last executing test programs: 1m2.691072048s ago: executing program 2 (id=269): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000540)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x2, r3}, 0x38) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfffa, 0x1, 0xff, 0xc257, 0x0}, &(0x7f00000000c0)=0x10) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) 51.526630742s ago: executing program 2 (id=269): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000540)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x2, r3}, 0x38) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfffa, 0x1, 0xff, 0xc257, 0x0}, &(0x7f00000000c0)=0x10) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) 39.355884171s ago: executing program 2 (id=269): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000540)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x2, r3}, 0x38) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfffa, 0x1, 0xff, 0xc257, 0x0}, &(0x7f00000000c0)=0x10) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) 27.81387837s ago: executing program 2 (id=269): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000540)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x2, r3}, 0x38) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfffa, 0x1, 0xff, 0xc257, 0x0}, &(0x7f00000000c0)=0x10) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) 15.581674396s ago: executing program 2 (id=269): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000540)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x2, r3}, 0x38) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfffa, 0x1, 0xff, 0xc257, 0x0}, &(0x7f00000000c0)=0x10) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) 4.164433525s ago: executing program 2 (id=269): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000540)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x2, r3}, 0x38) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfffa, 0x1, 0xff, 0xc257, 0x0}, &(0x7f00000000c0)=0x10) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@loopback, @rand_addr=0x64010101, 0x1, 0x8, [@rand_addr=0x64010100, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @local, @multicast2]}, 0x30) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8, 0x0, 0x101}, 0x10) 2.777045535s ago: executing program 1 (id=1771): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x20) 2.73058247s ago: executing program 0 (id=1774): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @none}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x10012, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f000024d000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 2.644668664s ago: executing program 1 (id=1775): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="01002cbd7000040000001100000008000300", @ANYRES32=r3], 0xb0}}, 0x4000000) 2.574992824s ago: executing program 0 (id=1776): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e000699030500ff000004000000000300012c5fb5328b90dc0d544bf7fd4470e87d4002000c0901ac04000bd67f6f94007100a007a290457f0189b316ce8017cbec00000000", 0x66}, {&(0x7f00000006c0)="702453e3780b5c50a03c75ea89fda5ef1faed77b5c98b5cc4059e99b081be197390be61224b2c0a0f77ee76106defa4a4a1e6223535c44", 0x37}, {&(0x7f0000000880)="fa066523a7f3ebe84ddfc06dfba855fe15bce1c7b4055b541efdae7cacf2109633121046cd6fa48cf40bde9494e2e4945a440d6b19", 0x35}], 0x3, 0x0, 0x0, 0x2663}, 0x4054) 2.526859413s ago: executing program 0 (id=1777): r0 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0x20000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010023, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000540)={@val={0x6}, @void, @eth={@link_local, @random="d26b98d19dd8", @val={@val, {0x8847}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x2, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "20e856", 0x0, "fb148f"}}}}}}}, 0x3e) 2.351846935s ago: executing program 1 (id=1778): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@o_path={&(0x7f00000027c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070c000011000000000007000000", @ANYRES32=r3, @ANYBLOB="40000f000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="10000000000000f04fb364cafa32038ac8620000"], 0x14}, 0x1, 0x0, 0x0, 0x20008051}, 0x4002000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x0, 0x42, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x4}, 0x48) 1.891009592s ago: executing program 4 (id=1779): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1e, 0x0, 0x4, @prog_fd}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x18, &(0x7f0000000cc0), 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000980)=ANY=[@ANYRES32=r2], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xf0000000, 0x4) unshare(0x20180) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x3}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 1.890563845s ago: executing program 3 (id=1780): pipe(&(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="ddffffffffffffff1c00128009000100626f6e64000000000c000200050016"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x80108907, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='f2fs_readpages\x00', r1}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_opts(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000440)=ANY=[@ANYRES64=r2], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e00010000000000000000edd4000000", @ANYRES32=r6, @ANYBLOB="df8cc2b99250beb3c101000100"], 0x1c}, 0x1, 0xba01}, 0x20048000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="9afe29c8367dec5dd7b2134e5392dc1abac3439643736bf412a446cf1fbbca525f54b1aabdc50884c8ac3be82cb49ffe3458b4b643924de6f1c050c622b9f4a813457a72f75bb9afc64036604a2a3351b4e374df241cf55867b2609d63671bcc316de35289e11760375c77f8ca66871919f78d96da7e328ef8079100419efe2e18e06c64f7896abdeb8251af152ec67954bd9867998d2705e8871077fb06a6ae5a45dd3ae23cfe10dfa0428a544a48aa0a0d10a3f97ae379e3271bc63d6b223919ec4d96463595f7d8a6889003c88b6039c5d9b7a07a0831fdb8", @ANYRES32=r0, @ANYRES32, @ANYBLOB="87bddb86a40749a28614f3f7c0e865d207b6ed1511c0166d9f6e465cb8e500151f2c35f9d6276f5cc87c1c84cfeccc5643e680c45cce787ae899bbc474ac177ba1e3e996538469f98891f3ae7696be85bcca77b2b889d248a6d2d5478e03e4b9f907017a3718218c816227cd43cf74cdc752816cb2c829a8b0afa5762646", @ANYRESOCT, @ANYRES16=r3, @ANYRESOCT=r4, @ANYBLOB="2e899f62588c3678945ff16e31ec71c7431a54ed1b3ed71dec9722faa89d87170239d3fa0ff205b59f35173ac4df49a604418e3c76655d8f5be5aee68ab71240f86928af46851400daf6e8b0e88dabb3a58c51aea3b6ebed9503d7a03cd713fed92c7bee6b99c3752336db26feafb8b5b825748c149b896d4670c33b0813a6e67e9bbcf17d0c5248af48b88363a5dae20577dbdf38ed99efc225b76e8d95041b0dd3a5bea72d68f7feec391c255c88472b64e9fc2db5cb7a33aab1ee947ec70d03151435e7cfc4fd3a9589d97cf817e70b0057079285bd1717693275dd5b779749897a00e5df8d9721118e431bacc495a75b"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xffffffffffffffca, 0x0, 0x0, 0x62, '\x00', r6, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xba) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600053582c137153e37080c188006ac0f000300", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="8400020023000b03d25a806f8c6394f90524fc602f1a17010a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) nanosleep(0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=r8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) 1.766942742s ago: executing program 4 (id=1781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000080000003a3a9b00000008001400", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d80"], 0x40}}, 0x0) 1.723229215s ago: executing program 1 (id=1782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630df8ff0000000095916ee734000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000040000aa0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'veth1_macvtap\x00', @random="2b1c00004ec6"}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000100f300000000002e00000008000200", @ANYRES32=r4], 0x1c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100010100000000001f000000000000", @ANYRES32=r7], 0x20}}, 0x0) 1.546221544s ago: executing program 4 (id=1783): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740), 0x0, 0x814) r1 = socket$inet6(0xa, 0x806, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01000000000f356c988557951f97"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r3) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000020000000000200000008000100010000001fd9e397e2e0a6ed8c0a956a95e6f700000000000000"], 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r6, 0x80080400) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r7, 0x10d, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) unshare(0x20020400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xca21, 0xf, 0x7}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000010110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) socket$netlink(0x10, 0x3, 0x0) 1.545312438s ago: executing program 0 (id=1784): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000040081000081fe280000000000000800040001000000", 0x17) r1 = accept4(r0, 0x0, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="140004006e7363766630000000000001010000000800050006000000180017800400040004"], 0x50}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0xb00, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x200484d4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1.545066882s ago: executing program 3 (id=1785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300070000f600f57505"], 0x20}}, 0x400000000000000) 1.410968619s ago: executing program 4 (id=1786): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) sendmmsg$inet(r1, &(0x7f0000005640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3, 0xffff8001, 0xffffffab, 0x7fffffff}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8c4) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x3, 0x3}, 0x6) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="0800040000000000"], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000002000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e}, 0x20) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x70}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) 1.410832221s ago: executing program 3 (id=1787): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e000699030500ff000004000000000300012c5fb5328b90dc0d544bf7fd4470e87d4002000c0901ac04000bd67f6f94007100a007a290457f0189b316ce8017cbec00000000000000", 0x69}, {&(0x7f00000006c0)="702453e3780b5c50a03c75ea89fda5ef1faed77b5c98b5cc4059e99b081be197390be61224b2c0a0f77ee76106defa4a4a1e6223535c44", 0x37}, {&(0x7f0000000880)="fa066523a7f3ebe84ddfc06dfba855fe15bce1c7b4055b541efdae7cacf2109633121046cd6fa48cf40bde9494e2e4945a440d6b19", 0x35}], 0x3, 0x0, 0x0, 0x2663}, 0x4054) 1.359293354s ago: executing program 3 (id=1788): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="01002cbd7000040000001100000008000300", @ANYRES32=r3], 0xb0}}, 0x4000000) 1.230639857s ago: executing program 3 (id=1789): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_macvtap\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) listen(r2, 0x9b5b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_int(r3, 0x10d, 0xfc, &(0x7f0000000080), &(0x7f0000000000)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x3, [{}, {}]}, @restrict, @enum]}}, 0x0, 0x4e}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x13, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="632439094314c5"]}]}, 0x38}], 0x1}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@report={0x88, 0x20, 0x20, 0x70bd2b, 0x25dfdbfc, {0x33, {@in6=@mcast1, @in=@loopback, 0x4e24, 0x4, 0x4e23, 0x8b, 0x2, 0x80, 0x20, 0x63, 0x0, r8}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in6=@remote, 0x0, 0x2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x2000050) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x0) 345.066226ms ago: executing program 0 (id=1790): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f03003d000b08d25a80648c7494f90224fc600b0002400a000000053582c137153e370800018000f01700d1bdc92467ff73a44ca3dd81bffd8d0eee2815e3f0884f75520a005493c6315c900f8061ce9c3d2318b71888669750a1ccb32eaacff7aade84360d85e06b0ce0a852e1a87d6ffe8403650d57b444b6c013c0ae6f8df5ec2b93252c09e3", 0x89}], 0x1}, 0x20000880) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x20000400) (async) unshare(0x20000400) 344.680737ms ago: executing program 1 (id=1791): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x17, 0xa, 0x207, 0x0, 0xc00e, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x4, 0x3}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000440)=ANY=[], 0x0) r2 = socket$inet6(0xa, 0x0, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x16, 0x40000000, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001880)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001440)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_STATUS={0x8}]}, 0x24}}, 0x0) 339.808925ms ago: executing program 4 (id=1792): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB="88486700080008"], 0x24}}, 0x0) 313.046642ms ago: executing program 3 (id=1793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000000000000000000008000f20"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020732500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) recvmmsg(r4, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002cc0)=""/152, 0x98}, {&(0x7f0000000340)=""/211, 0xd3}], 0x2}}, {{0x0, 0x0, &(0x7f0000003200)=[{0x0}], 0x1}, 0xb177}, {{&(0x7f00000038c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000005200)=""/64, 0x40}, 0xa000000}], 0x4, 0x40002006, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x24, &(0x7f0000000440), &(0x7f0000000100)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)=ANY=[@ANYBLOB="140000000000009006b22600000000000000000a3cf46a74b8ff302ba8251176f9ff00248466090a080600000000000000000100000008000a310000001a3530af82488d90ccfcaac0a3f13e426044df000900010073797a30"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14200}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14dc}, 0x1, 0x0, 0x0, 0x20010}, 0x20000454) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x3a, 0x1, 0x0, 0x52) close(r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000100000000000000000006000000", @ANYRES32=r9, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c000280060011000000000006000f00000000000600100000000000"], 0x50}}, 0x0) 159.121235ms ago: executing program 0 (id=1794): syz_emit_ethernet(0x86, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000078"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 158.849062ms ago: executing program 4 (id=1795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01af027791000000010018"], 0x30}}, 0x0) 0s ago: executing program 1 (id=1796): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a0000000100039040000000000000000000f03e4", @ANYRES32=r0, @ANYBLOB="0000000000000000100012800800010073697400040002"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): 0x4e0 [ 141.583609][ T8230] _copy_to_user+0x2f/0xb0 [ 141.588023][ T8230] simple_read_from_buffer+0xca/0x150 [ 141.593394][ T8230] proc_fail_nth_read+0x1e9/0x250 [ 141.598420][ T8230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.603961][ T8230] ? rw_verify_area+0x520/0x6b0 [ 141.608817][ T8230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.614362][ T8230] vfs_read+0x204/0xbc0 [ 141.618524][ T8230] ? __pfx_lock_release+0x10/0x10 [ 141.623562][ T8230] ? __pfx_vfs_read+0x10/0x10 [ 141.628232][ T8230] ? __fget_files+0x29/0x470 [ 141.632823][ T8230] ? __fget_files+0x3f6/0x470 [ 141.637517][ T8230] ksys_read+0x1a0/0x2c0 [ 141.641762][ T8230] ? __pfx_ksys_read+0x10/0x10 [ 141.646520][ T8230] ? do_syscall_64+0x100/0x230 [ 141.651280][ T8230] ? do_syscall_64+0xb6/0x230 [ 141.655948][ T8230] do_syscall_64+0xf3/0x230 [ 141.660442][ T8230] ? clear_bhb_loop+0x35/0x90 [ 141.665112][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.671005][ T8230] RIP: 0033:0x7ff0051746bc [ 141.675411][ T8230] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 141.695014][ T8230] RSP: 002b:00007ff005f4b040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.703431][ T8230] RAX: ffffffffffffffda RBX: 00007ff005304110 RCX: 00007ff0051746bc [ 141.711401][ T8230] RDX: 000000000000000f RSI: 00007ff005f4b0b0 RDI: 0000000000000006 [ 141.719367][ T8230] RBP: 00007ff005f4b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.727417][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.735377][ T8230] R13: 000000000000006e R14: 00007ff005304110 R15: 00007fffa917fff8 [ 141.743353][ T8230] [ 141.783353][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.809756][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.845096][ T8071] bridge_slave_0: entered allmulticast mode [ 141.873628][ T8071] bridge_slave_0: entered promiscuous mode [ 141.999499][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.016876][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.024237][ T8071] bridge_slave_1: entered allmulticast mode [ 142.031882][ T8071] bridge_slave_1: entered promiscuous mode [ 142.216394][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.293155][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.345817][ T8255] FAULT_INJECTION: forcing a failure. [ 142.345817][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 142.383570][ T8255] CPU: 0 PID: 8255 Comm: syz.4.806 Not tainted 6.10.0-rc7-syzkaller-00276-g0a1868b93fad #0 [ 142.393604][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 142.403678][ T8255] Call Trace: [ 142.406973][ T8255] [ 142.409920][ T8255] dump_stack_lvl+0x241/0x360 [ 142.414715][ T8255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.419939][ T8255] ? __pfx__printk+0x10/0x10 [ 142.424549][ T8255] ? lockdep_init_map_type+0xa1/0x910 [ 142.429938][ T8255] ? __asan_memset+0x23/0x50 [ 142.434547][ T8255] should_fail_ex+0x3b0/0x4e0 [ 142.439250][ T8255] ? security_inode_alloc+0x28/0x120 [ 142.444548][ T8255] should_failslab+0x9/0x20 [ 142.449071][ T8255] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 142.454481][ T8255] security_inode_alloc+0x28/0x120 [ 142.459612][ T8255] inode_init_always+0x947/0xc70 [ 142.464571][ T8255] ? __pfx_sock_alloc_inode+0x10/0x10 [ 142.469960][ T8255] new_inode_pseudo+0x9e/0x1e0 [ 142.474792][ T8255] __sock_create+0x123/0x920 [ 142.479419][ T8255] __sys_socket+0x150/0x3c0 [ 142.483933][ T8255] ? __pfx___sys_socket+0x10/0x10 [ 142.488947][ T8255] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.495270][ T8255] ? exc_page_fault+0x590/0x8c0 [ 142.500121][ T8255] __x64_sys_socket+0x7a/0x90 [ 142.504790][ T8255] do_syscall_64+0xf3/0x230 [ 142.509285][ T8255] ? clear_bhb_loop+0x35/0x90 [ 142.513957][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.519851][ T8255] RIP: 0033:0x7f35439779f7 [ 142.524258][ T8255] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.543952][ T8255] RSP: 002b:00007f35447ecfb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 142.552362][ T8255] RAX: ffffffffffffffda RBX: 00007f3543b03f60 RCX: 00007f35439779f7 [ 142.560330][ T8255] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 142.568289][ T8255] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 142.576334][ T8255] R10: 0000000020000040 R11: 0000000000000286 R12: 0000000000000001 [ 142.584293][ T8255] R13: 000000000000000b R14: 00007f3543b03f60 R15: 00007ffe12d94758 [ 142.592270][ T8255] [ 142.604545][ T8255] socket: no more sockets [ 142.651703][ T8071] team0: Port device team_slave_0 added [ 142.749487][ T8071] team0: Port device team_slave_1 added [ 142.874327][ T7989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.912358][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.916999][ T5094] Bluetooth: hci2: command tx timeout [ 142.959899][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.016798][ T8071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.036139][ T7989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.066427][ T7989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.128032][ T8282] bond0: entered promiscuous mode [ 143.159374][ T8282] bond_slave_0: entered promiscuous mode [ 143.175954][ T8282] bond_slave_1: entered promiscuous mode [ 143.203108][ T8282] bond0: left promiscuous mode [ 143.209358][ T8282] bond_slave_0: left promiscuous mode [ 143.221570][ T8282] bond_slave_1: left promiscuous mode [ 143.236887][ T5094] Bluetooth: hci5: command tx timeout [ 143.243255][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.255301][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.297671][ T8071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.309700][ T7989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.517834][ T8071] hsr_slave_0: entered promiscuous mode [ 143.543052][ T8071] hsr_slave_1: entered promiscuous mode [ 143.551215][ T8071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.572349][ T8071] Cannot create hsr debugfs directory [ 144.113217][ T8071] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.291760][ T8071] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.369130][ T8341] __nla_validate_parse: 4 callbacks suppressed [ 144.369148][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.826'. [ 144.379061][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.433731][ T8336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.826'. [ 144.475920][ T8071] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.506660][ T8336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.826'. [ 144.664912][ T8071] bond0: (slave netdevsim0): Releasing backup interface [ 144.702660][ T8071] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 144.750419][ T8071] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.819194][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.868675][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.875897][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.925227][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.932457][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.205812][ T8071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.261678][ T8071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.326713][ T5094] Bluetooth: hci5: command tx timeout [ 145.362763][ T8071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.410226][ T8071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.753365][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.791167][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.831519][ T8414] netlink: 108 bytes leftover after parsing attributes in process `syz.4.840'. [ 145.856576][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.980406][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.987621][ T5101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.035467][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.042808][ T5101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.113914][ T8420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.841'. [ 146.140399][ T7989] veth0_vlan: entered promiscuous mode [ 146.219819][ T7989] veth1_vlan: entered promiscuous mode [ 146.326278][ T8071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.351959][ T8071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.526128][ T7989] veth0_macvtap: entered promiscuous mode [ 146.576195][ T7989] veth1_macvtap: entered promiscuous mode [ 146.629234][ T8441] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.848'. [ 146.668395][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.689649][ T8441] netlink: zone id is out of range [ 146.705386][ T8441] netlink: zone id is out of range [ 146.722394][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 146.751457][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.757910][ T8441] netlink: zone id is out of range [ 146.777025][ T8441] netlink: zone id is out of range [ 146.781934][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.795956][ T8456] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 146.810955][ T8456] netlink: 'syz.4.850': attribute type 2 has an invalid length. [ 146.819162][ T8441] netlink: zone id is out of range [ 146.824449][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.850359][ T8441] netlink: zone id is out of range [ 146.860425][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.869025][ T8441] netlink: zone id is out of range [ 146.882905][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.915600][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.926318][ T8441] netlink: zone id is out of range [ 146.926335][ T8441] netlink: zone id is out of range [ 146.963071][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.005832][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.064385][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.099965][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.116890][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.136260][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.148921][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.178134][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.197673][ T8471] netlink: 188 bytes leftover after parsing attributes in process `syz.3.854'. [ 147.200908][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.276838][ T8471] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 147.279814][ T7989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.334766][ T7989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.350164][ T7989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.366993][ T7989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.400529][ T8474] netlink: 'syz.4.855': attribute type 3 has an invalid length. [ 147.437558][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.856'. [ 147.608423][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.754503][ T8492] vlan3: entered promiscuous mode [ 147.778699][ T8492] vlan3: entered allmulticast mode [ 147.783879][ T8492] batadv0: entered allmulticast mode [ 147.906856][ T8502] net_ratelimit: 129 callbacks suppressed [ 147.906875][ T8502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.934835][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.975930][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.094686][ T8071] veth0_vlan: entered promiscuous mode [ 148.147405][ T2880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.163383][ T2880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.179994][ T8071] veth1_vlan: entered promiscuous mode [ 148.232713][ T8512] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.865'. [ 148.276444][ T8512] netlink: zone id is out of range [ 148.283976][ T8517] vxcan0: entered promiscuous mode [ 148.286172][ T8512] netlink: zone id is out of range [ 148.301128][ T8512] netlink: zone id is out of range [ 148.306397][ T8512] netlink: zone id is out of range [ 148.313332][ T8512] netlink: zone id is out of range [ 148.318735][ T8517] vlan4: entered allmulticast mode [ 148.318756][ T8517] vxcan0: entered allmulticast mode [ 148.353288][ T8507] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 148.371211][ T8512] netlink: zone id is out of range [ 148.384705][ T8512] netlink: zone id is out of range [ 148.384962][ T8071] veth0_macvtap: entered promiscuous mode [ 148.395901][ T8512] netlink: zone id is out of range [ 148.402042][ T8507] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 148.422153][ T8512] netlink: zone id is out of range [ 148.496956][ T8071] veth1_macvtap: entered promiscuous mode [ 148.544340][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.576696][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.586551][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.616683][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.626537][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.659453][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.678397][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.701078][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.722744][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.742414][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.765887][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.802031][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.838354][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.886290][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.936455][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.976738][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.000072][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.027776][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.040384][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.072624][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.248422][ T8071] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.268234][ T8071] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.296091][ T8071] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.336985][ T8071] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.525705][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.643181][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.759450][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.809621][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.825353][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.865931][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.893772][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.901697][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.004601][ T51] bridge_slave_1: left allmulticast mode [ 150.029252][ T51] bridge_slave_1: left promiscuous mode [ 150.035042][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.106305][ T51] bridge_slave_0: left allmulticast mode [ 150.136817][ T51] bridge_slave_0: left promiscuous mode [ 150.167140][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.320655][ T8584] __nla_validate_parse: 1 callbacks suppressed [ 150.320675][ T8584] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.875'. [ 150.360650][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 150.580987][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.605533][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.617012][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.629585][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.653871][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.666120][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.891822][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.906941][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.925963][ T51] bond0 (unregistering): Released all slaves [ 150.965376][ T8597] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 151.482398][ T8615] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 151.515124][ T8615] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 151.838844][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 151.892536][ T8647] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.890'. [ 151.977288][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 152.016782][ T51] hsr_slave_0: left promiscuous mode [ 152.025383][ T51] hsr_slave_1: left promiscuous mode [ 152.034452][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.043563][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.055737][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.060330][ T8655] netlink: 'syz.0.895': attribute type 6 has an invalid length. [ 152.071359][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.087656][ T8655] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 152.095564][ T8655] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.895'. [ 152.104323][ T51] veth1_macvtap: left promiscuous mode [ 152.111515][ T51] veth0_macvtap: left promiscuous mode [ 152.120524][ T51] veth1_vlan: left promiscuous mode [ 152.125994][ T51] veth0_vlan: left promiscuous mode [ 152.646321][ T51] team0 (unregistering): Port device team_slave_1 removed [ 152.683277][ T51] team0 (unregistering): Port device team_slave_0 removed [ 152.758364][ T5094] Bluetooth: hci0: command tx timeout [ 153.051438][ T8644] team0: Port device bridge1 added [ 153.060092][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 153.077553][ T8664] netlink: 48 bytes leftover after parsing attributes in process `syz.4.894'. [ 153.113737][ T8664] tc_dump_action: action bad kind [ 153.379609][ T8676] tipc: Enabling of bearer rejected, failed to enable media [ 153.393720][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 153.525255][ T8682] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 153.604089][ T8679] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.901'. [ 153.638624][ T8679] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.901'. [ 153.842138][ T8699] netlink: 'syz.4.906': attribute type 29 has an invalid length. [ 153.867337][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.884901][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.917169][ T8593] bridge_slave_0: entered allmulticast mode [ 153.924571][ T8593] bridge_slave_0: entered promiscuous mode [ 153.944613][ T8699] netlink: 'syz.4.906': attribute type 29 has an invalid length. [ 153.960820][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.986150][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.013607][ T8593] bridge_slave_1: entered allmulticast mode [ 154.031070][ T8593] bridge_slave_1: entered promiscuous mode [ 154.097445][ T8709] team0: Port device syz_tun removed [ 154.119918][ T8713] netlink: 'syz.3.912': attribute type 4 has an invalid length. [ 154.173771][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.226072][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.313655][ T8721] netlink: 'syz.4.915': attribute type 10 has an invalid length. [ 154.471265][ T8593] team0: Port device team_slave_0 added [ 154.519830][ T8593] team0: Port device team_slave_1 added [ 154.556429][ T8744] FAULT_INJECTION: forcing a failure. [ 154.556429][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 154.596376][ T8744] CPU: 0 PID: 8744 Comm: syz.4.920 Not tainted 6.10.0-rc7-syzkaller-00276-g0a1868b93fad #0 [ 154.606401][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 154.616473][ T8744] Call Trace: [ 154.619758][ T8744] [ 154.622681][ T8744] dump_stack_lvl+0x241/0x360 [ 154.627361][ T8744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.632553][ T8744] ? __pfx__printk+0x10/0x10 [ 154.637161][ T8744] should_fail_ex+0x3b0/0x4e0 [ 154.641842][ T8744] ? sctp_add_bind_addr+0x89/0x3a0 [ 154.646948][ T8744] should_failslab+0x9/0x20 [ 154.651446][ T8744] kmalloc_trace_noprof+0x6c/0x2c0 [ 154.656557][ T8744] sctp_add_bind_addr+0x89/0x3a0 [ 154.661498][ T8744] sctp_copy_local_addr_list+0x311/0x500 [ 154.667129][ T8744] ? sctp_copy_local_addr_list+0xab/0x500 [ 154.672842][ T8744] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 154.678990][ T8744] ? sctp_v6_is_any+0x60/0x70 [ 154.683661][ T8744] sctp_bind_addr_copy+0xad/0x3b0 [ 154.688678][ T8744] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 154.695000][ T8744] sctp_connect_new_asoc+0x2f3/0x6c0 [ 154.700285][ T8744] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 154.706082][ T8744] ? sctp_sendmsg+0xbb9/0x3520 [ 154.710863][ T8744] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 154.716398][ T8744] ? security_sctp_bind_connect+0x90/0xb0 [ 154.722113][ T8744] sctp_sendmsg+0x219a/0x3520 [ 154.726795][ T8744] ? __pfx_sctp_sendmsg+0x10/0x10 [ 154.731810][ T8744] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.736661][ T8744] ? inet_sendmsg+0x330/0x390 [ 154.741331][ T8744] __sock_sendmsg+0x1a6/0x270 [ 154.746000][ T8744] __sys_sendto+0x3a4/0x4f0 [ 154.750497][ T8744] ? __pfx___sys_sendto+0x10/0x10 [ 154.755532][ T8744] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 154.761503][ T8744] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.767826][ T8744] __x64_sys_sendto+0xde/0x100 [ 154.772583][ T8744] do_syscall_64+0xf3/0x230 [ 154.777073][ T8744] ? clear_bhb_loop+0x35/0x90 [ 154.781740][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.787626][ T8744] RIP: 0033:0x7f3543975bd9 [ 154.792029][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.811634][ T8744] RSP: 002b:00007f35447ee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 154.820044][ T8744] RAX: ffffffffffffffda RBX: 00007f3543b03f60 RCX: 00007f3543975bd9 [ 154.828013][ T8744] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 154.835976][ T8744] RBP: 00007f35447ee0a0 R08: 000000002005ffe4 R09: 000000000000001c [ 154.843962][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.851924][ T8744] R13: 000000000000000b R14: 00007f3543b03f60 R15: 00007ffe12d94758 [ 154.859904][ T8744] [ 154.869020][ T5094] Bluetooth: hci0: command tx timeout [ 154.954860][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.996758][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.008192][ T8756] netlink: 'syz.3.925': attribute type 4 has an invalid length. [ 155.060844][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.092283][ T8756] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 155.114914][ T8756] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 155.166808][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.183788][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.213779][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.227419][ T8759] netlink: 'syz.1.926': attribute type 17 has an invalid length. [ 155.235181][ T8759] netlink: 'syz.1.926': attribute type 27 has an invalid length. [ 155.433178][ T8593] hsr_slave_0: entered promiscuous mode [ 155.449495][ T8593] hsr_slave_1: entered promiscuous mode [ 155.477141][ T8593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.506770][ T8593] Cannot create hsr debugfs directory [ 155.517392][ T8777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.694186][ T8788] __nla_validate_parse: 9 callbacks suppressed [ 155.694206][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.938'. [ 156.086168][ T8813] netlink: 224 bytes leftover after parsing attributes in process `syz.4.945'. [ 156.322300][ T8820] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.947'. [ 156.353683][ T8820] net_ratelimit: 406 callbacks suppressed [ 156.353700][ T8820] netlink: zone id is out of range [ 156.376943][ T8830] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.950'. [ 156.396338][ T8820] netlink: zone id is out of range [ 156.412230][ T8820] netlink: zone id is out of range [ 156.419591][ T8820] netlink: zone id is out of range [ 156.445750][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 156.474216][ T8820] netlink: zone id is out of range [ 156.505430][ T8820] netlink: zone id is out of range [ 156.529605][ T8820] netlink: zone id is out of range [ 156.535803][ T8820] netlink: zone id is out of range [ 156.596726][ T8820] netlink: zone id is out of range [ 156.609650][ T8593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.634577][ T8820] netlink: zone id is out of range [ 156.665284][ T8593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.770018][ T8593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.830124][ T8593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.918398][ T5094] Bluetooth: hci0: command tx timeout [ 157.185830][ T8864] validate_nla: 2 callbacks suppressed [ 157.185850][ T8864] netlink: 'syz.3.959': attribute type 4 has an invalid length. [ 157.268100][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.962'. [ 157.520482][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.965'. [ 157.536005][ T8875] vlan3: entered promiscuous mode [ 157.557464][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.613738][ T8593] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.651384][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.658616][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.678772][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.686005][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.817992][ T8886] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.968'. [ 157.888363][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 157.910353][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.970'. [ 158.435719][ T8593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.537206][ T8912] atomic_op ffff88806448a198 conn xmit_atomic 0000000000000000 [ 158.675720][ T2817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.710679][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.737685][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.747103][ T4489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.768625][ T4489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.778311][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.789649][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.825613][ T2817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.863106][ T8593] veth0_vlan: entered promiscuous mode [ 158.891628][ T8593] veth1_vlan: entered promiscuous mode [ 158.996835][ T4489] Bluetooth: hci0: command tx timeout [ 159.003791][ T2817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.130717][ T2817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.179473][ T8593] veth0_macvtap: entered promiscuous mode [ 159.226276][ T8593] veth1_macvtap: entered promiscuous mode [ 159.305023][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.329546][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.364815][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.388082][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.417197][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.436570][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.459032][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.474611][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.495520][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.518072][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.529501][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.575259][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.588249][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.607303][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.630298][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.653310][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.669876][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.680012][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.691375][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.703148][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.015454][ T8593] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.036030][ T8593] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.045162][ T8593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.055430][ T8593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.109738][ T2817] bridge_slave_1: left allmulticast mode [ 160.115436][ T2817] bridge_slave_1: left promiscuous mode [ 160.143218][ T2817] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.153446][ T2817] bridge_slave_0: left allmulticast mode [ 160.159381][ T2817] bridge_slave_0: left promiscuous mode [ 160.165229][ T2817] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.243827][ T2817] bridge2: left allmulticast mode [ 160.254837][ T2817] bridge2: left promiscuous mode [ 160.620393][ T2817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.634562][ T2817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.646053][ T2817] bond0 (unregistering): Released all slaves [ 160.663261][ T2817] bond1 (unregistering): Released all slaves [ 160.679548][ T2817] bond2 (unregistering): Released all slaves [ 160.700142][ T2817] bond3 (unregistering): Released all slaves [ 160.841628][ T8915] chnl_net:caif_netlink_parms(): no params data found [ 160.848341][ T4489] Bluetooth: hci2: command tx timeout [ 160.878816][ T8986] FAULT_INJECTION: forcing a failure. [ 160.878816][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 160.901159][ T8986] CPU: 1 PID: 8986 Comm: syz.4.997 Not tainted 6.10.0-rc7-syzkaller-00276-g0a1868b93fad #0 [ 160.911155][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 160.911184][ T8986] Call Trace: [ 160.911193][ T8986] [ 160.911202][ T8986] dump_stack_lvl+0x241/0x360 [ 160.911235][ T8986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.911261][ T8986] ? __pfx__printk+0x10/0x10 [ 160.911289][ T8986] ? __pfx___might_resched+0x10/0x10 [ 160.911321][ T8986] should_fail_ex+0x3b0/0x4e0 [ 160.911349][ T8986] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 160.911370][ T8986] should_failslab+0x9/0x20 [ 160.911395][ T8986] __kmalloc_noprof+0xd8/0x400 [ 160.911417][ T8986] ? kfree+0x4e/0x360 [ 160.911445][ T8986] tomoyo_realpath_from_path+0xcf/0x5e0 [ 160.911477][ T8986] tomoyo_path_number_perm+0x23a/0x880 [ 160.911508][ T8986] ? tomoyo_path_number_perm+0x208/0x880 [ 160.911533][ T8986] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.911599][ T8986] ? __fget_files+0x29/0x470 [ 160.911625][ T8986] ? __fget_files+0x3f6/0x470 [ 160.911646][ T8986] ? __fget_files+0x29/0x470 [ 160.911676][ T8986] security_file_ioctl+0x75/0xb0 [ 160.911702][ T8986] __se_sys_ioctl+0x47/0x170 [ 160.927182][ T2817] Êü: left promiscuous mode [ 160.927928][ T8986] do_syscall_64+0xf3/0x230 [ 161.026153][ T8986] ? clear_bhb_loop+0x35/0x90 [ 161.030824][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.036706][ T8986] RIP: 0033:0x7f3543975bd9 [ 161.041117][ T8986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.060718][ T8986] RSP: 002b:00007f35447ee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.069126][ T8986] RAX: ffffffffffffffda RBX: 00007f3543b03f60 RCX: 00007f3543975bd9 [ 161.077091][ T8986] RDX: 0000000020000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 161.085066][ T8986] RBP: 00007f35447ee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.093029][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.101005][ T8986] R13: 000000000000000b R14: 00007f3543b03f60 R15: 00007ffe12d94758 [ 161.108996][ T8986] [ 161.119483][ T8986] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.386094][ T9001] __nla_validate_parse: 5 callbacks suppressed [ 161.386112][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 161.453447][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.470496][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.509238][ T8915] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.516548][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.524330][ T8915] bridge_slave_0: entered allmulticast mode [ 161.548126][ T8915] bridge_slave_0: entered promiscuous mode [ 161.586352][ T8915] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.603634][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.617426][ T8915] bridge_slave_1: entered allmulticast mode [ 161.624968][ T8915] bridge_slave_1: entered promiscuous mode [ 161.652199][ T9016] xt_TPROXY: Can be used only with -p tcp or -p udp [ 161.768829][ T9009] netlink: 'syz.0.1003': attribute type 11 has an invalid length. [ 161.812963][ T8915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.845646][ T8915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.870628][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.887633][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.940778][ T8915] team0: Port device team_slave_0 added [ 161.980701][ T2817] dummy0: left promiscuous mode [ 162.012193][ T2817] hsr_slave_0: left promiscuous mode [ 162.019319][ T2817] hsr_slave_1: left promiscuous mode [ 162.025648][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.034357][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.045783][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.053651][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.072905][ T2817] vxcan0: left allmulticast mode [ 162.078595][ T2817] vxcan0: left promiscuous mode [ 162.083811][ T2817] batadv0: left allmulticast mode [ 162.089231][ T2817] batadv0: left promiscuous mode [ 162.094668][ T2817] veth0_macvtap: left promiscuous mode [ 162.101116][ T2817] veth1_vlan: left promiscuous mode [ 162.107053][ T2817] veth0_vlan: left promiscuous mode [ 162.574140][ T2817] team0 (unregistering): Port device team_slave_1 removed [ 162.613736][ T2817] team0 (unregistering): Port device team_slave_0 removed [ 162.926892][ T4489] Bluetooth: hci2: command tx timeout [ 163.008670][ T8915] team0: Port device team_slave_1 added [ 163.176522][ T8915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.197239][ T8915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.246688][ T8915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.424355][ T8915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.439923][ T8915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.505192][ T8915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.730349][ T8915] hsr_slave_0: entered promiscuous mode [ 163.757274][ T8915] hsr_slave_1: entered promiscuous mode [ 163.779749][ T8915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.788347][ T8915] Cannot create hsr debugfs directory [ 163.891025][ T2817] IPVS: stop unused estimator thread 0... [ 163.989159][ T2817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.056840][ T2817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.129921][ T2817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.194855][ T2817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.273773][ T8915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.293936][ T8915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.304015][ T8915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.318870][ T8915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.425410][ T2817] bridge_slave_1: left allmulticast mode [ 164.431395][ T2817] bridge_slave_1: left promiscuous mode [ 164.438463][ T2817] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.451317][ T2817] bridge_slave_0: left allmulticast mode [ 164.457298][ T2817] bridge_slave_0: left promiscuous mode [ 164.462948][ T2817] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.650966][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 164.786810][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.801454][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.813118][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.830271][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.844331][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.856719][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.007665][ T4489] Bluetooth: hci2: command tx timeout [ 165.024085][ T2817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.043587][ T2817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.054750][ T2817] bond0 (unregistering): Released all slaves [ 165.071682][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 165.183159][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 165.231218][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1020'. [ 165.420251][ T9079] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 165.432929][ T9079] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 165.505554][ T8915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.722204][ T2817] hsr_slave_0: left promiscuous mode [ 165.734615][ T2817] hsr_slave_1: left promiscuous mode [ 165.748178][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.756228][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.780448][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.794489][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.820614][ T2817] veth1_macvtap: left promiscuous mode [ 165.826248][ T2817] veth0_macvtap: left promiscuous mode [ 165.831967][ T2817] veth1_vlan: left promiscuous mode [ 165.837521][ T2817] veth0_vlan: left promiscuous mode [ 166.265993][ T2817] team0 (unregistering): Port device team_slave_1 removed [ 166.324805][ T2817] team0 (unregistering): Port device team_slave_0 removed [ 166.730058][ T8915] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.744947][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.752228][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.822086][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.829296][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.919566][ T4489] Bluetooth: hci0: command tx timeout [ 166.963546][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 167.025488][ T8915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.036820][ T8915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.077037][ T4489] Bluetooth: hci2: command tx timeout [ 167.225886][ T9068] chnl_net:caif_netlink_parms(): no params data found [ 167.475338][ T9138] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1041'. [ 167.485200][ T9138] net_ratelimit: 543 callbacks suppressed [ 167.485217][ T9138] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 167.505526][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.518626][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.525902][ T9068] bridge_slave_0: entered allmulticast mode [ 167.533552][ T9068] bridge_slave_0: entered promiscuous mode [ 167.542313][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.551816][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.559530][ T9068] bridge_slave_1: entered allmulticast mode [ 167.565609][ T9140] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1042'. [ 167.566967][ T9068] bridge_slave_1: entered promiscuous mode [ 167.659773][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.676370][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.782912][ T9146] erspan0: entered promiscuous mode [ 167.793948][ T9146] vlan2: entered promiscuous mode [ 167.804550][ T9146] erspan0: left promiscuous mode [ 167.833911][ T9068] team0: Port device team_slave_0 added [ 167.843000][ T9068] team0: Port device team_slave_1 added [ 167.876213][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.913417][ T9152] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1045'. [ 167.943561][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 167.956503][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.964532][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.996166][ T9068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.012821][ T8915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.034923][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.056652][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.126252][ T9068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.296423][ T9068] hsr_slave_0: entered promiscuous mode [ 168.306322][ T9068] hsr_slave_1: entered promiscuous mode [ 168.314722][ T9068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.322800][ T9068] Cannot create hsr debugfs directory [ 168.325618][ T9172] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 168.460363][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 168.555980][ T8915] veth0_vlan: entered promiscuous mode [ 168.565964][ T9176] bond3 (unregistering): Released all slaves [ 168.616341][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'. [ 168.722579][ T8915] veth1_vlan: entered promiscuous mode [ 168.840471][ T8915] veth0_macvtap: entered promiscuous mode [ 168.887618][ T8915] veth1_macvtap: entered promiscuous mode [ 168.998310][ T4489] Bluetooth: hci0: command tx timeout [ 169.005229][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.024356][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.046692][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.057604][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.067879][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.078535][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.088489][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.099283][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.111069][ T8915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.122291][ T9190] netlink: 'syz.4.1058': attribute type 10 has an invalid length. [ 169.137978][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.176650][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.186512][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.235163][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.252098][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.265260][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.288102][ T8915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.307487][ T8915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.316396][ T8915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.328773][ T8915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.339109][ T8915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.359835][ T9197] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 169.369004][ T9197] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 169.427308][ T9206] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 169.435080][ T9206] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1062'. [ 169.458723][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 169.471592][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 169.553532][ T9212] netlink: 'syz.3.1065': attribute type 8 has an invalid length. [ 169.569077][ T9208] bond1 (unregistering): Released all slaves [ 169.655727][ T9214] veth0_macvtap: left promiscuous mode [ 169.793922][ T9068] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.802709][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.827767][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.838040][ T9068] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.876936][ T9068] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.929680][ T9068] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.955761][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.001502][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.229497][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.344411][ T9068] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.410338][ T9242] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 170.438783][ T9242] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 170.527259][ T9252] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 170.606417][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.613636][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.672739][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.679972][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.736011][ T9258] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 170.867893][ T9258] bond1: entered promiscuous mode [ 170.903263][ T9264] bond1: (slave veth3): Enslaving as an active interface with a down link [ 170.992674][ T9258] bond1 (unregistering): (slave veth3): Releasing active interface [ 171.017241][ T9258] bond1 (unregistering): Released all slaves [ 171.059170][ T9274] vlan2: entered promiscuous mode [ 171.065534][ T9274] batman_adv: batadv0: Adding interface: vlan2 [ 171.088527][ T4489] Bluetooth: hci0: command tx timeout [ 171.104519][ T9274] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.130636][ T9274] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 171.254022][ T9068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.419531][ T9290] netlink: 'syz.1.1095': attribute type 10 has an invalid length. [ 171.447491][ T9290] geneve0: entered promiscuous mode [ 171.488544][ T9294] Set syz1 is full, maxelem 0 reached [ 171.640351][ T9299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.667001][ T9299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.691846][ T9307] netlink: 'syz.1.1098': attribute type 2 has an invalid length. [ 171.709069][ T9299] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 171.801533][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.981835][ T9068] veth0_vlan: entered promiscuous mode [ 172.014233][ T9068] veth1_vlan: entered promiscuous mode [ 172.132539][ T9068] veth0_macvtap: entered promiscuous mode [ 172.180599][ T9068] veth1_macvtap: entered promiscuous mode [ 172.241847][ T9343] netlink: 'syz.1.1110': attribute type 10 has an invalid length. [ 172.305162][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.351083][ T9347] __nla_validate_parse: 8 callbacks suppressed [ 172.351101][ T9347] netlink: 201400 bytes leftover after parsing attributes in process `syz.4.1111'. [ 172.412847][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.442786][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.453045][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.464830][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.475573][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.486345][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.496978][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.507632][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.519626][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.530261][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.555775][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.595248][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.647883][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.670079][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.681747][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.692117][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.702760][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.719124][ T9359] netlink: 'syz.4.1115': attribute type 3 has an invalid length. [ 172.729015][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.739316][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 172.764344][ T9068] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.776106][ T9068] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.784934][ T9068] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.795422][ T9068] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.834536][ T9361] team0: entered promiscuous mode [ 172.841161][ T9361] team_slave_0: entered promiscuous mode [ 172.847721][ T9361] team_slave_1: entered promiscuous mode [ 172.853570][ T9361] batadv1: entered promiscuous mode [ 172.878841][ T9361] macvlan1: entered promiscuous mode [ 172.899664][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 172.900700][ T9361] team0: left promiscuous mode [ 172.915684][ T9361] team_slave_0: left promiscuous mode [ 172.925375][ T9361] team_slave_1: left promiscuous mode [ 172.940557][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 172.948830][ T9361] batadv1: left promiscuous mode [ 172.954591][ T9361] macvlan1: left promiscuous mode [ 173.157052][ T5094] Bluetooth: hci0: command tx timeout [ 173.186124][ T9375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1121'. [ 173.250963][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.277780][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.338717][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.368244][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.749153][ T9399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1130'. [ 174.161830][ T9414] ɶƣ0GC¦: entered promiscuous mode [ 174.283591][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 174.304741][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 174.425728][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 174.665376][ T9450] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1147'. [ 174.924229][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.778396][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.068496][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.315203][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.372555][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.399542][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.417081][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.434237][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.466687][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.484556][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.547011][ T9510] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 176.575518][ T51] bridge_slave_1: left allmulticast mode [ 176.589911][ T51] bridge_slave_1: left promiscuous mode [ 176.601384][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.643354][ T51] bridge_slave_0: left allmulticast mode [ 176.659745][ T51] bridge_slave_0: left promiscuous mode [ 176.665524][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.088139][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.100365][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.116420][ T51] bond0 (unregistering): Released all slaves [ 177.134578][ T9518] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 177.207376][ T9518] bond4: entered promiscuous mode [ 177.224313][ T9521] lo: entered promiscuous mode [ 177.284475][ T9521] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.309722][ T9521] bond4: (slave lo): making interface the new active one [ 177.327602][ T9521] bond4: (slave lo): Enslaving as an active interface with an up link [ 177.464955][ T9543] __nla_validate_parse: 6 callbacks suppressed [ 177.464975][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 177.497512][ T9538] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1174'. [ 177.586502][ T9547] netlink: 'syz.3.1176': attribute type 4 has an invalid length. [ 177.682908][ T51] hsr_slave_0: left promiscuous mode [ 177.694970][ T51] hsr_slave_1: left promiscuous mode [ 177.713720][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.722836][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.735108][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.742960][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.795752][ T9556] FAULT_INJECTION: forcing a failure. [ 177.795752][ T9556] name failslab, interval 1, probability 0, space 0, times 0 [ 177.801983][ T51] veth1_macvtap: left promiscuous mode [ 177.808896][ T9556] CPU: 0 PID: 9556 Comm: syz.4.1180 Not tainted 6.10.0-rc7-syzkaller-00276-g0a1868b93fad #0 [ 177.823947][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 177.828631][ T51] veth0_macvtap: left promiscuous mode [ 177.833990][ T9556] Call Trace: [ 177.834002][ T9556] [ 177.834011][ T9556] dump_stack_lvl+0x241/0x360 [ 177.850329][ T9556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.851597][ T51] veth1_vlan: left promiscuous mode [ 177.855533][ T9556] ? __pfx__printk+0x10/0x10 [ 177.855564][ T9556] ? __pfx___might_resched+0x10/0x10 [ 177.864968][ T51] veth0_vlan: left promiscuous mode [ 177.865294][ T9556] ? dynamic_dname+0x141/0x1b0 [ 177.880507][ T9556] should_fail_ex+0x3b0/0x4e0 [ 177.885186][ T9556] ? tomoyo_encode+0x26f/0x540 [ 177.889940][ T9556] should_failslab+0x9/0x20 [ 177.894436][ T9556] __kmalloc_noprof+0xd8/0x400 [ 177.899198][ T9556] tomoyo_encode+0x26f/0x540 [ 177.903779][ T9556] ? __pfx_sockfs_dname+0x10/0x10 [ 177.908792][ T9556] tomoyo_realpath_from_path+0x59e/0x5e0 [ 177.914424][ T9556] tomoyo_path_number_perm+0x23a/0x880 [ 177.919878][ T9556] ? tomoyo_path_number_perm+0x208/0x880 [ 177.925501][ T9556] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.931505][ T9556] ? __fget_files+0x29/0x470 [ 177.936099][ T9556] ? __fget_files+0x3f6/0x470 [ 177.940778][ T9556] ? __fget_files+0x29/0x470 [ 177.945370][ T9556] security_file_ioctl+0x75/0xb0 [ 177.950311][ T9556] __se_sys_ioctl+0x47/0x170 [ 177.954894][ T9556] do_syscall_64+0xf3/0x230 [ 177.959390][ T9556] ? clear_bhb_loop+0x35/0x90 [ 177.964062][ T9556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.969953][ T9556] RIP: 0033:0x7f3543975bd9 [ 177.974360][ T9556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.993968][ T9556] RSP: 002b:00007f35447ee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.002381][ T9556] RAX: ffffffffffffffda RBX: 00007f3543b03f60 RCX: 00007f3543975bd9 [ 178.010438][ T9556] RDX: 0000000020000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 178.018407][ T9556] RBP: 00007f35447ee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.026370][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.034327][ T9556] R13: 000000000000004d R14: 00007f3543b03f60 R15: 00007ffe12d94758 [ 178.042305][ T9556] [ 178.068824][ T9556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.515933][ T51] team0 (unregistering): Port device team_slave_1 removed [ 178.558588][ T51] team0 (unregistering): Port device team_slave_0 removed [ 178.599972][ T5094] Bluetooth: hci0: command tx timeout [ 178.917445][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1178'. [ 178.932856][ T9557] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.941968][ T9557] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.950803][ T9557] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.959842][ T9557] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.095143][ T9500] chnl_net:caif_netlink_parms(): no params data found [ 179.326967][ T29] audit: type=1107 audit(1721141974.047:2): pid=9573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\¶»'ã6zhY—\­Iy9s×uMRN1«–´Ã3XÞ¹¦7«ï•8€7 J‚lðH0¥YC½ îû$ýÞ5ˆúMœB;$µÝÍìO6ø!£ðU9Š†¦óëÙ«ó¯P2ŒG(΀‡Ô&³ÍIUŒ½÷: [ 179.326967][ T29] °¶6d¡â« [ 179.326967][ T29] eY£8R5ãÖÉ(°¡†O*áÕj7\Ïò ƒ… ­Îu¨Wäœ×Ã[àòé.X^æMLÓä)yÜ̓Bl«#ºbáÛƒîvµ#b2fˆiAaò!üî óåÁ écË7î¢n½k™Ð' [ 179.340494][ T9591] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 179.373964][ T9591] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1189'. [ 179.399710][ T9587] netlink: 'syz.1.1186': attribute type 10 has an invalid length. [ 179.411422][ T9591] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 179.432959][ T9591] syz.4.1189[9591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.433098][ T9591] syz.4.1189[9591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.456039][ T9587] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 179.686423][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.725611][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.750010][ T9500] bridge_slave_0: entered allmulticast mode [ 179.762648][ T9500] bridge_slave_0: entered promiscuous mode [ 179.780855][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 179.794479][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 179.817885][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1193'. [ 179.847576][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.874343][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.886513][ T9500] bridge_slave_1: entered allmulticast mode [ 179.895113][ T9500] bridge_slave_1: entered promiscuous mode [ 179.943516][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.992950][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.189681][ T9500] team0: Port device team_slave_0 added [ 180.219639][ T9500] team0: Port device team_slave_1 added [ 180.256312][ T9639] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.1205'. [ 180.422892][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.436835][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.494410][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.526206][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.536235][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.574266][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.677655][ T5094] Bluetooth: hci0: command tx timeout [ 180.741561][ T9500] hsr_slave_0: entered promiscuous mode [ 180.754821][ T9500] hsr_slave_1: entered promiscuous mode [ 180.779509][ T9500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.799511][ T9500] Cannot create hsr debugfs directory [ 180.841036][ T9635] syzkaller1: entered promiscuous mode [ 180.846545][ T9635] syzkaller1: entered allmulticast mode [ 181.452574][ T9500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.472330][ T9680] Cannot find add_set index 0 as target [ 181.507427][ T9500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.534486][ T9500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.556195][ T9500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.742655][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.789728][ T9691] rdma_op ffff88802d1841f0 conn xmit_rdma 0000000000000000 [ 181.814097][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.862139][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.869319][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.902401][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.909601][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.018631][ T9500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.112399][ T9716] netlink: 'syz.1.1229': attribute type 10 has an invalid length. [ 182.248992][ T9724] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1230'. [ 182.312677][ T9732] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 182.381334][ T9732] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1234'. [ 182.410024][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.590145][ T9500] veth0_vlan: entered promiscuous mode [ 182.660364][ T9500] veth1_vlan: entered promiscuous mode [ 182.758862][ T5094] Bluetooth: hci0: command tx timeout [ 182.814578][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'. [ 182.821833][ T9500] veth0_macvtap: entered promiscuous mode [ 182.835009][ T9500] veth1_macvtap: entered promiscuous mode [ 182.889230][ T9748] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1240'. [ 182.922232][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.946638][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.962849][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 182.974135][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.995222][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.015485][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.041755][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.059277][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.070537][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.083801][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.094851][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.108703][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.126737][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1247'. [ 183.231878][ T9770] bond3 (unregistering): Released all slaves [ 183.233601][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 183.381063][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.422000][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.438245][ T9782] atomic_op ffff88807a7e1198 conn xmit_atomic 0000000000000000 [ 183.455097][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.489911][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.498059][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'. [ 183.522456][ T9500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.546383][ T9500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.547581][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 183.585711][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.649648][ T9500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.678800][ T9500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.705164][ T9500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.720828][ T9500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.752615][ T9799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1259'. [ 184.054632][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.068188][ T9816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1268'. [ 184.072771][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.111265][ T9812] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1266'. [ 184.136802][ T9812] netlink: zone id is out of range [ 184.152687][ T9812] netlink: zone id is out of range [ 184.161562][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.176758][ T9812] netlink: zone id is out of range [ 184.182090][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.215267][ T9812] netlink: zone id is out of range [ 184.230724][ T9812] netlink: zone id is out of range [ 184.248358][ T9812] netlink: zone id is out of range [ 184.250843][ T9821] xt_cgroup: xt_cgroup: no path or classid specified [ 184.254689][ T9812] netlink: zone id is out of range [ 184.301165][ T9812] netlink: zone id is out of range [ 184.313785][ T9812] netlink: zone id is out of range [ 184.332459][ T9812] netlink: zone id is out of range [ 184.587014][ T9836] netlink: 'syz.3.1272': attribute type 1 has an invalid length. [ 184.950590][ T9853] netlink: 'syz.1.1278': attribute type 2 has an invalid length. [ 184.982235][ T9855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.295763][ T9873] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 185.378933][ T9873] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.415090][ T9873] bond0: (slave team0): Enslaving as an active interface with an up link [ 185.423805][ T9868] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 185.434490][ T9868] bond0: (slave team0): Releasing backup interface [ 185.458711][ T9881] netlink: 'syz.4.1291': attribute type 29 has an invalid length. [ 185.480383][ T9868] bridge0: port 2(team0) entered blocking state [ 185.520487][ T9868] bridge0: port 2(team0) entered disabled state [ 185.540038][ T9868] team0: entered allmulticast mode [ 185.545204][ T9868] team_slave_0: entered allmulticast mode [ 185.571469][ T9868] team_slave_1: entered allmulticast mode [ 185.581586][ T9868] bridge1: entered allmulticast mode [ 185.594518][ T9868] team0: entered promiscuous mode [ 185.602061][ T9868] team_slave_0: entered promiscuous mode [ 185.615267][ T9868] team_slave_1: entered promiscuous mode [ 185.625293][ T9868] bridge1: entered promiscuous mode [ 185.641613][ T9881] netlink: 'syz.4.1291': attribute type 29 has an invalid length. [ 185.721817][ T9889] bridge0: port 3(gretap0) entered blocking state [ 185.747136][ T9889] bridge0: port 3(gretap0) entered disabled state [ 185.776358][ T9889] gretap0: entered allmulticast mode [ 185.811233][ T9889] gretap0: entered promiscuous mode [ 185.833401][ T9889] bridge0: port 3(gretap0) entered blocking state [ 185.840422][ T9889] bridge0: port 3(gretap0) entered forwarding state [ 185.897320][ T9894] gretap0: left allmulticast mode [ 185.902582][ T9894] gretap0: left promiscuous mode [ 185.909961][ T9894] bridge0: port 3(gretap0) entered disabled state [ 186.339738][ T9927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.349868][ T9929] netlink: 'syz.0.1304': attribute type 4 has an invalid length. [ 186.372062][ T9927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.396862][ T9928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.599791][ T4489] Bluetooth: hci1: command 0x0406 tx timeout [ 187.043490][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.792590][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.891090][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.941856][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.058710][ T51] bridge_slave_1: left allmulticast mode [ 188.064391][ T51] bridge_slave_1: left promiscuous mode [ 188.071853][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.144900][ T51] bridge_slave_0: left allmulticast mode [ 188.171805][ T51] bridge_slave_0: left promiscuous mode [ 188.191878][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.598736][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.607606][ T9985] __nla_validate_parse: 13 callbacks suppressed [ 188.607624][ T9985] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1322'. [ 188.624941][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.630142][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 188.641589][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.653816][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.667382][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.676473][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.876008][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.891372][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.905418][ T51] bond0 (unregistering): Released all slaves [ 189.162511][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 189.331584][T10000] netlink: 'syz.0.1327': attribute type 10 has an invalid length. [ 189.352593][T10000] geneve0: entered promiscuous mode [ 189.499112][T10015] netlink: 'syz.0.1333': attribute type 8 has an invalid length. [ 189.659255][ T51] hsr_slave_0: left promiscuous mode [ 189.665610][ T51] hsr_slave_1: left promiscuous mode [ 189.678687][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.686101][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.694718][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.713618][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.754929][ T51] veth1_macvtap: left promiscuous mode [ 189.760607][ T51] veth0_macvtap: left promiscuous mode [ 189.766257][ T51] veth1_vlan: left promiscuous mode [ 189.775526][ T51] veth0_vlan: left promiscuous mode [ 189.965782][T10029] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1337'. [ 189.983728][T10029] net_ratelimit: 491 callbacks suppressed [ 189.983740][T10029] netlink: zone id is out of range [ 189.995211][T10029] netlink: zone id is out of range [ 190.005162][T10029] netlink: zone id is out of range [ 190.011673][T10029] netlink: zone id is out of range [ 190.020866][T10029] netlink: zone id is out of range [ 190.026005][T10029] netlink: zone id is out of range [ 190.034677][T10029] netlink: zone id is out of range [ 190.043343][T10029] netlink: zone id is out of range [ 190.052369][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 190.052929][T10029] netlink: zone id is out of range [ 190.084556][T10029] netlink: zone id is out of range [ 190.431544][ T51] team0 (unregistering): Port device team_slave_1 removed [ 190.497330][ T51] team0 (unregistering): Port device team_slave_0 removed [ 190.768545][ T5094] Bluetooth: hci0: command tx timeout [ 190.999569][ T9983] chnl_net:caif_netlink_parms(): no params data found [ 191.381626][ T9983] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.392745][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.418709][ T9983] bridge_slave_0: entered allmulticast mode [ 191.426051][ T9983] bridge_slave_0: entered promiscuous mode [ 191.472340][T10053] bond0: option ad_select: unable to set because the bond device is up [ 191.482075][ T9983] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.498775][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.513249][ T9983] bridge_slave_1: entered allmulticast mode [ 191.523705][ T9983] bridge_slave_1: entered promiscuous mode [ 191.593700][T10070] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 191.628503][ T9983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.670912][ T9983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.782436][ T9983] team0: Port device team_slave_0 added [ 191.792548][ T9983] team0: Port device team_slave_1 added [ 191.938099][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.945071][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.999856][ T9983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.020330][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.035492][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.086879][ T9983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.290971][ T9983] hsr_slave_0: entered promiscuous mode [ 192.329912][ T9983] hsr_slave_1: entered promiscuous mode [ 192.339404][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1360'. [ 192.352629][ T9983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.361385][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'. [ 192.370473][ T9983] Cannot create hsr debugfs directory [ 192.387803][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1359'. [ 192.837335][ T5094] Bluetooth: hci0: command tx timeout [ 192.993576][T10127] pim6reg1: entered promiscuous mode [ 193.010453][T10127] pim6reg1: entered allmulticast mode [ 193.016430][T10134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.031230][T10135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.138398][T10140] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1375'. [ 193.430699][T10155] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1380'. [ 193.451495][ T9983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.479976][ T9983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.506555][T10155] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 193.527497][T10155] netlink: 'syz.3.1380': attribute type 2 has an invalid length. [ 193.542445][ T9983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.633482][ T9983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.639629][T10169] __nla_validate_parse: 2 callbacks suppressed [ 193.639646][T10169] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1382'. [ 193.723787][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 193.811157][T10174] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1385'. [ 194.047998][ T9983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.076137][ T9983] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.103555][T10189] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1388'. [ 194.122180][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.129364][ T5101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.154904][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.162085][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.353985][T10197] hsr0: entered promiscuous mode [ 194.366852][T10197] macvlan3: entered allmulticast mode [ 194.375789][T10197] hsr0: entered allmulticast mode [ 194.391029][T10197] hsr_slave_0: entered allmulticast mode [ 194.417647][T10197] hsr_slave_1: entered allmulticast mode [ 194.431541][T10197] hsr0: left allmulticast mode [ 194.443609][T10197] hsr_slave_0: left allmulticast mode [ 194.458920][T10197] hsr_slave_1: left allmulticast mode [ 194.701859][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1397'. [ 194.775027][ T9983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.916438][ T9983] veth0_vlan: entered promiscuous mode [ 194.927138][ T5094] Bluetooth: hci0: command tx timeout [ 194.942049][T10224] netlink: 'syz.1.1400': attribute type 11 has an invalid length. [ 194.951109][T10224] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.1400'. [ 194.986417][ T9983] veth1_vlan: entered promiscuous mode [ 195.060012][T10230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1402'. [ 195.062994][T10232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1400'. [ 195.089984][T10237] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1401'. [ 195.154606][ T9983] veth0_macvtap: entered promiscuous mode [ 195.167125][T10237] netlink: 'syz.3.1401': attribute type 2 has an invalid length. [ 195.190213][T10237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1401'. [ 195.213396][ T9983] veth1_macvtap: entered promiscuous mode [ 195.254757][T10243] netlink: 'syz.0.1404': attribute type 1 has an invalid length. [ 195.290651][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.327833][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.363486][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.395247][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.415739][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.426802][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.437311][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.451391][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.463081][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.475973][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.500503][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.535417][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.547504][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.604169][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.629178][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.646932][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.666295][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.699909][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.764932][T10261] geneve0: entered allmulticast mode [ 195.790528][ T9983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.800696][ T9983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.824360][ T9983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.845650][ T9983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.964181][T10273] netlink: 'syz.3.1412': attribute type 4 has an invalid length. [ 196.209023][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.235530][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.311170][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.338675][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.794538][T10308] tipc: Enabling of bearer rejected, failed to enable media [ 196.836062][T10318] net_ratelimit: 112 callbacks suppressed [ 196.836079][T10318] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 196.955055][T10322] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 197.081080][T10325] batadv0: entered promiscuous mode [ 197.091215][T10325] vlan3: entered promiscuous mode [ 197.104378][T10325] vlan3: entered allmulticast mode [ 197.112173][T10325] batadv0: entered allmulticast mode [ 197.212144][T10339] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 197.579249][T10363] tipc: Enabling of bearer rejected, failed to enable media [ 197.588285][T10366] netlink: 'syz.3.1448': attribute type 13 has an invalid length. [ 197.596128][T10366] macvtap0: entered allmulticast mode [ 197.618320][T10366] macvtap0: refused to change device tx_queue_len [ 197.651016][T10356] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 197.683942][T10356] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 197.710291][T10366] netlink: 'syz.3.1448': attribute type 4 has an invalid length. [ 198.612302][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.708522][T10423] team0: Port device vlan2 added [ 198.725470][T10420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.626443][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.775427][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.002688][T10451] __nla_validate_parse: 15 callbacks suppressed [ 200.002708][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 200.041735][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.107172][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1474'. [ 200.162982][T10448] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1473'. [ 200.234116][T10448] netlink: zone id is out of range [ 200.238403][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 200.284974][T10448] netlink: zone id is out of range [ 200.323747][T10448] netlink: zone id is out of range [ 200.357214][T10448] netlink: zone id is out of range [ 200.389508][T10448] netlink: zone id is out of range [ 200.396926][T10448] netlink: zone id is out of range [ 200.402061][T10448] netlink: zone id is out of range [ 200.424374][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.425355][T10448] netlink: zone id is out of range [ 200.443487][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.457210][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.467802][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.476849][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.484281][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.491799][T10448] netlink: zone id is out of range [ 200.569898][ T12] bridge_slave_1: left allmulticast mode [ 200.609093][ T12] bridge_slave_1: left promiscuous mode [ 200.623535][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.700002][ T12] bridge_slave_0: left allmulticast mode [ 200.716019][ T12] bridge_slave_0: left promiscuous mode [ 200.731320][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.282331][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.296031][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.308947][ T12] bond0 (unregistering): Released all slaves [ 201.384042][T10485] batadv0: entered promiscuous mode [ 201.412446][T10483] batadv0: left promiscuous mode [ 201.973603][ T12] hsr_slave_0: left promiscuous mode [ 201.984489][ T12] hsr_slave_1: left promiscuous mode [ 201.991995][T10515] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1490'. [ 202.006495][T10515] net_ratelimit: 127 callbacks suppressed [ 202.006513][T10515] netlink: zone id is out of range [ 202.022260][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.029953][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.037573][T10515] netlink: zone id is out of range [ 202.042886][T10515] netlink: zone id is out of range [ 202.048901][T10515] netlink: zone id is out of range [ 202.054971][T10515] netlink: zone id is out of range [ 202.060659][T10515] netlink: zone id is out of range [ 202.061404][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1490'. [ 202.065925][T10515] netlink: zone id is out of range [ 202.081522][T10515] netlink: zone id is out of range [ 202.086725][T10515] netlink: zone id is out of range [ 202.090793][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.091924][T10515] netlink: zone id is out of range [ 202.109870][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.139843][ T12] veth1_macvtap: left promiscuous mode [ 202.149289][ T12] veth0_macvtap: left promiscuous mode [ 202.155149][ T12] veth1_vlan: left promiscuous mode [ 202.161583][ T12] veth0_vlan: left promiscuous mode [ 202.517871][ T5094] Bluetooth: hci0: command tx timeout [ 202.619091][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.655114][ T12] team0 (unregistering): Port device team_slave_0 removed [ 203.003748][T10504] tun0: tun_chr_ioctl cmd 1074025677 [ 203.017257][T10504] tun0: linktype set to 821 [ 203.065251][T10524] netlink: 'syz.0.1493': attribute type 12 has an invalid length. [ 203.542372][T10464] chnl_net:caif_netlink_parms(): no params data found [ 203.646811][T10557] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1506'. [ 203.661451][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 203.760332][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.776974][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.791270][T10464] bridge_slave_0: entered allmulticast mode [ 203.799743][T10464] bridge_slave_0: entered promiscuous mode [ 203.810044][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.851266][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.864360][T10464] bridge_slave_1: entered allmulticast mode [ 203.880523][T10464] bridge_slave_1: entered promiscuous mode [ 203.972184][T10464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.030807][T10464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.128660][T10464] team0: Port device team_slave_0 added [ 204.143777][T10464] team0: Port device team_slave_1 added [ 204.249626][T10464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.266469][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.296131][T10464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.312206][T10464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.319632][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.345814][T10464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.540628][T10464] hsr_slave_0: entered promiscuous mode [ 204.551587][T10464] hsr_slave_1: entered promiscuous mode [ 204.558455][T10464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.558589][T10608] xt_NFQUEUE: number of total queues is 0 [ 204.567307][T10464] Cannot create hsr debugfs directory [ 204.582117][T10609] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1519'. [ 204.599143][ T5094] Bluetooth: hci0: command tx timeout [ 204.604558][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 204.840569][T10618] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 204.853862][T10618] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 205.365541][T10647] __nla_validate_parse: 1 callbacks suppressed [ 205.365561][T10647] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1536'. [ 205.480612][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 205.588576][T10464] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.666141][T10464] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.743738][T10464] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.802376][T10464] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.484472][T10464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.621607][T10464] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.674885][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.682108][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.687094][ T5094] Bluetooth: hci0: command tx timeout [ 206.725386][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.732601][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.835717][T10698] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1552'. [ 206.882955][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1556'. [ 206.917547][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 207.235802][T10464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.378575][T10464] veth0_vlan: entered promiscuous mode [ 207.383922][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 207.414677][T10464] veth1_vlan: entered promiscuous mode [ 207.543993][T10464] veth0_macvtap: entered promiscuous mode [ 207.574405][T10464] veth1_macvtap: entered promiscuous mode [ 207.646413][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.693702][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.718674][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.742149][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.752253][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.772480][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.792000][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.816055][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.838981][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.861172][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.889245][T10464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.929397][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.953259][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.964945][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.996471][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.014214][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.037896][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.044511][T10759] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1569'. [ 208.066024][T10464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.082269][T10761] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.107453][T10759] net_ratelimit: 674 callbacks suppressed [ 208.107472][T10759] netlink: zone id is out of range [ 208.108185][T10464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.138630][T10759] netlink: zone id is out of range [ 208.143427][T10464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.154691][T10759] netlink: zone id is out of range [ 208.171835][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1569'. [ 208.183540][T10464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.194193][T10464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.201302][T10759] netlink: zone id is out of range [ 208.244272][T10759] netlink: zone id is out of range [ 208.261643][T10759] netlink: zone id is out of range [ 208.269100][T10761] macvlan2: entered allmulticast mode [ 208.283591][T10759] netlink: zone id is out of range [ 208.289213][T10759] netlink: zone id is out of range [ 208.296494][T10759] netlink: zone id is out of range [ 208.311245][T10759] netlink: zone id is out of range [ 208.320757][T10765] bond0: entered promiscuous mode [ 208.325816][T10765] bond_slave_0: entered promiscuous mode [ 208.332372][T10765] bond_slave_1: entered promiscuous mode [ 208.657174][T10694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.700026][T10694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.758268][ T5094] Bluetooth: hci0: command tx timeout [ 208.808295][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.860652][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.965771][T10807] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1585'. [ 208.998224][T10806] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1583'. [ 209.140940][T10806] ipvlan2: entered allmulticast mode [ 209.169793][T10806] veth0_vlan: entered allmulticast mode [ 209.206873][T10819] netlink: 'syz.0.1589': attribute type 1 has an invalid length. [ 209.261396][T10819] bond1: entered promiscuous mode [ 209.308034][T10824] bond0: (slave bond_slave_0): Releasing backup interface [ 209.342228][T10824] bond_slave_0: left promiscuous mode [ 209.449227][T10824] bond1: (slave bond_slave_0): making interface the new active one [ 209.466798][T10824] bond_slave_0: entered promiscuous mode [ 209.489117][T10824] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.659093][T10833] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 52010 - 0 [ 209.677752][T10833] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 52010 - 0 [ 209.689373][T10833] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 52010 - 0 [ 209.698574][T10833] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 52010 - 0 [ 209.717845][T10833] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 49870 - 0 [ 209.737545][T10833] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 49870 - 0 [ 209.750465][T10833] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 49870 - 0 [ 209.765076][T10833] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 49870 - 0 [ 209.774402][T10833] geneve2: entered promiscuous mode [ 209.799140][T10833] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 49870 - 0 [ 209.813943][T10833] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 49870 - 0 [ 209.835304][T10833] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 49870 - 0 [ 209.856728][T10833] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 49870 - 0 [ 209.876481][T10833] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 52010 - 0 [ 209.936691][T10833] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 52010 - 0 [ 209.951030][T10833] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 52010 - 0 [ 209.980759][T10833] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 52010 - 0 [ 210.575957][T10872] netlink: 'syz.3.1609': attribute type 4 has an invalid length. [ 210.585072][T10872] __nla_validate_parse: 8 callbacks suppressed [ 210.585087][T10872] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1609'. [ 210.880209][ T2840] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.973684][T10886] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1615'. [ 211.001776][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 211.612658][ T2840] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.679369][ T2840] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.752763][ T2840] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.868609][ T2840] bridge_slave_1: left allmulticast mode [ 211.874297][ T2840] bridge_slave_1: left promiscuous mode [ 211.880552][ T2840] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.890386][ T2840] bridge_slave_0: left allmulticast mode [ 211.896024][ T2840] bridge_slave_0: left promiscuous mode [ 211.901983][ T2840] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.538907][ T2840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.560115][ T2840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.583456][ T2840] bond0 (unregistering): Released all slaves [ 212.621978][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1619'. [ 212.631725][T10903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.637800][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.639009][T10903] IPv6: NLM_F_CREATE should be set when creating new route [ 212.650899][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.661716][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.670227][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.686485][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.716504][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.823394][T10928] netlink: 'syz.3.1627': attribute type 11 has an invalid length. [ 212.843900][T10928] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.1627'. [ 212.984013][T10928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1627'. [ 213.029275][T10930] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1628'. [ 213.092141][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 213.257616][ T2840] hsr_slave_0: left promiscuous mode [ 213.271121][ T2840] hsr_slave_1: left promiscuous mode [ 213.280434][ T2840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.292042][ T2840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.309280][ T2840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.324862][ T2840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.429234][ T2840] veth1_macvtap: left promiscuous mode [ 213.448298][ T2840] veth0_macvtap: left promiscuous mode [ 213.454207][ T2840] veth1_vlan: left promiscuous mode [ 213.463600][ T2840] veth0_vlan: left promiscuous mode [ 213.952014][ T2840] team0 (unregistering): Port device team_slave_1 removed [ 213.989627][ T2840] team0 (unregistering): Port device team_slave_0 removed [ 214.419228][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 214.522965][T10973] ip6tnl0: entered promiscuous mode [ 214.619278][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1640'. [ 214.667271][T10971] ip6tnl0: left promiscuous mode [ 214.771774][T10923] chnl_net:caif_netlink_parms(): no params data found [ 214.840160][ T4489] Bluetooth: hci0: command tx timeout [ 214.955904][T11002] netlink: 'syz.0.1645': attribute type 4 has an invalid length. [ 215.038882][T10923] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.055489][T10923] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.065317][T10923] bridge_slave_0: entered allmulticast mode [ 215.084338][T10923] bridge_slave_0: entered promiscuous mode [ 215.096170][T10923] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.115758][T10923] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.125731][T10923] bridge_slave_1: entered allmulticast mode [ 215.133600][T11001] net_ratelimit: 681 callbacks suppressed [ 215.133621][T11001] netlink: zone id is out of range [ 215.142813][T10923] bridge_slave_1: entered promiscuous mode [ 215.150241][T11001] netlink: zone id is out of range [ 215.176727][T11001] netlink: zone id is out of range [ 215.185212][T11001] netlink: zone id is out of range [ 215.211129][T11001] netlink: zone id is out of range [ 215.224865][T11001] netlink: zone id is out of range [ 215.231404][T11001] netlink: zone id is out of range [ 215.238235][T11001] netlink: zone id is out of range [ 215.243924][T11001] netlink: zone id is out of range [ 215.249968][T11001] netlink: zone id is out of range [ 215.262149][T11014] batadv0: entered promiscuous mode [ 215.268335][T11014] vlan3: entered promiscuous mode [ 215.273853][T11014] vlan3: entered allmulticast mode [ 215.287013][T11014] batadv0: entered allmulticast mode [ 215.338498][T10923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.374792][T10923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.581343][T10923] team0: Port device team_slave_0 added [ 215.600695][T10923] team0: Port device team_slave_1 added [ 215.613733][T11020] netlink: 'syz.0.1652': attribute type 4 has an invalid length. [ 215.671263][T10923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.696216][T10923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.731194][T10923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.755918][T10923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.771228][T10923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.799804][T10923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.890813][T11035] __nla_validate_parse: 4 callbacks suppressed [ 215.890832][T11035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1658'. [ 215.916285][T11036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1658'. [ 215.916298][T11033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.942641][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1658'. [ 215.982752][T10923] hsr_slave_0: entered promiscuous mode [ 215.995871][T10923] hsr_slave_1: entered promiscuous mode [ 216.005011][T11035] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1658'. [ 216.016187][T10923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.034631][T10923] Cannot create hsr debugfs directory [ 216.040923][T11036] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1658'. [ 216.055260][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 216.120407][T11041] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1660'. [ 216.156212][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 216.433342][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1665'. [ 216.794953][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'. [ 216.880962][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.917023][ T4489] Bluetooth: hci0: command tx timeout [ 216.920405][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.230701][T10923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.303353][T10923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.334253][T10923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.369649][T10923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.495891][T11110] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 217.511812][T11115] netlink: 'syz.3.1684': attribute type 11 has an invalid length. [ 217.573688][T11118] xt_TPROXY: Can be used only with -p tcp or -p udp [ 217.826173][T10923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.885489][T11133] vlan4: entered promiscuous mode [ 217.893039][T11133] xfrm0: entered promiscuous mode [ 217.899029][T11133] vlan4: entered allmulticast mode [ 217.904290][T11133] xfrm0: entered allmulticast mode [ 217.916369][T11133] team0: Port device vlan4 added [ 217.972115][T10923] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.028717][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.035867][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.037253][T11131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.064604][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.071831][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.397361][T10923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.534885][T10923] veth0_vlan: entered promiscuous mode [ 218.570073][T10923] veth1_vlan: entered promiscuous mode [ 218.629971][T10923] veth0_macvtap: entered promiscuous mode [ 218.649433][T10923] veth1_macvtap: entered promiscuous mode [ 218.709132][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.721158][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.732251][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.747397][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.762659][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.780951][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.793430][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.806905][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.817786][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.828431][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.841343][T10923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.858815][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.903456][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.914783][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.927236][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.939519][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.951604][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.991658][T11209] sock: sock_timestamping_bind_phc: sock not bind to device [ 219.006114][T10923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.012088][ T4489] Bluetooth: hci0: command tx timeout [ 219.031086][T10923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.055952][T10923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.065270][T10923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.074446][T10923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.100296][T11209] macvlan2: entered allmulticast mode [ 219.108887][T11209] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 219.116027][T11209] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 219.125697][T11209] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 219.134958][T11216] netlink: 'syz.4.1709': attribute type 10 has an invalid length. [ 219.171187][T11216] dummy0: entered allmulticast mode [ 219.199495][T11216] team0: Port device dummy0 added [ 219.254794][T11193] bond0: entered promiscuous mode [ 219.281980][T11193] bond_slave_0: entered promiscuous mode [ 219.304319][T11193] bond_slave_1: entered promiscuous mode [ 219.314128][T11193] macvlan0: entered promiscuous mode [ 219.322110][T11193] macvlan2: entered promiscuous mode [ 219.573307][T11235] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 219.585313][T11235] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 219.631395][T11178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.660586][T11178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.765664][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.787341][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.700418][T11295] netlink: 'syz.0.1738': attribute type 3 has an invalid length. [ 220.984023][T11308] __nla_validate_parse: 18 callbacks suppressed [ 220.984042][T11308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1744'. [ 220.991901][T11315] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1748'. [ 221.011536][T11315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'. [ 221.023949][T11315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'. [ 221.052527][T11315] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1748'. [ 221.152641][T11315] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 221.184040][T11315] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1748'. [ 221.351099][T11336] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1751'. [ 221.386302][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1751'. [ 221.408592][T11339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1750'. [ 221.410095][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1751'. [ 221.477548][T11336] netlink: 'syz.0.1751': attribute type 1 has an invalid length. [ 221.501303][T11344] ip6gretap0: entered promiscuous mode [ 221.510010][T11344] bridge0: entered promiscuous mode [ 221.537862][T11344] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 221.550007][T11344] Cannot create hsr debugfs directory [ 221.577803][T11346] net_ratelimit: 267 callbacks suppressed [ 221.577823][T11346] batman_adv: batadv0: adding TT local entry 4a:c8:2b:75:00:00 to non-existent VLAN 2358 [ 222.241680][T11181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.270950][T11181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.332941][T11181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.390189][T11181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.536730][T11181] bridge_slave_1: left allmulticast mode [ 223.557416][T11181] bridge_slave_1: left promiscuous mode [ 223.563205][T11181] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.595777][T11181] bridge_slave_0: left allmulticast mode [ 223.616126][T11181] bridge_slave_0: left promiscuous mode [ 223.626888][T11181] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.972970][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.988737][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.997771][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.007757][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.022296][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.030735][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.307581][T11181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.321319][T11181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.335908][T11181] bond0 (unregistering): Released all slaves [ 224.350092][T11397] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 224.428976][T11418] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.448354][T11418] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 224.473134][T11418] bridge_slave_0: default FDB implementation only supports local addresses [ 224.929958][T11181] hsr_slave_0: left promiscuous mode [ 224.938576][T11181] hsr_slave_1: left promiscuous mode [ 224.944905][T11181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.953664][T11181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.965264][T11181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.981618][T11181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.038674][T11181] veth1_macvtap: left promiscuous mode [ 225.053363][T11181] veth0_macvtap: left promiscuous mode [ 225.059615][T11181] veth1_vlan: left promiscuous mode [ 225.065112][T11181] veth0_vlan: left promiscuous mode [ 225.526415][T11181] team0 (unregistering): Port device team_slave_1 removed [ 225.565790][T11181] team0 (unregistering): Port device team_slave_0 removed [ 226.118216][ T4489] Bluetooth: hci0: command tx timeout [ 226.257939][T11413] chnl_net:caif_netlink_parms(): no params data found [ 226.324955][T11478] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 226.337579][T11478] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 226.346003][T11478] CPU: 0 PID: 11478 Comm: syz.3.1793 Not tainted 6.10.0-rc7-syzkaller-00276-g0a1868b93fad #0 [ 226.356170][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 226.366239][T11478] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 226.371719][T11478] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 06 9e d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 e0 63 3d 00 4c 8b 7d 00 48 83 c5 [ 226.391344][T11478] RSP: 0018:ffffc90009877678 EFLAGS: 00010246 [ 226.397429][T11478] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 226.405407][T11478] RDX: ffffc9000b636000 RSI: 0000000000000c77 RDI: 0000000000000c78 [ 226.413392][T11478] RBP: 0000000000000000 R08: ffffffff896219f6 R09: ffffffff896219b3 [ 226.421375][T11478] R10: 0000000000000004 R11: ffff88801bbf1e00 R12: ffff888068480000 [ 226.429361][T11478] R13: ffff888065b14070 R14: dffffc0000000000 R15: 0000000000000000 [ 226.437329][T11478] FS: 00007f34198c56c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 226.446248][T11478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.452822][T11478] CR2: 00000000202ba000 CR3: 000000006ef6e000 CR4: 00000000003506f0 [ 226.460788][T11478] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.468753][T11478] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.476723][T11478] Call Trace: [ 226.480001][T11478] [ 226.482924][T11478] ? __die_body+0x88/0xe0 [ 226.487252][T11478] ? die_addr+0x108/0x140 [ 226.491575][T11478] ? exc_general_protection+0x3dd/0x5d0 [ 226.497124][T11478] ? asm_exc_general_protection+0x26/0x30 [ 226.502838][T11478] ? xdp_do_redirect_frame+0x243/0x660 [ 226.508289][T11478] ? xdp_do_redirect_frame+0x286/0x660 [ 226.513741][T11478] ? dev_map_enqueue+0x31/0x3e0 [ 226.518584][T11478] ? dev_map_enqueue+0x2a/0x3e0 [ 226.523423][T11478] ? bpf_xdp_adjust_tail+0x1a7/0x200 [ 226.528702][T11478] xdp_do_redirect_frame+0x2a6/0x660 [ 226.533981][T11478] bpf_test_run_xdp_live+0xe60/0x1e60 [ 226.539354][T11478] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 226.544886][T11478] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 226.550692][T11478] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 226.556599][T11478] ? __might_fault+0xaa/0x120 [ 226.561265][T11478] ? __might_fault+0xc6/0x120 [ 226.565931][T11478] ? _copy_from_user+0xa6/0xe0 [ 226.570682][T11478] ? bpf_test_init+0x15a/0x180 [ 226.575430][T11478] ? xdp_convert_md_to_buff+0x5b/0x330 [ 226.580881][T11478] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 226.586248][T11478] ? __pfx_lock_release+0x10/0x10 [ 226.591281][T11478] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.597074][T11478] ? __fget_files+0x29/0x470 [ 226.601655][T11478] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.607448][T11478] bpf_prog_test_run+0x33a/0x3b0 [ 226.612371][T11478] __sys_bpf+0x48d/0x810 [ 226.616606][T11478] ? __pfx___sys_bpf+0x10/0x10 [ 226.621362][T11478] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.627330][T11478] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.633644][T11478] ? do_syscall_64+0x100/0x230 [ 226.638396][T11478] __x64_sys_bpf+0x7c/0x90 [ 226.643324][T11478] do_syscall_64+0xf3/0x230 [ 226.647810][T11478] ? clear_bhb_loop+0x35/0x90 [ 226.652474][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.658360][T11478] RIP: 0033:0x7f3418b75bd9 [ 226.662758][T11478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.682356][T11478] RSP: 002b:00007f34198c5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.690762][T11478] RAX: ffffffffffffffda RBX: 00007f3418d04110 RCX: 00007f3418b75bd9 [ 226.698721][T11478] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 226.706679][T11478] RBP: 00007f3418be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 226.714636][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.722589][T11478] R13: 000000000000006e R14: 00007f3418d04110 R15: 00007fffaf7273f8 [ 226.730553][T11478] [ 226.733555][T11478] Modules linked in: [ 226.737562][T11478] ---[ end trace 0000000000000000 ]--- [ 226.743028][T11478] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 226.748544][T11478] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 06 9e d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 e0 63 3d 00 4c 8b 7d 00 48 83 c5 [ 226.768212][T11478] RSP: 0018:ffffc90009877678 EFLAGS: 00010246 [ 226.774292][T11478] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 226.782313][T11478] RDX: ffffc9000b636000 RSI: 0000000000000c77 RDI: 0000000000000c78 [ 226.790328][T11478] RBP: 0000000000000000 R08: ffffffff896219f6 R09: ffffffff896219b3 [ 226.798339][T11478] R10: 0000000000000004 R11: ffff88801bbf1e00 R12: ffff888068480000 [ 226.806330][T11478] R13: ffff888065b14070 R14: dffffc0000000000 R15: 0000000000000000 [ 226.814330][T11478] FS: 00007f34198c56c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 226.823282][T11478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.829894][T11478] CR2: 00000000202ba000 CR3: 000000006ef6e000 CR4: 00000000003506f0 [ 226.837917][T11478] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.845903][T11478] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.853933][T11478] Kernel panic - not syncing: Fatal exception in interrupt [ 226.861332][T11478] Kernel Offset: disabled [ 226.865643][T11478] Rebooting in 86400 seconds..