_PACKET) [ 111.397330][ T6577] IPVS: Scheduler module ip_vs_sip not found [ 111.403659][ T6581] IPVS: length: 24 != 16106127384 [ 111.698755][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.713111][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.731377][ T12] bond0 (unregistering): Released all slaves [ 112.230916][ T6595] netlink: 'syz.1.161': attribute type 97 has an invalid length. [ 112.412192][ T12] hsr_slave_0: left promiscuous mode [ 112.439461][ T12] hsr_slave_1: left promiscuous mode [ 112.455105][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.477194][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.508295][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.526877][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.563311][ T12] veth1_macvtap: left promiscuous mode [ 112.590614][ T12] veth0_macvtap: left promiscuous mode [ 112.617034][ T12] veth1_vlan: left promiscuous mode [ 112.634358][ T12] veth0_vlan: left promiscuous mode [ 112.835509][ T5835] Bluetooth: hci2: command tx timeout [ 113.070126][ T6616] __nla_validate_parse: 1 callbacks suppressed [ 113.070146][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 113.253979][ T30] audit: type=1800 audit(1746083523.048:2): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.168" name="cgroup.controllers" dev="tmpfs" ino=267 res=0 errno=0 [ 113.580558][ T12] team0 (unregistering): Port device team_slave_1 removed [ 113.623380][ T12] team0 (unregistering): Port device team_slave_0 removed [ 113.868633][ T6629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.108767][ T6610] tipc: MTU too low for tipc bearer [ 114.363598][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 114.531234][ T6569] chnl_net:caif_netlink_parms(): no params data found [ 114.864791][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 114.889076][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.180'. [ 114.915732][ T5835] Bluetooth: hci2: command tx timeout [ 114.933530][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.942737][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.951702][ T6569] bridge_slave_0: entered allmulticast mode [ 114.959684][ T6569] bridge_slave_0: entered promiscuous mode [ 115.028063][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.035706][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.051360][ T6569] bridge_slave_1: entered allmulticast mode [ 115.075162][ T6569] bridge_slave_1: entered promiscuous mode [ 115.289924][ T6569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.330208][ T6569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.411149][ T6569] team0: Port device team_slave_0 added [ 115.429534][ T6569] team0: Port device team_slave_1 added [ 115.458853][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 115.501230][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.513223][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.560071][ T6569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.575343][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.582332][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.634315][ T6569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.913312][ T6701] netlink: 184 bytes leftover after parsing attributes in process `syz.1.190'. [ 115.951667][ T6569] hsr_slave_0: entered promiscuous mode [ 115.985391][ T6569] hsr_slave_1: entered promiscuous mode [ 116.009321][ T6569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.035096][ T6569] Cannot create hsr debugfs directory [ 116.705662][ T6736] openvswitch: netlink: IP tunnel dst address not specified [ 116.994801][ T5835] Bluetooth: hci2: command tx timeout [ 117.010670][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 117.103767][ T6760] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 117.326779][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 117.659991][ T6775] netlink: 72 bytes leftover after parsing attributes in process `syz.1.214'. [ 117.741583][ T6772] warning: `syz.4.213' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.794077][ T6569] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.844067][ T6569] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.879156][ T6569] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.921499][ T6569] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.951414][ T6784] netlink: 'syz.4.216': attribute type 6 has an invalid length. [ 118.104074][ T6759] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 118.376442][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.500570][ T6800] netlink: 'syz.0.223': attribute type 21 has an invalid length. [ 118.545647][ T6569] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.584264][ T6800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.223'. [ 118.612258][ T6807] netlink: 'syz.0.223': attribute type 21 has an invalid length. [ 118.631769][ T6807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.223'. [ 118.727911][ T6805] netlink: 96 bytes leftover after parsing attributes in process `syz.4.225'. [ 118.785936][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.793120][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.882150][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.889397][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.066826][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 119.075877][ T5835] Bluetooth: hci2: command tx timeout [ 119.083851][ T6819] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 119.240314][ T6569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.525188][ T30] audit: type=1800 audit(1746083529.318:3): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.224" name="cgroup.controllers" dev="tmpfs" ino=329 res=0 errno=0 [ 119.579617][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 119.588777][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.660999][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.035871][ T6846] netlink: 21 bytes leftover after parsing attributes in process `syz.0.234'. [ 120.081033][ T6846] gretap0: entered promiscuous mode [ 120.109934][ T6569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.135386][ T6841] syzkaller1: entered promiscuous mode [ 120.141666][ T6841] syzkaller1: entered allmulticast mode [ 120.162413][ T6853] netlink: 92 bytes leftover after parsing attributes in process `syz.4.233'. [ 120.183985][ T6853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.206692][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.233'. [ 120.427738][ T6569] veth0_vlan: entered promiscuous mode [ 120.484929][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 120.503690][ T6569] veth1_vlan: entered promiscuous mode [ 120.549622][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 120.567040][ T6869] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.575933][ T6869] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.584827][ T6869] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.593566][ T6869] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.615957][ T6874] team_slave_0: entered promiscuous mode [ 120.621880][ T6874] team_slave_1: entered promiscuous mode [ 120.630316][ T6874] macsec1: entered promiscuous mode [ 120.638229][ T6874] team0: entered promiscuous mode [ 120.646583][ T6874] team0: left promiscuous mode [ 120.652002][ T6874] team_slave_0: left promiscuous mode [ 120.657561][ T6874] team_slave_1: left promiscuous mode [ 120.777767][ T6569] veth0_macvtap: entered promiscuous mode [ 120.825519][ T6878] netlink: 'syz.2.243': attribute type 2 has an invalid length. [ 120.906800][ T6569] veth1_macvtap: entered promiscuous mode [ 121.020261][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.036910][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.048092][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.069608][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.080468][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.093339][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.107344][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.218835][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.255346][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.294250][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.334237][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.379168][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.429032][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.482770][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.563545][ T6902] geneve2: entered promiscuous mode [ 121.607197][ T6902] geneve2: entered allmulticast mode [ 121.763131][ T6569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.789513][ T6569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.831077][ T6569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.849001][ T6569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.306456][ T6931] ip6tnl1: entered promiscuous mode [ 122.311745][ T6931] ip6tnl1: entered allmulticast mode [ 122.390746][ T6931] team0: Device ip6tnl1 is of different type [ 122.464705][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.482881][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.574944][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.592368][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.704892][ T6949] netlink: 'syz.2.264': attribute type 101 has an invalid length. [ 122.962130][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.336199][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.503970][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.678919][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.751645][ T6975] __nla_validate_parse: 5 callbacks suppressed [ 123.751666][ T6975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'. [ 123.877650][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.892525][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.900481][ T12] bridge_slave_1: left allmulticast mode [ 123.906748][ T12] bridge_slave_1: left promiscuous mode [ 123.906784][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.912526][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.931036][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.940366][ T12] bridge_slave_0: left allmulticast mode [ 123.946900][ T12] bridge_slave_0: left promiscuous mode [ 123.952819][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.953715][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.302496][ T6996] netlink: 192 bytes leftover after parsing attributes in process `syz.1.274'. [ 124.374020][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.386768][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.396930][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.407714][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.420292][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.879906][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.893667][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.905691][ T12] bond0 (unregistering): Released all slaves [ 125.237549][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'. [ 125.268628][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 125.393847][ T7013] xt_CT: No such helper "snmp" [ 125.653061][ T12] hsr_slave_0: left promiscuous mode [ 125.660453][ T12] hsr_slave_1: left promiscuous mode [ 125.668522][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.676071][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.687572][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.696156][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.730754][ T12] veth1_macvtap: left promiscuous mode [ 125.736680][ T12] veth0_macvtap: left promiscuous mode [ 125.742817][ T12] veth1_vlan: left promiscuous mode [ 125.748948][ T12] veth0_vlan: left promiscuous mode [ 126.034459][ T5835] Bluetooth: hci0: command tx timeout [ 126.179330][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.214934][ T12] team0 (unregistering): Port device team_slave_0 removed [ 126.434774][ T5835] Bluetooth: hci2: command tx timeout [ 126.589968][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 126.755238][ T7029] netlink: 108 bytes leftover after parsing attributes in process `syz.1.285'. [ 126.982907][ T6999] chnl_net:caif_netlink_parms(): no params data found [ 127.150307][ T6979] chnl_net:caif_netlink_parms(): no params data found [ 127.521948][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.549295][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.571765][ T6999] bridge_slave_0: entered allmulticast mode [ 127.581254][ T6999] bridge_slave_0: entered promiscuous mode [ 127.620468][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.632379][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.641918][ T6999] bridge_slave_1: entered allmulticast mode [ 127.655552][ T6999] bridge_slave_1: entered promiscuous mode [ 127.777856][ T6999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.791337][ T6999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.944442][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 127.983901][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.009998][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.018371][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.026887][ T6979] bridge_slave_0: entered allmulticast mode [ 128.038965][ T6979] bridge_slave_0: entered promiscuous mode [ 128.050368][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.059390][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.068475][ T6979] bridge_slave_1: entered allmulticast mode [ 128.077616][ T6979] bridge_slave_1: entered promiscuous mode [ 128.090166][ T6999] team0: Port device team_slave_0 added [ 128.099650][ T6999] team0: Port device team_slave_1 added [ 128.114530][ T5835] Bluetooth: hci0: command tx timeout [ 128.139304][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.258364][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.266103][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.292172][ T6999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.315098][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.346259][ T7081] tipc: Started in network mode [ 128.351337][ T7081] tipc: Node identity 5afeb4b69033, cluster identity 4711 [ 128.362633][ T7081] tipc: Enabled bearer , priority 0 [ 128.428987][ T7080] syzkaller0: entered promiscuous mode [ 128.434968][ T7080] syzkaller0: entered allmulticast mode [ 128.455024][ T7080] tipc: Resetting bearer [ 128.468752][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.485359][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.511762][ T6999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.523792][ T5835] Bluetooth: hci2: command tx timeout [ 128.543201][ T6979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.569904][ T7098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.581561][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.600238][ T7079] tipc: Resetting bearer [ 128.712120][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 129.445425][ T5880] tipc: Node number set to 3402478774 [ 129.759601][ T7079] tipc: Disabling bearer [ 129.772466][ T6979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.809481][ T7100] geneve2: entered promiscuous mode [ 129.817321][ T7100] geneve2: entered allmulticast mode [ 129.942822][ T6979] team0: Port device team_slave_0 added [ 130.003605][ T6999] hsr_slave_0: entered promiscuous mode [ 130.023163][ T6999] hsr_slave_1: entered promiscuous mode [ 130.043132][ T6979] team0: Port device team_slave_1 added [ 130.051847][ T7106] openvswitch: netlink: Actions may not be safe on all matching packets [ 130.170111][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.195242][ T5835] Bluetooth: hci0: command tx timeout [ 130.204955][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.243882][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 130.264199][ T6979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.278968][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 130.347562][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.355230][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.383642][ T6979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.439998][ T7119] 8021q: VLANs not supported on vxcan0 [ 130.447305][ T12] bridge_slave_1: left allmulticast mode [ 130.453063][ T12] bridge_slave_1: left promiscuous mode [ 130.462362][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.483258][ T12] bridge_slave_0: left allmulticast mode [ 130.498197][ T12] bridge_slave_0: left promiscuous mode [ 130.505045][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.601706][ T5835] Bluetooth: hci2: command tx timeout [ 130.888280][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.919942][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.961544][ T12] bond0 (unregistering): Released all slaves [ 131.129343][ T6979] hsr_slave_0: entered promiscuous mode [ 131.141476][ T6979] hsr_slave_1: entered promiscuous mode [ 131.152264][ T6979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.167664][ T6979] Cannot create hsr debugfs directory [ 131.430982][ T7147] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 131.468390][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 131.710067][ T5879] hid-generic 0005:0B57:0401.0002: collection stack underflow [ 131.718020][ T5879] hid-generic 0005:0B57:0401.0002: item 0 0 0 12 parsing failed [ 131.727183][ T5879] hid-generic 0005:0B57:0401.0002: probe with driver hid-generic failed with error -22 [ 131.804775][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 131.847081][ T12] hsr_slave_0: left promiscuous mode [ 131.859314][ T12] hsr_slave_1: left promiscuous mode [ 131.867853][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.869545][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 131.880706][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.892073][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 131.903996][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 131.915664][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.923128][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.947952][ T12] veth1_macvtap: left promiscuous mode [ 131.953627][ T12] veth0_macvtap: left promiscuous mode [ 131.960578][ T12] veth1_vlan: left promiscuous mode [ 131.966492][ T12] veth0_vlan: left promiscuous mode [ 132.049794][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 132.062462][ T7162] netlink: 'syz.1.325': attribute type 7 has an invalid length. [ 132.073248][ T7162] netlink: 'syz.1.325': attribute type 8 has an invalid length. [ 132.082416][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 132.274400][ T5835] Bluetooth: hci0: command tx timeout [ 132.433683][ T12] team0 (unregistering): Port device team_slave_1 removed [ 132.490517][ T12] team0 (unregistering): Port device team_slave_0 removed [ 132.534403][ T7168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.326'. [ 132.674437][ T5835] Bluetooth: hci2: command tx timeout [ 132.770263][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781218][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.575962][ T6999] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.626790][ T7197] netlink: 'syz.0.334': attribute type 3 has an invalid length. [ 133.635224][ T6999] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.732201][ T6999] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.851530][ T6999] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.242329][ T6979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.271216][ T6979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.361536][ T6979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.382011][ T7220] netlink: 'syz.0.343': attribute type 10 has an invalid length. [ 134.405326][ T6979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.413117][ T7220] openvswitch: netlink: Flow key attr not present in new flow. [ 134.493014][ T6999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.579002][ T6999] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.591144][ T7230] netlink: 'syz.0.346': attribute type 11 has an invalid length. [ 134.628917][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.636113][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.673442][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.680714][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.732721][ T7229] netlink: 'syz.0.346': attribute type 11 has an invalid length. [ 134.811606][ T7243] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 134.939251][ T6979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.970308][ T7247] xt_bpf: check failed: parse error [ 135.018904][ T6979] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.048440][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.055651][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.121575][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.128855][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.368394][ T6999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.540267][ T6999] veth0_vlan: entered promiscuous mode [ 135.602148][ T6999] veth1_vlan: entered promiscuous mode [ 135.621550][ T7273] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 135.640026][ T7273] __nla_validate_parse: 6 callbacks suppressed [ 135.640043][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 135.722325][ T6979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.744016][ T6999] veth0_macvtap: entered promiscuous mode [ 135.751613][ T7280] netlink: 256 bytes leftover after parsing attributes in process `syz.0.357'. [ 135.761132][ T6999] veth1_macvtap: entered promiscuous mode [ 135.828171][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.854165][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.885887][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.897225][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.909204][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.922636][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.934416][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.945430][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.974022][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.986621][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.027658][ T6999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.041660][ T6999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.059893][ T6999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.075143][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.359'. [ 136.086563][ T6999] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.350828][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.373960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.402506][ T7299] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 136.526659][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.553108][ T7302] team0: Port device gtp0 added [ 136.554588][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.606465][ T6979] veth0_vlan: entered promiscuous mode [ 136.641928][ T7307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.714017][ T6979] veth1_vlan: entered promiscuous mode [ 136.823469][ T7312] IPVS: Error connecting to the multicast addr [ 136.864777][ T7312] netlink: 'syz.1.365': attribute type 4 has an invalid length. [ 136.912087][ T6979] veth0_macvtap: entered promiscuous mode [ 136.940725][ T6979] veth1_macvtap: entered promiscuous mode [ 136.971161][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.995415][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.013735][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.025658][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.036142][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.047111][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.058778][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.073741][ T7317] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 137.107002][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.132973][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.146960][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.160445][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.170638][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.181242][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.192878][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.208300][ T6979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.233925][ T6979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.246706][ T7327] netlink: 'syz.1.370': attribute type 4 has an invalid length. [ 137.253535][ T6979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.263582][ T6979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.300227][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 137.317869][ T7325] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 137.420324][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.439060][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.592128][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.659837][ T7339] netlink: 'syz.2.373': attribute type 3 has an invalid length. [ 137.701718][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.710354][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.752702][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.939001][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.258002][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.552787][ T53] bridge_slave_1: left allmulticast mode [ 138.567799][ T53] bridge_slave_1: left promiscuous mode [ 138.573629][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.603062][ T53] bridge_slave_0: left allmulticast mode [ 138.620356][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 138.625023][ T53] bridge_slave_0: left promiscuous mode [ 138.661621][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.849367][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.870237][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.878635][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.888730][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.907643][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.926667][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.937632][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.946421][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.955771][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.967204][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.218175][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.239368][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.256192][ T53] bond0 (unregistering): Released all slaves [ 139.556769][ T7373] netlink: 6 bytes leftover after parsing attributes in process `syz.0.381'. [ 139.775147][ T7387] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.810160][ T7389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.382'. [ 139.950130][ T7358] chnl_net:caif_netlink_parms(): no params data found [ 140.010140][ T53] hsr_slave_0: left promiscuous mode [ 140.025362][ T53] hsr_slave_1: left promiscuous mode [ 140.033735][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.042272][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.053800][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.062555][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.063792][ T7398] netlink: 'syz.0.387': attribute type 4 has an invalid length. [ 140.101625][ T53] veth1_macvtap: left promiscuous mode [ 140.107331][ T53] veth0_macvtap: left promiscuous mode [ 140.113021][ T53] veth1_vlan: left promiscuous mode [ 140.120740][ T53] veth0_vlan: left promiscuous mode [ 140.267960][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 140.586918][ T53] team0 (unregistering): Port device team_slave_1 removed [ 140.651648][ T7405] IPv6: NLM_F_REPLACE set, but no existing node found! [ 140.666490][ T53] team0 (unregistering): Port device team_slave_0 removed [ 140.994794][ T5835] Bluetooth: hci2: command tx timeout [ 141.000546][ T5835] Bluetooth: hci0: command tx timeout [ 141.382461][ T7426] netlink: 'syz.1.396': attribute type 10 has an invalid length. [ 141.463938][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.476981][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.488266][ T7358] bridge_slave_0: entered allmulticast mode [ 141.500439][ T7358] bridge_slave_0: entered promiscuous mode [ 141.513315][ T7426] team0: Device ipvlan1 failed to register rx_handler [ 141.543174][ T7427] syzkaller0: entered promiscuous mode [ 141.560589][ T7427] syzkaller0: entered allmulticast mode [ 141.659255][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.681119][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.695334][ T7358] bridge_slave_1: entered allmulticast mode [ 141.703446][ T7358] bridge_slave_1: entered promiscuous mode [ 141.757961][ T7443] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 141.781068][ T7439] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.398'. [ 141.791007][ T7443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.399'. [ 141.838894][ T7358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.939963][ T7358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.108904][ T7358] team0: Port device team_slave_0 added [ 142.153398][ T7358] team0: Port device team_slave_1 added [ 142.258322][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.285543][ T7360] chnl_net:caif_netlink_parms(): no params data found [ 142.542953][ T7492] FAULT_INJECTION: forcing a failure. [ 142.542953][ T7492] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.595167][ T7492] CPU: 0 UID: 0 PID: 7492 Comm: syz.0.406 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 142.595215][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 142.595235][ T7492] Call Trace: [ 142.595249][ T7492] [ 142.595258][ T7492] dump_stack_lvl+0x189/0x250 [ 142.595294][ T7492] ? __lock_acquire+0xaac/0xd20 [ 142.595325][ T7492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.595353][ T7492] ? __pfx__printk+0x10/0x10 [ 142.595374][ T7492] ? __might_fault+0xb0/0x130 [ 142.595411][ T7492] should_fail_ex+0x414/0x560 [ 142.595448][ T7492] _copy_from_user+0x2d/0xb0 [ 142.595475][ T7492] ___sys_sendmsg+0x158/0x2a0 [ 142.595502][ T7492] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.595564][ T7492] ? __fget_files+0x2a/0x420 [ 142.595589][ T7492] ? __fget_files+0x3a0/0x420 [ 142.595632][ T7492] __x64_sys_sendmsg+0x19b/0x260 [ 142.595659][ T7492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.595701][ T7492] ? do_syscall_64+0xba/0x210 [ 142.595734][ T7492] do_syscall_64+0xf6/0x210 [ 142.595763][ T7492] ? clear_bhb_loop+0x45/0xa0 [ 142.595787][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.595806][ T7492] RIP: 0033:0x7f5f6298e969 [ 142.595828][ T7492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.595844][ T7492] RSP: 002b:00007f5f6385c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.595870][ T7492] RAX: ffffffffffffffda RBX: 00007f5f62bb5fa0 RCX: 00007f5f6298e969 [ 142.595885][ T7492] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 142.595897][ T7492] RBP: 00007f5f6385c090 R08: 0000000000000000 R09: 0000000000000000 [ 142.595909][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.595920][ T7492] R13: 0000000000000000 R14: 00007f5f62bb5fa0 R15: 00007ffcc57307d8 [ 142.595951][ T7492] [ 142.817928][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.852196][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.861176][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.888103][ T7358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.906187][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 142.925059][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 142.952692][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.964659][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.991459][ T7358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.074867][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 143.082142][ T5835] Bluetooth: hci0: command tx timeout [ 143.181608][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.301983][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 143.316443][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.323692][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.336952][ T7360] bridge_slave_0: entered allmulticast mode [ 143.345869][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 143.357416][ T7360] bridge_slave_0: entered promiscuous mode [ 143.372869][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 143.382500][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 143.392751][ T7527] netlink: 10 bytes leftover after parsing attributes in process `syz.1.413'. [ 143.403196][ T7527] nbd: socks must be embedded in a SOCK_ITEM attr [ 143.531216][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.582202][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.601346][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.613024][ T7360] bridge_slave_1: entered allmulticast mode [ 143.624596][ T7360] bridge_slave_1: entered promiscuous mode [ 143.709573][ T7358] hsr_slave_0: entered promiscuous mode [ 143.727836][ T7358] hsr_slave_1: entered promiscuous mode [ 143.771927][ T7360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.801537][ T7539] netlink: 'syz.1.417': attribute type 33 has an invalid length. [ 143.813968][ T7360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.828787][ T7539] netlink: 152 bytes leftover after parsing attributes in process `syz.1.417'. [ 143.851752][ T7542] FAULT_INJECTION: forcing a failure. [ 143.851752][ T7542] name failslab, interval 1, probability 0, space 0, times 1 [ 143.869311][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.2.418 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 143.869341][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 143.869353][ T7542] Call Trace: [ 143.869361][ T7542] [ 143.869369][ T7542] dump_stack_lvl+0x189/0x250 [ 143.869408][ T7542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.869437][ T7542] ? __pfx__printk+0x10/0x10 [ 143.869464][ T7542] ? __pfx___might_resched+0x10/0x10 [ 143.869488][ T7542] should_fail_ex+0x414/0x560 [ 143.869524][ T7542] should_failslab+0xa8/0x100 [ 143.869553][ T7542] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 143.869579][ T7542] ? __alloc_skb+0x112/0x2d0 [ 143.869605][ T7542] __alloc_skb+0x112/0x2d0 [ 143.869631][ T7542] netlink_sendmsg+0x5c6/0xb30 [ 143.869663][ T7542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.869688][ T7542] ? aa_sock_msg_perm+0x94/0x160 [ 143.869710][ T7542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.869732][ T7542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.869761][ T7542] __sock_sendmsg+0x219/0x270 [ 143.869794][ T7542] ____sys_sendmsg+0x505/0x830 [ 143.869824][ T7542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.869856][ T7542] ? import_iovec+0x74/0xa0 [ 143.869886][ T7542] ___sys_sendmsg+0x21f/0x2a0 [ 143.869913][ T7542] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.869975][ T7542] ? __fget_files+0x2a/0x420 [ 143.870001][ T7542] ? __fget_files+0x3a0/0x420 [ 143.870037][ T7542] __x64_sys_sendmsg+0x19b/0x260 [ 143.870065][ T7542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.870107][ T7542] ? do_syscall_64+0xba/0x210 [ 143.870140][ T7542] do_syscall_64+0xf6/0x210 [ 143.870169][ T7542] ? clear_bhb_loop+0x45/0xa0 [ 143.870193][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.870213][ T7542] RIP: 0033:0x7fdc1638e969 [ 143.870231][ T7542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.870247][ T7542] RSP: 002b:00007fdc1712e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.870268][ T7542] RAX: ffffffffffffffda RBX: 00007fdc165b5fa0 RCX: 00007fdc1638e969 [ 143.870282][ T7542] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 143.870294][ T7542] RBP: 00007fdc1712e090 R08: 0000000000000000 R09: 0000000000000000 [ 143.870306][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.870317][ T7542] R13: 0000000000000000 R14: 00007fdc165b5fa0 R15: 00007fffae53cd68 [ 143.870348][ T7542] [ 144.282635][ T7360] team0: Port device team_slave_0 added [ 144.370025][ T7360] team0: Port device team_slave_1 added [ 144.470954][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.489411][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.518739][ T7360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.547409][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.557430][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.584921][ T7360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.596673][ T53] bridge_slave_1: left allmulticast mode [ 144.606182][ T53] bridge_slave_1: left promiscuous mode [ 144.611990][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.630405][ T53] bridge_slave_0: left allmulticast mode [ 144.637303][ T53] bridge_slave_0: left promiscuous mode [ 144.643182][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.743230][ T7566] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 144.783051][ T7566] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 144.801385][ T7566] netlink: 'syz.2.422': attribute type 2 has an invalid length. [ 145.108134][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.120777][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.131490][ T53] bond0 (unregistering): Released all slaves [ 145.154985][ T5137] Bluetooth: hci0: command tx timeout [ 145.160452][ T5137] Bluetooth: hci2: command 0x041b tx timeout [ 145.367507][ T7571] gtp1: entered promiscuous mode [ 145.396525][ T7360] hsr_slave_0: entered promiscuous mode [ 145.407692][ T7360] hsr_slave_1: entered promiscuous mode [ 145.420029][ T7360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.427937][ T7360] Cannot create hsr debugfs directory [ 145.600348][ T7576] ip6gre1: entered allmulticast mode [ 145.754544][ T53] hsr_slave_0: left promiscuous mode [ 145.784879][ T53] hsr_slave_1: left promiscuous mode [ 145.792597][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.809882][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.828340][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.832428][ T7587] xt_connbytes: Forcing CT accounting to be enabled [ 145.854279][ T7587] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.866391][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.885389][ T7587] xt_bpf: check failed: parse error [ 145.912778][ T53] veth1_macvtap: left promiscuous mode [ 145.932072][ T53] veth0_macvtap: left promiscuous mode [ 145.937928][ T53] veth1_vlan: left promiscuous mode [ 145.943304][ T53] veth0_vlan: left promiscuous mode [ 146.439599][ T53] team0 (unregistering): Port device team_slave_1 removed [ 146.481095][ T53] team0 (unregistering): Port device team_slave_0 removed [ 147.240622][ T5137] Bluetooth: hci0: command tx timeout [ 147.246180][ T5835] Bluetooth: hci2: command 0x041b tx timeout [ 147.337192][ T7618] Bluetooth: MGMT ver 1.23 [ 147.409476][ T7358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.439203][ T7358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.461035][ T7358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.517178][ T7358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.800797][ T7358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.878407][ T7358] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.907583][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.914882][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.943683][ T7360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.965794][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.972989][ T7484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.014600][ T7360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.107296][ T7360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.123655][ T7360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.437535][ T7625] __nla_validate_parse: 4 callbacks suppressed [ 148.437556][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 148.658729][ T7360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.691576][ T7639] openvswitch: netlink: Missing key (keys=40, expected=100) [ 148.758347][ T7360] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.792250][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.799545][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.861769][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.869036][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.926946][ T7647] netlink: 'syz.1.444': attribute type 4 has an invalid length. [ 148.971491][ T7647] netlink: 'syz.1.444': attribute type 4 has an invalid length. [ 148.988504][ T7358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.042237][ T7647] netlink: 112 bytes leftover after parsing attributes in process `syz.1.444'. [ 149.208063][ T7358] veth0_vlan: entered promiscuous mode [ 149.219040][ T7657] FAULT_INJECTION: forcing a failure. [ 149.219040][ T7657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.236653][ T7358] veth1_vlan: entered promiscuous mode [ 149.256203][ T7657] CPU: 1 UID: 0 PID: 7657 Comm: syz.2.448 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 149.256242][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 149.256254][ T7657] Call Trace: [ 149.256261][ T7657] [ 149.256269][ T7657] dump_stack_lvl+0x189/0x250 [ 149.256301][ T7657] ? __lock_acquire+0xaac/0xd20 [ 149.256331][ T7657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.256358][ T7657] ? __pfx__printk+0x10/0x10 [ 149.256377][ T7657] ? __might_fault+0xb0/0x130 [ 149.256413][ T7657] should_fail_ex+0x414/0x560 [ 149.256448][ T7657] _copy_from_iter+0x1db/0x15a0 [ 149.256478][ T7657] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 149.256499][ T7657] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 149.256524][ T7657] ? __pfx__copy_from_iter+0x10/0x10 [ 149.256548][ T7657] ? __build_skb_around+0x257/0x3e0 [ 149.256573][ T7657] ? netlink_sendmsg+0x642/0xb30 [ 149.256592][ T7657] ? skb_put+0x11b/0x210 [ 149.256616][ T7657] netlink_sendmsg+0x6b2/0xb30 [ 149.256647][ T7657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.256670][ T7657] ? aa_sock_msg_perm+0x94/0x160 [ 149.256692][ T7657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.256714][ T7657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.256736][ T7657] __sock_sendmsg+0x219/0x270 [ 149.256768][ T7657] ____sys_sendmsg+0x505/0x830 [ 149.256797][ T7657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.256831][ T7657] ? import_iovec+0x74/0xa0 [ 149.256859][ T7657] ___sys_sendmsg+0x21f/0x2a0 [ 149.256903][ T7657] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.256982][ T7657] ? __fget_files+0x2a/0x420 [ 149.257007][ T7657] ? __fget_files+0x3a0/0x420 [ 149.257043][ T7657] __x64_sys_sendmsg+0x19b/0x260 [ 149.257070][ T7657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.257113][ T7657] ? do_syscall_64+0xba/0x210 [ 149.257147][ T7657] do_syscall_64+0xf6/0x210 [ 149.257176][ T7657] ? clear_bhb_loop+0x45/0xa0 [ 149.257201][ T7657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.257220][ T7657] RIP: 0033:0x7fdc1638e969 [ 149.257238][ T7657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.257252][ T7657] RSP: 002b:00007fdc1712e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.257273][ T7657] RAX: ffffffffffffffda RBX: 00007fdc165b5fa0 RCX: 00007fdc1638e969 [ 149.257287][ T7657] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 149.257298][ T7657] RBP: 00007fdc1712e090 R08: 0000000000000000 R09: 0000000000000000 [ 149.257310][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.257322][ T7657] R13: 0000000000000000 R14: 00007fdc165b5fa0 R15: 00007fffae53cd68 [ 149.257352][ T7657] [ 149.536868][ T7659] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.559122][ T5137] Bluetooth: hci2: command 0x041b tx timeout [ 149.560121][ T7358] veth0_macvtap: entered promiscuous mode [ 149.618823][ T7358] veth1_macvtap: entered promiscuous mode [ 149.638991][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.653828][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.663916][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.674455][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.685864][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.696496][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.706982][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.717036][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.728018][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.739472][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.768296][ T7358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.777232][ T7358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.787930][ T7358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.797263][ T7358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.014425][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.022593][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.058559][ T7360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.140367][ T5896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.170542][ T5896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.174582][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 150.695371][ T7360] veth0_vlan: entered promiscuous mode [ 150.726172][ T7360] veth1_vlan: entered promiscuous mode [ 150.813447][ T7360] veth0_macvtap: entered promiscuous mode [ 150.831510][ T7360] veth1_macvtap: entered promiscuous mode [ 150.886785][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.901726][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.904608][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 150.912571][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.935260][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.945401][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.960044][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.972372][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.003369][ T7705] smc: net device bond0 applied user defined pnetid SYZ [ 151.031704][ T7705] ipt_rpfilter: unknown options [ 151.042785][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.064386][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.086709][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.110363][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.128812][ T7714] FAULT_INJECTION: forcing a failure. [ 151.128812][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 151.131840][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.143162][ T7714] CPU: 1 UID: 0 PID: 7714 Comm: syz.2.460 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 151.143192][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 151.143204][ T7714] Call Trace: [ 151.143214][ T7714] [ 151.143223][ T7714] dump_stack_lvl+0x189/0x250 [ 151.143262][ T7714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.143294][ T7714] ? __pfx__printk+0x10/0x10 [ 151.143330][ T7714] ? ref_tracker_alloc+0x318/0x460 [ 151.143364][ T7714] should_fail_ex+0x414/0x560 [ 151.143403][ T7714] should_failslab+0xa8/0x100 [ 151.143445][ T7714] kmem_cache_alloc_noprof+0x73/0x3c0 [ 151.143483][ T7714] ? skb_clone+0x212/0x3a0 [ 151.143521][ T7714] skb_clone+0x212/0x3a0 [ 151.143559][ T7714] __netlink_deliver_tap+0x404/0x850 [ 151.143596][ T7714] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.143620][ T7714] netlink_deliver_tap+0x19c/0x1b0 [ 151.143644][ T7714] netlink_unicast+0x72f/0x8d0 [ 151.143688][ T7714] netlink_sendmsg+0x805/0xb30 [ 151.143729][ T7714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.143755][ T7714] ? aa_sock_msg_perm+0x94/0x160 [ 151.143779][ T7714] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.143803][ T7714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.143827][ T7714] __sock_sendmsg+0x219/0x270 [ 151.143863][ T7714] ____sys_sendmsg+0x505/0x830 [ 151.143895][ T7714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.143938][ T7714] ? import_iovec+0x74/0xa0 [ 151.143970][ T7714] ___sys_sendmsg+0x21f/0x2a0 [ 151.143999][ T7714] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.144072][ T7714] ? __fget_files+0x2a/0x420 [ 151.144098][ T7714] ? __fget_files+0x3a0/0x420 [ 151.144138][ T7714] __x64_sys_sendmsg+0x19b/0x260 [ 151.144167][ T7714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.144212][ T7714] ? do_syscall_64+0xba/0x210 [ 151.144248][ T7714] do_syscall_64+0xf6/0x210 [ 151.144279][ T7714] ? clear_bhb_loop+0x45/0xa0 [ 151.144304][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.144326][ T7714] RIP: 0033:0x7fdc1638e969 [ 151.144344][ T7714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.144362][ T7714] RSP: 002b:00007fdc1712e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.144384][ T7714] RAX: ffffffffffffffda RBX: 00007fdc165b5fa0 RCX: 00007fdc1638e969 [ 151.144400][ T7714] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 151.144413][ T7714] RBP: 00007fdc1712e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.144425][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.144438][ T7714] R13: 0000000000000000 R14: 00007fdc165b5fa0 R15: 00007fffae53cd68 [ 151.144471][ T7714] [ 151.423103][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.434684][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.522723][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.562797][ T7360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.584140][ T7360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.592899][ T7360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.602677][ T7360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.651896][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.743826][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.760374][ T7485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.774329][ T7485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.807490][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.815793][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.187034][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.195051][ T7721] xt_cgroup: invalid path, errno=-2 [ 152.282561][ T7724] xfrm1: entered promiscuous mode [ 152.291728][ T7724] xfrm1: entered allmulticast mode [ 152.341952][ T7726] netlink: 36 bytes leftover after parsing attributes in process `syz.1.465'. [ 152.691267][ T53] bridge_slave_1: left allmulticast mode [ 152.705308][ T53] bridge_slave_1: left promiscuous mode [ 152.711187][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.739947][ T53] bridge_slave_0: left allmulticast mode [ 152.745862][ T53] bridge_slave_0: left promiscuous mode [ 152.751645][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.856091][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.880186][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.898502][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.908744][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.925527][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.046255][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 153.075630][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 153.332492][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 153.395882][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.410539][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.422042][ T53] bond0 (unregistering): Released all slaves [ 153.449526][ T5137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.460599][ T5137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.469333][ T5137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.479271][ T5137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.488189][ T5137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.539338][ T7753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.471'. [ 153.654068][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 153.908262][ T7764] syz_tun: entered promiscuous mode [ 153.913909][ T7764] vlan2: entered promiscuous mode [ 154.019404][ T53] hsr_slave_0: left promiscuous mode [ 154.026929][ T53] hsr_slave_1: left promiscuous mode [ 154.027486][ T7773] netlink: 'syz.1.476': attribute type 13 has an invalid length. [ 154.033036][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.048975][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.056636][ T7774] netlink: 'syz.1.476': attribute type 13 has an invalid length. [ 154.067562][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.078492][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.111358][ T53] veth1_macvtap: left promiscuous mode [ 154.117472][ T53] veth0_macvtap: left promiscuous mode [ 154.125012][ T53] veth1_vlan: left promiscuous mode [ 154.130361][ T53] veth0_vlan: left promiscuous mode [ 154.533297][ T53] team0 (unregistering): Port device team_slave_1 removed [ 154.569189][ T53] team0 (unregistering): Port device team_slave_0 removed [ 154.935434][ T7771] FAULT_INJECTION: forcing a failure. [ 154.935434][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 154.954751][ T7771] CPU: 0 UID: 0 PID: 7771 Comm: syz.0.475 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 154.954779][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.954791][ T7771] Call Trace: [ 154.954798][ T7771] [ 154.954806][ T7771] dump_stack_lvl+0x189/0x250 [ 154.954843][ T7771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.954871][ T7771] ? __pfx__printk+0x10/0x10 [ 154.954896][ T7771] ? __pfx___might_resched+0x10/0x10 [ 154.954913][ T7771] ? fs_reclaim_acquire+0x7d/0x100 [ 154.954947][ T7771] should_fail_ex+0x414/0x560 [ 154.954982][ T7771] should_failslab+0xa8/0x100 [ 154.955010][ T7771] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.955040][ T7771] ? __alloc_skb+0x112/0x2d0 [ 154.955065][ T7771] __alloc_skb+0x112/0x2d0 [ 154.955108][ T7771] netlink_ack+0x146/0xa50 [ 154.955125][ T7771] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.955149][ T7771] ? ref_tracker_free+0x63a/0x7d0 [ 154.955167][ T7771] ? __copy_skb_header+0xa7/0x550 [ 154.955201][ T7771] netlink_rcv_skb+0x2a0/0x490 [ 154.955222][ T7771] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.955243][ T7771] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.955285][ T7771] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.955311][ T7771] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.955338][ T7771] netlink_unicast+0x758/0x8d0 [ 154.955400][ T7771] netlink_sendmsg+0x805/0xb30 [ 154.955431][ T7771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.955456][ T7771] ? aa_sock_msg_perm+0x94/0x160 [ 154.955478][ T7771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.955501][ T7771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.955522][ T7771] __sock_sendmsg+0x219/0x270 [ 154.955555][ T7771] ____sys_sendmsg+0x505/0x830 [ 154.955585][ T7771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.955619][ T7771] ? import_iovec+0x74/0xa0 [ 154.955648][ T7771] ___sys_sendmsg+0x21f/0x2a0 [ 154.955675][ T7771] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.955737][ T7771] ? __fget_files+0x2a/0x420 [ 154.955766][ T7771] ? __fget_files+0x3a0/0x420 [ 154.955803][ T7771] __x64_sys_sendmsg+0x19b/0x260 [ 154.955829][ T7771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.955871][ T7771] ? do_syscall_64+0xba/0x210 [ 154.955905][ T7771] do_syscall_64+0xf6/0x210 [ 154.955934][ T7771] ? clear_bhb_loop+0x45/0xa0 [ 154.955959][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.955986][ T7771] RIP: 0033:0x7f5f6298e969 [ 154.956004][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.956022][ T7771] RSP: 002b:00007f5f6385c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.956043][ T7771] RAX: ffffffffffffffda RBX: 00007f5f62bb5fa0 RCX: 00007f5f6298e969 [ 154.956058][ T7771] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 154.956070][ T7771] RBP: 00007f5f6385c090 R08: 0000000000000000 R09: 0000000000000000 [ 154.956082][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.956094][ T7771] R13: 0000000000000000 R14: 00007f5f62bb5fa0 R15: 00007ffcc57307d8 [ 154.956126][ T7771] [ 155.277437][ T5137] Bluetooth: hci0: command tx timeout [ 155.315330][ T7774] macvtap0: entered promiscuous mode [ 155.321958][ T7774] macvtap0: refused to change device tx_queue_len [ 155.329846][ T7773] macvtap0: refused to change device tx_queue_len [ 155.448277][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.534542][ T7733] chnl_net:caif_netlink_parms(): no params data found [ 155.555781][ T5835] Bluetooth: hci2: command tx timeout [ 155.781280][ T7801] bond0: option resend_igmp: invalid value (262144) [ 155.818665][ T7801] bond0: option resend_igmp: allowed values 0 - 255 [ 155.989052][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.000026][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.009485][ T7733] bridge_slave_0: entered allmulticast mode [ 156.032052][ T7733] bridge_slave_0: entered promiscuous mode [ 156.070962][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.090764][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.099045][ T7733] bridge_slave_1: entered allmulticast mode [ 156.107499][ T7733] bridge_slave_1: entered promiscuous mode [ 156.171187][ T7755] chnl_net:caif_netlink_parms(): no params data found [ 156.237060][ T7733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.269598][ T7733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.350471][ T7733] team0: Port device team_slave_0 added [ 156.432027][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.500107][ T7733] team0: Port device team_slave_1 added [ 156.595599][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.605900][ T7844] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 156.621701][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 156.713585][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.721886][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.764506][ T7733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.790644][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.809218][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.859252][ T7733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.893515][ T7840] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 157.013162][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.054510][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.061810][ T7755] bridge_slave_0: entered allmulticast mode [ 157.121947][ T7755] bridge_slave_0: entered promiscuous mode [ 157.217515][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.254812][ T7871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.498'. [ 157.289232][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.298946][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.314816][ T5835] Bluetooth: hci0: command tx timeout [ 157.324752][ T7755] bridge_slave_1: entered allmulticast mode [ 157.346357][ T7755] bridge_slave_1: entered promiscuous mode [ 157.449891][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.548807][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.589057][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.626904][ T7733] hsr_slave_0: entered promiscuous mode [ 157.632972][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.501'. [ 157.644633][ T5835] Bluetooth: hci2: command tx timeout [ 157.651235][ T7733] hsr_slave_1: entered promiscuous mode [ 157.679176][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.501'. [ 157.713903][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 157.850143][ T7755] team0: Port device team_slave_0 added [ 157.930325][ T7755] team0: Port device team_slave_1 added [ 158.120677][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.133581][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.156010][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 158.172828][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.186686][ T53] bridge_slave_1: left allmulticast mode [ 158.192380][ T53] bridge_slave_1: left promiscuous mode [ 158.199350][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.217554][ T53] bridge_slave_0: left allmulticast mode [ 158.228726][ T53] bridge_slave_0: left promiscuous mode [ 158.235200][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.269511][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 158.619690][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.632758][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.647714][ T53] bond0 (unregistering): Released all slaves [ 158.682371][ T7897] vlan2: entered allmulticast mode [ 158.687963][ T7897] batadv0: entered allmulticast mode [ 158.698999][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.724163][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.757733][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.794711][ T7916] trusted_key: syz.2.507 sent an empty control message without MSG_MORE. [ 159.037709][ T7932] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 159.258621][ T7755] hsr_slave_0: entered promiscuous mode [ 159.270923][ T7755] hsr_slave_1: entered promiscuous mode [ 159.279697][ T7755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.287419][ T7755] Cannot create hsr debugfs directory [ 159.396976][ T5835] Bluetooth: hci0: command tx timeout [ 159.449267][ T53] hsr_slave_0: left promiscuous mode [ 159.452614][ T7950] netlink: 148 bytes leftover after parsing attributes in process `syz.1.515'. [ 159.465000][ T53] hsr_slave_1: left promiscuous mode [ 159.470857][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.494280][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.502777][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.511648][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.547090][ T53] veth1_macvtap: left promiscuous mode [ 159.552925][ T53] veth0_macvtap: left promiscuous mode [ 159.559139][ T53] veth1_vlan: left promiscuous mode [ 159.565125][ T53] veth0_vlan: left promiscuous mode [ 159.714538][ T5835] Bluetooth: hci2: command tx timeout [ 160.026823][ T53] team0 (unregistering): Port device team_slave_1 removed [ 160.067335][ T53] team0 (unregistering): Port device team_slave_0 removed [ 160.780869][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 161.064311][ T7971] netem: change failed [ 161.079539][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 161.130819][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.518'. [ 161.474851][ T5835] Bluetooth: hci0: command tx timeout [ 161.582695][ T7986] netlink: 'syz.2.525': attribute type 10 has an invalid length. [ 161.590637][ T7986] netlink: 440 bytes leftover after parsing attributes in process `syz.2.525'. [ 161.611086][ T7986] netlink: 'syz.2.525': attribute type 2 has an invalid length. [ 161.631278][ T7988] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.526'. [ 161.657539][ T7988] bridge0: entered promiscuous mode [ 161.690818][ T7988] batman_adv: batadv0: Adding interface: macsec1 [ 161.714597][ T7988] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.747979][ T7988] batman_adv: batadv0: Interface activated: macsec1 [ 161.782913][ T7992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.526'. [ 161.797258][ T5835] Bluetooth: hci2: command tx timeout [ 161.840904][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'. [ 162.016721][ T7755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.050670][ T7755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.071354][ T7755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.090597][ T7755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.169597][ T8003] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 162.289389][ T7733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.316014][ T7733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.341462][ T7733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.369067][ T7733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.586006][ T7755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.648130][ T7733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.683773][ T7755] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.698548][ T7733] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.737793][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.744998][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.788037][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.795288][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.829675][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.836949][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.875582][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.882778][ T7484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.167143][ T8016] x_tables: duplicate underflow at hook 2 [ 163.192704][ T8016] netlink: 'syz.1.531': attribute type 29 has an invalid length. [ 163.315586][ T8022] netlink: 'syz.1.531': attribute type 29 has an invalid length. [ 163.346179][ T8016] netlink: 'syz.1.531': attribute type 10 has an invalid length. [ 163.381257][ T8016] team0: Device veth1_macvtap failed to register rx_handler [ 163.538771][ T7755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.602229][ T7733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.662446][ T8032] netlink: del zone limit has 4 unknown bytes [ 163.692383][ T7733] veth0_vlan: entered promiscuous mode [ 163.731083][ T7733] veth1_vlan: entered promiscuous mode [ 163.871099][ T7733] veth0_macvtap: entered promiscuous mode [ 163.897384][ T7733] veth1_macvtap: entered promiscuous mode [ 163.941398][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.972668][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.983078][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.994918][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.008720][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.040283][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.051544][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.067144][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.087069][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.100623][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.127391][ T7733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.137181][ T7733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.147391][ T7733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.148502][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.535'. [ 164.157804][ T7733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.316079][ T7755] veth0_vlan: entered promiscuous mode [ 164.386037][ T7755] veth1_vlan: entered promiscuous mode [ 164.510126][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.529948][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.547724][ T7755] veth0_macvtap: entered promiscuous mode [ 164.563910][ T7755] veth1_macvtap: entered promiscuous mode [ 164.627237][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.650189][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.676350][ T8050] 8021q: VLANs not supported on wg1 [ 164.712414][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.728875][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.749020][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.762728][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.784986][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.814177][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.856036][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.900957][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.946495][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 164.952974][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.990867][ T8063] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 164.999113][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.014244][ T8063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.541'. [ 165.024500][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.034764][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.045658][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.057544][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.156899][ T7755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.178635][ T7755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.199959][ T7755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.218647][ T7755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.387409][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.402372][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.466862][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.478995][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.508716][ T8072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 165.564914][ T7485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.996326][ T7485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.167585][ T7485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.359535][ T8076] bond3: entered promiscuous mode [ 166.366988][ T8076] bond3: entered allmulticast mode [ 166.374610][ T8076] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.446050][ T7485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.550545][ T5137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.559705][ T5137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.569363][ T5137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.577777][ T5137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.600676][ T5137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.707154][ T8089] IPv6: Can't replace route, no match found [ 166.912707][ T8093] syzkaller1: entered promiscuous mode [ 166.918788][ T8093] syzkaller1: entered allmulticast mode [ 166.950725][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 166.955890][ T7485] bridge_slave_1: left allmulticast mode [ 166.978746][ T7485] bridge_slave_1: left promiscuous mode [ 166.994806][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.020670][ T7485] bridge_slave_0: left allmulticast mode [ 167.034345][ T7485] bridge_slave_0: left promiscuous mode [ 167.040174][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.071470][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.087352][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.100470][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.112056][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.122718][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.736848][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.749755][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.762114][ T7485] bond0 (unregistering): Released all slaves [ 168.231923][ T8117] netlink: 196 bytes leftover after parsing attributes in process `syz.1.552'. [ 168.288076][ T8119] syzkaller0: entered allmulticast mode [ 168.320679][ T7485] hsr_slave_0: left promiscuous mode [ 168.327428][ T7485] hsr_slave_1: left promiscuous mode [ 168.341422][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.349232][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.363251][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.386159][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.432910][ T7485] veth1_macvtap: left promiscuous mode [ 168.442308][ T7485] veth0_macvtap: left promiscuous mode [ 168.450379][ T7485] veth1_vlan: left promiscuous mode [ 168.460969][ T7485] veth0_vlan: left promiscuous mode [ 168.499385][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 168.674317][ T5835] Bluetooth: hci0: command tx timeout [ 169.154677][ T5835] Bluetooth: hci2: command tx timeout [ 169.216629][ T8133] netlink: 48 bytes leftover after parsing attributes in process `syz.0.555'. [ 169.241708][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 169.287504][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 169.365992][ T8138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.554'. [ 169.832249][ T8140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.556'. [ 170.047967][ T8083] chnl_net:caif_netlink_parms(): no params data found [ 170.240391][ T8100] chnl_net:caif_netlink_parms(): no params data found [ 170.301937][ T8164] Bluetooth: MGMT ver 1.23 [ 170.327910][ T8164] veth0_to_bridge: entered promiscuous mode [ 170.399894][ T8163] veth0_to_bridge: left promiscuous mode [ 170.414019][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.423857][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.431350][ T8083] bridge_slave_0: entered allmulticast mode [ 170.439882][ T8083] bridge_slave_0: entered promiscuous mode [ 170.449851][ T8083] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.457530][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.466634][ T8083] bridge_slave_1: entered allmulticast mode [ 170.476417][ T8083] bridge_slave_1: entered promiscuous mode [ 170.764846][ T5137] Bluetooth: hci0: command tx timeout [ 170.807806][ T8083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.831498][ T8083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.888758][ T8187] Bluetooth: MGMT ver 1.23 [ 171.042508][ T8169] ------------[ cut here ]------------ [ 171.050015][ T8169] memcpy: detected field-spanning write (size 127) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 171.072305][ T8169] WARNING: CPU: 1 PID: 8169 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 171.082234][ T8169] Modules linked in: [ 171.086582][ T8169] CPU: 1 UID: 0 PID: 8169 Comm: syz.0.559 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 171.098586][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.108886][ T8169] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 171.114647][ T8169] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 171.134848][ T8169] RSP: 0018:ffffc90002f9f920 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.141340][ T8169] RAX: 27e97af6486db300 RBX: ffff888011546468 RCX: 0000000000080000 [ 171.149446][ T8169] RDX: ffffc90010444000 RSI: 00000000000051dd RDI: 00000000000051de [ 171.157764][ T8169] RBP: 0000000000000007 R08: ffffc90002f9f607 R09: 1ffff920005f3ec0 [ 171.166228][ T8169] R10: dffffc0000000000 R11: fffff520005f3ec1 R12: 000000000000007f [ 171.174417][ T8169] R13: 1ffff920005f3f4e R14: ffffc90002f9fa94 R15: 000000000000007f [ 171.182490][ T8169] FS: 00007f5f6381a6c0(0000) GS:ffff8881261c4000(0000) knlGS:0000000000000000 [ 171.191523][ T8169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.200053][ T8169] CR2: 00007f69c6f7d2d8 CR3: 00000000329f0000 CR4: 00000000003526f0 [ 171.208125][ T8169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.216217][ T8169] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.224668][ T8169] Call Trace: [ 171.227986][ T8169] [ 171.230960][ T8169] ip6_route_info_create+0x629/0xa70 [ 171.236941][ T8169] ip6_route_add+0x29/0x2f0 [ 171.241504][ T8169] ? ipv6_route_ioctl+0x313/0x480 [ 171.246640][ T8169] ipv6_route_ioctl+0x35c/0x480 [ 171.251567][ T8169] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 171.257144][ T8169] inet6_ioctl+0x219/0x280 [ 171.261614][ T8169] ? __pfx_inet6_ioctl+0x10/0x10 [ 171.266727][ T5137] Bluetooth: hci2: command tx timeout [ 171.272218][ T8169] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.278458][ T8169] sock_do_ioctl+0xd9/0x300 [ 171.283028][ T8169] ? __pfx_sock_do_ioctl+0x10/0x10 [ 171.288251][ T8169] ? __lock_acquire+0xaac/0xd20 [ 171.293198][ T8169] sock_ioctl+0x576/0x790 [ 171.297636][ T8169] ? __pfx_sock_ioctl+0x10/0x10 [ 171.302627][ T8169] ? __fget_files+0x3a0/0x420 [ 171.307379][ T8169] ? __fget_files+0x2a/0x420 [ 171.312054][ T8169] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.317159][ T8169] ? __pfx_sock_ioctl+0x10/0x10 [ 171.322078][ T8169] __se_sys_ioctl+0xf9/0x170 [ 171.327195][ T8169] do_syscall_64+0xf6/0x210 [ 171.331766][ T8169] ? clear_bhb_loop+0x45/0xa0 [ 171.336971][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.342914][ T8169] RIP: 0033:0x7f5f6298e969 [ 171.347417][ T8169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.367137][ T8169] RSP: 002b:00007f5f6381a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.375650][ T8169] RAX: ffffffffffffffda RBX: 00007f5f62bb6160 RCX: 00007f5f6298e969 [ 171.383662][ T8169] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000009 [ 171.391816][ T8169] RBP: 00007f5f62a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 171.400162][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.408236][ T8169] R13: 0000000000000000 R14: 00007f5f62bb6160 R15: 00007ffcc57307d8 [ 171.416464][ T8169] [ 171.419533][ T8169] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.426848][ T8169] CPU: 1 UID: 0 PID: 8169 Comm: syz.0.559 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 171.438781][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.448871][ T8169] Call Trace: [ 171.452167][ T8169] [ 171.455142][ T8169] dump_stack_lvl+0x99/0x250 [ 171.459760][ T8169] ? __asan_memcpy+0x40/0x70 [ 171.464363][ T8169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.469579][ T8169] ? __pfx__printk+0x10/0x10 [ 171.474207][ T8169] panic+0x2db/0x790 [ 171.478126][ T8169] ? __pfx_panic+0x10/0x10 [ 171.482561][ T8169] ? show_trace_log_lvl+0x4fb/0x550 [ 171.487794][ T8169] __warn+0x31b/0x4b0 [ 171.491801][ T8169] ? ipv6_addr_prefix+0x124/0x1d0 [ 171.496859][ T8169] ? ipv6_addr_prefix+0x124/0x1d0 [ 171.501922][ T8169] report_bug+0x2be/0x4f0 [ 171.506300][ T8169] ? ipv6_addr_prefix+0x124/0x1d0 [ 171.511356][ T8169] ? ipv6_addr_prefix+0x124/0x1d0 [ 171.516398][ T8169] ? ipv6_addr_prefix+0x126/0x1d0 [ 171.521439][ T8169] handle_bug+0x84/0x160 [ 171.525688][ T8169] exc_invalid_op+0x1a/0x50 [ 171.530213][ T8169] asm_exc_invalid_op+0x1a/0x20 [ 171.535096][ T8169] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 171.540751][ T8169] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 171.560393][ T8169] RSP: 0018:ffffc90002f9f920 EFLAGS: 00010246 [ 171.566484][ T8169] RAX: 27e97af6486db300 RBX: ffff888011546468 RCX: 0000000000080000 [ 171.574475][ T8169] RDX: ffffc90010444000 RSI: 00000000000051dd RDI: 00000000000051de [ 171.582493][ T8169] RBP: 0000000000000007 R08: ffffc90002f9f607 R09: 1ffff920005f3ec0 [ 171.590495][ T8169] R10: dffffc0000000000 R11: fffff520005f3ec1 R12: 000000000000007f [ 171.598523][ T8169] R13: 1ffff920005f3f4e R14: ffffc90002f9fa94 R15: 000000000000007f [ 171.606541][ T8169] ip6_route_info_create+0x629/0xa70 [ 171.611857][ T8169] ip6_route_add+0x29/0x2f0 [ 171.616377][ T8169] ? ipv6_route_ioctl+0x313/0x480 [ 171.621421][ T8169] ipv6_route_ioctl+0x35c/0x480 [ 171.626297][ T8169] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 171.631735][ T8169] inet6_ioctl+0x219/0x280 [ 171.636183][ T8169] ? __pfx_inet6_ioctl+0x10/0x10 [ 171.641155][ T8169] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.647174][ T8169] sock_do_ioctl+0xd9/0x300 [ 171.651705][ T8169] ? __pfx_sock_do_ioctl+0x10/0x10 [ 171.656842][ T8169] ? __lock_acquire+0xaac/0xd20 [ 171.661738][ T8169] sock_ioctl+0x576/0x790 [ 171.666085][ T8169] ? __pfx_sock_ioctl+0x10/0x10 [ 171.670963][ T8169] ? __fget_files+0x3a0/0x420 [ 171.675651][ T8169] ? __fget_files+0x2a/0x420 [ 171.680260][ T8169] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.685209][ T8169] ? __pfx_sock_ioctl+0x10/0x10 [ 171.690076][ T8169] __se_sys_ioctl+0xf9/0x170 [ 171.694680][ T8169] do_syscall_64+0xf6/0x210 [ 171.699201][ T8169] ? clear_bhb_loop+0x45/0xa0 [ 171.703899][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.709827][ T8169] RIP: 0033:0x7f5f6298e969 [ 171.714250][ T8169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.733870][ T8169] RSP: 002b:00007f5f6381a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.742312][ T8169] RAX: ffffffffffffffda RBX: 00007f5f62bb6160 RCX: 00007f5f6298e969 [ 171.750290][ T8169] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000009 [ 171.758279][ T8169] RBP: 00007f5f62a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 171.766255][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.774239][ T8169] R13: 0000000000000000 R14: 00007f5f62bb6160 R15: 00007ffcc57307d8 [ 171.782253][ T8169] [ 171.785533][ T8169] Kernel Offset: disabled [ 171.789870][ T8169] Rebooting in 86400 seconds..