last executing test programs: 1m31.864641344s ago: executing program 2 (id=339): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000100)=0xffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="010000000000c5000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000100000ff05000000000000000000000000000100000000140002", @ANYRES8=r0, @ANYBLOB='`\t-\x00'], 0x60}}, 0x0) 1m24.751348513s ago: executing program 2 (id=339): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000100)=0xffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="010000000000c5000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000100000ff05000000000000000000000000000100000000140002", @ANYRES8=r0, @ANYBLOB='`\t-\x00'], 0x60}}, 0x0) 35.369736736s ago: executing program 2 (id=339): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000100)=0xffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="010000000000c5000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000100000ff05000000000000000000000000000100000000140002", @ANYRES8=r0, @ANYBLOB='`\t-\x00'], 0x60}}, 0x0) 27.227929691s ago: executing program 2 (id=339): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000100)=0xffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="010000000000c5000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000100000ff05000000000000000000000000000100000000140002", @ANYRES8=r0, @ANYBLOB='`\t-\x00'], 0x60}}, 0x0) 16.937269811s ago: executing program 2 (id=339): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000100)=0xffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="010000000000c5000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000100000ff05000000000000000000000000000100000000140002", @ANYRES8=r0, @ANYBLOB='`\t-\x00'], 0x60}}, 0x0) 7.909065178s ago: executing program 2 (id=339): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000100)=0xffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="010000000000c5000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000100000ff05000000000000000000000000000100000000140002", @ANYRES8=r0, @ANYBLOB='`\t-\x00'], 0x60}}, 0x0) 2.137739215s ago: executing program 0 (id=2344): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000030305000000000000000000230000000c000200fffffffe0000007f8a7820f025e5667e36135373d53ca666016c299979af59fb01afa6"], 0x20}, 0x1, 0x0, 0x0, 0x4894}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x437, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x14cb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6d5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @empty}}}], 0x20}}], 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000ff0000000006000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00e17f0600190000000000080003"], 0x9b}}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000380)={0x1d, r12, 0x1}, 0x18) sendmmsg(r11, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)="bd9593e9b985b0f3", 0x8}], 0x1, &(0x7f0000001700)=ANY=[], 0x2d0}}], 0x1, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r13}, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x7, 0x6, 0x3ff}, 0x10) socket$inet6(0xa, 0x2, 0x0) 1.90992953s ago: executing program 0 (id=2350): r0 = socket(0x22, 0x2, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xec4d, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r5, &(0x7f00000000c0)={'a', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_type(r5, &(0x7f0000000100), 0x9) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000180)=0x7fff, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 1.808795439s ago: executing program 3 (id=2352): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="753e201615d2ffffffff04008864"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) 1.688317098s ago: executing program 3 (id=2354): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200008001200010a10000000000000000a000000"], 0x26}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000061117b00589ffbe6476ac7fd4c3a00000000060000000000000095000000000000008d48b7e961425911d0827d343db3faab3dea39da1e344ade557edc5074721343de199b205db4996ec877c27ca5be672b58cf44bd6f352e298dff20b0ff00bffd9e9cd29094d44bcb6de46b931807728435ab16c086e1224873e1529784197281d3a68d83f7db796982"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000680)="7afc70f82141dbb13c5173da307bc457", 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e21, 0x9, @loopback, 0x2}}}, &(0x7f0000000240)=0x84) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000040)=0x794, 0x4) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32, @ANYBLOB="1400"], 0x48}}, 0x0) 1.632913739s ago: executing program 0 (id=2355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c812064defb0b605c02931800f72ce267619200", @ANYRES32=0x0], 0x18}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_delrule={0x40, 0x21, 0xa22, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x200}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x24000}]}, 0x40}}, 0x240008c8) 1.597893783s ago: executing program 3 (id=2358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000005580)=""/4085, 0xff5}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001380)=""/118, 0x76}], 0x5}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xc}}}]}, 0x48}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r7, 0x3}, 0x8) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x5, 0xda, 0x1, 0x3ff, 0xffffffff, 0x9, 0x6, 0x3, r9}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r12, @ANYBLOB="080003"], 0x80}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) 1.435523354s ago: executing program 0 (id=2361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x6, 0x0, &(0x7f0000000340)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x6a8aea5ac032ae0, 'memory'}, {0x2b, 'hugetlb'}, {0x2b, 'rlimit'}, {0x2b, 'freezer'}, {0x0, 'blkio'}, {0x2b, 'cpuset'}, {0x2b, 'perf_event'}]}, 0x3d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x50, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x74}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}]}, 0x50}, 0x1, 0x0, 0x0, 0x200400c0}, 0x40000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3ff, 0xfffffffff7087adc}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x56}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="2822e3ff", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) 1.05687377s ago: executing program 4 (id=2366): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) 978.543356ms ago: executing program 4 (id=2368): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfffffffe}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004804}, 0x4c800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x62}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x200, 0x70bd28, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x8, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x7, 0x8, 0x40, @mcast2, @empty, 0x10, 0x40, 0x6, 0xfffffff7}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000240)='GPL\x00', 0x1ff, 0x48, &(0x7f0000000280)=""/72, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x8, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0x7, 0xa}, {0x2, 0x4, 0x2, 0x8}, {0x2, 0x3, 0x2, 0x6}, {0x4, 0x4, 0x8, 0x1}], 0x10, 0xffff, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) 973.117984ms ago: executing program 1 (id=2369): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000400)={0x41, 0x4}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000480)={&(0x7f0000000440)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004050}, 0x20000000) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x6, 0x9, 0x400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x5, 0x4, 0xc4, 0x20008, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}]}}]}, 0x3c}}, 0x20008041) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xe58, 0x0}, 0x8) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x6) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13}, &(0x7f0000000040), &(0x7f0000000140)=r12}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r13, &(0x7f0000000340)='^'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r13}, 0x4) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendfile(r11, r14, 0x0, 0xf03a0005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x1a, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xaf}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x42, &(0x7f0000000300)=""/66, 0x41000, 0x2, '\x00', r7, @fallback=0x1b, r8, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xd, 0xfffffff7, 0x1ff}, 0x10, r9, r10, 0x1, &(0x7f0000000580)=[r14], &(0x7f00000005c0)=[{0x1, 0x1, 0x4, 0x8}], 0x10, 0x8, @void, @value}, 0x94) 840.722753ms ago: executing program 1 (id=2370): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002d00)=@delchain={0x51c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x4ec, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x4e0, 0x6, [@m_simple={0x1d0, 0x1f, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0xd, 0x3, '@-^[\xa5&,.\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x401, 0xfffffffffffffffe, 0x6, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '\xfc}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x10000000, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x12d, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x170, 0x3, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb7e}]}, {0x131, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xf8, 0xc, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x30a}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x6, 0x7, 0xf64, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4e9}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xee1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x715}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8a7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x80, 0x6, "eda7d7a535361ed0c9b32a364b522addd6669254402ee3ff325c8cea5004909bdc00830603507c7cc3cb8a9b0bfd1aa374f3d137bd1e7f8b57e264a568809005b37e0f9e7b458fe6d976cd4a52b8661fb1fc93f220613f0a0b672f610c1e30c05bb4f3d26355d6814b92f64fbdf7f78493ce0e94faef87090b568b9a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x48, 0x17, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="0169ee9634ab"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x5c, 0x1b, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x3, 0x6, 0x4, 0x7}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x51c}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4000}}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x3, 0x3, 0xb, 0x3}}, {0xa, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x1c, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe, 0x3}}, {0xa, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x8c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0xfffffffffffffff6, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 840.316716ms ago: executing program 4 (id=2371): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) 767.70105ms ago: executing program 4 (id=2372): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (rerun: 32) unshare(0x20000400) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r7}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) (async, rerun: 64) sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10008810}, 0x800) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x6}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r10, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x60000}, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 753.630313ms ago: executing program 1 (id=2373): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x45b) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2400000012002102000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004"], 0x24}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @dev, @local}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) 644.852201ms ago: executing program 3 (id=2374): r0 = socket$kcm(0x10, 0x2, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000380)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[@ANYBLOB="01"], 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r0}, 0x100000000, 0xc}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) 525.985ms ago: executing program 1 (id=2375): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@bcast, @remote, @rose, @bcast, @rose, @netrom, @remote, @bcast]}, &(0x7f0000000180)=0x48) sendto$ax25(r2, &(0x7f00000001c0)="4192443ea8073ac75ec13774ec6162158b4c89f0c3373b769584374d1e72bed6e0b8aebb213e0cefa7d15a9ad8965477abeaa354cf085c25b5f7702c509201fc4f3c43efef38362075992b9e5a880f84a6a1", 0x52, 0x0, &(0x7f00000002c0)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x34, r6, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) socket$kcm(0x2, 0x2, 0x73) (async) r7 = socket$kcm(0x2, 0x2, 0x73) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r8, 0xffffffffffffffff, 0xe}, 0xc) (async) close(r7) (async) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400081}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4860) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006", @ANYRES64=r4, @ANYRES8=r9], 0x44}}, 0x0) 519.679426ms ago: executing program 0 (id=2376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000018000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000010900010073797a30000000000900030073797a320000000014010000060a010400000000000000000100000008000b400000000048000480200001800c000100636f756e74657200100002800c0002400000000000000076240001800b0001007470726f7879000014000280080002400000000008000140000000000900010073797a3000000000a20007"], 0x188}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x7, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) 344.781953ms ago: executing program 1 (id=2377): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c2ad8e98be22f76b333c631c72065771"}, @md5sig={0x13, 0x12, "3e485e6a2fef685077d0813fabcb4246"}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0xfff, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x8918, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x14, r4, 0xcc071acbf25dbf8f}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5854}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac85800000000000000024e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0fe8a7d06d7535f7866907dc6751dfb292f7d3acec77f5efad9c11650300000000000000649c1cfd138d5521f9451759c3421eed73d5661cfeecf9c66cf6dd6dcd54c3b3ff02000000d7c983c044c03bf3cc2367a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4a37c9af2551ce935b0f327cb3f011a7d069111d5a34ed09baafa9e87110bd5602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2fc7925bfacbb031e7743f541cd0aed4af7588c8e1b44ccb19e810879b70a70000000000000000000000d7900a820b63278f4e9a217b98000000002a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a1420cfd9e1f84d8271ff6606b2a44bc47b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b207000000000000001d24291c25449f106a99893ed20fa7a050fbbef90327e827e513e96068fd1e8a43e89f9c050022a961546ed5365470fa503c1fac35b903e10c62bebc943c17ff1432d0881406bc176e3e69ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97214d0b2874df30ed5eb1affb87ba55b2d72078e9f40e4ffff06aabca77e64c988dd413230d60a7f7681314df1c2a0f4249c7be5329ac624fb2997df9e6867053a4b239d17ba83b498812a8f57b9b52ebc8b1fe4382601bff5f5dbcd3d50a065bcc67943ba05f3a5366ca6d291f931d9cde41bdabdae4717317621abaa7179e2d44f8ebca654f9e4571963a3f198769e309fc99f6320f47140bb9a5e359804c2653d19462139d5c505dc6e4f178c9a098b51333cccfe0d2eb41dd079de3cfa60365787ca4b8eb920a06969c5da49fc87d37f18205f4b5c0f44d16a2d9f2bc894dfd78e819e54e79eb5ceb91451149e099e47b94fd53ed2dd33d43d8c681e027175e8d281ba4ac708543bc3f9e8e35532b7b90eee5df24d5ec9cd4e33a79f5b123cf15edeb8b0ee7cafbfebb907ccee427f3616d6fd9015432977a55aa00000000700"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000080)={0x1}) socket$inet6_sctp(0xa, 0x0, 0x84) (async) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c2ad8e98be22f76b333c631c72065771"}, @md5sig={0x13, 0x12, "3e485e6a2fef685077d0813fabcb4246"}]}}}}}}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0xfff, 0x4) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSSL2CALL(r1, 0x8918, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x14, r4, 0xcc071acbf25dbf8f}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5854}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000080)={0x1}) (async) 344.439471ms ago: executing program 3 (id=2378): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000140d) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0x9) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xf8, 0x0, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x18000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_NAT_SRC={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ZONE={0x6}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x30}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) 344.079235ms ago: executing program 4 (id=2379): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x100, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, 0x0, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) shutdown(0xffffffffffffffff, 0x1) recvfrom$packet(r3, &(0x7f0000000340)=""/68, 0x52, 0x1, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x1, 0x7, 0x6, @local}, 0x5e) (async, rerun: 32) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0xffffff80, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) getsockopt(r5, 0x6, 0x6, &(0x7f00000002c0)=""/47, &(0x7f0000000300)=0x2f) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c000180060006006558000000010280f90011"], 0x124}}, 0xc000) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) 290.356808ms ago: executing program 0 (id=2380): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000e8000000000000002900000004000000"], 0x100}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4d811}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) 127.438528ms ago: executing program 4 (id=2381): r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket(0xf, 0x4, 0x7) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close(0x3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000001000b000500000006001100010000000800150002000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b0005000000060011009c02000008001500090000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00fdff9f0006001100060000000800150002000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000001000b000500000006001100010000000800150002000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b0005000000060011009c02000008001500090000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00fdff9f0006001100060000000800150002000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, &(0x7f00000001c0)=0xb0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'netpci0\x00'}}, 0x1e) socket$igmp6(0xa, 0x3, 0x2) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x32a, &(0x7f0000001300)={@random="e33110495bfd", @random="ff1df52cd002", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fe3c7d", 0x2f4, 0x11, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, @private1, {[@fragment={0x2e, 0x0, 0x1, 0x0, 0x0, 0x1a, 0x68}, @hopopts={0x1d, 0x2000001b, '\x00', [@ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x69, 0x0, "47deb68ebdff898950db32f9404b5a38f8bc78b7c3a08e3d0c2f581053f123eac6707a4e9030a2153ea2"}, @generic={0x6, 0xca, "bbc7afeae2a783d9848c0502ff56b03d5a509f5ba893211360e6d85690f188cd410042d0b2a15d10395780e0da2d141a892e501b6a49e3ead8192a12be2f0d24fc03aae54f50c29dd70d24ba828022bff59886f73689cbd7930b83da3bacbd53868914ed3d945d96aca3ada06f658a0f29f3641c3bbbff03915a8543b5edf8505c18a69ac962823f8bbd18c8c74f9974c46bf55b36e271c31198a9a1a92d098198ddb8a346a85abb67d6ccaded7a22d47cf407ca28c02edb9abd74e5dd10b69a280a1071196e25762345"}]}, @srh={0x2b, 0x10, 0x4, 0x8, 0x8, 0x20, 0x0, [@private1, @mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @loopback]}, @srh={0x3b, 0x10, 0x4, 0x8, 0x1, 0x30, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, @dev={0xfe, 0x80, '\x00', 0x43}, @empty, @mcast2]}], {0x4e22, 0x4e22, 0xdc, 0x0, @opaque="c960699750120a3696fa539b1eda7e552d10a9d8945db56a22b93e7c05b890c298125059532b2c5fd6cf05388df3e6f972c37e022ebcd11ded5cae94d79e31507171093caa54c9308bb4378fde39083131787fac75d81b6ae0c4f8dddfb5ee1f5f0b2cf080e004051efbdd8b069016d600a1359097fb45965538e8162e4e45939a33690db3b8ba60988cfb2d612ab61fb8eebc6245b139c6c4ad9b2b62d22f12c19dc454abae351a47e08e10b1f9012de373a0bdd71185a690efe5858b9e1635d6405350ee64c7ac0962509257df31b2fc62df9a"}}}}}}, 0x0) epoll_create(0x3ff) (async) r9 = epoll_create(0x3ff) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000240)={0xa0000008}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000280)={0x20000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000280)={0x20000000}) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 20.799375ms ago: executing program 1 (id=2382): sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, &(0x7f0000001480)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x1}, 0x1}, 0x18) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x23, &(0x7f00000077c0)={r1}, 0x8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1406, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x18}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) connect$can_j1939(r2, &(0x7f0000001480)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x1}, 0x1}, 0x18) (async) socket(0x2, 0x80805, 0x0) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x23, &(0x7f00000077c0)={r1}, 0x8) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1406, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x18}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) 0s ago: executing program 3 (id=2383): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004dc0)=@delchain={0x67c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x648, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x620, 0x7, [@m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xb4, 0x15, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x6c, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x2d, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e4d1b78"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xd8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0xa9, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68c8f4ce4718278e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x18c, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0xfd, 0x6, "a1f2a4ce007ddd8790543600a2420ec559f8c649a2a9f3d420934096de08ac63d9c315e8dded6fb2508c68041b7a0aaceed27574893969cda1525b9c8934a0e1e629652c69b92b0c6af575f0df47a043720f08c20d25a11fd3d0a1a33bb49821dd083349fa0d176cd4a307e71c04cd22f512591403a4b3bf2f517e65c5c9da8db780c47af490bf4f5a3657faefcdd5726a3328052df3f62a23cdddee72c32714d8e6fe2a05fbf6e706ce8982979ef8f4a0b551d14b2f93f6166542955dc5bce3689be9fe95626bbded9b18f97ec2efe958898f5beb20933796e6b3c7209a4c6a7ab7fcfcac6e41ee18e29999441f5131306482f32bfbdda6ab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8}]}, 0x67c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) (async, rerun: 64) r0 = socket(0x10, 0x803, 0x0) (rerun: 64) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 0xac/0x100 [ 169.903341][T10245] ? skb_clone+0x20c/0x390 [ 169.907784][T10245] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 169.913191][T10245] skb_clone+0x20c/0x390 [ 169.917464][T10245] __netlink_deliver_tap+0x3cc/0x7c0 [ 169.922780][T10245] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.927999][T10245] netlink_deliver_tap+0x19d/0x1b0 [ 169.933139][T10245] netlink_unicast+0x7c4/0x990 [ 169.937939][T10245] ? __pfx_netlink_unicast+0x10/0x10 [ 169.943246][T10245] ? __virt_addr_valid+0x183/0x530 [ 169.948377][T10245] ? __check_object_size+0x48e/0x900 [ 169.953692][T10245] netlink_sendmsg+0x8e4/0xcb0 [ 169.958494][T10245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.963808][T10245] ? aa_sock_msg_perm+0x91/0x160 [ 169.968773][T10245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.974064][T10245] __sock_sendmsg+0x221/0x270 [ 169.978743][T10245] ____sys_sendmsg+0x52a/0x7e0 [ 169.983508][T10245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.988794][T10245] __sys_sendmsg+0x292/0x380 [ 169.993398][T10245] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.998531][T10245] ? __pfx_vfs_write+0x10/0x10 [ 170.003305][T10245] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.009628][T10245] ? do_syscall_64+0x100/0x230 [ 170.014392][T10245] ? do_syscall_64+0xb6/0x230 [ 170.019065][T10245] do_syscall_64+0xf3/0x230 [ 170.023560][T10245] ? clear_bhb_loop+0x35/0x90 [ 170.028235][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.034134][T10245] RIP: 0033:0x7f2dea37e719 [ 170.038546][T10245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.058157][T10245] RSP: 002b:00007f2deb0f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.066560][T10245] RAX: ffffffffffffffda RBX: 00007f2dea535f80 RCX: 00007f2dea37e719 [ 170.074529][T10245] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 170.082491][T10245] RBP: 00007f2deb0f2090 R08: 0000000000000000 R09: 0000000000000000 [ 170.090451][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.098416][T10245] R13: 0000000000000000 R14: 00007f2dea535f80 R15: 00007ffc3ecfe998 [ 170.106387][T10245] [ 170.368342][T10278] netlink: 'syz.4.1302': attribute type 2 has an invalid length. [ 170.450242][T10282] netlink: 'syz.3.1304': attribute type 4 has an invalid length. [ 170.520242][T10288] FAULT_INJECTION: forcing a failure. [ 170.520242][T10288] name failslab, interval 1, probability 0, space 0, times 0 [ 170.538538][T10288] CPU: 1 UID: 0 PID: 10288 Comm: syz.4.1307 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 170.549357][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.559726][T10288] Call Trace: [ 170.563121][T10288] [ 170.566111][T10288] dump_stack_lvl+0x241/0x360 [ 170.570818][T10288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.576050][T10288] ? __pfx__printk+0x10/0x10 [ 170.580655][T10288] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 170.586146][T10288] ? __pfx___might_resched+0x10/0x10 [ 170.591446][T10288] ? netlink_unicast+0x7c4/0x990 [ 170.596405][T10288] should_fail_ex+0x3b0/0x4e0 [ 170.601093][T10288] should_failslab+0xac/0x100 [ 170.605786][T10288] ? rtnl_newlink+0xf2/0x20a0 [ 170.610487][T10288] __kmalloc_cache_noprof+0x6c/0x2c0 [ 170.615792][T10288] rtnl_newlink+0xf2/0x20a0 [ 170.620300][T10288] ? __mutex_trylock_common+0x183/0x2e0 [ 170.625846][T10288] ? __pfx___might_resched+0x10/0x10 [ 170.631145][T10288] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.636162][T10288] ? __pfx___mutex_trylock_common+0x10/0x10 [ 170.642060][T10288] ? rcu_is_watching+0x15/0xb0 [ 170.646831][T10288] ? trace_contention_end+0x3c/0x120 [ 170.652115][T10288] ? __mutex_lock+0x2ef/0xd70 [ 170.656814][T10288] ? rcu_read_unlock+0x87/0xa0 [ 170.661592][T10288] ? __dev_queue_xmit+0x171d/0x3ed0 [ 170.666818][T10288] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 170.672036][T10288] ? __pfx_lock_release+0x10/0x10 [ 170.677063][T10288] ? __pfx___mutex_lock+0x10/0x10 [ 170.682102][T10288] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.687235][T10288] rtnetlink_rcv_msg+0x73f/0xcf0 [ 170.692205][T10288] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 170.697321][T10288] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.702797][T10288] ? ref_tracker_free+0x643/0x7e0 [ 170.707849][T10288] netlink_rcv_skb+0x1e3/0x430 [ 170.712626][T10288] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.718106][T10288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.723420][T10288] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.728637][T10288] netlink_unicast+0x7f6/0x990 [ 170.733406][T10288] ? __pfx_netlink_unicast+0x10/0x10 [ 170.738695][T10288] ? __virt_addr_valid+0x183/0x530 [ 170.743828][T10288] ? __check_object_size+0x48e/0x900 [ 170.749129][T10288] netlink_sendmsg+0x8e4/0xcb0 [ 170.753892][T10288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.759173][T10288] ? aa_sock_msg_perm+0x91/0x160 [ 170.764122][T10288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.769426][T10288] __sock_sendmsg+0x221/0x270 [ 170.774118][T10288] ____sys_sendmsg+0x52a/0x7e0 [ 170.778883][T10288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.784169][T10288] __sys_sendmsg+0x292/0x380 [ 170.788753][T10288] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.793885][T10288] ? __pfx_vfs_write+0x10/0x10 [ 170.798680][T10288] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.805030][T10288] ? do_syscall_64+0x100/0x230 [ 170.809811][T10288] ? do_syscall_64+0xb6/0x230 [ 170.814483][T10288] do_syscall_64+0xf3/0x230 [ 170.818995][T10288] ? clear_bhb_loop+0x35/0x90 [ 170.823704][T10288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.829609][T10288] RIP: 0033:0x7f2dea37e719 [ 170.834037][T10288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.853651][T10288] RSP: 002b:00007f2deb0f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.862076][T10288] RAX: ffffffffffffffda RBX: 00007f2dea535f80 RCX: 00007f2dea37e719 [ 170.870067][T10288] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 170.878040][T10288] RBP: 00007f2deb0f2090 R08: 0000000000000000 R09: 0000000000000000 [ 170.886014][T10288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.894065][T10288] R13: 0000000000000000 R14: 00007f2dea535f80 R15: 00007ffc3ecfe998 [ 170.902061][T10288] [ 170.909506][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 170.947453][T10295] ipvlan2: entered allmulticast mode [ 170.962099][T10295] veth0_vlan: entered allmulticast mode [ 171.134727][T10303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1309'. [ 171.144256][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 171.153542][T10300] bridge_slave_1: left allmulticast mode [ 171.161180][T10300] bridge_slave_1: left promiscuous mode [ 171.170366][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.189008][T10300] bridge_slave_0: left allmulticast mode [ 171.207024][T10300] bridge_slave_0: left promiscuous mode [ 171.216409][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.274188][T10309] sch_tbf: burst 3936 is lower than device lo mtu (11337746) ! [ 171.509217][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1320'. [ 171.556046][T10334] FAULT_INJECTION: forcing a failure. [ 171.556046][T10334] name failslab, interval 1, probability 0, space 0, times 0 [ 171.570945][T10334] CPU: 0 UID: 0 PID: 10334 Comm: syz.0.1321 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 171.581751][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.585757][T10337] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1320'. [ 171.591839][T10334] Call Trace: [ 171.591852][T10334] [ 171.591861][T10334] dump_stack_lvl+0x241/0x360 [ 171.591890][T10334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.616853][T10334] ? __pfx__printk+0x10/0x10 [ 171.621468][T10334] ? __kmalloc_node_noprof+0xb7/0x440 [ 171.626846][T10334] ? __pfx___might_resched+0x10/0x10 [ 171.632133][T10334] should_fail_ex+0x3b0/0x4e0 [ 171.636817][T10334] should_failslab+0xac/0x100 [ 171.641494][T10334] __kmalloc_node_noprof+0xdf/0x440 [ 171.646705][T10334] ? __kvmalloc_node_noprof+0x72/0x190 [ 171.652161][T10334] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 171.657447][T10334] __kvmalloc_node_noprof+0x72/0x190 [ 171.662729][T10334] alloc_netdev_mqs+0x9b/0x1000 [ 171.667577][T10334] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 171.672857][T10334] ? bpf_lsm_capable+0x9/0x10 [ 171.677532][T10334] rtnl_create_link+0x2f9/0xc20 [ 171.682386][T10334] rtnl_newlink+0x1423/0x20a0 [ 171.687062][T10334] ? rtnl_newlink+0x511/0x20a0 [ 171.691837][T10334] ? rtnl_newlink+0x511/0x20a0 [ 171.696609][T10334] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.701629][T10334] ? __pfx___mutex_trylock_common+0x10/0x10 [ 171.707520][T10334] ? rcu_is_watching+0x15/0xb0 [ 171.712278][T10334] ? trace_contention_end+0x3c/0x120 [ 171.717560][T10334] ? __mutex_lock+0x2ef/0xd70 [ 171.722240][T10334] ? __pfx_lock_release+0x10/0x10 [ 171.727276][T10334] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.732297][T10334] rtnetlink_rcv_msg+0x73f/0xcf0 [ 171.737236][T10334] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 171.742359][T10334] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.747823][T10334] ? ref_tracker_free+0x643/0x7e0 [ 171.752853][T10334] netlink_rcv_skb+0x1e3/0x430 [ 171.757613][T10334] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.763074][T10334] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.768368][T10334] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.773562][T10334] netlink_unicast+0x7f6/0x990 [ 171.778339][T10334] ? __pfx_netlink_unicast+0x10/0x10 [ 171.783624][T10334] ? __virt_addr_valid+0x183/0x530 [ 171.788734][T10334] ? __check_object_size+0x48e/0x900 [ 171.794032][T10334] netlink_sendmsg+0x8e4/0xcb0 [ 171.798800][T10334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.804086][T10334] ? aa_sock_msg_perm+0x91/0x160 [ 171.809022][T10334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.814300][T10334] __sock_sendmsg+0x221/0x270 [ 171.818978][T10334] ____sys_sendmsg+0x52a/0x7e0 [ 171.823747][T10334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.829038][T10334] __sys_sendmsg+0x292/0x380 [ 171.833626][T10334] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.838755][T10334] ? __pfx_vfs_write+0x10/0x10 [ 171.843540][T10334] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.849869][T10334] ? do_syscall_64+0x100/0x230 [ 171.854632][T10334] ? do_syscall_64+0xb6/0x230 [ 171.859303][T10334] do_syscall_64+0xf3/0x230 [ 171.863802][T10334] ? clear_bhb_loop+0x35/0x90 [ 171.868475][T10334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.874360][T10334] RIP: 0033:0x7fa4b437e719 [ 171.878778][T10334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.898377][T10334] RSP: 002b:00007fa4b5245038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.906804][T10334] RAX: ffffffffffffffda RBX: 00007fa4b4535f80 RCX: 00007fa4b437e719 [ 171.914768][T10334] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 171.922735][T10334] RBP: 00007fa4b5245090 R08: 0000000000000000 R09: 0000000000000000 [ 171.930705][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.938675][T10334] R13: 0000000000000000 R14: 00007fa4b4535f80 R15: 00007ffc2b936938 [ 171.946654][T10334] [ 172.110429][T10346] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 172.125546][T10346] netlink: 'syz.4.1326': attribute type 3 has an invalid length. [ 172.139277][T10346] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1326'. [ 172.397719][T10373] FAULT_INJECTION: forcing a failure. [ 172.397719][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 172.416938][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.4.1333 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 172.427749][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.437835][T10373] Call Trace: [ 172.441141][T10373] [ 172.444087][T10373] dump_stack_lvl+0x241/0x360 [ 172.448798][T10373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.454069][T10373] ? __pfx__printk+0x10/0x10 [ 172.458653][T10373] ? __kmalloc_node_noprof+0xb7/0x440 [ 172.464116][T10373] ? __pfx___might_resched+0x10/0x10 [ 172.469421][T10373] should_fail_ex+0x3b0/0x4e0 [ 172.474111][T10373] should_failslab+0xac/0x100 [ 172.478792][T10373] __kmalloc_node_noprof+0xdf/0x440 [ 172.483997][T10373] ? __kvmalloc_node_noprof+0x72/0x190 [ 172.489469][T10373] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 172.494763][T10373] __kvmalloc_node_noprof+0x72/0x190 [ 172.500056][T10373] alloc_netdev_mqs+0x9b/0x1000 [ 172.504916][T10373] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 172.510212][T10373] ? bpf_lsm_capable+0x9/0x10 [ 172.514894][T10373] rtnl_create_link+0x2f9/0xc20 [ 172.519746][T10373] rtnl_newlink+0x1423/0x20a0 [ 172.524435][T10373] ? rtnl_newlink+0x511/0x20a0 [ 172.529221][T10373] ? rtnl_newlink+0x511/0x20a0 [ 172.533991][T10373] ? __pfx_rtnl_newlink+0x10/0x10 [ 172.539010][T10373] ? __pfx___mutex_trylock_common+0x10/0x10 [ 172.544905][T10373] ? rcu_is_watching+0x15/0xb0 [ 172.549686][T10373] ? trace_contention_end+0x3c/0x120 [ 172.554977][T10373] ? __mutex_lock+0x2ef/0xd70 [ 172.559668][T10373] ? __pfx_lock_release+0x10/0x10 [ 172.564779][T10373] ? __pfx_rtnl_newlink+0x10/0x10 [ 172.569831][T10373] rtnetlink_rcv_msg+0x73f/0xcf0 [ 172.574781][T10373] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 172.579905][T10373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.585374][T10373] ? ref_tracker_free+0x643/0x7e0 [ 172.590407][T10373] netlink_rcv_skb+0x1e3/0x430 [ 172.595185][T10373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.600685][T10373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.606016][T10373] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.611215][T10373] netlink_unicast+0x7f6/0x990 [ 172.616092][T10373] ? __pfx_netlink_unicast+0x10/0x10 [ 172.621419][T10373] ? __virt_addr_valid+0x183/0x530 [ 172.626526][T10373] ? __check_object_size+0x48e/0x900 [ 172.631808][T10373] netlink_sendmsg+0x8e4/0xcb0 [ 172.636591][T10373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.641877][T10373] ? aa_sock_msg_perm+0x91/0x160 [ 172.646815][T10373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.652091][T10373] __sock_sendmsg+0x221/0x270 [ 172.656871][T10373] ____sys_sendmsg+0x52a/0x7e0 [ 172.661636][T10373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.667118][T10373] __sys_sendmsg+0x292/0x380 [ 172.671738][T10373] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.676881][T10373] ? __pfx_vfs_write+0x10/0x10 [ 172.681657][T10373] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.687999][T10373] ? do_syscall_64+0x100/0x230 [ 172.692795][T10373] ? do_syscall_64+0xb6/0x230 [ 172.697470][T10373] do_syscall_64+0xf3/0x230 [ 172.701967][T10373] ? clear_bhb_loop+0x35/0x90 [ 172.706637][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.712525][T10373] RIP: 0033:0x7f2dea37e719 [ 172.716931][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.736639][T10373] RSP: 002b:00007f2deb0f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.745077][T10373] RAX: ffffffffffffffda RBX: 00007f2dea535f80 RCX: 00007f2dea37e719 [ 172.753047][T10373] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 172.761016][T10373] RBP: 00007f2deb0f2090 R08: 0000000000000000 R09: 0000000000000000 [ 172.769010][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.777004][T10373] R13: 0000000000000000 R14: 00007f2dea535f80 R15: 00007ffc3ecfe998 [ 172.785006][T10373] [ 172.949076][T10398] netlink: 'syz.3.1340': attribute type 9 has an invalid length. [ 173.569287][T10444] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.802113][T10454] "syz.1.1361" (10454) uses obsolete ecb(arc4) skcipher [ 174.217179][T10489] hsr_slave_0: left promiscuous mode [ 174.244366][T10489] hsr_slave_1: left promiscuous mode [ 174.365194][T10501] netlink: 'syz.1.1374': attribute type 4 has an invalid length. [ 174.646796][T10520] xt_hashlimit: max too large, truncated to 1048576 [ 174.676786][T10519] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 174.715215][T10524] __nla_validate_parse: 9 callbacks suppressed [ 174.715233][T10524] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1381'. [ 174.731305][T10524] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1381'. [ 174.740182][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 174.749384][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 174.758386][T10524] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1381'. [ 174.782460][T10520] IPv6: Can't replace route, no match found [ 176.098654][T10560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.211262][T10567] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 176.250546][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 176.318480][T10580] xt_hashlimit: max too large, truncated to 1048576 [ 176.353102][T10582] x_tables: duplicate underflow at hook 1 [ 176.376959][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 176.484234][T10595] netlink: zone id is out of range [ 176.627953][T10604] x_tables: duplicate underflow at hook 1 [ 176.683974][T10604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1404'. [ 176.824450][T10616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 176.890108][T10622] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20003 [ 177.141775][T10637] netlink: 'syz.4.1414': attribute type 9 has an invalid length. [ 177.149553][T10637] netlink: 134688 bytes leftover after parsing attributes in process `syz.4.1414'. [ 177.450885][T10659] FAULT_INJECTION: forcing a failure. [ 177.450885][T10659] name failslab, interval 1, probability 0, space 0, times 0 [ 177.465531][T10659] CPU: 1 UID: 0 PID: 10659 Comm: syz.1.1422 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 177.476325][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.486383][T10659] Call Trace: [ 177.489657][T10659] [ 177.492582][T10659] dump_stack_lvl+0x241/0x360 [ 177.497265][T10659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.502463][T10659] ? __pfx__printk+0x10/0x10 [ 177.507047][T10659] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 177.512679][T10659] ? __pfx___might_resched+0x10/0x10 [ 177.517979][T10659] should_fail_ex+0x3b0/0x4e0 [ 177.522657][T10659] should_failslab+0xac/0x100 [ 177.527339][T10659] ? alloc_netdev_mqs+0xb9e/0x1000 [ 177.532449][T10659] __kmalloc_cache_noprof+0x6c/0x2c0 [ 177.537752][T10659] ? __xdp_rxq_info_reg+0x142/0x290 [ 177.542971][T10659] alloc_netdev_mqs+0xb9e/0x1000 [ 177.547923][T10659] rtnl_create_link+0x2f9/0xc20 [ 177.552801][T10659] rtnl_newlink+0x1423/0x20a0 [ 177.557488][T10659] ? rtnl_newlink+0x511/0x20a0 [ 177.562260][T10659] ? rtnl_newlink+0x511/0x20a0 [ 177.567035][T10659] ? __pfx_rtnl_newlink+0x10/0x10 [ 177.572062][T10659] ? __pfx___mutex_trylock_common+0x10/0x10 [ 177.577977][T10659] ? rcu_is_watching+0x15/0xb0 [ 177.582759][T10659] ? trace_contention_end+0x3c/0x120 [ 177.588050][T10659] ? __mutex_lock+0x2ef/0xd70 [ 177.592736][T10659] ? __pfx_lock_release+0x10/0x10 [ 177.597774][T10659] ? __pfx_rtnl_newlink+0x10/0x10 [ 177.602803][T10659] rtnetlink_rcv_msg+0x73f/0xcf0 [ 177.607752][T10659] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 177.612868][T10659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.618334][T10659] ? ref_tracker_free+0x643/0x7e0 [ 177.623362][T10659] netlink_rcv_skb+0x1e3/0x430 [ 177.628123][T10659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.633592][T10659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.638888][T10659] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.644084][T10659] netlink_unicast+0x7f6/0x990 [ 177.648853][T10659] ? __pfx_netlink_unicast+0x10/0x10 [ 177.654141][T10659] ? __virt_addr_valid+0x183/0x530 [ 177.659252][T10659] ? __check_object_size+0x48e/0x900 [ 177.664544][T10659] netlink_sendmsg+0x8e4/0xcb0 [ 177.669315][T10659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.674601][T10659] ? aa_sock_msg_perm+0x91/0x160 [ 177.679545][T10659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.684826][T10659] __sock_sendmsg+0x221/0x270 [ 177.689505][T10659] ____sys_sendmsg+0x52a/0x7e0 [ 177.694281][T10659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.699584][T10659] __sys_sendmsg+0x292/0x380 [ 177.704172][T10659] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.709290][T10659] ? __pfx_vfs_write+0x10/0x10 [ 177.714159][T10659] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.720486][T10659] ? do_syscall_64+0x100/0x230 [ 177.725261][T10659] ? do_syscall_64+0xb6/0x230 [ 177.730108][T10659] do_syscall_64+0xf3/0x230 [ 177.734617][T10659] ? clear_bhb_loop+0x35/0x90 [ 177.739293][T10659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.745180][T10659] RIP: 0033:0x7f5861d7e719 [ 177.749588][T10659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.769204][T10659] RSP: 002b:00007f5862bcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.777624][T10659] RAX: ffffffffffffffda RBX: 00007f5861f35f80 RCX: 00007f5861d7e719 [ 177.785595][T10659] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 177.793564][T10659] RBP: 00007f5862bcc090 R08: 0000000000000000 R09: 0000000000000000 [ 177.801560][T10659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.809527][T10659] R13: 0000000000000000 R14: 00007f5861f35f80 R15: 00007ffea22ede88 [ 177.817509][T10659] [ 177.993498][T10676] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 178.003358][T10679] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 179.116188][ T5846] Bluetooth: hci2: command 0x0405 tx timeout [ 181.190819][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 181.206031][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 181.211436][ T5846] Bluetooth: hci2: command 0x0405 tx timeout [ 184.241737][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 196.234300][T10703] __nla_validate_parse: 4 callbacks suppressed [ 196.234328][T10703] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1436'. [ 196.368093][T10718] FAULT_INJECTION: forcing a failure. [ 196.368093][T10718] name failslab, interval 1, probability 0, space 0, times 0 [ 196.407933][T10718] CPU: 1 UID: 0 PID: 10718 Comm: syz.3.1437 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 196.418839][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.428921][T10718] Call Trace: [ 196.432220][T10718] [ 196.435170][T10718] dump_stack_lvl+0x241/0x360 [ 196.439901][T10718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.445128][T10718] ? __pfx__printk+0x10/0x10 [ 196.449750][T10718] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 196.455240][T10718] ? __pfx___might_resched+0x10/0x10 [ 196.460567][T10718] should_fail_ex+0x3b0/0x4e0 [ 196.465277][T10718] should_failslab+0xac/0x100 [ 196.469977][T10718] ? alloc_netdev_mqs+0xb9e/0x1000 [ 196.475112][T10718] __kmalloc_cache_noprof+0x6c/0x2c0 [ 196.480427][T10718] ? __xdp_rxq_info_reg+0x142/0x290 [ 196.485656][T10718] alloc_netdev_mqs+0xb9e/0x1000 [ 196.490623][T10718] rtnl_create_link+0x2f9/0xc20 [ 196.495506][T10718] rtnl_newlink+0x1423/0x20a0 [ 196.500218][T10718] ? rtnl_newlink+0x511/0x20a0 [ 196.505010][T10718] ? rtnl_newlink+0x511/0x20a0 [ 196.509806][T10718] ? __pfx_rtnl_newlink+0x10/0x10 [ 196.514851][T10718] ? __pfx___mutex_trylock_common+0x10/0x10 [ 196.520751][T10718] ? rcu_is_watching+0x15/0xb0 [ 196.525509][T10718] ? trace_contention_end+0x3c/0x120 [ 196.530793][T10718] ? __mutex_lock+0x2ef/0xd70 [ 196.535476][T10718] ? __pfx_lock_release+0x10/0x10 [ 196.540518][T10718] ? __pfx_rtnl_newlink+0x10/0x10 [ 196.545554][T10718] rtnetlink_rcv_msg+0x73f/0xcf0 [ 196.550493][T10718] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 196.555612][T10718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.561076][T10718] ? ref_tracker_free+0x643/0x7e0 [ 196.566104][T10718] netlink_rcv_skb+0x1e3/0x430 [ 196.570864][T10718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.576325][T10718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.581634][T10718] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.586838][T10718] netlink_unicast+0x7f6/0x990 [ 196.591624][T10718] ? __pfx_netlink_unicast+0x10/0x10 [ 196.596922][T10718] ? __virt_addr_valid+0x183/0x530 [ 196.602040][T10718] ? __check_object_size+0x48e/0x900 [ 196.607332][T10718] netlink_sendmsg+0x8e4/0xcb0 [ 196.612108][T10718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.617395][T10718] ? aa_sock_msg_perm+0x91/0x160 [ 196.622337][T10718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.627617][T10718] __sock_sendmsg+0x221/0x270 [ 196.632324][T10718] ____sys_sendmsg+0x52a/0x7e0 [ 196.637092][T10718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.642388][T10718] __sys_sendmsg+0x292/0x380 [ 196.646977][T10718] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.652092][T10718] ? __pfx_vfs_write+0x10/0x10 [ 196.656875][T10718] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.663206][T10718] ? do_syscall_64+0x100/0x230 [ 196.667966][T10718] ? do_syscall_64+0xb6/0x230 [ 196.672641][T10718] do_syscall_64+0xf3/0x230 [ 196.677140][T10718] ? clear_bhb_loop+0x35/0x90 [ 196.681815][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.687705][T10718] RIP: 0033:0x7f9b3cb7e719 [ 196.692126][T10718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.711736][T10718] RSP: 002b:00007f9b3d89e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.720148][T10718] RAX: ffffffffffffffda RBX: 00007f9b3cd35f80 RCX: 00007f9b3cb7e719 [ 196.728123][T10718] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 196.736088][T10718] RBP: 00007f9b3d89e090 R08: 0000000000000000 R09: 0000000000000000 [ 196.744053][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.752016][T10718] R13: 0000000000000000 R14: 00007f9b3cd35f80 R15: 00007ffc93b31338 [ 196.760001][T10718] [ 196.840793][T10730] Dead loop on virtual device ipvlan1, fix it urgently! [ 196.850370][T10730] Dead loop on virtual device ipvlan1, fix it urgently! [ 196.862384][T10730] syz.3.1442 (10730) used greatest stack depth: 7640 bytes left [ 196.873768][T10735] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 197.299605][T10757] openvswitch: netlink: Duplicate or invalid key (type 0). [ 197.325125][T10757] openvswitch: netlink: Actions may not be safe on all matching packets [ 197.485668][T10781] FAULT_INJECTION: forcing a failure. [ 197.485668][T10781] name failslab, interval 1, probability 0, space 0, times 0 [ 197.494925][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1455'. [ 197.513726][T10781] CPU: 1 UID: 0 PID: 10781 Comm: syz.1.1453 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 197.524530][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.530301][T10793] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1456'. [ 197.534581][T10781] Call Trace: [ 197.534593][T10781] [ 197.534602][T10781] dump_stack_lvl+0x241/0x360 [ 197.534632][T10781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.534654][T10781] ? __pfx__printk+0x10/0x10 [ 197.564272][T10781] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 197.570280][T10781] ? __pfx___might_resched+0x10/0x10 [ 197.575596][T10781] should_fail_ex+0x3b0/0x4e0 [ 197.580280][T10781] should_failslab+0xac/0x100 [ 197.584959][T10781] ? __alloc_skb+0x1c3/0x440 [ 197.589549][T10781] kmem_cache_alloc_node_noprof+0x71/0x320 [ 197.595360][T10781] __alloc_skb+0x1c3/0x440 [ 197.599776][T10781] ? __pfx___alloc_skb+0x10/0x10 [ 197.604714][T10781] ? netlink_ack_tlv_len+0x6e/0x200 [ 197.609908][T10781] netlink_ack+0x13f/0xa30 [ 197.614318][T10781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.619790][T10781] netlink_rcv_skb+0x262/0x430 [ 197.624556][T10781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.630015][T10781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.635309][T10781] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.640503][T10781] netlink_unicast+0x7f6/0x990 [ 197.645271][T10781] ? __pfx_netlink_unicast+0x10/0x10 [ 197.650551][T10781] ? __virt_addr_valid+0x183/0x530 [ 197.655656][T10781] ? __check_object_size+0x48e/0x900 [ 197.660940][T10781] netlink_sendmsg+0x8e4/0xcb0 [ 197.665703][T10781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.670985][T10781] ? aa_sock_msg_perm+0x91/0x160 [ 197.675923][T10781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.681203][T10781] __sock_sendmsg+0x221/0x270 [ 197.685881][T10781] ____sys_sendmsg+0x52a/0x7e0 [ 197.690645][T10781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.695944][T10781] __sys_sendmsg+0x292/0x380 [ 197.700530][T10781] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.705646][T10781] ? __pfx_vfs_write+0x10/0x10 [ 197.710430][T10781] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.716762][T10781] ? do_syscall_64+0x100/0x230 [ 197.721531][T10781] ? do_syscall_64+0xb6/0x230 [ 197.726211][T10781] do_syscall_64+0xf3/0x230 [ 197.730710][T10781] ? clear_bhb_loop+0x35/0x90 [ 197.735384][T10781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.741270][T10781] RIP: 0033:0x7f5861d7e719 [ 197.745677][T10781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.765278][T10781] RSP: 002b:00007f5862bcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.773692][T10781] RAX: ffffffffffffffda RBX: 00007f5861f35f80 RCX: 00007f5861d7e719 [ 197.781659][T10781] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 197.789622][T10781] RBP: 00007f5862bcc090 R08: 0000000000000000 R09: 0000000000000000 [ 197.797586][T10781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.805548][T10781] R13: 0000000000000000 R14: 00007f5861f35f80 R15: 00007ffea22ede88 [ 197.813526][T10781] [ 197.892115][T10797] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 197.899897][T10797] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1457'. [ 198.037386][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 198.067438][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1463'. [ 198.071485][T10808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1461'. [ 198.132536][T10815] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1463'. [ 198.149721][T10817] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1465'. [ 198.176002][T10819] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1465'. [ 198.675758][T10869] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 198.698179][T10870] netlink: 'syz.0.1475': attribute type 8 has an invalid length. [ 198.728643][T10873] FAULT_INJECTION: forcing a failure. [ 198.728643][T10873] name failslab, interval 1, probability 0, space 0, times 0 [ 198.741626][T10873] CPU: 1 UID: 0 PID: 10873 Comm: syz.3.1481 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 198.752397][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 198.762495][T10873] Call Trace: [ 198.765765][T10873] [ 198.768688][T10873] dump_stack_lvl+0x241/0x360 [ 198.773360][T10873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.778561][T10873] ? __pfx__printk+0x10/0x10 [ 198.783169][T10873] ? ref_tracker_alloc+0x332/0x490 [ 198.788277][T10873] should_fail_ex+0x3b0/0x4e0 [ 198.792953][T10873] ? skb_clone+0x20c/0x390 [ 198.797361][T10873] should_failslab+0xac/0x100 [ 198.802050][T10873] ? skb_clone+0x20c/0x390 [ 198.806479][T10873] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 198.811860][T10873] skb_clone+0x20c/0x390 [ 198.816115][T10873] __netlink_deliver_tap+0x3cc/0x7c0 [ 198.821402][T10873] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.826594][T10873] netlink_deliver_tap+0x19d/0x1b0 [ 198.831696][T10873] netlink_sendskb+0x68/0x140 [ 198.836365][T10873] netlink_unicast+0x39d/0x990 [ 198.841129][T10873] ? __asan_memcpy+0x40/0x70 [ 198.845745][T10873] ? __pfx_netlink_unicast+0x10/0x10 [ 198.851061][T10873] netlink_rcv_skb+0x262/0x430 [ 198.855849][T10873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.861320][T10873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.866610][T10873] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.871810][T10873] netlink_unicast+0x7f6/0x990 [ 198.876589][T10873] ? __pfx_netlink_unicast+0x10/0x10 [ 198.881865][T10873] ? __virt_addr_valid+0x183/0x530 [ 198.886967][T10873] ? __check_object_size+0x48e/0x900 [ 198.892258][T10873] netlink_sendmsg+0x8e4/0xcb0 [ 198.897049][T10873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.902341][T10873] ? aa_sock_msg_perm+0x91/0x160 [ 198.907313][T10873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.912618][T10873] __sock_sendmsg+0x221/0x270 [ 198.917316][T10873] ____sys_sendmsg+0x52a/0x7e0 [ 198.922123][T10873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.927420][T10873] __sys_sendmsg+0x292/0x380 [ 198.932006][T10873] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.937118][T10873] ? __pfx_vfs_write+0x10/0x10 [ 198.941919][T10873] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.948248][T10873] ? do_syscall_64+0x100/0x230 [ 198.953035][T10873] ? do_syscall_64+0xb6/0x230 [ 198.957740][T10873] do_syscall_64+0xf3/0x230 [ 198.962256][T10873] ? clear_bhb_loop+0x35/0x90 [ 198.966932][T10873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.972817][T10873] RIP: 0033:0x7f9b3cb7e719 [ 198.977221][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.996833][T10873] RSP: 002b:00007f9b3d89e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.005275][T10873] RAX: ffffffffffffffda RBX: 00007f9b3cd35f80 RCX: 00007f9b3cb7e719 [ 199.013260][T10873] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 199.021229][T10873] RBP: 00007f9b3d89e090 R08: 0000000000000000 R09: 0000000000000000 [ 199.029189][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.037146][T10873] R13: 0000000000000000 R14: 00007f9b3cd35f80 R15: 00007ffc93b31338 [ 199.045122][T10873] [ 199.257678][T10891] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 199.279843][T10891] netlink: 'syz.3.1486': attribute type 9 has an invalid length. [ 199.527084][T10910] netlink: 'syz.0.1490': attribute type 7 has an invalid length. [ 199.558345][T10910] netlink: 'syz.0.1490': attribute type 8 has an invalid length. [ 199.829920][T10923] bond0: option ad_select: invalid value (7) [ 200.853887][T10992] netlink: 'syz.4.1515': attribute type 1 has an invalid length. [ 200.910535][T10992] netlink: 'syz.4.1515': attribute type 1 has an invalid length. [ 200.962570][T10995] netlink: 'syz.3.1517': attribute type 10 has an invalid length. [ 200.976112][T10995] bridge0: port 3(team0) entered blocking state [ 200.982549][T10995] bridge0: port 3(team0) entered disabled state [ 200.988976][T10995] team0: entered allmulticast mode [ 200.999544][T10995] team_slave_0: entered allmulticast mode [ 201.005521][T10995] team_slave_1: entered allmulticast mode [ 201.012485][T10995] team0: entered promiscuous mode [ 201.017552][T10995] team_slave_0: entered promiscuous mode [ 201.023606][T10995] team_slave_1: entered promiscuous mode [ 201.030088][T10992] netlink: 'syz.4.1515': attribute type 1 has an invalid length. [ 201.075420][T10992] netlink: 'syz.4.1515': attribute type 1 has an invalid length. [ 201.650313][T10987] workqueue: Failed to create a rescuer kthread for wq "bond36": -EINTR [ 201.659125][T10992] workqueue: Failed to create a rescuer kthread for wq "bond36": -EINTR [ 201.675366][T11061] __nla_validate_parse: 16 callbacks suppressed [ 201.675380][T11061] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1527'. [ 201.714152][T11061] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1527'. [ 201.790887][T11063] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1528'. [ 201.896778][T11070] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1531'. [ 201.918207][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1531'. [ 201.983612][ T3465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.120546][ T3465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.207926][ T3465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.283090][ T3465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.358151][ T3465] bridge_slave_1: left allmulticast mode [ 202.364003][ T3465] bridge_slave_1: left promiscuous mode [ 202.369692][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.380093][ T3465] bridge_slave_0: left allmulticast mode [ 202.385958][ T3465] bridge_slave_0: left promiscuous mode [ 202.391763][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.666381][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.677298][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.689948][ T3465] bond0 (unregistering): Released all slaves [ 203.091057][ T3465] hsr_slave_0: left promiscuous mode [ 203.123258][ T3465] hsr_slave_1: left promiscuous mode [ 203.147277][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.156917][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.182949][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.186358][T11092] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.216787][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.268628][ T3465] veth1_macvtap: left promiscuous mode [ 203.280852][ T3465] veth0_macvtap: left promiscuous mode [ 203.296697][ T3465] veth1_vlan: left promiscuous mode [ 203.306786][ T3465] veth0_vlan: left promiscuous mode [ 203.409198][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.420773][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.430128][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.440069][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.449633][ T5157] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.460301][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.777936][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 203.818832][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 204.159212][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 204.168938][T11085] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 204.170464][T11099] validate_nla: 16 callbacks suppressed [ 204.170481][T11099] netlink: 'syz.3.1540': attribute type 9 has an invalid length. [ 204.224048][T11100] netlink: 'syz.3.1540': attribute type 9 has an invalid length. [ 204.822686][T11146] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1552'. [ 204.830076][T11103] chnl_net:caif_netlink_parms(): no params data found [ 204.965993][T11103] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.985459][T11103] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.993233][T11103] bridge_slave_0: entered allmulticast mode [ 205.000506][T11103] bridge_slave_0: entered promiscuous mode [ 205.014320][T11103] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.023036][T11103] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.030386][T11103] bridge_slave_1: entered allmulticast mode [ 205.059138][T11103] bridge_slave_1: entered promiscuous mode [ 205.185063][T11103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.212219][T11103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.288650][T11103] team0: Port device team_slave_0 added [ 205.306229][T11103] team0: Port device team_slave_1 added [ 205.336017][T11103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.343435][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.370979][T11103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.384666][T11103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.392339][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.420465][T11177] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1559'. [ 205.460715][T11103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.521500][ T5844] Bluetooth: hci4: command tx timeout [ 205.533352][T11103] hsr_slave_0: entered promiscuous mode [ 205.549882][T11103] hsr_slave_1: entered promiscuous mode [ 205.738026][T11192] unknown channel width for channel at 909000KHz? [ 205.838795][T11198] netlink: 'syz.0.1567': attribute type 11 has an invalid length. [ 205.847313][T11198] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.1567'. [ 205.989944][T11103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.012434][T11103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.025859][T11103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.036604][T11103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.080825][T11210] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 206.098667][T11210] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 206.136314][T11210] bond3: entered promiscuous mode [ 206.142966][T11210] bond3: entered allmulticast mode [ 206.148642][T11210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.317727][T11103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.326630][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1573'. [ 206.367666][T11103] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.409852][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.417045][ T8623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.479065][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.486242][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.629435][T11241] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.656268][T11241] Bluetooth: MGMT ver 1.23 [ 206.671895][T11241] netlink: 'syz.1.1580': attribute type 2 has an invalid length. [ 206.679672][T11241] netlink: 'syz.1.1580': attribute type 2 has an invalid length. [ 206.823185][T11255] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 206.934612][T11103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.997677][T11103] veth0_vlan: entered promiscuous mode [ 207.016808][T11103] veth1_vlan: entered promiscuous mode [ 207.097223][T11103] veth0_macvtap: entered promiscuous mode [ 207.121648][T11103] veth1_macvtap: entered promiscuous mode [ 207.158437][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.179521][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.200289][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.223048][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.237628][T11103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.262653][T11277] __nla_validate_parse: 4 callbacks suppressed [ 207.262670][T11277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1588'. [ 207.263827][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.289215][T11277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1588'. [ 207.315098][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.326900][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.350702][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.370710][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.400853][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.412631][T11103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.436292][T11279] netlink: 'syz.3.1589': attribute type 10 has an invalid length. [ 207.489264][T11103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.514132][T11103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.530770][T11103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.539510][T11103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.596079][ T5844] Bluetooth: hci4: command tx timeout [ 207.688483][ T8627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.696738][ T8627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.709078][ T8627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.717036][ T8627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.827147][T11298] netlink: 'syz.1.1593': attribute type 4 has an invalid length. [ 207.943488][T11304] hsr_slave_0: left promiscuous mode [ 207.986922][T11304] hsr_slave_1: left promiscuous mode [ 209.900368][ T8623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.974676][ T8623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.186018][T11343] batadv0: entered allmulticast mode [ 210.449124][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.458052][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.466231][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.483542][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.495706][ T5157] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.506292][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.582079][T11365] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 210.718453][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1613'. [ 210.735060][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1613'. [ 210.749300][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1613'. [ 210.758681][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1613'. [ 210.817437][T11356] chnl_net:caif_netlink_parms(): no params data found [ 210.961460][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.968768][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.976838][T11356] bridge_slave_0: entered allmulticast mode [ 210.983996][T11356] bridge_slave_0: entered promiscuous mode [ 210.995378][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.019968][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.043180][T11356] bridge_slave_1: entered allmulticast mode [ 211.063005][T11356] bridge_slave_1: entered promiscuous mode [ 211.108581][ T8623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.175185][T11356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.233790][ T8623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.261698][T11356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.321668][T11356] team0: Port device team_slave_0 added [ 211.347125][T11356] team0: Port device team_slave_1 added [ 211.406529][T11356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.420868][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.486212][T11356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.503588][T11356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.539682][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.586622][T11356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.610881][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 211.703477][T11356] hsr_slave_0: entered promiscuous mode [ 211.712657][T11356] hsr_slave_1: entered promiscuous mode [ 211.722308][T11412] openvswitch: netlink: Actions may not be safe on all matching packets [ 211.731403][T11356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.738981][T11356] Cannot create hsr debugfs directory [ 211.788193][ T8623] bridge_slave_1: left allmulticast mode [ 211.800137][ T8623] bridge_slave_1: left promiscuous mode [ 211.807947][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.822746][ T8623] bridge_slave_0: left allmulticast mode [ 211.841113][ T8623] bridge_slave_0: left promiscuous mode [ 211.847026][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.889466][T11425] Dead loop on virtual device ipvlan1, fix it urgently! [ 212.236122][ T8623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.248716][ T8623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.260088][ T8623] bond0 (unregistering): Released all slaves [ 212.283514][T11425] syz.3.1629 (11425) used greatest stack depth: 7128 bytes left [ 212.481324][T11443] sch_fq: defrate 0 ignored. [ 212.490565][T11446] netlink: 'syz.4.1635': attribute type 3 has an invalid length. [ 212.500505][T11446] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1635'. [ 212.561228][ T5844] Bluetooth: hci4: command tx timeout [ 212.611041][T11455] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:19999 [ 212.726823][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1639'. [ 212.753379][T11459] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1639'. [ 212.854628][ T8623] hsr_slave_0: left promiscuous mode [ 212.869050][ T8623] hsr_slave_1: left promiscuous mode [ 212.877452][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.885140][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.910348][T11466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1641'. [ 212.920837][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.928416][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.952503][ T8623] veth1_macvtap: left promiscuous mode [ 212.958121][ T8623] veth0_macvtap: left promiscuous mode [ 212.964083][ T8623] veth1_vlan: left promiscuous mode [ 212.969441][ T8623] veth0_vlan: left promiscuous mode [ 212.993173][T11469] xt_ecn: cannot match TCP bits for non-tcp packets [ 213.503447][ T8623] team0 (unregistering): Port device team_slave_1 removed [ 213.548121][ T8623] team0 (unregistering): Port device team_slave_0 removed [ 213.925991][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 213.935030][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1640'. [ 214.077443][T11488] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.092066][T11484] tun0: tun_chr_ioctl cmd 1074025681 [ 214.201852][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 214.450528][T11356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.481372][T11356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.499029][T11356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.527700][T11356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.569225][T11515] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 214.584824][T11515] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 214.630871][ T5844] Bluetooth: hci4: command tx timeout [ 214.748148][T11525] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 214.758735][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.816599][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.842328][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.849486][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.904053][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.911363][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.952946][T11356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.091674][T11550] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 215.130841][T11550] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1665'. [ 215.300978][T11569] xt_ecn: cannot match TCP bits for non-tcp packets [ 215.307893][T11356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.417939][T11356] veth0_vlan: entered promiscuous mode [ 215.438164][T11356] veth1_vlan: entered promiscuous mode [ 215.464769][T11356] veth0_macvtap: entered promiscuous mode [ 215.474106][T11356] veth1_macvtap: entered promiscuous mode [ 215.494031][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.515350][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.525560][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.536079][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.547239][T11356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.557193][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.567772][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.577917][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.588543][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.598781][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.609306][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.620398][T11356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.643957][T11356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.652972][T11356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.666758][T11356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.700315][T11356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.788842][ T8626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.810471][ T8626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.857086][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.869562][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.936477][T11594] bond0: left promiscuous mode [ 215.943535][T11594] bond_slave_0: left promiscuous mode [ 215.951865][T11594] bond_slave_1: left promiscuous mode [ 215.957869][T11594] batadv_slave_0: left promiscuous mode [ 215.983370][T11596] tipc: Enabling of bearer rejected, media not registered [ 216.057719][T11594] lo speed is unknown, defaulting to 1000 [ 216.066196][T11594] lo speed is unknown, defaulting to 1000 [ 216.073614][T11594] lo speed is unknown, defaulting to 1000 [ 216.080212][T11598] bridge0: port 3(veth0_to_bridge) entered blocking state [ 216.087731][T11598] bridge0: port 3(veth0_to_bridge) entered disabled state [ 216.106821][T11598] veth0_to_bridge: entered allmulticast mode [ 216.126891][T11598] veth0_to_bridge: entered promiscuous mode [ 216.141290][T11598] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.171365][T11598] bridge0: port 3(veth0_to_bridge) entered blocking state [ 216.178856][T11598] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 216.188799][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 216.207116][T11594] infiniband syz1: set active [ 216.213850][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 216.220820][T11594] infiniband syz1: added lo [ 216.242885][ T2148] lo speed is unknown, defaulting to 1000 [ 216.272585][T11594] RDS/IB: syz1: added [ 216.281153][T11594] smc: adding ib device syz1 with port count 1 [ 216.287349][T11594] smc: ib device syz1 port 1 has pnetid [ 216.310984][ T8] lo speed is unknown, defaulting to 1000 [ 216.317992][T11594] lo speed is unknown, defaulting to 1000 [ 216.548257][T11594] lo speed is unknown, defaulting to 1000 [ 216.691518][T11594] lo speed is unknown, defaulting to 1000 [ 216.697417][T11622] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 216.721147][ T5157] Bluetooth: hci4: command tx timeout [ 216.725374][T11618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.818863][T11594] lo speed is unknown, defaulting to 1000 [ 216.992705][T11594] lo speed is unknown, defaulting to 1000 [ 217.324477][T11646] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 217.434379][T11654] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 217.447454][T11654] netlink: 'syz.4.1695': attribute type 2 has an invalid length. [ 217.527154][T11653] __nla_validate_parse: 8 callbacks suppressed [ 217.527173][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'. [ 217.546585][T11659] netlink: 'syz.0.1698': attribute type 9 has an invalid length. [ 217.554628][T11659] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1698'. [ 217.584886][T11662] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 217.702830][T11665] netlink: 'syz.1.1701': attribute type 1 has an invalid length. [ 217.710610][T11665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1701'. [ 217.730060][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 217.781702][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 217.973838][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 218.002277][T11695] tipc: Started in network mode [ 218.007317][T11695] tipc: Node identity 36eb920a961f, cluster identity 4711 [ 218.015382][T11695] tipc: Enabled bearer , priority 10 [ 218.211287][T11711] vlan2: entered allmulticast mode [ 218.216455][T11711] bridge_slave_0: entered allmulticast mode [ 218.257359][T11711] bridge_slave_0: left allmulticast mode [ 218.301554][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1715'. [ 218.378539][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1716'. [ 218.749485][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1722'. [ 219.143840][ T5890] tipc: Node number set to 2700382730 [ 219.302692][T11767] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.1729'. [ 219.335736][T11769] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 219.442126][T11773] vlan6: entered allmulticast mode [ 219.590879][ T5157] Bluetooth: hci0: command tx timeout [ 220.465872][T11857] netlink: 'syz.1.1761': attribute type 10 has an invalid length. [ 220.484173][T11857] hsr0: entered promiscuous mode [ 220.493761][T11857] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 220.509489][T11857] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 220.525367][T11857] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 220.538423][T11857] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 221.387227][T11909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.467014][T11909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.527632][T11909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.609834][T11909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.689892][T11909] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.706478][T11909] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.718977][T11909] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.743237][T11909] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.331457][T11950] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 222.369645][T11950] tipc: Started in network mode [ 222.380033][T11950] tipc: Node identity fffffff4, cluster identity 3 [ 222.398576][T11950] tipc: Node number set to 4294967284 [ 222.409384][T11950] tipc: Cannot configure node identity twice [ 222.618637][T11969] netlink: 'syz.3.1791': attribute type 12 has an invalid length. [ 222.690428][T11973] __nla_validate_parse: 13 callbacks suppressed [ 222.690448][T11973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1793'. [ 223.236468][T12003] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 223.402858][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'. [ 223.495621][T12016] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 223.535195][T12016] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.1808'. [ 223.555689][T12016] netlink: 'syz.4.1808': attribute type 2 has an invalid length. [ 223.565704][T12016] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 223.831844][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1817'. [ 223.913672][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1818'. [ 224.202766][T12076] SET target dimension over the limit! [ 224.695488][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1837'. [ 224.755809][T12116] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1838'. [ 224.769370][T12117] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1838'. [ 224.886497][T12116] tc_dump_action: action bad kind [ 225.128764][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1840'. [ 225.261625][T12133] netlink: 'syz.1.1843': attribute type 2 has an invalid length. [ 225.371370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.384072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.396889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.409172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.421485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.433758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.446057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.458273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.470588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.482833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.754970][T12144] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 225.845983][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'. [ 225.886074][T12146] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-xor(2) [ 226.167973][T12156] netlink: 'syz.0.1853': attribute type 2 has an invalid length. [ 226.567582][T12168] netlink: 'syz.4.1856': attribute type 10 has an invalid length. [ 227.326391][T12187] pim6reg1: entered promiscuous mode [ 227.337677][T12187] pim6reg1: entered allmulticast mode [ 229.653984][T12225] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 230.380833][ C1] net_ratelimit: 34276 callbacks suppressed [ 230.380855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.398962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.411129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.423427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.435542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.447779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.459971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.472319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.484563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.496963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.390863][ C1] net_ratelimit: 46918 callbacks suppressed [ 235.390886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.408990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.421068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.433324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.445406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.457542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.469585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.481831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.494095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.506372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.718191][T12252] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 236.245427][T12270] netlink: 'syz.4.1886': attribute type 49 has an invalid length. [ 236.296439][T12270] __nla_validate_parse: 3 callbacks suppressed [ 236.296459][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1886'. [ 236.359229][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1886'. [ 236.609586][T12285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1889'. [ 236.638905][T12285] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1889'. [ 239.519521][T12295] bridge0: port 3(dummy0) entered disabled state [ 239.526074][T12295] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.533523][T12295] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.706151][T12302] geneve3: entered promiscuous mode [ 239.744521][T12302] geneve3: entered allmulticast mode [ 240.400767][ C1] net_ratelimit: 36882 callbacks suppressed [ 240.400788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.419073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.431334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.443676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.456023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.468378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.480704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.493048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.505342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.517685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.513967][T12364] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 241.546400][T12364] netlink: 7300 bytes leftover after parsing attributes in process `syz.4.1913'. [ 241.568135][T12366] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 241.578947][T12366] netlink: 7300 bytes leftover after parsing attributes in process `syz.4.1913'. [ 241.752544][T12376] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 241.778303][T12376] nbd: couldn't find a device at index 2097172 [ 242.483275][T12397] netlink: 'syz.4.1921': attribute type 5 has an invalid length. [ 242.542167][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.590108][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.943136][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1925'. [ 243.862849][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 245.410759][ C1] net_ratelimit: 34401 callbacks suppressed [ 245.410786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.428849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.441029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.453234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.465434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.477611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.489907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.502110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.514385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.526501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.306143][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 249.371801][T12453] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.614552][T12459] netlink: 'syz.3.1939': attribute type 2 has an invalid length. [ 249.949508][T12468] infiniband syz1: set active [ 250.029149][ T8] lo speed is unknown, defaulting to 1000 [ 250.231784][T12485] netlink: 21280 bytes leftover after parsing attributes in process `syz.3.1947'. [ 250.420831][ C1] net_ratelimit: 40968 callbacks suppressed [ 250.420852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.439098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.451261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.463610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.475753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.488055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.500279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.512666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.524955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.537330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.642826][T12507] tipc: Started in network mode [ 254.666856][T12507] tipc: Node identity aaaaaaaaaa3d, cluster identity 4711 [ 254.704657][T12507] tipc: Enabled bearer , priority 10 [ 254.714082][T12510] netlink: 'syz.4.1955': attribute type 7 has an invalid length. [ 254.737962][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'. [ 254.769856][T12510] Êü: entered promiscuous mode [ 254.939338][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 255.430835][ C1] net_ratelimit: 37576 callbacks suppressed [ 255.430856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.448964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.461162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.473487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.485690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.497870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.509986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.522171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.534325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.546542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.728316][T12516] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 255.823137][ T8] tipc: Node number set to 9939626 [ 256.953048][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 258.096179][T12519] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 258.120919][T12522] syzkaller1: entered allmulticast mode [ 258.181221][T12528] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.301716][T12538] xt_l2tp: invalid flags combination: 4 [ 258.309561][ T8623] bridge0: port 3(veth0_to_bridge) entered disabled state [ 258.321315][T12531] netlink: 209192 bytes leftover after parsing attributes in process `syz.0.1960'. [ 258.375257][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 258.569022][ T3465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.593288][T12547] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1965'. [ 258.824674][ T3465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.907742][ T3465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.988451][ T3465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.063261][ T3465] bridge_slave_1: left allmulticast mode [ 259.068930][ T3465] bridge_slave_1: left promiscuous mode [ 259.074735][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.084938][ T3465] bridge_slave_0: left allmulticast mode [ 259.090580][ T3465] bridge_slave_0: left promiscuous mode [ 259.096531][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.412012][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.426208][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.436667][ T3465] bond0 (unregistering): Released all slaves [ 259.682563][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1970'. [ 260.171885][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.191032][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.199432][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.210307][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.219219][ T5157] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 260.226618][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.264752][ T3465] hsr_slave_0: left promiscuous mode [ 260.277824][ T3465] hsr_slave_1: left promiscuous mode [ 260.285140][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.293208][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.311815][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.319303][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.348168][ T3465] veth1_macvtap: left promiscuous mode [ 260.358010][ T3465] veth0_macvtap: left promiscuous mode [ 260.366587][ T3465] veth1_vlan: left promiscuous mode [ 260.375183][ T3465] veth0_vlan: left promiscuous mode [ 260.615729][T12606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1982'. [ 261.027330][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 261.083026][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 261.787334][T12581] lo speed is unknown, defaulting to 1000 [ 261.855911][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'. [ 262.065042][T12581] chnl_net:caif_netlink_parms(): no params data found [ 262.164696][T12645] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1989'. [ 262.175538][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.192176][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.199740][T12581] bridge_slave_0: entered allmulticast mode [ 262.207278][T12581] bridge_slave_0: entered promiscuous mode [ 262.218528][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.226732][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.234370][T12581] bridge_slave_1: entered allmulticast mode [ 262.242459][T12581] bridge_slave_1: entered promiscuous mode [ 262.276236][T12581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.298531][T12581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.311345][ T5157] Bluetooth: hci4: command tx timeout [ 262.354301][T12581] team0: Port device team_slave_0 added [ 262.372650][T12581] team0: Port device team_slave_1 added [ 262.403727][T12581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.417582][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.444715][T12581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.468882][T12581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.476416][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.505924][T12581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.555825][T12581] hsr_slave_0: entered promiscuous mode [ 262.562544][T12581] hsr_slave_1: entered promiscuous mode [ 262.662546][T12658] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 262.701356][T12658] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1994'. [ 262.854532][T12667] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1997'. [ 262.882659][T12667] net_ratelimit: 24089 callbacks suppressed [ 262.882678][T12667] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 263.009786][T12675] netlink: 'syz.0.2002': attribute type 32 has an invalid length. [ 263.021708][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 263.031165][T12675] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 263.342519][T12581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.389477][T12581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.411480][T12581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.436021][T12581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.488881][T12718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.607820][T12723] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 263.699630][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.715770][T12711] lo speed is unknown, defaulting to 1000 [ 263.730554][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.764507][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.771681][ T8626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.796503][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.803687][ T8623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.125809][T12739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2018'. [ 264.135817][T12739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2018'. [ 264.190293][T12581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.266722][T12581] veth0_vlan: entered promiscuous mode [ 264.375618][T12739] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2018'. [ 264.391510][ T5157] Bluetooth: hci4: command tx timeout [ 264.507682][T12581] veth1_vlan: entered promiscuous mode [ 264.597738][T12581] veth0_macvtap: entered promiscuous mode [ 264.624810][T12771] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2026'. [ 264.638550][T12581] veth1_macvtap: entered promiscuous mode [ 264.673742][T12771] netlink: 'syz.1.2026': attribute type 1 has an invalid length. [ 264.712641][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.769395][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.800838][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.820824][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.842423][T12581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.872120][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.900826][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.936251][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.952417][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.962508][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.981747][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.993070][T12581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.063584][T12581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.083419][T12581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.095243][T12581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.104515][T12581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.115127][T12789] netlink: 'syz.4.2032': attribute type 2 has an invalid length. [ 265.125552][T12789] netlink: 'syz.4.2032': attribute type 1 has an invalid length. [ 265.187583][T12798] netlink: 'syz.1.2034': attribute type 9 has an invalid length. [ 265.222412][T12797] veth0: entered promiscuous mode [ 265.286550][T12797] netlink: 'syz.1.2034': attribute type 9 has an invalid length. [ 265.423398][T12796] veth0: left promiscuous mode [ 265.477550][ T8625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.487923][ T8626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.524653][ T8625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.533493][ T8626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.601877][T12823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.636861][T12825] xt_CONNSECMARK: invalid mode: 0 [ 265.678591][T12823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.942302][T12852] Bluetooth: MGMT ver 1.23 [ 265.947105][T12852] netlink: 'syz.0.2051': attribute type 2 has an invalid length. [ 265.960744][T12852] __nla_validate_parse: 3 callbacks suppressed [ 265.960760][T12852] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2051'. [ 265.983641][T12852] netlink: 'syz.0.2051': attribute type 2 has an invalid length. [ 265.993160][T12852] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2051'. [ 266.091317][T12864] tipc: Enabled bearer , priority 10 [ 266.099468][T12864] netlink: 'syz.3.2053': attribute type 6 has an invalid length. [ 266.128897][T12867] pim6reg1: entered promiscuous mode [ 266.135174][T12867] pim6reg1: entered allmulticast mode [ 266.143838][T12867] syz.0.2056[12867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.143903][T12867] syz.0.2056[12867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.155975][T12867] syz.0.2056[12867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.168922][T12867] syz.0.2056[12867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.180606][T12867] syz.0.2056[12867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.192384][T12867] syz.0.2056[12867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.467849][T12879] nbd: couldn't find device at index 255 [ 266.599361][ T3465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.308601][ T3465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.486676][ T3465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.556351][ T3465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.638226][ T3465] bridge_slave_1: left allmulticast mode [ 267.644125][ T3465] bridge_slave_1: left promiscuous mode [ 267.649796][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.664028][ T3465] bridge_slave_0: left allmulticast mode [ 267.669688][ T3465] bridge_slave_0: left promiscuous mode [ 267.675797][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.186474][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.196221][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.204390][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.213696][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.222168][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.229584][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.257850][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.272024][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.289419][ T3465] bond0 (unregistering): Released all slaves [ 268.301822][T12900] tunl0: entered promiscuous mode [ 268.307579][T12900] netlink: 'syz.4.2066': attribute type 3 has an invalid length. [ 268.321365][T12900] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2066'. [ 268.348469][T12913] dvmrp1: left allmulticast mode [ 268.549812][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 268.690293][T12932] x_tables: duplicate underflow at hook 2 [ 268.869550][T12909] lo speed is unknown, defaulting to 1000 [ 268.879441][T12947] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20001 [ 269.141428][T12964] netlink: 'syz.0.2084': attribute type 9 has an invalid length. [ 269.204491][T12964] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.2084'. [ 269.247433][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 269.570828][ T3465] hsr_slave_0: left promiscuous mode [ 269.577086][ T3465] hsr_slave_1: left promiscuous mode [ 269.600171][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.613291][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.625221][T12993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2094'. [ 269.631041][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.649542][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 269.650804][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.684003][ T3465] veth1_macvtap: left promiscuous mode [ 269.689742][ T3465] veth0_macvtap: left promiscuous mode [ 269.699829][ T3465] veth1_vlan: left promiscuous mode [ 269.709916][ T3465] veth0_vlan: left promiscuous mode [ 270.314249][ T5157] Bluetooth: hci4: command tx timeout [ 270.404541][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 270.504170][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 270.760888][T13027] openvswitch: netlink: Message has 377 unknown bytes. [ 270.968302][T13004] netlink: 'syz.4.2095': attribute type 21 has an invalid length. [ 270.976578][T13004] netlink: 'syz.4.2095': attribute type 1 has an invalid length. [ 271.042001][T13030] C: renamed from lo (while UP) [ 271.124933][T13030] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.163553][T13033] netlink: 'syz.0.2098': attribute type 4 has an invalid length. [ 271.219479][T12909] chnl_net:caif_netlink_parms(): no params data found [ 271.252193][T13043] netlink: 'syz.0.2098': attribute type 4 has an invalid length. [ 271.431471][T12909] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.439395][T12909] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.449349][T12909] bridge_slave_0: entered allmulticast mode [ 271.468007][T12909] bridge_slave_0: entered promiscuous mode [ 271.490357][T12909] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.499090][T12909] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.506692][T12909] bridge_slave_1: entered allmulticast mode [ 271.515220][T12909] bridge_slave_1: entered promiscuous mode [ 271.615408][T12909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.639301][T12909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.693689][T12909] team0: Port device team_slave_0 added [ 271.704145][T12909] team0: Port device team_slave_1 added [ 271.763906][T12909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.768422][T13075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2108'. [ 271.777318][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.792502][T13074] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2109'. [ 271.806869][T12909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.841591][T12909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.858783][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.891537][T13078] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2110'. [ 271.906700][T12909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.007515][T12909] hsr_slave_0: entered promiscuous mode [ 272.042107][T12909] hsr_slave_1: entered promiscuous mode [ 272.113361][T13085] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 272.226423][T13097] netlink: 'syz.3.2117': attribute type 32 has an invalid length. [ 272.272770][T13101] siw: device registration error -23 [ 272.287788][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 272.392144][ T5157] Bluetooth: hci4: command tx timeout [ 272.408519][T13106] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2121'. [ 272.422222][T13106] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2121'. [ 272.461073][T13108] No such timeout policy "syz0" [ 272.641904][T13118] bond3: entered promiscuous mode [ 272.670532][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 272.704324][T13118] bond4: entered promiscuous mode [ 272.747927][T13118] bond5: entered promiscuous mode [ 272.754014][T13128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2127'. [ 272.766288][T13128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2127'. [ 272.775549][T13128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.782814][T13128] IPv6: NLM_F_CREATE should be set when creating new route [ 272.791539][T13122] pim6reg1: entered promiscuous mode [ 272.796853][T13122] pim6reg1: entered allmulticast mode [ 272.884173][T13118] bond6: entered promiscuous mode [ 272.899068][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 272.908544][T13137] veth0_to_bridge: left allmulticast mode [ 272.914373][T13137] veth0_to_bridge: left promiscuous mode [ 272.920195][T13137] bridge0: port 3(veth0_to_bridge) entered disabled state [ 272.929725][T13137] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.973306][T13137] bridge_slave_0: left allmulticast mode [ 272.990056][T13137] bridge_slave_0: left promiscuous mode [ 272.998998][T13137] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.077803][T13118] bond7: entered promiscuous mode [ 273.100307][T13118] bond8: entered promiscuous mode [ 273.403661][T13118] bond9: entered promiscuous mode [ 273.430132][T13118] bond10: entered promiscuous mode [ 273.495277][T12909] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.521760][T12909] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 273.537527][T13165] openvswitch: netlink: Key type 4112 is out of range max 32 [ 273.538228][T12909] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.569658][T12909] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.723526][T12909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.756983][T12909] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.783858][T13177] x_tables: duplicate underflow at hook 2 [ 273.787758][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.796751][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.813133][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.820266][ T8583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.308149][T13206] team0: Port device team_slave_1 removed [ 274.394153][T12909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.470982][ T5157] Bluetooth: hci4: command tx timeout [ 274.478120][T12909] veth0_vlan: entered promiscuous mode [ 274.516698][T12909] veth1_vlan: entered promiscuous mode [ 274.542601][T13217] netlink: 'syz.0.2153': attribute type 30 has an invalid length. [ 274.597048][T13207] C speed is unknown, defaulting to 1000 [ 274.623185][T12909] veth0_macvtap: entered promiscuous mode [ 274.636465][T12909] veth1_macvtap: entered promiscuous mode [ 274.677074][T12909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.717947][T12909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.728697][T12909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.749910][T12909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.774732][T12909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.803196][T12909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.832548][T12909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.848112][T12909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.858798][T12909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.870046][T12909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.881035][T12909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.896310][T12909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.948994][T12909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.980917][T12909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.999614][T12909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.008967][T12909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.242463][ T8623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.250302][ T8623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.335325][ T8620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.382107][ T8620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.751661][T13270] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 276.072798][ T8626] wlan1: Trigger new scan to find an IBSS to join [ 276.488110][T13301] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 276.666354][T13330] netlink: 'syz.1.2179': attribute type 4 has an invalid length. [ 276.940224][T13344] __nla_validate_parse: 12 callbacks suppressed [ 276.940244][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 276.964972][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'. [ 276.987778][T13344] macsec0: entered promiscuous mode [ 277.010958][T13321] C speed is unknown, defaulting to 1000 [ 277.093590][ T8623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.710157][ T8623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.797215][ T8623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.855788][ T8623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.919175][ T8623] bridge_slave_1: left allmulticast mode [ 277.927806][ T8623] bridge_slave_1: left promiscuous mode [ 277.936788][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.945349][ T8623] bridge_slave_0: left allmulticast mode [ 277.951141][ T8623] bridge_slave_0: left promiscuous mode [ 277.958039][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.485438][ T8623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.525647][ T8623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.541874][ T8623] bond0 (unregistering): Released all slaves [ 278.735734][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.744958][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.753739][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.762941][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.770812][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.793629][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.845210][T13379] netlink: 'syz.1.2193': attribute type 12 has an invalid length. [ 279.021381][T13375] C speed is unknown, defaulting to 1000 [ 279.031940][ T8620] wlan1: Trigger new scan to find an IBSS to join [ 279.297413][T13400] Dead loop on virtual device ipvlan1, fix it urgently! [ 279.466902][T13400] syz.3.2197 (13400) used greatest stack depth: 6704 bytes left [ 279.482197][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2198'. [ 279.518088][ T8623] hsr_slave_0: left promiscuous mode [ 279.558963][ T8623] hsr_slave_1: left promiscuous mode [ 279.630363][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.640300][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.674984][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.682693][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.722058][ T8623] veth1_macvtap: left promiscuous mode [ 279.729349][ T8623] veth0_macvtap: left promiscuous mode [ 279.740015][ T8623] veth1_vlan: left promiscuous mode [ 279.746077][ T8623] veth0_vlan: left promiscuous mode [ 280.177578][ T8623] team0 (unregistering): Port device team_slave_1 removed [ 280.220159][ T8623] team0 (unregistering): Port device team_slave_0 removed [ 280.631194][T13423] netlink: 'syz.3.2201': attribute type 12 has an invalid length. [ 280.666925][T13423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2201'. [ 280.696401][T13433] netlink: 'syz.4.2205': attribute type 16 has an invalid length. [ 280.706400][T13434] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2205'. [ 280.729494][T13375] chnl_net:caif_netlink_parms(): no params data found [ 280.871796][ T5844] Bluetooth: hci4: command tx timeout [ 280.988111][T13375] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.000916][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.018434][T13375] bridge_slave_0: entered allmulticast mode [ 281.029496][T13375] bridge_slave_0: entered promiscuous mode [ 281.070130][T13375] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.087709][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.101972][T13375] bridge_slave_1: entered allmulticast mode [ 281.109290][T13375] bridge_slave_1: entered promiscuous mode [ 281.123316][T13460] lo speed is unknown, defaulting to 1000 [ 281.167853][T13469] Dead loop on virtual device ipvlan1, fix it urgently! [ 281.196089][T13466] bond36: entered allmulticast mode [ 281.205129][T13375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.221748][T13465] netlink: 'syz.3.2215': attribute type 11 has an invalid length. [ 281.229627][T13460] lo speed is unknown, defaulting to 1000 [ 281.255350][T13375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.268769][T13470] netlink: 4064 bytes leftover after parsing attributes in process `syz.4.2214'. [ 281.290010][T13460] lo speed is unknown, defaulting to 1000 [ 281.325003][T13460] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 281.352908][T13460] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 281.389609][T13375] team0: Port device team_slave_0 added [ 281.451022][T13460] lo speed is unknown, defaulting to 1000 [ 281.461335][T13375] team0: Port device team_slave_1 added [ 281.467188][T13460] lo speed is unknown, defaulting to 1000 [ 281.490493][T13460] lo speed is unknown, defaulting to 1000 [ 281.503666][T13460] lo speed is unknown, defaulting to 1000 [ 281.504826][T13375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.519856][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.547252][T13375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.560066][T13460] lo speed is unknown, defaulting to 1000 [ 281.561835][T13375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.584447][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.618505][T13375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.665265][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2220'. [ 281.780054][T13375] hsr_slave_0: entered promiscuous mode [ 281.798410][T13375] hsr_slave_1: entered promiscuous mode [ 282.033816][T13506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2224'. [ 282.052435][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 282.078979][ T8626] wlan1: Trigger new scan to find an IBSS to join [ 282.133565][T13514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'. [ 282.149059][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2226'. [ 282.198176][T13514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'. [ 282.221750][T13514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'. [ 282.247001][T13513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'. [ 282.259518][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2228'. [ 282.266246][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2226'. [ 282.277767][T13513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'. [ 282.389853][T13524] netlink: 'syz.0.2229': attribute type 29 has an invalid length. [ 282.664761][T13537] netlink: 'syz.4.2233': attribute type 3 has an invalid length. [ 282.688399][T13538] netlink: 'syz.1.2234': attribute type 24 has an invalid length. [ 282.746921][T13375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.793578][T13375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.816148][T13546] netlink: 'syz.4.2237': attribute type 1 has an invalid length. [ 282.834567][T13544] pim6reg1: entered promiscuous mode [ 282.839994][T13544] pim6reg1: entered allmulticast mode [ 282.846991][T13375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.916453][T13375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.952276][ T5844] Bluetooth: hci4: command tx timeout [ 283.029349][ T8583] wlan1: Creating new IBSS network, BSSID a2:56:d1:4c:8b:f5 [ 283.077100][T13375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.143623][T13375] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.162457][T13566] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 283.182463][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.189636][ T8626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.212238][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.219413][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.564476][T13591] Cannot find del_set index 65531 as target [ 283.664132][T13597] dvmrp1: entered allmulticast mode [ 283.776709][T13375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.896094][T13375] veth0_vlan: entered promiscuous mode [ 283.926368][T13375] veth1_vlan: entered promiscuous mode [ 284.005389][T13375] veth0_macvtap: entered promiscuous mode [ 284.036038][T13375] veth1_macvtap: entered promiscuous mode [ 284.076807][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.094525][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.104521][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.115036][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.126197][T13375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.136278][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.147064][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.157132][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.167679][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.177571][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.188063][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.199136][T13375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.224687][T13375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.234010][T13375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.250722][T13375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.259445][T13375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.385663][ T8625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.415838][ T8625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.455087][ T8620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.463784][T13632] tipc: Enabling of bearer rejected, failed to enable media [ 284.464332][T13631] ipt_REJECT: TCP_RESET invalid for non-tcp [ 284.479096][ T8620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.202373][T13678] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 285.392329][T13690] tap0: tun_chr_ioctl cmd 1074025678 [ 285.397671][T13690] tap0: group set to 0 [ 285.408333][T13690] tap0: tun_chr_ioctl cmd 35108 [ 285.471993][T13695] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 285.502796][T13695] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.679769][T13712] xt_hashlimit: max too large, truncated to 1048576 [ 285.778431][ T8625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.538784][ T8625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.816777][ T8625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.864731][ T8625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.946223][ T8625] bridge_slave_1: left allmulticast mode [ 286.952260][ T8625] bridge_slave_1: left promiscuous mode [ 286.957932][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.967609][ T8625] bridge_slave_0: left allmulticast mode [ 286.973778][ T8625] bridge_slave_0: left promiscuous mode [ 286.979442][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.247621][T13729] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 287.382691][T13737] netlink: 'syz.0.2293': attribute type 3 has an invalid length. [ 287.406153][T13737] __nla_validate_parse: 13 callbacks suppressed [ 287.406174][T13737] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2293'. [ 287.427357][T13739] netlink: 'syz.3.2292': attribute type 3 has an invalid length. [ 287.429426][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.445173][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.453220][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.461731][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.469343][ T5157] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.476934][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.584420][ T8625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.598751][ T8625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.609500][ T8625] bond0 (unregistering): Released all slaves [ 287.622615][T13728] netlink: 'syz.1.2289': attribute type 4 has an invalid length. [ 287.925839][T13738] C speed is unknown, defaulting to 1000 [ 287.938739][T13761] netlink: 'syz.0.2299': attribute type 2 has an invalid length. [ 287.961042][T13761] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2299'. [ 288.145944][T13774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2301'. [ 288.256487][T13738] lo speed is unknown, defaulting to 1000 [ 288.256653][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 288.331070][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2302'. [ 288.347998][T13779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2302'. [ 288.429261][T13789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2306'. [ 288.763264][T13798] tipc: Resetting bearer [ 288.785285][T13798] tipc: Resetting bearer [ 288.952096][ T8625] hsr_slave_0: left promiscuous mode [ 288.966568][ T8625] hsr_slave_1: left promiscuous mode [ 288.996621][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.999078][T13825] Dead loop on virtual device ipvlan1, fix it urgently! [ 289.005860][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.028859][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.040133][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.080123][ T8625] veth1_macvtap: left promiscuous mode [ 289.089447][ T8625] veth0_macvtap: left promiscuous mode [ 289.099075][ T8625] veth1_vlan: left promiscuous mode [ 289.107138][ T8625] veth0_vlan: left promiscuous mode [ 289.551462][T13846] netlink: 'syz.4.2320': attribute type 3 has an invalid length. [ 289.569556][T13846] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 289.589784][T13846] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2320'. [ 289.607385][ T5157] Bluetooth: hci4: command tx timeout [ 289.855411][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 289.963275][ T8625] team0 (unregistering): Port device team_slave_1 removed [ 290.004842][ T8625] team0 (unregistering): Port device team_slave_0 removed [ 290.380377][T13738] chnl_net:caif_netlink_parms(): no params data found [ 290.409583][T13861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2322'. [ 290.510013][T13867] openvswitch: netlink: Tunnel attr 16 has unexpected len 3060 expected 0 [ 290.734596][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.758479][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.778949][T13738] bridge_slave_0: entered allmulticast mode [ 290.787216][T13738] bridge_slave_0: entered promiscuous mode [ 290.795078][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.803479][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.810899][T13738] bridge_slave_1: entered allmulticast mode [ 290.817845][T13738] bridge_slave_1: entered promiscuous mode [ 290.848880][T13883] dummy0: left allmulticast mode [ 290.854251][T13883] dummy0: left promiscuous mode [ 290.859493][T13883] bridge0: port 3(dummy0) entered disabled state [ 290.879177][T13883] bridge_slave_1: left allmulticast mode [ 290.885730][T13883] bridge_slave_1: left promiscuous mode [ 290.893939][T13883] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.913203][T13883] bridge_slave_0: left allmulticast mode [ 290.937225][T13883] bridge_slave_0: left promiscuous mode [ 290.958050][T13883] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.089193][T13738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.112902][T13738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.162573][T13738] team0: Port device team_slave_0 added [ 291.184023][T13738] team0: Port device team_slave_1 added [ 291.236183][T13738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.243888][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.270866][T13738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.294770][T13738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.302050][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.328801][T13738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.419962][T13738] hsr_slave_0: entered promiscuous mode [ 291.428515][T13912] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 291.439496][T13738] hsr_slave_1: entered promiscuous mode [ 291.554278][T13917] xt_recent: Unsupported userspace flags (00000042) [ 291.679361][ T5157] Bluetooth: hci4: command tx timeout [ 291.743375][T13925] netlink: 'syz.4.2346': attribute type 10 has an invalid length. [ 292.243471][T13738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.276845][T13738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.295848][T13738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.311405][T13738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.449205][T13971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.459444][T13975] __nla_validate_parse: 13 callbacks suppressed [ 292.459463][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2363'. [ 292.469425][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.521856][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.533829][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.540999][ T8625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.571437][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.578607][ T8625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.599526][T13979] bond0: option ad_select: unable to set because the bond device is up [ 292.623072][T13979] xt_CONNSECMARK: invalid mode: 0 [ 292.754113][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 292.867861][T13738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.945955][T13738] veth0_vlan: entered promiscuous mode [ 292.963971][T13738] veth1_vlan: entered promiscuous mode [ 293.010798][T13738] veth0_macvtap: entered promiscuous mode [ 293.033079][T13738] veth1_macvtap: entered promiscuous mode [ 293.049410][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.060304][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.070435][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.081185][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.093070][T13738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.102837][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.113619][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.123695][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.134334][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.144305][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.154796][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.166362][T13738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.199282][T13738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.209760][T13738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.219110][T13738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.247279][T13738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.469713][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.477949][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.525424][T14029] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 293.538773][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.544870][T14029] netlink: 9364 bytes leftover after parsing attributes in process `syz.3.2378'. [ 293.552028][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.561084][T14029] netlink: 'syz.3.2378': attribute type 2 has an invalid length. [ 293.579412][T14029] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 293.608204][T14037] netlink: 'syz.0.2380': attribute type 1 has an invalid length. [ 293.654832][T14037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.728280][T14037] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2380'. [ 293.747454][T14049] netlink: 'syz.1.2382': attribute type 1 has an invalid length. [ 293.758459][ T5157] Bluetooth: hci4: command tx timeout [ 293.801793][T13913] ================================================================== [ 293.808838][T14050] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2381'. [ 293.809873][T13913] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6c0/0xd70 [ 293.826343][T13913] Read of size 8 at addr ffff888034d48060 by task khidpd_0007fff9/13913 [ 293.834678][T13913] [ 293.837020][T13913] CPU: 1 UID: 0 PID: 13913 Comm: khidpd_0007fff9 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 293.838336][T14046] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.848203][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.848220][T13913] Call Trace: [ 293.848228][T13913] [ 293.848237][T13913] dump_stack_lvl+0x241/0x360 [ 293.848271][T13913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.848290][T13913] ? __pfx__printk+0x10/0x10 [ 293.848309][T13913] ? _printk+0xd5/0x120 [ 293.848326][T13913] ? __virt_addr_valid+0x183/0x530 [ 293.848345][T13913] ? __virt_addr_valid+0x183/0x530 [ 293.848364][T13913] print_report+0x169/0x550 [ 293.848384][T13913] ? __virt_addr_valid+0x183/0x530 [ 293.848401][T13913] ? __virt_addr_valid+0x183/0x530 [ 293.848417][T13913] ? __virt_addr_valid+0x45f/0x530 [ 293.848433][T13913] ? __phys_addr+0xba/0x170 [ 293.848450][T13913] ? __mutex_lock+0x6c0/0xd70 [ 293.928873][T13913] kasan_report+0x143/0x180 [ 293.933380][T13913] ? __mutex_lock+0x6c0/0xd70 [ 293.938052][T13913] __mutex_lock+0x6c0/0xd70 [ 293.942549][T13913] ? __mutex_lock+0x52a/0xd70 [ 293.947219][T13913] ? l2cap_unregister_user+0x6a/0x1c0 [ 293.952582][T13913] ? __pfx___mutex_lock+0x10/0x10 [ 293.957597][T13913] ? __pfx___timer_delete_sync+0x10/0x10 [ 293.963224][T13913] l2cap_unregister_user+0x6a/0x1c0 [ 293.968419][T13913] hidp_session_thread+0x450/0x490 [ 293.973520][T13913] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 293.979404][T13913] ? __pfx_hidp_session_thread+0x10/0x10 [ 293.985031][T13913] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 293.990916][T13913] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 293.997148][T13913] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 294.003384][T13913] ? __kthread_parkme+0x169/0x1d0 [ 294.008403][T13913] ? __pfx_hidp_session_thread+0x10/0x10 [ 294.014026][T13913] kthread+0x2f0/0x390 [ 294.018087][T13913] ? __pfx_hidp_session_thread+0x10/0x10 [ 294.023709][T13913] ? __pfx_kthread+0x10/0x10 [ 294.028292][T13913] ret_from_fork+0x4b/0x80 [ 294.032704][T13913] ? __pfx_kthread+0x10/0x10 [ 294.037281][T13913] ret_from_fork_asm+0x1a/0x30 [ 294.042049][T13913] [ 294.045057][T13913] [ 294.047362][T13913] Allocated by task 13738: [ 294.051760][T13913] kasan_save_track+0x3f/0x80 [ 294.056427][T13913] __kasan_kmalloc+0x98/0xb0 [ 294.061007][T13913] __kmalloc_noprof+0x1fc/0x400 [ 294.065854][T13913] hci_alloc_dev_priv+0x27/0x2030 [ 294.070876][T13913] vhci_create_device+0x116/0x6a0 [ 294.075896][T13913] vhci_write+0x3cf/0x490 [ 294.080221][T13913] vfs_write+0xaeb/0xd30 [ 294.084460][T13913] ksys_write+0x183/0x2b0 [ 294.088776][T13913] do_syscall_64+0xf3/0x230 [ 294.093270][T13913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.099152][T13913] [ 294.101464][T13913] Freed by task 13738: [ 294.105531][T13913] kasan_save_track+0x3f/0x80 [ 294.110209][T13913] kasan_save_free_info+0x40/0x50 [ 294.115230][T13913] __kasan_slab_free+0x59/0x70 [ 294.119993][T13913] kfree+0x1a0/0x440 [ 294.123887][T13913] hci_release_dev+0x1525/0x16b0 [ 294.128830][T13913] bt_host_release+0x83/0x90 [ 294.133412][T13913] device_release+0x99/0x1c0 [ 294.137999][T13913] kobject_put+0x22f/0x480 [ 294.142408][T13913] vhci_release+0x88/0xd0 [ 294.146729][T13913] __fput+0x23f/0x880 [ 294.150712][T13913] task_work_run+0x24f/0x310 [ 294.155290][T13913] do_exit+0xa2f/0x28e0 [ 294.159433][T13913] do_group_exit+0x207/0x2c0 [ 294.164098][T13913] __x64_sys_exit_group+0x3f/0x40 [ 294.169112][T13913] x64_sys_call+0x2634/0x2640 [ 294.173785][T13913] do_syscall_64+0xf3/0x230 [ 294.178277][T13913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.184158][T13913] [ 294.186473][T13913] Last potentially related work creation: [ 294.192439][T13913] kasan_save_stack+0x3f/0x60 [ 294.197113][T13913] __kasan_record_aux_stack+0xac/0xc0 [ 294.202481][T13913] insert_work+0x3e/0x330 [ 294.206802][T13913] __queue_work+0xc8b/0xf50 [ 294.211298][T13913] call_timer_fn+0x18e/0x650 [ 294.215884][T13913] __run_timer_base+0x695/0x8e0 [ 294.220727][T13913] run_timer_softirq+0xb7/0x170 [ 294.225568][T13913] handle_softirqs+0x2c5/0x980 [ 294.230323][T13913] __irq_exit_rcu+0xf4/0x1c0 [ 294.234908][T13913] irq_exit_rcu+0x9/0x30 [ 294.239144][T13913] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 294.244771][T13913] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.250741][T13913] [ 294.253053][T13913] Second to last potentially related work creation: [ 294.259618][T13913] kasan_save_stack+0x3f/0x60 [ 294.264281][T13913] __kasan_record_aux_stack+0xac/0xc0 [ 294.269642][T13913] insert_work+0x3e/0x330 [ 294.273966][T13913] __queue_work+0xb66/0xf50 [ 294.278459][T13913] queue_work_on+0x1c2/0x380 [ 294.283126][T13913] process_scheduled_works+0xa63/0x1850 [ 294.288668][T13913] worker_thread+0x870/0xd30 [ 294.293260][T13913] kthread+0x2f0/0x390 [ 294.297347][T13913] ret_from_fork+0x4b/0x80 [ 294.301772][T13913] ret_from_fork_asm+0x1a/0x30 [ 294.306537][T13913] [ 294.308849][T13913] The buggy address belongs to the object at ffff888034d48000 [ 294.308849][T13913] which belongs to the cache kmalloc-8k of size 8192 [ 294.322911][T13913] The buggy address is located 96 bytes inside of [ 294.322911][T13913] freed 8192-byte region [ffff888034d48000, ffff888034d4a000) [ 294.336717][T13913] [ 294.339034][T13913] The buggy address belongs to the physical page: [ 294.345446][T13913] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34d48 [ 294.354202][T13913] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 294.362778][T13913] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 294.370333][T13913] page_type: f5(slab) [ 294.374314][T13913] raw: 00fff00000000040 ffff88801ac42280 ffffea00019b8800 dead000000000004 [ 294.382894][T13913] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 294.391483][T13913] head: 00fff00000000040 ffff88801ac42280 ffffea00019b8800 dead000000000004 [ 294.400154][T13913] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 294.408813][T13913] head: 00fff00000000003 ffffea0000d35201 ffffffffffffffff 0000000000000000 [ 294.417475][T13913] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 294.426134][T13913] page dumped because: kasan: bad access detected [ 294.432546][T13913] page_owner tracks the page as allocated [ 294.438243][T13913] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5508, tgid 5508 (dhcpcd), ts 33115683612, free_ts 33100553185 [ 294.458897][T13913] post_alloc_hook+0x1f3/0x230 [ 294.463661][T13913] get_page_from_freelist+0x303f/0x3190 [ 294.469194][T13913] __alloc_pages_noprof+0x292/0x710 [ 294.474380][T13913] alloc_pages_mpol_noprof+0x3e8/0x680 [ 294.479833][T13913] alloc_slab_page+0x6a/0x120 [ 294.484507][T13913] allocate_slab+0x5a/0x2f0 [ 294.489011][T13913] ___slab_alloc+0xcd1/0x14b0 [ 294.493694][T13913] __slab_alloc+0x58/0xa0 [ 294.498033][T13913] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 294.504444][T13913] kmalloc_reserve+0x111/0x2a0 [ 294.509210][T13913] __alloc_skb+0x1f3/0x440 [ 294.513615][T13913] netlink_dump+0x1f7/0xd80 [ 294.518112][T13913] netlink_recvmsg+0x6bb/0x11d0 [ 294.522962][T13913] sock_recvmsg+0x22f/0x280 [ 294.527457][T13913] ____sys_recvmsg+0x1c6/0x480 [ 294.532209][T13913] __sys_recvmsg+0x2e6/0x3d0 [ 294.536787][T13913] page last free pid 5508 tgid 5508 stack trace: [ 294.543099][T13913] free_unref_page+0xcfb/0xf20 [ 294.547864][T13913] __put_partials+0xeb/0x130 [ 294.552451][T13913] put_cpu_partial+0x17c/0x250 [ 294.557201][T13913] __slab_free+0x2ea/0x3d0 [ 294.561602][T13913] qlist_free_all+0x9a/0x140 [ 294.566181][T13913] kasan_quarantine_reduce+0x14f/0x170 [ 294.571629][T13913] __kasan_slab_alloc+0x23/0x80 [ 294.576469][T13913] kmem_cache_alloc_noprof+0x135/0x2a0 [ 294.581918][T13913] getname_flags+0xb7/0x540 [ 294.586412][T13913] vfs_fstatat+0x12c/0x190 [ 294.590816][T13913] __x64_sys_newfstatat+0x11d/0x1a0 [ 294.596004][T13913] do_syscall_64+0xf3/0x230 [ 294.600498][T13913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.606385][T13913] [ 294.608698][T13913] Memory state around the buggy address: [ 294.614311][T13913] ffff888034d47f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.622358][T13913] ffff888034d47f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.630404][T13913] >ffff888034d48000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.638446][T13913] ^ [ 294.645624][T13913] ffff888034d48080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.653672][T13913] ffff888034d48100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.661716][T13913] ================================================================== [ 294.671192][T13913] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.678399][T13913] CPU: 1 UID: 0 PID: 13913 Comm: khidpd_0007fff9 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 294.689584][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.699633][T13913] Call Trace: [ 294.702910][T13913] [ 294.705833][T13913] dump_stack_lvl+0x241/0x360 [ 294.710507][T13913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.715695][T13913] ? __pfx__printk+0x10/0x10 [ 294.720289][T13913] ? vscnprintf+0x5d/0x90 [ 294.724620][T13913] panic+0x349/0x880 [ 294.728514][T13913] ? check_panic_on_warn+0x21/0xb0 [ 294.733617][T13913] ? __pfx_panic+0x10/0x10 [ 294.738023][T13913] ? mark_lock+0x9a/0x360 [ 294.742339][T13913] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 294.748225][T13913] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 294.754111][T13913] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 294.760423][T13913] ? print_report+0x502/0x550 [ 294.765105][T13913] check_panic_on_warn+0x86/0xb0 [ 294.770034][T13913] ? __mutex_lock+0x6c0/0xd70 [ 294.774702][T13913] end_report+0x77/0x160 [ 294.778934][T13913] kasan_report+0x154/0x180 [ 294.783432][T13913] ? __mutex_lock+0x6c0/0xd70 [ 294.788111][T13913] __mutex_lock+0x6c0/0xd70 [ 294.792609][T13913] ? __mutex_lock+0x52a/0xd70 [ 294.797283][T13913] ? l2cap_unregister_user+0x6a/0x1c0 [ 294.802652][T13913] ? __pfx___mutex_lock+0x10/0x10 [ 294.807668][T13913] ? __pfx___timer_delete_sync+0x10/0x10 [ 294.813483][T13913] l2cap_unregister_user+0x6a/0x1c0 [ 294.818677][T13913] hidp_session_thread+0x450/0x490 [ 294.823787][T13913] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 294.829671][T13913] ? __pfx_hidp_session_thread+0x10/0x10 [ 294.835305][T13913] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 294.841622][T13913] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 294.847856][T13913] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 294.854095][T13913] ? __kthread_parkme+0x169/0x1d0 [ 294.859124][T13913] ? __pfx_hidp_session_thread+0x10/0x10 [ 294.864748][T13913] kthread+0x2f0/0x390 [ 294.868811][T13913] ? __pfx_hidp_session_thread+0x10/0x10 [ 294.874449][T13913] ? __pfx_kthread+0x10/0x10 [ 294.879049][T13913] ret_from_fork+0x4b/0x80 [ 294.883477][T13913] ? __pfx_kthread+0x10/0x10 [ 294.888066][T13913] ret_from_fork_asm+0x1a/0x30 [ 294.892845][T13913] [ 294.896119][T13913] Kernel Offset: disabled [ 294.900432][T13913] Rebooting in 86400 seconds..