[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts. 2020/09/10 12:41:44 fuzzer started 2020/09/10 12:41:44 dialing manager at 10.128.0.26:44271 2020/09/10 12:41:44 syscalls: 1545 2020/09/10 12:41:44 code coverage: enabled 2020/09/10 12:41:44 comparison tracing: enabled 2020/09/10 12:41:44 extra coverage: enabled 2020/09/10 12:41:44 setuid sandbox: enabled 2020/09/10 12:41:44 namespace sandbox: enabled 2020/09/10 12:41:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/10 12:41:44 fault injection: enabled 2020/09/10 12:41:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/10 12:41:44 net packet injection: enabled 2020/09/10 12:41:44 net device setup: enabled 2020/09/10 12:41:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/10 12:41:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/10 12:41:44 USB emulation: enabled 2020/09/10 12:41:44 hci packet injection: enabled 12:44:05 executing program 0: r0 = socket(0x2b, 0x801, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20) 12:44:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x64, 0x0, 0x0, 0x1}, {0x6}]}) 12:44:05 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x14, 0x32, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 12:44:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x180, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x68) 12:44:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="250000001d008108e00f80ecdb4cb9d90263190405000b00000000fb09000100ac14141840", 0x25}], 0x1}, 0x0) 12:44:06 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) writev(r0, 0x0, 0x0) syzkaller login: [ 209.178317][ T6868] IPVS: ftp: loaded support on port[0] = 21 [ 209.410814][ T6870] IPVS: ftp: loaded support on port[0] = 21 [ 209.490796][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 209.618581][ T6872] IPVS: ftp: loaded support on port[0] = 21 [ 209.704380][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.711513][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.738452][ T6868] device bridge_slave_0 entered promiscuous mode [ 209.832376][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.839664][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.870387][ T6874] IPVS: ftp: loaded support on port[0] = 21 [ 209.878372][ T6868] device bridge_slave_1 entered promiscuous mode [ 209.943980][ T6870] chnl_net:caif_netlink_parms(): no params data found [ 209.979333][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.077659][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.131001][ T6876] IPVS: ftp: loaded support on port[0] = 21 [ 210.259080][ T6878] IPVS: ftp: loaded support on port[0] = 21 [ 210.330074][ T6868] team0: Port device team_slave_0 added [ 210.370859][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.380432][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.390257][ T6870] device bridge_slave_0 entered promiscuous mode [ 210.416504][ T6868] team0: Port device team_slave_1 added [ 210.445350][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.453064][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.460942][ T6870] device bridge_slave_1 entered promiscuous mode [ 210.569228][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.585031][ T6872] chnl_net:caif_netlink_parms(): no params data found [ 210.622663][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.629655][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.658029][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.678385][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.711616][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.721012][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.748890][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.809372][ T6870] team0: Port device team_slave_0 added [ 210.818077][ T6870] team0: Port device team_slave_1 added [ 210.825441][ T6874] chnl_net:caif_netlink_parms(): no params data found [ 210.915047][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.922058][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.950258][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.969704][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.976781][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.003934][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.043013][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.050213][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.058904][ T6872] device bridge_slave_0 entered promiscuous mode [ 211.071660][ T6868] device hsr_slave_0 entered promiscuous mode [ 211.080711][ T6868] device hsr_slave_1 entered promiscuous mode [ 211.105425][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.112750][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.121058][ T6872] device bridge_slave_1 entered promiscuous mode [ 211.152749][ T6727] Bluetooth: hci0: command 0x0409 tx timeout [ 211.208052][ T6870] device hsr_slave_0 entered promiscuous mode [ 211.230696][ T6870] device hsr_slave_1 entered promiscuous mode [ 211.239761][ T6870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.248733][ T6870] Cannot create hsr debugfs directory [ 211.305480][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.333752][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 211.357915][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.368064][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.376019][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.384953][ T6874] device bridge_slave_0 entered promiscuous mode [ 211.392659][ T2657] Bluetooth: hci1: command 0x0409 tx timeout [ 211.431115][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.439378][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.448145][ T6874] device bridge_slave_1 entered promiscuous mode [ 211.517456][ T6872] team0: Port device team_slave_0 added [ 211.552649][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 211.578880][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.607668][ T6872] team0: Port device team_slave_1 added [ 211.651647][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.717029][ T6878] chnl_net:caif_netlink_parms(): no params data found [ 211.801257][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 211.808366][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.819453][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.846416][ T6872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.861025][ T6874] team0: Port device team_slave_0 added [ 211.870312][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.877937][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.886392][ T6876] device bridge_slave_0 entered promiscuous mode [ 211.916824][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.924260][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.952232][ T6872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.966121][ T6874] team0: Port device team_slave_1 added [ 211.974728][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.981813][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.993515][ T6876] device bridge_slave_1 entered promiscuous mode [ 212.032660][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 212.104244][ T6872] device hsr_slave_0 entered promiscuous mode [ 212.111095][ T6872] device hsr_slave_1 entered promiscuous mode [ 212.119452][ T6872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.127938][ T6872] Cannot create hsr debugfs directory [ 212.135227][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.144071][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.170731][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.192344][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 212.212617][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.240381][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.256220][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.264297][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.293162][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.364241][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.371333][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.381917][ T6878] device bridge_slave_0 entered promiscuous mode [ 212.397662][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.405097][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.416117][ T6878] device bridge_slave_1 entered promiscuous mode [ 212.467769][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.484533][ T6876] team0: Port device team_slave_0 added [ 212.497762][ T6874] device hsr_slave_0 entered promiscuous mode [ 212.509245][ T6874] device hsr_slave_1 entered promiscuous mode [ 212.517700][ T6874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.526499][ T6874] Cannot create hsr debugfs directory [ 212.554514][ T6868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.570684][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.581760][ T6876] team0: Port device team_slave_1 added [ 212.620473][ T6868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.689687][ T6868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.721094][ T6878] team0: Port device team_slave_0 added [ 212.749444][ T6868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.774307][ T6878] team0: Port device team_slave_1 added [ 212.780738][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.792312][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.819189][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.840313][ T6870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.854617][ T6870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.881651][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.889074][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.921280][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.961381][ T6870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.004710][ T6870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.020952][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.028797][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.060454][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.116823][ T6876] device hsr_slave_0 entered promiscuous mode [ 213.124010][ T6876] device hsr_slave_1 entered promiscuous mode [ 213.130502][ T6876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.140147][ T6876] Cannot create hsr debugfs directory [ 213.147308][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.154647][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.180943][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.232286][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 213.347135][ T6878] device hsr_slave_0 entered promiscuous mode [ 213.354807][ T6878] device hsr_slave_1 entered promiscuous mode [ 213.361298][ T6878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.369044][ T6878] Cannot create hsr debugfs directory [ 213.437076][ T6874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.472456][ T2657] Bluetooth: hci1: command 0x041b tx timeout [ 213.502052][ T6874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.535433][ T6874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.576536][ T6874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.642313][ T2657] Bluetooth: hci2: command 0x041b tx timeout [ 213.697496][ T6872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.711177][ T6872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.740414][ T6872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.801961][ T6872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.861347][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.883044][ T2657] Bluetooth: hci3: command 0x041b tx timeout [ 213.902474][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.910951][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.947844][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.956296][ T6876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.975755][ T6876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.998193][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.026693][ T6876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.051692][ T6876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.080068][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.088865][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.110663][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.118335][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 214.134880][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.145038][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.156538][ T2657] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.163901][ T2657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.177106][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.202489][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.211834][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.225141][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.232319][ T6727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.244487][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.253173][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.261512][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.268679][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.278832][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.287061][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 214.307994][ T6878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.346943][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.356641][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.367001][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.377026][ T2657] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.384390][ T2657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.394409][ T6878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.409808][ T6878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.422086][ T6878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.460178][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.484790][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.495351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.550611][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.559956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.575514][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.586571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.597807][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.645691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.656467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.666577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.678208][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.688480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.700598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.711137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.724263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.758807][ T6868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.770828][ T6868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.797969][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.815630][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.828719][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.839005][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.849776][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.859052][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.868565][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.940442][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.948669][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.957079][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.967025][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.976078][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.985469][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.994722][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.001867][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.010188][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.019617][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.028769][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.036025][ T6727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.046936][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.056386][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.064280][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.076060][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.086125][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.117005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.126622][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.176719][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.188365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.198465][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.207825][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.217162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.231261][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.251970][ T6874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.265225][ T6874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.294425][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.302005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.323173][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.331969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.352424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.361024][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.379230][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.387462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.396541][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 215.408694][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.442841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.450693][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.461783][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.485759][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.536981][ T6878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.555715][ T8174] Bluetooth: hci1: command 0x040f tx timeout [ 215.568709][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.577115][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.591922][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.601058][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.614213][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.621273][ T8172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.635375][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.646223][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.657508][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.664683][ T8172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.674126][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.683181][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.712670][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 215.739032][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.748526][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.758361][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.767555][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.777012][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.786374][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.795217][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.803451][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.811376][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.819402][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.830787][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.845465][ T6868] device veth0_vlan entered promiscuous mode [ 215.868131][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.887851][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.897981][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.936592][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.954482][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 215.962013][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.971440][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.980804][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.991821][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.001210][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.010482][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.019781][ T2657] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.026997][ T2657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.065474][ T6872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.081556][ T6872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.107109][ T6868] device veth1_vlan entered promiscuous mode [ 216.117282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.128623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.139049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.150867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.161474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.173376][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.187762][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.199583][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.206726][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.218518][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.227940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.240943][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.248087][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.277068][ T2657] Bluetooth: hci4: command 0x040f tx timeout [ 216.308409][ T6870] device veth0_vlan entered promiscuous mode [ 216.317105][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.326691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.335817][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.344609][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.357338][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.367154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.376187][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.383461][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.391100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.400216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.409219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.418460][ T17] Bluetooth: hci5: command 0x040f tx timeout [ 216.461892][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.477685][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.486867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.500405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.508631][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.516433][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.525613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.535338][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.545006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.558306][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.596450][ T6870] device veth1_vlan entered promiscuous mode [ 216.645354][ T6868] device veth0_macvtap entered promiscuous mode [ 216.672753][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.680894][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.691293][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.700374][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.709932][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.719165][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.728268][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.737161][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.746604][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.757441][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.767097][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.795836][ T6872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.815666][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.824217][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.835179][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.843228][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.851383][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.861344][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.870311][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.879978][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.889654][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.899403][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.943241][ T6868] device veth1_macvtap entered promiscuous mode [ 216.969907][ T6874] device veth0_vlan entered promiscuous mode [ 216.988082][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.997247][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.006742][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.017346][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.045614][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.066507][ T6874] device veth1_vlan entered promiscuous mode [ 217.087677][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.097135][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.109908][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.120025][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.144547][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.154677][ T6870] device veth0_macvtap entered promiscuous mode [ 217.186791][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.199797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.211773][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.221325][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.230543][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.239236][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.250847][ T6870] device veth1_macvtap entered promiscuous mode [ 217.297901][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.321827][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.330829][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.341141][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.354218][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.365556][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.386789][ T6868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.400342][ T6868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.409349][ T6868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.418134][ T6868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.435046][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.474595][ T17] Bluetooth: hci0: command 0x0419 tx timeout [ 217.476206][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.491355][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.504159][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.513674][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.526485][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.534946][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.553529][ T6872] device veth0_vlan entered promiscuous mode [ 217.591417][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.609709][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.624874][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.633178][ T17] Bluetooth: hci1: command 0x0419 tx timeout [ 217.644183][ T6874] device veth0_macvtap entered promiscuous mode [ 217.667175][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.676779][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.688483][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.715821][ T6874] device veth1_macvtap entered promiscuous mode [ 217.735798][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.745261][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.756321][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.766820][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.777865][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.790101][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.798619][ T6727] Bluetooth: hci2: command 0x0419 tx timeout [ 217.818106][ T6872] device veth1_vlan entered promiscuous mode [ 217.846156][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.867712][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.878360][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.971510][ T6870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.995117][ T6870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 12:44:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) [ 218.020230][ T6870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.033768][ T8172] Bluetooth: hci3: command 0x0419 tx timeout [ 218.047369][ T6870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.086134][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.102855][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.120458][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 12:44:15 executing program 0: [ 218.133772][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.162505][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.175403][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.187292][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.198181][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.207688][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.217366][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 12:44:15 executing program 0: [ 218.235514][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.269716][ T6876] device veth0_vlan entered promiscuous mode [ 218.325619][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.346975][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.358303][ T6727] Bluetooth: hci4: command 0x0419 tx timeout 12:44:15 executing program 0: [ 218.382184][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.412283][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:44:16 executing program 0: [ 218.433314][ T6727] Bluetooth: hci5: command 0x0419 tx timeout [ 218.434711][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.460017][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.475622][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.530169][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.559031][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.580857][ T6876] device veth1_vlan entered promiscuous mode 12:44:16 executing program 0: [ 218.626100][ T6874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.638341][ T6874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.662199][ T6874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.673152][ T6874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:44:16 executing program 0: [ 218.719168][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.738022][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.768460][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.786018][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.806667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.819378][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.847373][ T6878] device veth0_vlan entered promiscuous mode [ 218.874060][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.885324][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.924123][ T6872] device veth0_macvtap entered promiscuous mode [ 218.968566][ T6878] device veth1_vlan entered promiscuous mode [ 219.011179][ T6872] device veth1_macvtap entered promiscuous mode [ 219.109897][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.129627][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.151095][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.172610][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.190459][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.212322][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.224055][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.257718][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.271474][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.288499][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.302823][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.334360][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.355910][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.374600][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.390926][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.408644][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.427435][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.449287][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.519404][ T6876] device veth0_macvtap entered promiscuous mode [ 219.537150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.553632][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.571731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.597830][ T6872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.613474][ T6872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.639321][ T6872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.652746][ T6872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.698076][ T6876] device veth1_macvtap entered promiscuous mode [ 219.760279][ T6878] device veth0_macvtap entered promiscuous mode [ 219.783964][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.805124][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.819707][ T8226] IPVS: ftp: loaded support on port[0] = 21 [ 219.823794][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 12:44:17 executing program 0: [ 219.903455][ T6878] device veth1_macvtap entered promiscuous mode [ 219.937152][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.952100][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.002642][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.022752][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.051285][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.072345][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.089857][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.101735][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.133062][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.169804][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.187589][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.223663][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.239947][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.280927][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.291960][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.306317][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.317015][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.330799][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.342788][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.354237][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.364818][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.378043][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.393990][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.405045][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.415002][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.425541][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.436240][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.446781][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.456712][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.467732][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.477659][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.489736][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.504483][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.522468][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.531098][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.540424][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.550136][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.566749][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.577618][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.587535][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.600661][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.610918][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.621486][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.631927][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.643007][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.653057][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.663533][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.676620][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.687232][ T6876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.697045][ T6876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.707047][ T6876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.715863][ T6876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.897662][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.906375][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.921818][ T6878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.936327][ T6878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.948024][ T6878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.959074][ T6878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.008378][ T8226] IPVS: ftp: loaded support on port[0] = 21 12:44:20 executing program 2: 12:44:20 executing program 1: 12:44:20 executing program 0: 12:44:20 executing program 3: 12:44:20 executing program 5: 12:44:20 executing program 4: [ 222.627657][ T59] tipc: TX() has been purged, node left! 12:44:20 executing program 4: 12:44:20 executing program 0: 12:44:20 executing program 5: 12:44:20 executing program 3: 12:44:20 executing program 1: 12:44:20 executing program 2: 12:44:20 executing program 4: 12:44:20 executing program 0: 12:44:20 executing program 5: 12:44:20 executing program 3: 12:44:20 executing program 1: 12:44:20 executing program 2: 12:44:20 executing program 4: 12:44:20 executing program 0: 12:44:20 executing program 5: 12:44:20 executing program 3: 12:44:20 executing program 1: 12:44:20 executing program 2: 12:44:20 executing program 4: 12:44:20 executing program 5: 12:44:20 executing program 0: 12:44:20 executing program 1: 12:44:20 executing program 3: 12:44:20 executing program 2: 12:44:20 executing program 4: 12:44:21 executing program 5: 12:44:21 executing program 0: 12:44:21 executing program 1: 12:44:21 executing program 2: 12:44:21 executing program 3: 12:44:21 executing program 5: 12:44:21 executing program 4: 12:44:21 executing program 2: 12:44:21 executing program 1: 12:44:21 executing program 5: 12:44:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x34, 0x12, 0x301, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, @nested={0x4}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x34}], 0x1}, 0x0) 12:44:21 executing program 3: 12:44:21 executing program 4: 12:44:21 executing program 5: [ 223.974117][ T8328] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 12:44:21 executing program 2: 12:44:21 executing program 1: 12:44:21 executing program 5: [ 224.019056][ T8328] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 12:44:21 executing program 3: 12:44:21 executing program 4: 12:44:21 executing program 0: 12:44:21 executing program 1: 12:44:21 executing program 5: 12:44:21 executing program 2: 12:44:21 executing program 3: 12:44:21 executing program 4: 12:44:21 executing program 0: 12:44:21 executing program 1: 12:44:21 executing program 2: 12:44:21 executing program 4: 12:44:22 executing program 3: 12:44:22 executing program 5: 12:44:22 executing program 0: 12:44:22 executing program 1: 12:44:22 executing program 4: 12:44:22 executing program 2: 12:44:22 executing program 3: 12:44:22 executing program 5: 12:44:22 executing program 1: 12:44:22 executing program 0: 12:44:22 executing program 4: 12:44:22 executing program 2: 12:44:22 executing program 3: 12:44:22 executing program 5: 12:44:22 executing program 1: 12:44:22 executing program 0: 12:44:22 executing program 2: 12:44:22 executing program 4: 12:44:22 executing program 3: 12:44:22 executing program 1: 12:44:22 executing program 0: 12:44:22 executing program 4: 12:44:22 executing program 5: 12:44:22 executing program 2: 12:44:22 executing program 3: 12:44:22 executing program 4: 12:44:22 executing program 1: 12:44:22 executing program 5: 12:44:22 executing program 0: 12:44:22 executing program 2: 12:44:23 executing program 3: 12:44:23 executing program 4: 12:44:23 executing program 0: 12:44:23 executing program 1: 12:44:23 executing program 5: 12:44:23 executing program 2: 12:44:23 executing program 3: 12:44:23 executing program 0: 12:44:23 executing program 4: 12:44:23 executing program 5: 12:44:23 executing program 1: 12:44:23 executing program 2: 12:44:23 executing program 1: 12:44:23 executing program 4: 12:44:23 executing program 5: 12:44:23 executing program 3: 12:44:23 executing program 0: 12:44:23 executing program 3: 12:44:23 executing program 4: 12:44:23 executing program 2: 12:44:23 executing program 0: 12:44:23 executing program 5: 12:44:23 executing program 1: 12:44:23 executing program 3: 12:44:23 executing program 1: 12:44:23 executing program 0: 12:44:23 executing program 4: 12:44:23 executing program 2: 12:44:23 executing program 5: 12:44:24 executing program 1: 12:44:24 executing program 3: 12:44:24 executing program 0: 12:44:24 executing program 2: 12:44:24 executing program 4: 12:44:24 executing program 5: 12:44:24 executing program 3: 12:44:24 executing program 1: 12:44:24 executing program 2: 12:44:24 executing program 4: 12:44:24 executing program 0: 12:44:24 executing program 5: 12:44:24 executing program 3: 12:44:24 executing program 1: 12:44:24 executing program 2: 12:44:24 executing program 4: 12:44:24 executing program 0: 12:44:24 executing program 5: 12:44:24 executing program 1: 12:44:24 executing program 3: 12:44:24 executing program 2: 12:44:24 executing program 0: 12:44:24 executing program 4: 12:44:24 executing program 5: 12:44:24 executing program 1: 12:44:24 executing program 3: 12:44:24 executing program 0: 12:44:25 executing program 2: 12:44:25 executing program 4: 12:44:25 executing program 5: 12:44:25 executing program 1: 12:44:25 executing program 2: 12:44:25 executing program 0: 12:44:25 executing program 4: 12:44:25 executing program 3: 12:44:25 executing program 5: 12:44:25 executing program 1: 12:44:25 executing program 2: 12:44:25 executing program 4: 12:44:25 executing program 0: 12:44:25 executing program 5: 12:44:25 executing program 3: 12:44:25 executing program 1: 12:44:25 executing program 4: 12:44:25 executing program 2: 12:44:25 executing program 0: 12:44:25 executing program 3: 12:44:25 executing program 5: 12:44:25 executing program 1: 12:44:25 executing program 3: 12:44:25 executing program 5: 12:44:25 executing program 4: 12:44:25 executing program 2: 12:44:25 executing program 0: 12:44:25 executing program 1: 12:44:26 executing program 4: 12:44:26 executing program 2: 12:44:26 executing program 3: 12:44:26 executing program 5: 12:44:26 executing program 1: 12:44:26 executing program 0: 12:44:26 executing program 3: 12:44:26 executing program 5: 12:44:26 executing program 4: 12:44:26 executing program 2: 12:44:26 executing program 1: 12:44:26 executing program 0: 12:44:26 executing program 4: 12:44:26 executing program 3: 12:44:26 executing program 2: 12:44:26 executing program 1: 12:44:26 executing program 5: 12:44:26 executing program 4: 12:44:26 executing program 0: 12:44:26 executing program 3: 12:44:26 executing program 2: 12:44:26 executing program 5: 12:44:26 executing program 1: 12:44:26 executing program 4: 12:44:26 executing program 0: 12:44:26 executing program 3: 12:44:26 executing program 2: 12:44:26 executing program 5: 12:44:26 executing program 4: 12:44:26 executing program 1: 12:44:26 executing program 3: 12:44:27 executing program 0: 12:44:27 executing program 2: 12:44:27 executing program 5: 12:44:27 executing program 4: 12:44:27 executing program 0: 12:44:27 executing program 1: 12:44:27 executing program 3: 12:44:27 executing program 2: 12:44:27 executing program 4: 12:44:27 executing program 5: 12:44:27 executing program 0: 12:44:27 executing program 3: 12:44:27 executing program 1: 12:44:27 executing program 2: 12:44:27 executing program 4: 12:44:27 executing program 5: 12:44:27 executing program 0: 12:44:27 executing program 3: 12:44:27 executing program 2: 12:44:27 executing program 4: 12:44:27 executing program 5: 12:44:27 executing program 1: 12:44:27 executing program 3: 12:44:27 executing program 0: 12:44:27 executing program 5: 12:44:27 executing program 2: 12:44:27 executing program 4: 12:44:27 executing program 1: 12:44:28 executing program 3: 12:44:28 executing program 0: 12:44:28 executing program 5: 12:44:28 executing program 4: 12:44:28 executing program 2: 12:44:28 executing program 1: 12:44:28 executing program 3: 12:44:28 executing program 4: 12:44:28 executing program 0: 12:44:28 executing program 5: 12:44:28 executing program 2: 12:44:28 executing program 3: 12:44:28 executing program 1: 12:44:28 executing program 2: 12:44:28 executing program 5: 12:44:28 executing program 4: 12:44:28 executing program 0: 12:44:28 executing program 3: 12:44:28 executing program 1: 12:44:28 executing program 2: 12:44:28 executing program 0: 12:44:28 executing program 4: 12:44:28 executing program 5: 12:44:28 executing program 1: 12:44:28 executing program 2: 12:44:28 executing program 3: 12:44:28 executing program 4: 12:44:28 executing program 0: 12:44:28 executing program 5: 12:44:29 executing program 2: 12:44:29 executing program 3: 12:44:29 executing program 1: 12:44:29 executing program 4: 12:44:29 executing program 0: 12:44:29 executing program 5: 12:44:29 executing program 2: 12:44:29 executing program 3: 12:44:29 executing program 1: 12:44:29 executing program 4: 12:44:29 executing program 0: 12:44:29 executing program 2: 12:44:29 executing program 5: 12:44:29 executing program 3: 12:44:29 executing program 1: 12:44:29 executing program 4: 12:44:29 executing program 0: 12:44:29 executing program 2: 12:44:29 executing program 1: 12:44:29 executing program 3: 12:44:29 executing program 5: 12:44:29 executing program 4: 12:44:29 executing program 0: 12:44:29 executing program 1: 12:44:29 executing program 2: 12:44:29 executing program 5: 12:44:29 executing program 3: 12:44:29 executing program 4: 12:44:29 executing program 2: 12:44:29 executing program 1: 12:44:29 executing program 0: 12:44:30 executing program 5: 12:44:30 executing program 3: 12:44:30 executing program 4: 12:44:30 executing program 2: 12:44:30 executing program 1: 12:44:30 executing program 0: 12:44:30 executing program 5: 12:44:30 executing program 3: 12:44:30 executing program 1: 12:44:30 executing program 4: 12:44:30 executing program 2: 12:44:30 executing program 0: 12:44:30 executing program 5: 12:44:30 executing program 3: 12:44:30 executing program 1: 12:44:30 executing program 4: 12:44:30 executing program 0: 12:44:30 executing program 2: 12:44:30 executing program 5: 12:44:30 executing program 3: 12:44:30 executing program 1: 12:44:30 executing program 4: 12:44:30 executing program 0: 12:44:30 executing program 2: 12:44:30 executing program 5: 12:44:30 executing program 1: 12:44:30 executing program 3: 12:44:30 executing program 0: 12:44:30 executing program 4: 12:44:30 executing program 2: 12:44:31 executing program 1: 12:44:31 executing program 5: 12:44:31 executing program 3: 12:44:31 executing program 4: 12:44:31 executing program 0: 12:44:31 executing program 1: 12:44:31 executing program 2: 12:44:31 executing program 5: 12:44:31 executing program 3: 12:44:31 executing program 0: 12:44:31 executing program 1: 12:44:31 executing program 2: 12:44:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000001180)={@void, @val={0x0, 0x0, 0x7ff}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0xf98, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, [], [{0x0, 0x1a, "efd3c924f0b30e7c96d30d97124c704dba859b51eb9901e379c8ff267fcaa336f9229f7a6b29730924c570d6ec44d61542ad21556983c362deebb16260dc93554ffcbf7055998f30b6e7c5de609d8928f71b4e1fff83442112a014ea1e89a51649817699ebe8b341c0ad6aeb03bb61f2096436ed981e42b925b97b62463778966c83c9f4ab5baa87e92316ea8d909561255de3e654b1b9e0311e51399530a999eebdbd8070b660a824933b0a2cae1593c68b3c0625c1b2ee28db69eadf5ba3daa73910d4c449e9cb571149b89cf1e7b428"}, {0x0, 0x11, "99678356449c9462226de7d6169bc4a8d76fc37a89d276e0666e767c5c464a6f75df598b25cdcd0bc483b5c7198e526fd0c5f7007eb1fb80fc1d0822b2d07e933ab9fb496425dad8f7958fe6a93a196e2530e9ab4344fe3e2eb0b6bc61b0ade085bd1287125e3f8bf206c2a1cca0e3659931f0e52f780e8629aa421aca6e0bfd7be826e392d563dc"}, {0x0, 0x1c6, "96441f09a62cab074e8cf374c5070a500841cd4c9df3e2d44612eab3f2fa35b029e884f33a6effda4ffa38ff9786c5c8856609ec4e30f057556d0008153e75200007f46e8020b92cb6a4f17aafdf3894f977a0d6f4e19af2b101c25ddc5cadcac8dfb7fc8c93b3384ab948e8f17a9f48d948b515da2b11310aa46a4008eb55547106374cceeb75cd9624bac1be00cf122ab12e8a14b243bda80f27844b8abfad3b6d734947668cc346c5c1a40cae74477c4fc3b26e7a943c60b48fce39eea80c8ef37843f92d85dd82fb90e96ecd5d04fb4a7420f2ca9da76a052b98673eaf3947869893d493b11be4a646338c100a7c9644b6af3a26e076fd73670b7e7c88944ff5bef6df45b197c5bd53eb272adf6000966b9ed34962a52aee075e9e38112f167918b9917408248268685336b55c139bda4be4cfcec44ed70e6b8e9826b67caf4b44698ad758e872a38d008c5a5f87c115f112f8263603ae2c3ddd626220f8416363a49256d3a356e7ee5a7b1f16d3834441fe34052a1fbc14aef3439b02896cf03243a5708c378eee8abef2c1cc8673c33fcd7d7785638a54a42a781fa8f4a565bb5b382a450a48e4154c46fd78e788a45752a5ea4033fc569a86eef679cb58c6075fa4552fbd8309709ec9c1880f8fe43714d85c4ff2c558122cad16a4cdc876d34797d2310c1ee66171e2d6b48e92d2ab6661e05734d1acbfd485fbe1d07396c267aabb22fd7e1f26378911b6428f985ae3d1b83d4726ac678d05954f0f4aacd9b09c1278135be74fb70c7ebece429d8c76f91c660fe7233408379b4f8e048009c4f356f86f91f2d9da9996a29ea293de19cd67177bea7331b5fc7293f6cce11e983ea42d8590a1a103e46db229390fb00097742a1ab6409ae155b1d03fbb07377c6d33e0791af414457a086488ef75dc817496c7e1a48ff6a0fc67e2cc8e6732c0ed36a43b087bce530ab0b3a16b463cb03cd21cf60b0a42f2a9f4c741c640a1e4e658228bed443e8b008e3e53130edbe18bb6863a61ee49798a1f16fa15c73006004d2ae6168019d12c7d29cf7ff701e8f9da8fd91b456badfba183effb061cf2cceda39df99251cc82f9425d1f364830e23ff883b20ded6026321e453508dc54105696bf42b795d55b62994b5abecccb7a3ab9e218867fb7f6bbb80555db306009aa384bb52e56c0184217e5d3bb3044ead3ccf5e2f8fd5757212af194618abe5f7efedd383d5e58dfdbd2948c387ff1e1a14958749700403cf59dc8a352c94274a099ac831e94d197b2c56b1a06ec074b3182b7888683ac6c318414d334de6758cd7e3a85318f83fb5cefa4e27f7a2ae6243a5268455831b52ba8f505cfebcf06107673def965be12bfc74a86083ed5e91178dfa09b3881270317ab434652815217ed1528ecac3c3a57a68abd5594ad7e86b1b43abbab92f0d571ce353a523a123fe4d8be3192b1aa74890c945358c1dc0d21a0f494183fc2fcc59b232796ed8611fc7c8c23acb722ae42ae296d1db4b060495b1755e343ecff3061c22e05639eac46d7c97af7628daa494ad80041914061df09f77502dcbcfa128a7b9622db000cd14b15093087690e63ba8aef445b769cc52589a0ca63ee2eeb1c4065e81c045ab4a43fc44e0cbffac4df652fc8c25fdbaf81d0b726cb6ce640caec23cadf5d43a013a961601d430fcf27a7b24eabce704868adb6e68bf68e52bc850017b9cf14a9caf30a483d9e6855e205b6d08343312b2cb479dbbb6fe2ff8252bd85ac09ca8b92d3b4e1b38a8c8b062020c7c61719f991a41f8ca9a31d2434f2ef1581e422c1b930080fb642a476dd1571ea8f0d2f36efe301243ba571b6504d35373f19ff990ee4331f19cd0150d8a9ff0921a30c4b5e6ad69c37d739a958755a731d02da465fdc312610c015ceaf58c316ff3d2d86611d3427f304119a4550f4f30d7fe4ffd99b484285d6fe5732c1c4c7051bf8908458036956ba885399c2664355b20c5c08dc1f7626c6877a46db0c316356bd3ccc2abf7b45c8770019ba9690d26d972665af27783f0d84cc13851d68b5b32a39830ca7b9b83e6d0164883270ad2acd4d81a50c0fc667c822def404f2f95a186c1e61f34a84323b31f834cef94523dddeae4a484a726d344e19893fc5d1de8b81131957614ee40fa05e3aff87209395547ec334a2880593c106b46c1afca51f742aff893ac5e1eb9a7cac0040f1a083a314e948bf36fb6cbc3c588c0b205092de39a91db5471ce4ac941ffc805b399021744b1612d78e7dc366ad0a07f1a3b48f801b87c317e531e403eaabfd293e22064593afe6d1688d1e2f98a9b5d01ba084f46db48705819b9a7a5958b24d1618741ca705bb8c05fc367c06e01bf4b6fb68735dc0626225f7e93c74e06fcf109d950646222109f011c2d919fc28d1344ca11edab2033439200f48aaa7f868c185754e8d3c2f23c6a2288b53cd8de64aeff2d7217070fdf553e56244dd21f6530ebcace2b000097ff61b9728fd915820d25fae667014b658adfe3a3d541f22157f9f2b757a74a45db437471088ab5690dbfd0135aac09816574f4606cc25e9104fe9673447c6d82d37ce9f337d838422ccaf578dc4032f18fbef0efade3815ebdb25b2ee8ad03fd3a7ebcdb4e7c298743322c693d8bfb6f5b2b1b555c38cec14656dc0892a3d06bc5c0ff975d53b0b597412e946b7eb8c431edd6b65cfe8cfcfb4ae69278dce5506d274447a627a555a6276def2443c92c5ae54abd67afd1ecefc5b44a484d02278f4a742008bdfadfd96ffb23b6e16251a8b5713cd0c09a7b533253c661d37da339052d00c71ac13605109cd51f693e9ac193cebf296233ff2a6f7cff6979637856f9ac06f764177b490dbe76c5ef6c881800fd62db8d0fff047370ed5dfaf213a24c18357a509d24c4e02abd32f32b3125e18c0798136d523dd5da30e457027613936444bf9c57f017c6d4b5b7fccf9145f30036e2cc2a762007bf99fd73770646614784ebfaf16a06cef3e0a4fd8b54f730625cc3c07562ec9b1e5fb3660c54ab6b8652170bf310b88906d49c3f01ff256d9bcfab6c6dc8efc89fc3106ede7f9ff5b35f771f03961aeed5887dcd4eb3ab3669440fbbeb3e67bd7c2f5051cca0f881502b5de6ca1d25e7d76cb689bb6545cf891eefeb51dd003db9262213f7eb238baefbc83dd2548392793f1ee22b975cd0bab28bfbec32cd46eb1d30c8399e5e29642cb0e8ad93b5a1a558f58fabc2e6fab0ea1de4551154a9722098d67e6da435929d25589044b916512c0d914e9424a6c6b2b500dca58c29d90e80253f8563bea6b8d076780c516b47e137f43657b479b7a226cf0198ebe2950fc5b894cef2ff65800ff84e279c1afe16ab38e8f1e63a152cc6de2c495409865b87ef4366986bb17ae779398312ccae790bbcf771d99fdbf314759d081f5f0c5b5109c1e56c0f50c397e3ae9a83e5316c1353606e2e80e55142f86db158761dbe3571ca89225801b7b029333e608426a9ab5bc117dc03e6bc642cb8007401e07a1096e571363566d662a090e92e3ec22494eae839d8fa420bfa552acd9f6a34f20bf44298bea11860ea3141826a2b261f50f9e48473a8d6dbcc92c59d5969fbed9607b72b0d5b2ac9a808c43e814fdd2901fb3827231562736dcfd3f3871cecc2ff8b3487a941a79ddd8646d1c628fee877cebff129226dc02b0475a27bce5ab16aab6c9d415080af064e4a4aa69a595aef2230acdff052311d1fe752ab1d085c11ad5c9b4e0e7f9f7d5402e1298eb6b95eb31079481463598e44cb6758fcfd92d00e330b053de48b9f7c75b4cef404b448209b07d86c36438fb259dea2437f3eef8a69a6df7615c14c346274804c56b2bbb0d6b1b994a4d588358c2fc98ee3da1fa7a06c836265fdb8674d60897ad68ca912860adec2051242d06970b1bdf1e283735a782f8c59b91b0dfb45bc64f2a2bf5aa7edcf27e5181cc56fa94fd64a86711daaed05d3c434b286bfeb8530d6a277417cfcfa967a0aa4f9e5c46c3a75ff4d09e65bb2c2113aa130145796005c0ba51b12915854043389c9c90428b1363fb0a15d1e2a8d4f1ea8d8a82b5411174031066e5398024a9e936b5f9ee418baf2316d9fe4d2729d8799bd54a078fc3915ed6031713214c134905a098f1af28d46de8e388427fedd43d006511cd2a0de35870655e784cce00b4a911551976403da7cdcef9e073dfc463bdde9f5e9905a2a67d88c5fe0f4a2ec9f688db67e06a7dea1ff276f1d7b1f8c4eb1b8aeec7807ef9707197a0c5f658a73456f5ccf95c627967b07f21a3f859cf5e17afd65e32a1545e3e1890904ed9cb178bf43bbda23282479d3da35d0dfa5414ff3d03d768ff5d2323586f0fc8038616a8723ed65aae7496cb2a332617cdcbb35e304033e5f1ada2533bf55f4de0b9fdc0da3c1caf257fff7a3d14270c4ee64db4c233f5ec08729a525c0b701591bb16e75f185400ebd57f8317bbeb2cbe2975799d0eeb141cced6984b2fa44e60b476da0ebcd55bf289121e7dac2e9b29ebae73bdfa809eaf5059e8f61a685bf085845a8cceb2d5248d0f393a748057bf65984ebbbebf0cef2fcbd79cf9e696f095623208502f1fc7bc7c463da5e50841040a259b74534cff691c2687f8380c4add11a29119bea0ad7edca121eb7e0daf506e90a3e50c45a1e483182d06e4073055f5fc01d30e522199faf9ab10f1ed639d123ed4f90129ceee8fb3b9d7eeab667dacd7fcd6f21509f9d729eb8e966ea389faedb10aeb3f25409cf6791654773bfbd14b694c1f520e28e349d534bafbde9098b21ca18b46db1a2a7d572f92798d1b3d4849bf989d531a4d4923ba48b461b926159fb325bf285fec4f53c0228cd70ec8d2c061b54b08ec6d3c547850b8f873b5bc536ec19516443a3c3403ec72d3c5873eb5490ee49ab9652acb9fef5a467d0f060fcee027d935f3f472bb992940f51a923cfc4a6e2f0509c925c323be108b6bad399813c07e9dbf945a5ef2f85246a5a3164b9c27bae84ca46806e50c494a42236fbc27a1f91ee43b196db97fc25961c3a91a2549ec6eb37cf8a0e5a96bed33945b9bd9b0f89e22c0f7ba5a20b75925eea6b5637f14eee005a49089e76f51"}]}}}}}, 0xfca) 12:44:31 executing program 1: r0 = socket(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000000)) 12:44:31 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, 0x1c) 12:44:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000300)=0x5, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) 12:44:31 executing program 0: 12:44:31 executing program 5: 12:44:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 12:44:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 12:44:31 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$netlink(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x11, 0x6a, 0x11, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 12:44:31 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) 12:44:31 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x1) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 12:44:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000001100), 0x4) [ 234.467179][ T8685] sctp: [Deprecated]: syz-executor.1 (pid 8685) Use of int in maxseg socket option. [ 234.467179][ T8685] Use struct sctp_assoc_value instead 12:44:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 12:44:33 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) 12:44:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}}, 0x0) 12:44:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 12:44:33 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="506f52ccbdb3", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast2}, {0x0, 0x0, 0x0, @private}}}}}, 0x0) 12:44:33 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000080)) 12:44:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5f, 0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000340)) write$binfmt_elf64(r2, 0x0, 0x1) shutdown(r0, 0x0) 12:44:33 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2f7, 0x69, 0x4300, &(0x7f0000000280)="b95b03b75b030700009e40f008001fffffe100434000638477fbac14143ae0000001c699da153f08a0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 12:44:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xca) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000000180)=0x3) 12:44:33 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89ec, 0x0) 12:44:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 12:44:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x4b, 0x0, "9cb4aa39e1bd413767b251106a71d3a1dcf3eb07b3ecd4d781f55175b3de775b1269b0baf395a829061f40c95e9e09007d57e8a63c94c9489afca5c76ac77e8083972af20a0e0000000000d6b718c09d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x9, 0x2, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}, 0xd8) close(r0) 12:44:33 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd90, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000002c0012000c000100626f6e64000000001c00020008000100040100000a001a"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="ed"], 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x1a57b, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 12:44:33 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 12:44:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x5f, 0x0) ioctl$int_in(r1, 0x541b, &(0x7f0000000340)) write$binfmt_elf64(r2, 0x0, 0x1) shutdown(r0, 0x0) 12:44:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 12:44:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 236.034185][ T8745] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 236.089864][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:44:33 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x50, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x68}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x7a], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 236.138395][ T8745] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 236.188735][ T8745] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (237) 12:44:33 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003111dfffd946f6105000200030a1f0000080c10080008001e0012000000", 0x24}], 0x1}, 0x0) [ 236.252545][ T8760] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:44:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000b740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b40)=[{0x6}], 0x10}}], 0x2, 0x0) 12:44:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000400000008000a00", @ANYRES32=r4], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9aebc12b", @ANYRES32=r4, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0) [ 236.313457][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.387426][ T8760] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 236.414796][ T8760] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (237) [ 236.465546][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:44:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x18, &(0x7f0000000080)={0x203, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 12:44:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlinkprop={0x54, 0x14, 0x301, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x54}}, 0x0) 12:44:34 executing program 0: r0 = epoll_create(0x85) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xdb29bbdd7dbe5765, 0x2}) 12:44:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000006c0)=0x329568bb, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast2=0x7f000001}, "0800008000030000"}}}}}, 0x0) 12:44:34 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) [ 236.553427][ T8771] device bridge1 entered promiscuous mode [ 236.594823][ T8773] device bridge_slave_0 left promiscuous mode [ 236.601257][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.625609][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.693182][ T8773] bridge1: port 1(bridge_slave_0) entered blocking state 12:44:34 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @ipv4={[], [], @dev}, @dev}}}}}}}, 0x66) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 12:44:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f00000000c0)=[@in], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0xfdf5) 12:44:34 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000190000000100000008000064c2ff39c3a80000000000000000007465716c3000000000000000000000006970365f76746930000000000000000062637366300000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000000000000000000000200000000000001bac1414bbffffffff000000000000000000212d00000000002ef4ffffff0000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000ea09ffff00000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x1f0) [ 236.749318][ T8773] bridge1: port 1(bridge_slave_0) entered disabled state 12:44:34 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) listen(r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) [ 236.800899][ T8773] device bridge_slave_0 entered promiscuous mode [ 236.850912][ T8773] bridge1: port 1(bridge_slave_0) entered blocking state [ 236.858150][ T8773] bridge1: port 1(bridge_slave_0) entered forwarding state [ 236.930232][ T8773] netlink: 'syz-executor.5': attribute type 25 has an invalid length. [ 236.963220][ T8773] bridge1: port 1(bridge_slave_0) entered disabled state 12:44:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x24, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}}, 0x0) 12:44:34 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000580), 0x4) [ 236.995612][ T8773] device bridge1 left promiscuous mode [ 237.379811][ T8773] syz-executor.5 (8773) used greatest stack depth: 22992 bytes left [ 237.791079][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 237.812678][ T8816] bridge1: port 1(bridge_slave_0) entered blocking state [ 237.819835][ T8816] bridge1: port 1(bridge_slave_0) entered forwarding state [ 237.845113][ T8816] device bridge1 entered promiscuous mode [ 237.859033][ T8817] netlink: 'syz-executor.5': attribute type 25 has an invalid length. [ 237.874664][ T8817] bridge1: port 1(bridge_slave_0) entered disabled state [ 237.890953][ T8817] device bridge1 left promiscuous mode 12:44:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x0, 0x3, 0x3}, 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r1, 0x0, r0, 0x0, 0x400000, 0x0) 12:44:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae66", 0x14, 0x2f, 0x0, @remote, @mcast2, {[], {{0x0, 0x8100, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 12:44:35 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 12:44:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) 12:44:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) shutdown(r0, 0x1) 12:44:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40}}]}, 0x5c}}, 0x0) 12:44:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {0x2c}, [@ETHTOOL_A_EEE_MODES_OURS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x24}}, 0x0) 12:44:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) 12:44:35 executing program 5: syz_emit_ethernet(0x58, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f00b", 0x22, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {}]}}}}}}, 0x0) 12:44:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 12:44:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x6c}]}, 0x24}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:44:36 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1) 12:44:36 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCINQ(r0, 0x5411, &(0x7f0000000380)) [ 239.094710][ T8871] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 239.114211][ T8872] x_tables: duplicate underflow at hook 2 12:44:36 executing program 0: r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xd2efff7f00000000, 0x0}], 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8922, &(0x7f0000000000)={'geneve1\x00', r1}) 12:44:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x400, 0x8}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0x1081, r0}, 0x38) 12:44:36 executing program 3: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89e0, 0x0) 12:44:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3, 0x0, 0x0) 12:44:36 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x80000001}], 0x1c) 12:44:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0xb334383c972d4237, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x800000}]}, 0x24}}, 0x0) 12:44:37 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/246, 0xf6}], 0x1) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="d1", 0x1}], 0x1}], 0x1, 0x0) 12:44:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x2, @fixed}, 0x8) 12:44:37 executing program 4: r0 = socket(0xa, 0x3, 0x5) setsockopt(r0, 0x3a, 0x0, 0x0, 0x0) 12:44:37 executing program 5: r0 = socket(0x40000000002, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x9, 0x2) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) 12:44:37 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x84, 0x12, 0x400048, 0x4) 12:44:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x400443c9, &(0x7f0000000040)={0x45, 0x0}) 12:44:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, 0x33, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xa, 0x10, 0x0, 0x0, @str='\x06\x00/$\\\x00'}]}]}, 0x28}}, 0x0) 12:44:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001ac0)={'sit0\x00', 0xfffffffffffffffe}) 12:44:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x58, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}, 0x1c) 12:44:37 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/246, 0xf6}], 0x1) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="d1", 0x1}], 0x1}], 0x1, 0x0) 12:44:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, r1, 0x1ad, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x44}}, 0x0) 12:44:37 executing program 1: r0 = socket$inet(0xa, 0x2, 0x73) bind(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) connect(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x6}, 0x80) r1 = socket$inet(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bridge\x00', 0x10) bind(r1, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) 12:44:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x41, 0x20, 0x28}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 12:44:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x24, 0x35, 0x1, 0x0, 0x0, "", [@typed={0x3}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xa, 0x0, 0x0, 0x0, @str='\xfe\xff\x00\x00#\x00'}]}]}, 0x24}], 0x1}, 0x0) 12:44:37 executing program 0: r0 = socket(0x18, 0x0, 0x2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x400000) 12:44:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x400443c8, &(0x7f0000000040)={0x3, 0x0}) 12:44:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x3, 0x0, 0x0, 0x40}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 12:44:37 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 12:44:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r1, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}}, 0x0) 12:44:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 12:44:38 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3860, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @loopback}, "020022ebffff0064"}}}}}, 0x0) 12:44:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x4, 0xffffffff}, 0x40) [ 240.645415][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:44:38 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendfile(r0, r1, 0x0, 0x0) 12:44:38 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3860, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @loopback}, "020022ebffff0064"}}}}}, 0x0) [ 240.734249][ T8946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:44:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) [ 240.813045][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.836308][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:44:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 12:44:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'veth0_to_hsr\x00', {0x2, 0x0, @loopback}}) [ 240.975785][ T8982] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:44:38 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="b4ff868e", 0x4, 0x0, &(0x7f00000004c0), 0x10) 12:44:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x4c}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 12:44:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0xf8, 0x0, 0x0, 0xf8, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@socket3={{0x28, 'socket\x00'}, 0xf8}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 12:44:38 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 12:44:38 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="11380000", @ANYRES16, @ANYBLOB="000200000000ffdbdf25010000000c20990001"], 0x28}}, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f4070009040002000710080001", 0x17) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 12:44:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x618, 0x1f0, 0xd0, 0xd0, 0x1f0, 0xd0, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00', {}, {}, 0x11, 0x0, 0x1, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@private0, @local, [], [], 'veth1_to_bond\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}, @common=@inet=@esp={{0x30, 'esp\x00'}}]}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @multicast1}, @ipv6=@local}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) 12:44:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x31, 0xd989b09d65e78fed, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 12:44:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) [ 241.292328][ T9000] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 241.318273][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:44:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x3}]}, 0x1c}}, 0x0) [ 241.341202][ T9000] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 241.359123][ T9003] xt_socket: unknown flags 0xf8 12:44:38 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x5}]}}]}, 0x3c}}, 0x0) 12:44:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xff}}}, 0xb8}}, 0x0) 12:44:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x18, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}}, 0x0) 12:44:39 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000356ffc)=0xffffff3f, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000a2000)={0x0, 0x0}, 0x10) 12:44:39 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75b782e4ad88b89d1fc31916080000af74fa00040000000000004793608dd0e7316d1d4f4dbaa0a67be4bd714b7ecefa8a934a00"}, 0x60) close(r0) 12:44:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x2, 0x400, 0xc, 0x142}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)="54955dad9850f1", &(0x7f00000004c0), 0x1181, r0}, 0x38) 12:44:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x7b, 0x0, &(0x7f00000000c0)) 12:44:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x24, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev}]}, 0x24}], 0x1}, 0x0) 12:44:39 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)) 12:44:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @random="4ea35c9f13fc", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00f0ff", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 12:44:39 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)={0x12, 0x5, 0x8, 0x1000, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f0000000200), 0x0}, 0x20) 12:44:39 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x84, 0x72, 0x0, 0x0) 12:44:39 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x4, 0x0, 0x7f00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @local, {[@ssrr={0x89, 0x23, 0x0, [@private, @multicast2, @remote, @private, @multicast2, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x3}, @ssrr={0x89, 0x17, 0x0, [@loopback, @broadcast, @local, @local, @multicast1]}]}}}}}}}, 0x0) 12:44:39 executing program 5: socket$inet(0x2, 0x3, 0x3) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, @private, @multicast1}, @address_reply}}}}, 0x0) [ 242.198051][ T9048] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:44:39 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 12:44:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x1, 0x83, 0x80, 0xf, 0x91}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 12:44:39 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x3, 0x0, &(0x7f0000000000)) 12:44:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x24, 0x0, &(0x7f00000000c0)) 12:44:39 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58}}]}, 0x88}}, 0x0) 12:44:39 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0}], 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000200)={0x6, 'netpci0\x00', {}, 0xfffe}) 12:44:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x2}, 0x9c) 12:44:40 executing program 0: r0 = socket(0x22, 0x2, 0x2) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 12:44:40 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, @null, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @null, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) 12:44:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28003801, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 12:44:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, &(0x7f0000000140)={0x0, 0x0, "7f47c0"}) 12:44:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 12:44:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 12:44:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x73af0700, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 12:44:40 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000020c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0) 12:44:40 executing program 1: socket(0x29, 0x2, 0x8) 12:44:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}}, [@mark={0xc, 0x15, {0x0, 0x7f}}]}, 0xc4}}, 0x0) [ 242.866766][ T9083] device batadv0 entered promiscuous mode [ 242.898538][ T9083] device batadv0 left promiscuous mode 12:44:40 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 12:44:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {}, [@qdisc_kind_options=@q_choke={{0x4, 0x1, 'choke\x00'}, {0x4}}, @TCA_EGRESS_BLOCK, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{}, {0x0, 0x2, [0x0]}}]}]}, 0x34}}, 0x0) 12:44:40 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@random="02d5b078ace2", @empty, @val={@void}, {@ipv4={0x4305, @igmp={{0x10, 0x4, 0x3, 0x3, 0x48, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @dev, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@empty}]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@local}, {@empty}]}, @generic={0x0, 0x9, "e42fe455adc26d"}]}}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) 12:44:40 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x8}]}}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 12:44:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002dc0)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x5}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x4}}]}, 0x34}}, 0x0) 12:44:40 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond_slave_1\x00', &(0x7f0000001200)=@ethtool_regs={0x9}}) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00('], 0x150) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0/file0'}, 0x13800) 12:44:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000080)) 12:44:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000a060101000000000000000000000000080009400000000005000100070000000900020073797a300000000014000880"], 0x44}}, 0x0) 12:44:40 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x8}]}}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 12:44:41 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x8901, 0x7fffffffefff) 12:44:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000200)="ab", 0x1) 12:44:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0x2004, 0x4, 0x3f0, 0xe8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xdf}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6tnl0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @remote, @multicast2}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) 12:44:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000002400070500deffffffffffffff000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700010066710000340002000800050004000000080006"], 0x60}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 12:44:41 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000090601011002000500000009da08220005000100060000800c00078008000940130100040900020073797a30"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x45fe9, 0x0) 12:44:41 executing program 0: r0 = socket(0xa, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) sendto$l2tp6(r0, &(0x7f00000000c0)="16", 0x1, 0x4000040, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x20) 12:44:41 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, 0x0, &(0x7f0000000040)) 12:44:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x8}]}}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 243.735315][ T9134] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 12:44:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x705, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) [ 243.808195][ T9134] sch_fq: defrate 0 ignored. [ 243.834548][ T9134] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.840431][ T9139] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 243.878298][ T9134] sch_fq: defrate 0 ignored. 12:44:41 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0}, 0xa) [ 243.909016][ T9146] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:44:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc000900b8000699030000000500150004008178a8001600140002400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 244.081294][ T9147] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.099988][ T9147] sch_fq: defrate 0 ignored. [ 244.166109][ T9149] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address 12:44:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x0) 12:44:41 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1411, 0x77a5f1f6351178fd, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}}, 0x0) [ 244.237055][ T9149] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 244.308324][ T9147] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.326988][ T9147] sch_fq: defrate 0 ignored. [ 244.345556][ T9190] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.359681][ T9190] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 12:44:41 executing program 1: setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="dcea2eb992093274414ac03881ca2f9a4d6d3b243bd56b98b2f5297e8e256f0c373567928e3e474d1981dca6c06887118ce21d7af3bde9253a6ad557ffa094fa7254f64909109c218957ea1470357541e892507f1768c5775a1b2c3766bb4e37f5654b2dcbe5b3e9efa58495079df2caaf6cb32d87414470c281e91d8e3f4535a1dba10a9fde983ac264ba3b8628158f8a40b74aacc85dda6a38f15d9a", 0x9d) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x34}}}, 0x80) getpeername(r0, 0x0, 0x0) 12:44:41 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1411, 0x77a5f1f6351178fd, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}}, 0x0) [ 244.407563][ T9149] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:44:41 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000000c0), 0x4) [ 244.458921][ T9149] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 244.500670][ T9149] bond1: (slave ip6tnl1): Error -95 calling set_mac_address 12:44:42 executing program 5: 12:44:42 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000007180)=ANY=[@ANYBLOB="000000708affffffffffaaaaaaaaaaaa0805"], 0x15) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x3000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:44:42 executing program 0: r0 = socket$netlink(0x11, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000080)=@ll={0x11, 0xc, r2, 0x1, 0x0, 0x6, @local}, 0x80) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)={0x10, 0xfffe}, 0x10}], 0x1}, 0x0) 12:44:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x6c, [0x8, 0x8, 0x3, 0x3, 0x0, 0x4, 0x7, 0xc, 0x2, 0xb, 0x3, 0x8, 0x8]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) 12:44:42 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a003744030181050000000002f0140808001d47511b020008001d0010"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 12:44:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x4, 0x1}, {0x6}]}, 0x10) setsockopt(0xffffffffffffffff, 0xfff, 0x0, &(0x7f00000004c0)="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", 0xfe) socket(0x0, 0x1, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) recvfrom$inet6(r3, &(0x7f0000000000)=""/209, 0xd1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ba3a5b3fe5e63c98bbd88482e87595ca1321849f088a1804", @ANYRESDEC=r6, @ANYBLOB="01002cbd7100fedb00250800000008000400040000002c00ea92d2de40b511f8c29d9b06000400000400000804030002000000080001e801000000100001800c00070008000000000000000c00038008000500ffffffff08000500060000000400fd8249e311b6b5a3010014000280080003000000000008006e0993e73d6813d0a8e041a24e06b049fa1200000014000600fe8000000400002b09b93bf939e3ee16b9360000000000000000070600040000080014000600ff020000000000000000000000000001060007004e21000014000600"/232], 0x100}, 0x1, 0x0, 0x0, 0x20008811}, 0x24040000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='[\x00L\x00', @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="080001000300000000100000000000001406043019000000000000736c6176652b47000014000000766c746e08000500f4ff00000c0099000300dc05000000000000000000000000000000005b02771de65194b31ef2ddab145b31f2cdea03b5cc5a3766f2647512bad6fba4e91eba3bfa85ca52285abc3326f098a33989395d19b462b1e81bdd80a60a33e8fcc4a6d82877e750826bc5d74da9da19335cf5fe4a4840b8a4a9cd9b8ca5cab86310079046873f46df626a8d2fe6f3dd56c7a5e37e4faf76550b5e4b96017a4792b3d44e24e5"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendto$inet6(r5, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x20000010, 0x0, 0xfffffffffffffe3c) sendto$inet6(r0, &(0x7f0000000000)='s', 0x1, 0x48814, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd97) 12:44:42 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) r4 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x1, r2, 0x0, r3}, 0x10) [ 244.798764][ T9223] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 12:44:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110001000000000000000204000008000300", @ANYRES32=r3, @ANYBLOB="04002580140002"], 0x34}}, 0x0) [ 244.932548][ C0] ================================================================== [ 244.940955][ C0] BUG: KASAN: use-after-free in xp_put_pool+0x2c/0x1e0 [ 244.947814][ C0] Write of size 4 at addr ffff88808b3de860 by task systemd-udevd/3921 [ 244.956136][ C0] [ 244.958483][ C0] CPU: 0 PID: 3921 Comm: systemd-udevd Not tainted 5.9.0-rc3-syzkaller #0 [ 244.966985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.977056][ C0] Call Trace: [ 244.980349][ C0] [ 244.983222][ C0] dump_stack+0x198/0x1fd [ 244.987565][ C0] ? xp_put_pool+0x2c/0x1e0 [ 244.992083][ C0] ? xp_put_pool+0x2c/0x1e0 [ 244.997041][ C0] print_address_description.constprop.0.cold+0xae/0x497 [ 245.004254][ C0] ? xp_put_pool+0x2c/0x1e0 [ 245.008817][ C0] ? lockdep_hardirqs_off+0x96/0xd0 [ 245.014041][ C0] ? vprintk_func+0x97/0x1a6 [ 245.018650][ C0] ? xp_put_pool+0x2c/0x1e0 [ 245.023162][ C0] ? xp_put_pool+0x2c/0x1e0 [ 245.027678][ C0] kasan_report.cold+0x1f/0x37 [ 245.032467][ C0] ? lock_release+0x811/0x8f0 [ 245.037160][ C0] ? xp_put_pool+0x2c/0x1e0 [ 245.041873][ C0] check_memory_region+0x13d/0x180 [ 245.047028][ C0] xp_put_pool+0x2c/0x1e0 [ 245.051368][ C0] xsk_destruct+0x7d/0xa0 [ 245.055716][ C0] ? xsk_create+0x750/0x750 [ 245.060417][ C0] __sk_destruct+0x4b/0x860 [ 245.064950][ C0] rcu_core+0x5ca/0x1130 [ 245.069305][ C0] ? rcu_gp_kthread+0x1b50/0x1b50 [ 245.074444][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 245.079310][ C0] ? lock_is_held_type+0xbb/0xf0 [ 245.084318][ C0] __do_softirq+0x1f7/0xa91 [ 245.088846][ C0] asm_call_on_stack+0xf/0x20 [ 245.093531][ C0] [ 245.096499][ C0] do_softirq_own_stack+0x9d/0xd0 [ 245.101547][ C0] irq_exit_rcu+0x235/0x280 [ 245.106155][ C0] sysvec_apic_timer_interrupt+0x51/0xf0 [ 245.111808][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 245.117804][ C0] RIP: 0010:_raw_spin_unlock_irq+0x4b/0x80 [ 245.123639][ C0] Code: c0 98 3c b6 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 76 96 bd 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 fb 12 57 f9 65 8b 05 44 58 09 78 85 c0 74 02 5d [ 245.143692][ C0] RSP: 0018:ffffc90003a67380 EFLAGS: 00000282 [ 245.148579][ T9238] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 245.150130][ C0] RAX: 1ffffffff136c793 RBX: ffff8880a22d8500 RCX: 1ffffffff1565171 [ 245.150155][ C0] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 245.150165][ C0] RBP: ffff8880ae635e40 R08: 0000000000000001 R09: 0000000000000001 [ 245.150175][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae635e40 [ 245.150185][ C0] R13: ffff888058ff6380 R14: 0000000000000000 R15: 0000000000000001 [ 245.150233][ C0] finish_task_switch+0x147/0x750 [ 245.203209][ C0] ? finish_task_switch+0x119/0x750 [ 245.208442][ C0] ? __switch_to+0x425/0xfe0 [ 245.213052][ C0] __schedule+0xeb1/0x2230 [ 245.217486][ C0] ? io_schedule_timeout+0x140/0x140 [ 245.222778][ C0] ? sched_clock+0x2a/0x40 [ 245.227219][ C0] ? preempt_schedule_irq+0x8f/0x1b0 [ 245.233553][ C0] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 245.239549][ C0] preempt_schedule_irq+0xbf/0x1b0 [ 245.244672][ C0] irqentry_exit+0x65/0x90 [ 245.249109][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 245.255105][ C0] RIP: 0010:tomoyo_domain_quota_is_ok+0x421/0x550 [ 245.261534][ C0] Code: e8 34 83 0d fe 48 8d 7d 1a 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 42 0f b6 04 30 38 d0 7f ad 84 c0 74 a9 e8 51 e5 4d fe eb a2 0a 83 0d fe 48 8d 7d 1a 48 89 f8 48 c1 e8 03 42 0f b6 14 30 48 12:44:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 12:44:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x88493c4140854681, 0x0, 0x0, 0x0) [ 245.281347][ C0] RSP: 0018:ffffc90003a675b0 EFLAGS: 00000293 [ 245.287424][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8366eee9 [ 245.295408][ C0] RDX: 0000000000000000 RSI: ffff8880a22d8500 RDI: 0000000000000001 [ 245.303389][ C0] RBP: ffff888099d74400 R08: 0000000000000001 R09: ffffffff8cb2b747 [ 245.311459][ C0] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000000 [ 245.319461][ C0] R13: 0000000000000262 R14: dffffc0000000000 R15: 0000000000000000 [ 245.327564][ C0] ? tomoyo_domain_quota_is_ok+0x1c9/0x550 [ 245.334146][ C0] tomoyo_supervisor+0x2d4/0xeb0 [ 245.339136][ C0] ? tomoyo_profile+0x50/0x50 [ 245.343842][ C0] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 245.349230][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 245.354802][ C0] ? check_preemption_disabled+0x50/0x130 [ 245.360534][ C0] ? tomoyo_path_matches_pattern+0x110/0x280 [ 245.366734][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 245.366896][ C0] ? tomoyo_check_path_acl+0x8b/0x1f0 [ 245.366917][ C0] ? tomoyo_check_acl+0x315/0x410 [ 245.366948][ C0] tomoyo_path_permission+0x25c/0x360 [ 245.393868][ C0] tomoyo_check_open_permission+0x33e/0x380 [ 245.399790][ C0] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 245.405474][ C0] ? lock_downgrade+0x830/0x830 [ 245.410343][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 245.415480][ C0] tomoyo_file_open+0xa3/0xd0 [ 245.420176][ C0] security_file_open+0x52/0x4f0 [ 245.425122][ C0] do_dentry_open+0x358/0x11b0 [ 245.429902][ C0] ? may_open+0x1e4/0x400 [ 245.434249][ C0] path_openat+0x1b9a/0x2730 [ 245.438845][ C0] ? path_lookupat+0x830/0x830 [ 245.443607][ C0] ? lock_is_held_type+0xbb/0xf0 [ 245.448550][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 245.454555][ C0] ? lock_is_held_type+0xbb/0xf0 [ 245.459603][ C0] do_filp_open+0x17e/0x3c0 [ 245.464385][ C0] ? may_open_dev+0xf0/0xf0 [ 245.468927][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 245.473962][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 245.479004][ C0] ? _raw_spin_unlock+0x24/0x40 [ 245.483858][ C0] ? __alloc_fd+0x28d/0x600 [ 245.488376][ C0] do_sys_openat2+0x16d/0x420 [ 245.493162][ C0] ? seccomp_notify_ioctl+0xd90/0xd90 [ 245.498535][ C0] ? build_open_flags+0x650/0x650 [ 245.503563][ C0] ? kmem_cache_free.part.0+0x1b0/0x1e0 [ 245.509124][ C0] __x64_sys_open+0x119/0x1c0 [ 245.513803][ C0] ? do_sys_open+0x140/0x140 [ 245.518401][ C0] ? __secure_computing+0x104/0x360 [ 245.523606][ C0] do_syscall_64+0x2d/0x70 [ 245.528029][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 245.533921][ C0] RIP: 0033:0x7fa8b68a79b1 [ 245.538362][ C0] Code: f7 d8 bf ff ff ff ff 64 89 02 eb cb 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 80 3f 00 74 1b be 00 08 09 00 b8 02 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1f 89 c7 e9 00 ff ff ff 48 8b 05 b1 54 2e 00 [ 245.557988][ C0] RSP: 002b:00007ffe4cb19ec8 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 245.566403][ C0] RAX: ffffffffffffffda RBX: 000055f079c697f0 RCX: 00007fa8b68a79b1 [ 245.574399][ C0] RDX: 00000000000000fd RSI: 0000000000090800 RDI: 000055f079c39000 [ 245.582375][ C0] RBP: 00007fa8b7a5c710 R08: 000055f079c397a0 R09: 0000000000001010 [ 245.590424][ C0] R10: 00007fa8b6b8db58 R11: 0000000000000202 R12: 0000000000000000 [ 245.598414][ C0] R13: 000055f079c39000 R14: 00000000000000fd R15: 000055f079c39000 [ 245.606408][ C0] [ 245.608754][ C0] Allocated by task 9229: [ 245.613113][ C0] kasan_save_stack+0x1b/0x40 [ 245.617809][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 245.623458][ C0] kvmalloc_node+0x61/0xf0 [ 245.627906][ C0] xp_create_and_assign_umem+0x58/0x8d0 [ 245.633448][ C0] xsk_bind+0x9a0/0xed0 [ 245.637677][ C0] __sys_bind+0x1e9/0x250 [ 245.642023][ C0] __x64_sys_bind+0x6f/0xb0 [ 245.646546][ C0] do_syscall_64+0x2d/0x70 [ 245.650962][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 245.656839][ C0] [ 245.659160][ C0] Freed by task 9229: [ 245.663140][ C0] kasan_save_stack+0x1b/0x40 [ 245.667816][ C0] kasan_set_track+0x1c/0x30 [ 245.672403][ C0] kasan_set_free_info+0x1b/0x30 [ 245.677334][ C0] __kasan_slab_free+0xd8/0x120 [ 245.682191][ C0] kfree+0x10e/0x2b0 [ 245.686081][ C0] kvfree+0x42/0x50 [ 245.689911][ C0] xp_destroy+0x45/0x60 [ 245.694068][ C0] xsk_bind+0xbdd/0xed0 [ 245.698216][ C0] __sys_bind+0x1e9/0x250 [ 245.702539][ C0] __x64_sys_bind+0x6f/0xb0 [ 245.707041][ C0] do_syscall_64+0x2d/0x70 [ 245.711461][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 245.717355][ C0] [ 245.719682][ C0] The buggy address belongs to the object at ffff88808b3de800 [ 245.719682][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 245.734081][ C0] The buggy address is located 96 bytes inside of [ 245.734081][ C0] 1024-byte region [ffff88808b3de800, ffff88808b3dec00) [ 245.747449][ C0] The buggy address belongs to the page: [ 245.753092][ C0] page:00000000c042df3e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8b3de [ 245.763236][ C0] flags: 0xfffe0000000200(slab) [ 245.768089][ C0] raw: 00fffe0000000200 ffffea0002548588 ffffea000236ae88 ffff8880aa040700 [ 245.776790][ C0] raw: 0000000000000000 ffff88808b3de000 0000000100000002 0000000000000000 [ 245.786596][ C0] page dumped because: kasan: bad access detected [ 245.793094][ C0] [ 245.795416][ C0] Memory state around the buggy address: [ 245.801042][ C0] ffff88808b3de700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.809098][ C0] ffff88808b3de780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.817152][ C0] >ffff88808b3de800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.825290][ C0] ^ [ 245.832489][ C0] ffff88808b3de880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.840558][ C0] ffff88808b3de900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.848712][ C0] ================================================================== [ 245.856778][ C0] Disabling lock debugging due to kernel taint [ 245.863018][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 245.869636][ C0] CPU: 0 PID: 3921 Comm: systemd-udevd Tainted: G B 5.9.0-rc3-syzkaller #0 [ 245.879533][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.889582][ C0] Call Trace: [ 245.892857][ C0] [ 245.895712][ C0] dump_stack+0x198/0x1fd [ 245.900032][ C0] ? xp_get_pool+0x80/0xa0 [ 245.904818][ C0] panic+0x347/0x7c0 [ 245.908705][ C0] ? __warn_printk+0xf3/0xf3 [ 245.913284][ C0] ? xp_put_pool+0x2c/0x1e0 [ 245.917806][ C0] ? trace_hardirqs_on+0x55/0x220 [ 245.922828][ C0] ? xp_put_pool+0x2c/0x1e0 [ 245.927414][ C0] ? xp_put_pool+0x2c/0x1e0 [ 245.931996][ C0] end_report+0x4d/0x53 [ 245.936144][ C0] kasan_report.cold+0xd/0x37 [ 245.940812][ C0] ? lock_release+0x811/0x8f0 [ 245.945480][ C0] ? xp_put_pool+0x2c/0x1e0 [ 245.949992][ C0] check_memory_region+0x13d/0x180 [ 245.955092][ C0] xp_put_pool+0x2c/0x1e0 [ 245.959404][ C0] xsk_destruct+0x7d/0xa0 [ 245.963721][ C0] ? xsk_create+0x750/0x750 [ 245.968213][ C0] __sk_destruct+0x4b/0x860 [ 245.972720][ C0] rcu_core+0x5ca/0x1130 [ 245.977311][ C0] ? rcu_gp_kthread+0x1b50/0x1b50 [ 245.982343][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 245.987197][ C0] ? lock_is_held_type+0xbb/0xf0 [ 245.992129][ C0] __do_softirq+0x1f7/0xa91 [ 245.996643][ C0] asm_call_on_stack+0xf/0x20 [ 246.001323][ C0] [ 246.004739][ C0] do_softirq_own_stack+0x9d/0xd0 [ 246.009781][ C0] irq_exit_rcu+0x235/0x280 [ 246.014377][ C0] sysvec_apic_timer_interrupt+0x51/0xf0 [ 246.020014][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 246.026084][ C0] RIP: 0010:_raw_spin_unlock_irq+0x4b/0x80 [ 246.031994][ C0] Code: c0 98 3c b6 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 76 96 bd 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 fb 12 57 f9 65 8b 05 44 58 09 78 85 c0 74 02 5d [ 246.051595][ C0] RSP: 0018:ffffc90003a67380 EFLAGS: 00000282 [ 246.057750][ C0] RAX: 1ffffffff136c793 RBX: ffff8880a22d8500 RCX: 1ffffffff1565171 [ 246.065714][ C0] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 246.073682][ C0] RBP: ffff8880ae635e40 R08: 0000000000000001 R09: 0000000000000001 [ 246.081652][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae635e40 [ 246.089625][ C0] R13: ffff888058ff6380 R14: 0000000000000000 R15: 0000000000000001 [ 246.097623][ C0] finish_task_switch+0x147/0x750 [ 246.102651][ C0] ? finish_task_switch+0x119/0x750 [ 246.107865][ C0] ? __switch_to+0x425/0xfe0 [ 246.113775][ C0] __schedule+0xeb1/0x2230 [ 246.118202][ C0] ? io_schedule_timeout+0x140/0x140 [ 246.123577][ C0] ? sched_clock+0x2a/0x40 [ 246.127999][ C0] ? preempt_schedule_irq+0x8f/0x1b0 [ 246.133293][ C0] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 246.139275][ C0] preempt_schedule_irq+0xbf/0x1b0 [ 246.144382][ C0] irqentry_exit+0x65/0x90 [ 246.148895][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 246.154959][ C0] RIP: 0010:tomoyo_domain_quota_is_ok+0x421/0x550 [ 246.161476][ C0] Code: e8 34 83 0d fe 48 8d 7d 1a 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 42 0f b6 04 30 38 d0 7f ad 84 c0 74 a9 e8 51 e5 4d fe eb a2 0a 83 0d fe 48 8d 7d 1a 48 89 f8 48 c1 e8 03 42 0f b6 14 30 48 [ 246.181175][ C0] RSP: 0018:ffffc90003a675b0 EFLAGS: 00000293 [ 246.187241][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8366eee9 [ 246.195203][ C0] RDX: 0000000000000000 RSI: ffff8880a22d8500 RDI: 0000000000000001 [ 246.203165][ C0] RBP: ffff888099d74400 R08: 0000000000000001 R09: ffffffff8cb2b747 [ 246.211301][ C0] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000000 [ 246.219260][ C0] R13: 0000000000000262 R14: dffffc0000000000 R15: 0000000000000000 [ 246.227274][ C0] ? tomoyo_domain_quota_is_ok+0x1c9/0x550 [ 246.233083][ C0] tomoyo_supervisor+0x2d4/0xeb0 [ 246.238020][ C0] ? tomoyo_profile+0x50/0x50 [ 246.242701][ C0] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 246.248080][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 246.253269][ C0] ? check_preemption_disabled+0x50/0x130 [ 246.258979][ C0] ? tomoyo_path_matches_pattern+0x110/0x280 [ 246.265051][ C0] ? tomoyo_check_path_acl+0x8b/0x1f0 [ 246.270440][ C0] ? tomoyo_check_acl+0x315/0x410 [ 246.275476][ C0] tomoyo_path_permission+0x25c/0x360 [ 246.280867][ C0] tomoyo_check_open_permission+0x33e/0x380 [ 246.286752][ C0] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 246.292421][ C0] ? lock_downgrade+0x830/0x830 [ 246.297275][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 246.302294][ C0] tomoyo_file_open+0xa3/0xd0 [ 246.306965][ C0] security_file_open+0x52/0x4f0 [ 246.311913][ C0] do_dentry_open+0x358/0x11b0 [ 246.316766][ C0] ? may_open+0x1e4/0x400 [ 246.321096][ C0] path_openat+0x1b9a/0x2730 [ 246.325699][ C0] ? path_lookupat+0x830/0x830 [ 246.330472][ C0] ? lock_is_held_type+0xbb/0xf0 [ 246.335869][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 246.341848][ C0] ? lock_is_held_type+0xbb/0xf0 [ 246.346792][ C0] do_filp_open+0x17e/0x3c0 [ 246.351296][ C0] ? may_open_dev+0xf0/0xf0 [ 246.355824][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 246.360846][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 246.365785][ C0] ? _raw_spin_unlock+0x24/0x40 [ 246.370645][ C0] ? __alloc_fd+0x28d/0x600 [ 246.375156][ C0] do_sys_openat2+0x16d/0x420 [ 246.379837][ C0] ? seccomp_notify_ioctl+0xd90/0xd90 [ 246.385307][ C0] ? build_open_flags+0x650/0x650 [ 246.390433][ C0] ? kmem_cache_free.part.0+0x1b0/0x1e0 [ 246.395975][ C0] __x64_sys_open+0x119/0x1c0 [ 246.400670][ C0] ? do_sys_open+0x140/0x140 [ 246.405257][ C0] ? __secure_computing+0x104/0x360 [ 246.410451][ C0] do_syscall_64+0x2d/0x70 [ 246.414887][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 246.420771][ C0] RIP: 0033:0x7fa8b68a79b1 [ 246.425197][ C0] Code: f7 d8 bf ff ff ff ff 64 89 02 eb cb 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 80 3f 00 74 1b be 00 08 09 00 b8 02 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1f 89 c7 e9 00 ff ff ff 48 8b 05 b1 54 2e 00 [ 246.445066][ C0] RSP: 002b:00007ffe4cb19ec8 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 246.453479][ C0] RAX: ffffffffffffffda RBX: 000055f079c697f0 RCX: 00007fa8b68a79b1 [ 246.461443][ C0] RDX: 00000000000000fd RSI: 0000000000090800 RDI: 000055f079c39000 [ 246.469521][ C0] RBP: 00007fa8b7a5c710 R08: 000055f079c397a0 R09: 0000000000001010 [ 246.477483][ C0] R10: 00007fa8b6b8db58 R11: 0000000000000202 R12: 0000000000000000 [ 246.485539][ C0] R13: 000055f079c39000 R14: 00000000000000fd R15: 000055f079c39000 [ 246.494650][ C0] Kernel Offset: disabled [ 246.498984][ C0] Rebooting in 86400 seconds..