last executing test programs: 59.721869823s ago: executing program 3 (id=2733): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b220c65367}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x5, 0x4, 0x4, 0x3}, {0x4, 0x3, 0x3, 0xfff}]}) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, &(0x7f0000000000)) r7 = socket$inet(0x2, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000280)={'NETMAP\x00'}, &(0x7f0000000300)=0x1e) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) socket$inet6(0xa, 0x2, 0x13) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=""/86, 0x119, 0x56, 0x1, 0x40, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYRES64=r6], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x10, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 59.328275966s ago: executing program 3 (id=2737): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) listen(r2, 0x5) sendmmsg$inet_sctp(r2, &(0x7f000000a2c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000840000000f970996b2b9c4ea0e2f1eb8995b78bf4568db519b41ae65e6b1774346c4e455b6e635f2cf1fbb6d21024797b145f3e63c5be1e54f1ad3f4ce53c19d245da241ce"], 0x18, 0x24004850}], 0x1, 0x2000c000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff0000000071102e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r7, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) 45.452743891s ago: executing program 3 (id=2737): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) listen(r2, 0x5) sendmmsg$inet_sctp(r2, &(0x7f000000a2c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000840000000f970996b2b9c4ea0e2f1eb8995b78bf4568db519b41ae65e6b1774346c4e455b6e635f2cf1fbb6d21024797b145f3e63c5be1e54f1ad3f4ce53c19d245da241ce"], 0x18, 0x24004850}], 0x1, 0x2000c000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff0000000071102e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r7, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) 31.513086214s ago: executing program 3 (id=2737): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) listen(r2, 0x5) sendmmsg$inet_sctp(r2, &(0x7f000000a2c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000840000000f970996b2b9c4ea0e2f1eb8995b78bf4568db519b41ae65e6b1774346c4e455b6e635f2cf1fbb6d21024797b145f3e63c5be1e54f1ad3f4ce53c19d245da241ce"], 0x18, 0x24004850}], 0x1, 0x2000c000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff0000000071102e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r7, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) 18.940035058s ago: executing program 3 (id=2737): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) listen(r2, 0x5) sendmmsg$inet_sctp(r2, &(0x7f000000a2c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000840000000f970996b2b9c4ea0e2f1eb8995b78bf4568db519b41ae65e6b1774346c4e455b6e635f2cf1fbb6d21024797b145f3e63c5be1e54f1ad3f4ce53c19d245da241ce"], 0x18, 0x24004850}], 0x1, 0x2000c000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff0000000071102e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r7, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) 4.591019976s ago: executing program 4 (id=3140): unshare(0x2000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474b1101fef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beae608d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b77", 0x72, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xa8, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e897560}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3058f50c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ebd9558}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4ca01ad9}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68b33b76}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0xc, "a66e96804d4a6d"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELRULE={0x78, 0x8, 0xa, 0x339bacbe53096201, 0x0, 0x0, {0x7, 0x0, 0x8400}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x18, 0x7, 0x1, 0x0, "32664bf8d1e98e767cfd8c7a24c03ed0f4abe137"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3a8, 0x6, 0xa, 0x101, 0x0, 0x0, {0xe}, [@NFTA_RULE_EXPRESSIONS={0xe4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0xac, 0x7, 0x1, 0x0, "7de9501c3d657807052bda36cf32e02bf0f11fb2b09766d06b65594df41bd00afaaf919b5eb94af2dcd045b5f16000fe2cc5fd8923f9a16e010170fbee8c32fbe6419a8be5cef5f05fb3921c814e1eb4f05106286997570dc9a362376d0bf973752380095e4c999f47bb9e3a292546b109bf4dbc8f298135a9e6be684086466fd48239f3a75d428041a95d3f6115a598e1e6d86584c17dc4d49f5fff5da105dd2cfeacb2fb741214"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xfc, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xc}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x643b}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x54, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x32}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0xed, 0x7, 0x1, 0x0, "f7306d6103752a68db668b0c5f22d8bd6797b6b286f0b3ed48dad4805cf9294892a14125aaaaa4d217e4d35c22afd7238fa787e95df73fd7626aa93e9d203bde12a3ea14e0b6984438817bc87b459e99c1fa93a575d201b816db67afdc3c0f0ecc94cb3d66d86849fbea8d27c247d4cfc3093d9453f88f988f37fe0667eef623d0a48ff8c944cb8333dab7ccd7ffa05541d7e2b893331d9fbcdc81535f7cf256d5bcf8ff0b974ce6f00a78d57b5179fb373dfdc31915b17e9a4a2707083a7dcb116d6d905a53508a538fdf85102728cd94d55a0ce2735061fb001a37e68d901f45c591c7bf999ab197"}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58e4eba4}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c8}}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100e30000000000000015000000140001800d00010075647b5e81459e3e10"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x67}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.220729981s ago: executing program 3 (id=2737): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) listen(r2, 0x5) sendmmsg$inet_sctp(r2, &(0x7f000000a2c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000840000000f970996b2b9c4ea0e2f1eb8995b78bf4568db519b41ae65e6b1774346c4e455b6e635f2cf1fbb6d21024797b145f3e63c5be1e54f1ad3f4ce53c19d245da241ce"], 0x18, 0x24004850}], 0x1, 0x2000c000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff0000000071102e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r7, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) 3.407804191s ago: executing program 4 (id=3144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0503000000000000000007000000040003"], 0x1c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) read(r3, &(0x7f0000000100)=""/4096, 0x1000) 3.141258247s ago: executing program 4 (id=3146): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x8f, 0x700, 0x2, 0x10001, {{0x28, 0x4, 0x2, 0x2, 0xa0, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x7, 0x6, "f1830921"}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xa, "eb6d939457850892"}, {0x7, 0x5, "a8484c"}]}, @lsrr={0x83, 0x7, 0xd5, [@private=0xa010100]}, @rr={0x7, 0x17, 0x22, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @rr={0x7, 0xf, 0x69, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @generic={0x83, 0x5, "f6a028"}, @end, @timestamp_addr={0x44, 0x3c, 0xf7, 0x1, 0xf, [{@rand_addr=0x64010100, 0x6}, {@rand_addr=0x64010100, 0xd}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x5}, {@multicast2, 0x3}, {@remote, 0x1}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x8f, 0x700, 0x2, 0x10001, {{0x28, 0x4, 0x2, 0x2, 0xa0, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x7, 0x6, "f1830921"}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xa, "eb6d939457850892"}, {0x7, 0x5, "a8484c"}]}, @lsrr={0x83, 0x7, 0xd5, [@private=0xa010100]}, @rr={0x7, 0x17, 0x22, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @rr={0x7, 0xf, 0x69, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @generic={0x83, 0x5, "f6a028"}, @end, @timestamp_addr={0x44, 0x3c, 0xf7, 0x1, 0xf, [{@rand_addr=0x64010100, 0x6}, {@rand_addr=0x64010100, 0xd}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x5}, {@multicast2, 0x3}, {@remote, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x9, 0xa67f, 0x50, @loopback, @remote, 0x7800, 0x10, 0x4, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x9, 0xa67f, 0x50, @loopback, @remote, 0x7800, 0x10, 0x4, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x264ba8865678d1b7, 0xa7, 0x9, 0xcdf, 0x1d, @mcast2, @loopback, 0x1, 0x20, 0x2, 0x7fffffff}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)=@ipv6_newroute={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x10, 0x20, 0x1, 0xfe, 0x4, 0xfe, 0x1, 0x100}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}]}, 0x34}}, 0x24040010) (async) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)=@ipv6_newroute={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x10, 0x20, 0x1, 0xfe, 0x4, 0xfe, 0x1, 0x100}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}]}, 0x34}}, 0x24040010) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000040)={'macvtap0\x00', {0x2, 0x0, @private}}) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000040)={'macvtap0\x00', {0x2, 0x0, @private}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000840)=[{0x6}]}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r8, 0x0, 0x22, 0x0, &(0x7f0000000440)) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write(r9, &(0x7f0000000100)="141180001a004f7fb3e45f2024d2f1c9ffff0000", 0xfffffffffffffd49) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1200000078000106000000000000000007"], 0x18}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 2.773177754s ago: executing program 4 (id=3150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmmsg$alg(r1, &(0x7f0000007040)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)="17c56c004d8850b3bd6fd0f7d7006147c22f2a760fa57feeb138bd7f9e043eab84ece53188771fc5d9618bad1a73", 0x2e}, {&(0x7f0000000240)="cb58", 0x2}], 0x2, &(0x7f0000001700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040000}], 0x1, 0x44000) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1ce80974d7f8cbb933da5cbbff09f724380000002200010128bd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 2.583623631s ago: executing program 4 (id=3151): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 2.361903347s ago: executing program 4 (id=3152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001900010000000000fdffffff0a10000000000001003a000008001e000004000008000400", @ANYRES32=0x0, @ANYBLOB="69dbcb1ff266"], 0x2c}}, 0x4000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r5}, 0x10) (async) unshare(0x42000000) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, &(0x7f0000000300)="4ded2760c9f421ab2d32b1cdba33011e1c49a8382878b1d8bf8ab03cf03bb5093ea189dde28d27a16f13272bad0e19f78af99e9a1ae0c09a628a6272cc6e4465b747c2dbb3ba75733e93b680de5bcf4761736416fdd5a98283f4de7f5d30ffa7b0cffc777af0cce1", &(0x7f0000000380)=""/87, 0x4}, 0x20) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 2.216352964s ago: executing program 0 (id=3154): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=@framed={{0x18, 0xa}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.938985666s ago: executing program 0 (id=3158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x40002010}, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1}, 0x6) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0xff, @local, 0x4e20, 0x1, 'dh\x00', 0x5, 0x2, 0x2e}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4e20, 0x1, 0x7fff, 0x3, 0x8}}, 0x44) (async) r2 = socket(0x0, 0xa, 0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000180)={'ip_vti0\x00', r3, 0x700, 0x7, 0x5, 0x0, {{0x2a, 0x4, 0x1, 0x2, 0xa8, 0x66, 0x0, 0x13, 0x2f, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xbf, 0x0, 0x3, [0x7fffffff, 0x6, 0x9, 0x40]}, @ssrr={0x89, 0x17, 0xef, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xb}, @local, @multicast1, @empty]}, @lsrr={0x83, 0x1f, 0x1c, [@dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @empty, @broadcast, @broadcast, @empty, @broadcast]}, @cipso={0x86, 0x45, 0x1, [{0x7, 0x4, "79a6"}, {0x0, 0x10, "2a9b5cf9a626fb6bcb45719a16aa"}, {0x5, 0x12, "1b5cf142999a6a23bbb052edc2c67e5c"}, {0x2, 0xb, "abf528626759e09de6"}, {0x0, 0xe, "8c1e419f4b1eab4101f9477e"}]}]}}}}}) (async) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000340)=@buf={0x5e, &(0x7f00000002c0)="3f0b2a8836e861de21e8d86a94669ad23698131208ec005e4c4349cd0f3f3d5ebaf46df8231ae66bffe8be55dacaff3dc2b87ebe38909db51a388a09c7f460f6188ef9ee71a7721cf6784f5a5b9a30388bb4148bb7860123361f74ebb365"}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x39, 0x4, 0x5, 0x8000, 0x800, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x2, 0x1, 0x5, 0x51000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0xc, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x16, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x80}, @map_fd={0x18, 0x4, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0xfc, &(0x7f00000005c0)=""/252, 0x41000, 0x4d, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0xffffffffffffffff, r7], &(0x7f0000000800)=[{0x5, 0x2, 0x8, 0x7}], 0x10, 0x0, @void, @value}, 0x94) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r2) (async) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket(0x1d, 0x3, 0x0) (async) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x1d, r3}, 0x10, &(0x7f0000000a40)={&(0x7f00000009c0)={0x3, 0x38, 0x3c, {r10, r11/1000+60000}, {}, {0x0, 0x1, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "ed012ccf94fcd8cc"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x800) recvmmsg(r8, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)=""/247, 0xf7}, {&(0x7f0000000bc0)=""/152, 0x98}, {&(0x7f0000000c80)=""/34, 0x22}], 0x3, &(0x7f0000000d00)=""/9, 0x9}}, {{&(0x7f0000000d40)=@ieee802154, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)=""/242, 0xf2}, {&(0x7f0000000ec0)=""/195, 0xc3}], 0x2, &(0x7f0000001000)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002000)=@nfc, 0x80, &(0x7f0000002200)=[{&(0x7f0000002080)=""/94, 0x5e}, {&(0x7f0000002100)=""/216, 0xd8}], 0x2, &(0x7f0000002240)=""/4096, 0x1000}, 0xd3a}], 0x3, 0x140, &(0x7f0000003300)={0x77359400}) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000003380), r9) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000003480)={&(0x7f0000003340), 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x68, r12, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x40008c1}, 0x800) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000034c0)={'veth0_to_batadv\x00'}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000003500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f00000037c0)={{r7}, r13, 0x4, @inherit={0x90, &(0x7f0000003700)={0x1, 0x9, 0x7b96, 0x969, {0x8, 0x7, 0x1, 0x4, 0x3f79c810}, [0x6, 0x1000, 0x0, 0x400, 0x4b5, 0x96f6, 0x6, 0x8af, 0xffffffffffffffff]}}, @name="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"}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000047c0)) (async) r14 = gettid() sendmsg$nl_generic(r2, &(0x7f00000048c0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004880)={&(0x7f0000004840)={0x38, 0x3b, 0x300, 0x70bd2a, 0x25dfdbfd, {0x3}, [@typed={0x8, 0x17, 0x0, 0x0, @pid=r14}, @generic="ebb7ea18e6b3d5d073dc480bc24a2a97546f23834eafea170d96"]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x4008000) (async, rerun: 64) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004940), r7) (rerun: 64) sendmsg$NL80211_CMD_RADAR_DETECT(r8, &(0x7f0000004a00)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x3c, r15, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x74cd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000004a40)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) 1.535069224s ago: executing program 1 (id=3160): syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0xc3072, 0xffffffffffffffff, 0x3000000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0xc3072, 0xffffffffffffffff, 0x3000000) 1.534845914s ago: executing program 1 (id=3161): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmmsg$alg(r1, &(0x7f0000007040)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)="17c56c004d8850b3bd6fd0f7d7006147c22f2a760fa57feeb138bd7f9e043eab84ece53188771fc5d9618bad1a73", 0x2e}, {&(0x7f0000000240)="cb58", 0x2}], 0x2, &(0x7f0000001700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040000}], 0x1, 0x44000) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1ce80974d7f8cbb933da5cbbff09f724380000002200010128bd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 1.534418756s ago: executing program 0 (id=3162): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="850000002f0000003500000000000000850000002a000000950000000000000003000000271e35032007fa95a2c8c037c5a142dfa8d76287946c5197fabd5f98f7024210e81ae0b738e65cb6e22ff5dde5c704d255c2350e06cc7ea7c09c4f42a5f0a8320e13e2c845c0f8612c10b10000002701d3712c7e93363af3166a32d95433bbe362b23d87bd793c171d505c04755a2dd576090c4867a7b63953366c6386d5ec7209d031f40f3012e9576e51a7f550afc852003bf3e4195cc037102f24d85cec074c6949e129890152213c8b2759207e6d067a05000000fe5f17fdab800f4104dbaba46aa43a815b1e5c6d1d224f64be6c4d7f47ef21eb7e46f9aa4a97793d110ee282ab7693d928cf95846be6277c043725cdb8c5324812696a623cd8a4f8dc8dcba00b1b2d2747c4040052087b5efae37b56c0ebfb19a342682fb98c1452b6518a6ef7297f7b3744419af53e5309ec91d83cf4fbd775d9c07d8d591ac3cb35afc4fefb7d3d74a248184f4dac60ff000000b78863e629b3b200000000000000000000000000000000000000449c81c33174c87ee545867a3126af7a8b20744e00000000000000000000000000000000ca4737fed0fa81f29ad592aa4d6d9334b3e9caf89eb0e82a188b981bfc5c1dcfe37d82b066bf8d0a4a585734b3ca74013efb27474cc4d47b51d5d0fbe88af5e6d63839c2853f162a0091e70f5affde4074c167a773c4ba789194d4c9b70f4b9c5504282a48864307ed663bfa54a0423826e273c1c0627fc1185f0ec3362e2c5afded72fda7ed9b14b58fb17f9617a27ef528b0d10d4fbe364c1abdf2664dba0b97a918b0b667052c3b5745f3ab7ad2be5c13d5c284117fc145c07918eb6805e2cf88f4db19f5b5a6911d194ce832957b5d3107b4dc2828253dde17576c0262ff90a299eeb3897bb14704401688c57ec9304e7d980ddf64d1983cee21941167237f06e95d5477c8f75c759325ad7a33514c0af833801bd6b06ed652026e1bca375d8a071e716c1726c5516deebeb9db3903777bd4c9f32e4af98a1e8730e7df0b12148cae60b75b7525102994351dfdfa879e4ba4a556002940f99c3a87875de6e59e0c800ee8807b0d6227cb8619d52397859a412b16ca976328349f03f44dfdec552067870d1d9d698404e5ed6e8175b0d5ab631f0ef56a8be56e24bf46f4447e2c402b6f74d3ba450bfff43797988114debd809fbbcd5fb4b8e52590e84699faccd5c4b293157114a13cd0f86e3c04806fee52e3cc39f725eb4e453634e97dd7fe4233321fa54b93f26d0abbd0a3ac9135867c0c132d5849382762683604f4076da8a0cc1d10"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 1.52972846s ago: executing program 0 (id=3163): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180"], 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x31}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x90) sendmsg$tipc(r0, &(0x7f0000000800)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10, 0x0}, 0x4850) 1.52898315s ago: executing program 1 (id=3164): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x80010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(0x0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bind$inet6(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 1.445920254s ago: executing program 0 (id=3165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x48, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb8f568438917ebd0699be96bd1485f6aaa8486e00000000e301f2e09aebda6eeb1c61f96b6d3f91c0f8c1ffbb85cfdd5b8b437a3720ba4cdfb681516c3a240207b6bbdfb37747cc7411886fdba55bcbfa68226644556e8117f9f9fc5be3b7095b2ab7c19b0c6fada03a7f9b9172f0cc960ee263e82e3232edea82b9736d65309e0ad2922ecbb7cde9ce78555fabb941d114e83b37255d6b43b2927696e4f4cf3b23086021fe4e33d049de5318ef3803ceacddc02734c96a9765486a9bf8d65791b000000000000000000000000000000000000000009d97cea3f950d55b265e480ff02c27bda4848c64ca7dcbcd060b9c0dea483c6069d2cdc473cfacc9052cc2c9e3ee037042fd329173c5e7c9ef8800a51332df5a08602a72a553035711cb9159757303a5e7d389786df44441dc82a9d32c56db8a8b3578cd0faabfa23fb46e22b45a464e35315d8c2dd3fae8b530cf8eb0d8dcb682772bed766be5208e61eab965c6c9a217a4e13f0085626c0408f381205251c18a8f6a44"], 0x60}], 0x1, 0x8001) recvmmsg(r8, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970001203c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.285550231s ago: executing program 1 (id=3166): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x4, 0x8, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x50, 0x7800, 0xd, 0x49f7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r4, 0x2f, 0x9, 0x8, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x20, 0x700, 0xf2, 0x2}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x931}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000101050000000000000000000300000108001a40ffffeaf708000840800000085c0001800c000280050001008800000006000340000100000c000280050001000600000006000340000000001400018008000100ffffffff080002007f00000106000340000100000c00028005000100000000000600034000040000"], 0x80}, 0x1, 0x0, 0x0, 0x8814}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, 0x1402, 0xa01, 0x4000000, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}}, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(r9, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @empty, 0x3}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r10, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x10, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x4, 0x9]}, &(0x7f0000000300)=0x8) 806.049345ms ago: executing program 2 (id=3167): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc69, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'netpci0\x00', 0x800}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @local}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}}, 0x0) 561.724054ms ago: executing program 2 (id=3168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x300}]}, 0x30}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000018"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000ec0)=0xe8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x6, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000000c0)=0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={r10, 0x0, r11}, 0xc) r12 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f00)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000001000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001040)={0x0, 0x0, 0x0}, &(0x7f0000001080)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000003c0)="a4051146c534896a0f07672469cb13b3b514ce85ed9fdda537351970311026cd1ff8364b20cb7d9f64dddbc16c636b899081d2423f004641e34093d36ef31d576665bfea3a9e", 0x46}, {&(0x7f0000000000)="081d2885820bf4e1f341014c22c8d9b9b626e33455db5c3cfe056f70", 0x1c}, {&(0x7f00000005c0)="d3ef96336c4b261e9b0893ffe3b338a5b79335de1dee4b36af2aef04ac5f1a90b30ea01f08f803315da8113026d4bd92ccdcca57d90d4cb0af2bcc4ed31a261ac5a57a6d628fa3384bd5be6cf0b19b9421dc11cca706d65bf01d2b2b7ad9a2779ee53364fa448d", 0x67}, {&(0x7f0000000640)="9c72d45c83b14637022c7a5c0d5ba61243691fc434f7e6c44853d663d78df8fcea3eeef068ea87b3ff2c471290e73c351ac5a392e7c77b46123bd4765d8fb293ef63da526dabb21f8fa501715c69c6f52acdeb134439ab0ed55a27ec0053152ac1f6bb4b7d87264783a0e9adf71464cacb495ea173e1b86b87f93aac05230083afdcaeb58e5abe", 0x87}, {&(0x7f0000000700)="04a427714d46748774d50c417736553f3f0d1a1351068736ace71226e0a5563b4c077dfa8bdc8b2c3d17600f0aaadaf3d14310172bd98a6c510fcb3d52f539b355ff3fbcb8093587c5e453", 0x4b}, {&(0x7f0000000840)="57672e7bf883ee07cbee01444430c81f0de9c2ce44ababc1dbfa86cf8e12be3714fd8c19dcb94d993adb51747d074e3452a813af17eb4fdac348f5b40441454316ddbab48fa7c4db47e3125b92710e9a911a037bc7f3a127a440208b3f2779a2063085959468af075d179da01c0f4ad461581b616dae1f83057fe2990bab3a8a440d9eef600c799df95683971c28ffbfc679c4529d2cca8051f655eba642a9caf4e499c1c5b976c9ed6ca7a179158b56d583c0a1f2a92912ca751037209d62258280171857dc851bcb6126527b4476", 0xcf}, {&(0x7f0000000b40)="4f65da3a0b8852a80129877604bb67c39eb8900e7c5e1eca2c845844509e7e48e6ee9a767deac3c50a9a37e846701dbe3660f420b0f90b81aa8ebe0c0514b28cbd09d73482f4763cc8ceac17205f527935e8eddfb33ec0bfaebf7546a5f31532ebd84f8be43c9ee73a6b053116ef545aa016e17494600ae91db246d11e109aefeb06653fd29029", 0x87}, {&(0x7f0000000100)="7558178807f4a9a6b312c9609495f1bb2061038b6eae375bf18586da32d7f14017bbf47e385c9da86b2836bcf6dadc664a51e33db6be6aac", 0x38}, {&(0x7f0000000780)="bd06191bb88f03ec48139cdc9cdf9529b4be3fe6bdd52ef6a8f73cf62aa8", 0x1e}], 0x9, &(0x7f00000010c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r0, r4, r0, r0, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r11}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0xe8, 0x8010}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000011c0)="d603722ad62a7126fd6705576a582969947c9e3242bb870aa5c56de648a8925275b50e469e30b6dcfe0f17", 0x2b}, {&(0x7f0000001200)="bb8556f247a732f2e61125b10cdbfeb46ba2456d48217db154d717db97828804871f41f9a5d9713375cdf0459e0cb945b25531beb587713c66c0cedea8ab90ecab1140e936ec3c2ccc38ddae060167f42fae286e5772074cb62a87f2c98597fe9d6e7e1ea7c09db081f3374de8d195cbe7947cf7259b26ffa71fed24d55b6a7d0e2e7a929877fe14a9760843cea605af61d7112cc28910bcc503410a", 0x9c}, {&(0x7f00000012c0)="d4cefc52d053381af7f0a7449d14e17d7ef33af77851f543b46e94db10c612806381284fde9dd589670cf9f0de3689b43afe8f31ec2179f93605740f584245333f6f58fd64f21e642b0b0ac2ff87b9b59c303feeca7980bf12bb97424c48b9399740cb27c1f02984acd28f0475779edc574dcae5b1f63d503f19fd04985e16583023745a069b899d03da1a53a16d10689352c4115d0421e5a3f2ccda0e78e60106d452919448a7fbe81e202af60275236a501940b89aaeb6ecdb6aee7790", 0xbe}], 0x3, &(0x7f00000013c0), 0x0, 0x4000000}}], 0x2, 0x84) r15 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r15, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r16 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r16, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r15, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x10) bind$inet(r15, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f0000000300)=@framed={{}, [@map_fd={0x18, 0x2, 0x1, 0x0, r3}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 402.326312ms ago: executing program 0 (id=3169): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001800190f00003fffffffda060a00000000e80002dd0200040d0009000900c21d0005000000", 0x29}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd24, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3, 0x4}}]}]}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900030073797a32000000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c0004802000018007000100727400001400028008000140000000150800024000000081"], 0xd8}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x8a, 0x7, 0x1, 0x0, "01fd1f38152938347e2ecf3075617833dbdbf70fde67addcf6422c0eea959660cb82b68252438af8f4c1201caded37ada15744713287187cd94a65bab71bc77bfb588822becbcc6ff94294a74ab6f4144dcdec88169590ab6cacd8d435fab00e33c5f6b18a9fe20248c14bf4cfba5d3ba54dc0be0e135364ef59e04169cab45e4dba8a65c1f8"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xfc}, 0x1, 0x0, 0x0, 0x20000040}, 0x854) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x9, &(0x7f0000000040)="db5eb578a361c7ed03452db0723e329d8373aac438d690d54bde2f3181652fcafce1100cf36414b9944b8769b1fdf3", 0x2f) (async) setsockopt$inet_buf(r8, 0x0, 0x9, &(0x7f0000000040)="db5eb578a361c7ed03452db0723e329d8373aac438d690d54bde2f3181652fcafce1100cf36414b9944b8769b1fdf3", 0x2f) 399.24893ms ago: executing program 1 (id=3170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 305.968901ms ago: executing program 2 (id=3171): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x800000000000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x9, 0x30}, &(0x7f0000000100)=0xc) 274.207464ms ago: executing program 1 (id=3172): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000080085000800a800000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000080085000800a800000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='virtio_transport_alloc_pkt\x00', r7, 0x0, 0x7}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200"], 0x44}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) r11 = socket$vsock_stream(0x28, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$vsock_stream(r11, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) (async) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r12) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x6}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x6}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2a) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="18001000090000000000000001000000181a00007115c90590c4879742604d4c5a6ed0cb54aa92d2d092d662e9220f383a4fcb46daa54530e266d46b0e4c1b59ee90d120c43448f1aefb3b0dc371b65ef09343302db59511af4bbc0c2800000006000000000000000000", @ANYRES32=r12, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xa, 0x29, &(0x7f0000000280)=""/41, 0x41000, 0x4, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f00000002c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x64c, 0x1e}, 0x10, 0x25cae, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r12, r12, r12], 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="18001000090000000000000001000000181a00007115c90590c4879742604d4c5a6ed0cb54aa92d2d092d662e9220f383a4fcb46daa54530e266d46b0e4c1b59ee90d120c43448f1aefb3b0dc371b65ef09343302db59511af4bbc0c2800000006000000000000000000", @ANYRES32=r12, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xa, 0x29, &(0x7f0000000280)=""/41, 0x41000, 0x4, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f00000002c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x64c, 0x1e}, 0x10, 0x25cae, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r12, r12, r12], 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r14, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f00000006c0), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$TUNSETOFFLOAD(r13, 0x4004743d, 0x110e22fff7) (async) ioctl$TUNSETOFFLOAD(r13, 0x4004743d, 0x110e22fff7) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000300000000000019078ac1e0001bc1414aa2b00907803000000450000000000000000000000ac1414aaac1414aa"], 0x0) 171.35517ms ago: executing program 2 (id=3173): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="36198b3492cf413d35d315b1c860431056b76cd99f82432455776290266812dea8dc0901fdb650c0fadcede6dc969ec73c1d0e5186bf044614bb351460730530c845b8cefc015dd2f8842e94931c8eccbb87f10a92db3b1205c6aca3991eadee67e01a5d244c017672d16412dae5c5fdeffb9a9b177bd8d5f6cf51acfa24dd4ab4de1ca924785fcf9577b72b7093b9970dff9d3c0d29557ac275e60dcc418365878023e26d2a0e20b2f0e9e7d8bec60b000000000000", 0xb6}], 0x1}], 0x1, 0x0) (async) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) (async) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x81, 0x20}, 0xc) 49.898089ms ago: executing program 2 (id=3174): sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf25010000000e0001006e657464657673696d00000055fd02006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) accept(r0, &(0x7f0000000500), &(0x7f0000000580)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b7000000000000009500c200000000009504001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x6c, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffe00}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008008}, 0x4000000) recvmmsg$unix(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001540)=""/68, 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1}}], 0x2, 0x0, 0x0) getsockopt(r0, 0x3, 0x7, &(0x7f0000000400)=""/102, &(0x7f00000002c0)=0x66) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x118}], 0x1}, 0x0) 0s ago: executing program 2 (id=3175): sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040005) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): _syscall_64+0x100/0x230 [ 273.487700][T13066] ? do_syscall_64+0xb6/0x230 [ 273.492386][T13066] do_syscall_64+0xf3/0x230 [ 273.496895][T13066] ? clear_bhb_loop+0x35/0x90 [ 273.501579][T13066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.507483][T13066] RIP: 0033:0x7f56845847df [ 273.511897][T13066] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 273.531513][T13066] RSP: 002b:00007f56853b9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 273.539932][T13066] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f56845847df [ 273.547904][T13066] RDX: 0000000000000001 RSI: 00007f56853b90a0 RDI: 0000000000000004 [ 273.555876][T13066] RBP: 00007f56853b9090 R08: 0000000000000000 R09: 0000000000000000 [ 273.563857][T13066] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 273.571829][T13066] R13: 0000000000000000 R14: 00007f5684775fa0 R15: 00007fff71f35198 [ 273.579819][T13066] [ 273.795926][T13069] netlink: 'syz.0.2092': attribute type 1 has an invalid length. [ 273.807067][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'. [ 273.839907][T13069] bond6: (slave geneve2): making interface the new active one [ 273.855719][T13069] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 274.013506][T13085] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 274.021528][T13085] netlink: 'syz.2.2099': attribute type 2 has an invalid length. [ 274.030066][ T70] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 274.318312][T13100] netlink: 'syz.2.2104': attribute type 15 has an invalid length. [ 274.717916][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'. [ 274.802076][T13130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2113'. [ 275.164944][ T3009] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 275.200975][T13149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2115'. [ 275.207845][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'. [ 275.537111][T13163] FAULT_INJECTION: forcing a failure. [ 275.537111][T13163] name failslab, interval 1, probability 0, space 0, times 0 [ 275.549849][T13163] CPU: 0 UID: 0 PID: 13163 Comm: syz.1.2120 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 275.560640][T13163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.570708][T13163] Call Trace: [ 275.573986][T13163] [ 275.576921][T13163] dump_stack_lvl+0x241/0x360 [ 275.581616][T13163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.586821][T13163] ? __pfx__printk+0x10/0x10 [ 275.591424][T13163] should_fail_ex+0x3b0/0x4e0 [ 275.596115][T13163] should_failslab+0xac/0x100 [ 275.600800][T13163] ? skb_clone+0x20c/0x390 [ 275.605219][T13163] kmem_cache_alloc_noprof+0x70/0x380 [ 275.610609][T13163] skb_clone+0x20c/0x390 [ 275.614858][T13163] bpf_clone_redirect+0xab/0x3d0 [ 275.619810][T13163] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 275.625277][T13163] ? preempt_schedule+0xe1/0xf0 [ 275.630129][T13163] ? preempt_schedule_common+0x84/0xd0 [ 275.635588][T13163] ? preempt_schedule+0xe1/0xf0 [ 275.640443][T13163] ? bpf_test_run+0x370/0xa90 [ 275.645124][T13163] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 275.650848][T13163] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.657186][T13163] ? bpf_test_run+0x370/0xa90 [ 275.661868][T13163] ? __pfx___cant_migrate+0x10/0x10 [ 275.667076][T13163] ? bpf_test_run+0x370/0xa90 [ 275.671767][T13163] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 275.677497][T13163] ? bpf_test_timer_continue+0x11a/0x350 [ 275.683138][T13163] bpf_test_run+0x4f0/0xa90 [ 275.687650][T13163] ? bpf_test_run+0x370/0xa90 [ 275.692338][T13163] ? __pfx_bpf_test_run+0x10/0x10 [ 275.697381][T13163] ? __pfx_eth_type_trans+0x10/0x10 [ 275.702588][T13163] ? convert___skb_to_skb+0x41/0x620 [ 275.707880][T13163] bpf_prog_test_run_skb+0xca2/0x1820 [ 275.713284][T13163] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 275.719105][T13163] ? __fget_files+0x2a/0x410 [ 275.723723][T13163] ? fput+0x21b/0x290 [ 275.727713][T13163] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 275.733525][T13163] bpf_prog_test_run+0x2e4/0x360 [ 275.738472][T13163] __sys_bpf+0x48d/0x810 [ 275.742806][T13163] ? __pfx___sys_bpf+0x10/0x10 [ 275.747582][T13163] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.753568][T13163] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.759900][T13163] ? do_syscall_64+0x100/0x230 [ 275.764671][T13163] __x64_sys_bpf+0x7c/0x90 [ 275.769109][T13163] do_syscall_64+0xf3/0x230 [ 275.773618][T13163] ? clear_bhb_loop+0x35/0x90 [ 275.778304][T13163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.784224][T13163] RIP: 0033:0x7f5684585d29 [ 275.788658][T13163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.808284][T13163] RSP: 002b:00007f56853b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.816716][T13163] RAX: ffffffffffffffda RBX: 00007f5684775fa0 RCX: 00007f5684585d29 [ 275.824689][T13163] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 275.832664][T13163] RBP: 00007f56853b9090 R08: 0000000000000000 R09: 0000000000000000 [ 275.840640][T13163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.848616][T13163] R13: 0000000000000000 R14: 00007f5684775fa0 R15: 00007fff71f35198 [ 275.856603][T13163] [ 275.885923][T13165] sctp: [Deprecated]: syz.4.2121 (pid 13165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.885923][T13165] Use struct sctp_sack_info instead [ 276.566227][ T70] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 276.757336][T13185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2127'. [ 276.802957][T13188] xt_CT: No such helper "snmp" [ 277.002516][T13198] netlink: 'syz.4.2130': attribute type 2 has an invalid length. [ 277.025279][T13198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2130'. [ 277.056098][T13202] netlink: 'syz.4.2130': attribute type 2 has an invalid length. [ 277.085023][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2130'. [ 277.442003][T13223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2137'. [ 277.476662][T13223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.483928][T13223] IPv6: NLM_F_CREATE should be set when creating new route [ 277.491307][T13223] IPv6: NLM_F_CREATE should be set when creating new route [ 277.686758][ T7104] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 277.754176][T13247] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 278.227993][T13270] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.316139][T13279] xt_l2tp: v2 doesn't support IP mode [ 278.407011][T13270] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.428317][T13283] __nla_validate_parse: 3 callbacks suppressed [ 278.428338][T13283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2153'. [ 278.539895][T13270] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.702668][T13270] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.727876][T13300] veth1_macvtap: left promiscuous mode [ 278.750545][T13300] macsec0: entered promiscuous mode [ 278.773810][T13300] macsec0: entered allmulticast mode [ 278.796160][ T7104] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 278.828932][T13301] veth1_macvtap: entered promiscuous mode [ 278.841380][T13301] veth1_macvtap: entered allmulticast mode [ 278.847921][T13301] macsec0: left promiscuous mode [ 278.853075][T13301] macsec0: left allmulticast mode [ 278.858877][T13301] veth1_macvtap: left allmulticast mode [ 278.885614][T13305] netlink: 'syz.1.2160': attribute type 5 has an invalid length. [ 278.922681][T13270] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.963388][T13270] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.002261][T13270] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.022818][T13270] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.207288][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 279.217723][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2163'. [ 279.228430][T13322] ipt_ECN: cannot use operation on non-tcp rule [ 279.416170][T13336] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2166'. [ 279.555829][T13340] netlink: 'syz.4.2169': attribute type 1 has an invalid length. [ 279.599300][T13340] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2169'. [ 279.621114][T13340] batadv0: entered promiscuous mode [ 279.634233][T13340] batadv0: entered allmulticast mode [ 279.925583][ T70] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 279.989489][T13347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.011298][T13347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.023148][T13347] bond0 (unregistering): (slave team0): Releasing backup interface [ 280.033360][T13363] FAULT_INJECTION: forcing a failure. [ 280.033360][T13363] name failslab, interval 1, probability 0, space 0, times 0 [ 280.048122][T13363] CPU: 0 UID: 0 PID: 13363 Comm: syz.2.2175 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 280.058921][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.069003][T13363] Call Trace: [ 280.072313][T13363] [ 280.075264][T13363] dump_stack_lvl+0x241/0x360 [ 280.079990][T13363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.085203][T13363] ? __pfx__printk+0x10/0x10 [ 280.089821][T13363] ? fs_reclaim_acquire+0x93/0x130 [ 280.094967][T13363] ? __pfx___might_resched+0x10/0x10 [ 280.100297][T13363] ? dynamic_dname+0x141/0x1b0 [ 280.105091][T13363] should_fail_ex+0x3b0/0x4e0 [ 280.109826][T13363] should_failslab+0xac/0x100 [ 280.114533][T13363] __kmalloc_noprof+0xdd/0x4c0 [ 280.119315][T13363] ? tomoyo_encode+0x26f/0x540 [ 280.124102][T13363] tomoyo_encode+0x26f/0x540 [ 280.128709][T13363] ? __pfx_sockfs_dname+0x10/0x10 [ 280.133760][T13363] tomoyo_realpath_from_path+0x59e/0x5e0 [ 280.139403][T13363] tomoyo_path_number_perm+0x236/0x860 [ 280.144884][T13363] ? __lock_acquire+0x1397/0x2100 [ 280.149960][T13363] ? tomoyo_path_number_perm+0x206/0x860 [ 280.155705][T13363] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.161742][T13363] ? __fget_files+0x2a/0x410 [ 280.166346][T13363] ? __fget_files+0x2a/0x410 [ 280.170958][T13363] security_file_ioctl+0xc6/0x2a0 [ 280.176010][T13363] __se_sys_ioctl+0x46/0x170 [ 280.180695][T13363] do_syscall_64+0xf3/0x230 [ 280.185295][T13363] ? clear_bhb_loop+0x35/0x90 [ 280.189984][T13363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.195882][T13363] RIP: 0033:0x7f56db585d29 [ 280.200301][T13363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.219924][T13363] RSP: 002b:00007f56dc338038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.228353][T13363] RAX: ffffffffffffffda RBX: 00007f56db775fa0 RCX: 00007f56db585d29 [ 280.236333][T13363] RDX: 0000000020002400 RSI: 00000000000089f1 RDI: 0000000000000006 [ 280.244306][T13363] RBP: 00007f56dc338090 R08: 0000000000000000 R09: 0000000000000000 [ 280.252283][T13363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.260259][T13363] R13: 0000000000000000 R14: 00007f56db775fa0 R15: 00007ffe2d91e558 [ 280.268249][T13363] [ 280.282330][T13347] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 280.291976][T13363] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.299739][T13347] bond0 (unregistering): Released all slaves [ 280.315830][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2173'. [ 280.741118][T13389] tipc: Can't bind to reserved service type 2 [ 280.755718][T13386] netlink: 'syz.2.2181': attribute type 4 has an invalid length. [ 280.774363][T13391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.795318][T13385] netlink: 'syz.0.2182': attribute type 10 has an invalid length. [ 280.834329][T13385] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 280.862740][T13396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2186'. [ 280.873224][T13398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2186'. [ 280.972844][T13404] FAULT_INJECTION: forcing a failure. [ 280.972844][T13404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.998327][T13404] CPU: 0 UID: 0 PID: 13404 Comm: syz.0.2188 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 281.009152][T13404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.019237][T13404] Call Trace: [ 281.022536][T13404] [ 281.025502][T13404] dump_stack_lvl+0x241/0x360 [ 281.030224][T13404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.035463][T13404] ? __pfx__printk+0x10/0x10 [ 281.040082][T13404] ? __pfx_lock_release+0x10/0x10 [ 281.045148][T13404] should_fail_ex+0x3b0/0x4e0 [ 281.049861][T13404] _copy_from_user+0x2f/0xc0 [ 281.054594][T13404] get_user_ifreq+0xc3/0x200 [ 281.059230][T13404] sock_ioctl+0x793/0x8e0 [ 281.063613][T13404] ? __pfx_sock_ioctl+0x10/0x10 [ 281.068501][T13404] ? __pfx_sock_ioctl+0x10/0x10 [ 281.073355][T13404] __se_sys_ioctl+0xf5/0x170 [ 281.077950][T13404] do_syscall_64+0xf3/0x230 [ 281.081120][ T7104] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 281.082442][T13404] ? clear_bhb_loop+0x35/0x90 [ 281.094870][T13404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.100808][T13404] RIP: 0033:0x7f9766985d29 [ 281.105234][T13404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.124858][T13404] RSP: 002b:00007f9767899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.133279][T13404] RAX: ffffffffffffffda RBX: 00007f9766b75fa0 RCX: 00007f9766985d29 [ 281.141259][T13404] RDX: 0000000020002400 RSI: 00000000000089f1 RDI: 0000000000000006 [ 281.149234][T13404] RBP: 00007f9767899090 R08: 0000000000000000 R09: 0000000000000000 [ 281.157207][T13404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.165184][T13404] R13: 0000000000000000 R14: 00007f9766b75fa0 R15: 00007fff9fc71f18 [ 281.173171][T13404] [ 281.195156][T13406] netlink: 'syz.3.2190': attribute type 29 has an invalid length. [ 281.206921][T13406] netlink: 'syz.3.2190': attribute type 29 has an invalid length. [ 281.220877][T13406] netlink: 'syz.3.2190': attribute type 29 has an invalid length. [ 281.359059][T13417] netlink: 'syz.1.2192': attribute type 3 has an invalid length. [ 281.366217][T13419] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2192'. [ 281.374061][T13417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2192'. [ 281.504114][T13424] openvswitch: netlink: Message has 5 unknown bytes. [ 281.972382][T13431] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 281.985678][T13432] syz.1.2197[13432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.985781][T13432] syz.1.2197[13432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.037896][T13432] syz.1.2197[13432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.174533][T13440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.248617][T13440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.305017][ T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 282.313696][T13440] batman_adv: batadv0: Removing interface: wlan0 [ 282.594331][T13453] FAULT_INJECTION: forcing a failure. [ 282.594331][T13453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.615720][T13453] CPU: 0 UID: 0 PID: 13453 Comm: syz.0.2201 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 282.626557][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.636651][T13453] Call Trace: [ 282.639949][T13453] [ 282.642894][T13453] dump_stack_lvl+0x241/0x360 [ 282.647607][T13453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.652850][T13453] ? __pfx__printk+0x10/0x10 [ 282.657489][T13453] ? __pfx_lock_release+0x10/0x10 [ 282.662555][T13453] should_fail_ex+0x3b0/0x4e0 [ 282.667274][T13453] _copy_from_user+0x2f/0xc0 [ 282.671910][T13453] ip6_tnl_siocdevprivate+0x1b2/0x1700 [ 282.677413][T13453] ? __mutex_trylock_common+0x183/0x2e0 [ 282.683000][T13453] ? __pfx___might_resched+0x10/0x10 [ 282.688322][T13453] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 282.694259][T13453] ? trace_contention_end+0x3c/0x120 [ 282.699600][T13453] ? __pfx_lock_acquire+0x10/0x10 [ 282.704663][T13453] ? full_name_hash+0x93/0xe0 [ 282.709388][T13453] dev_ifsioc+0xaec/0xe70 [ 282.713754][T13453] ? __pfx_dev_ifsioc+0x10/0x10 [ 282.718645][T13453] ? dev_load+0x21/0x1f0 [ 282.722924][T13453] dev_ioctl+0x881/0x1340 [ 282.727290][T13453] sock_ioctl+0x7ef/0x8e0 [ 282.731753][T13453] ? __pfx_sock_ioctl+0x10/0x10 [ 282.736655][T13453] ? __pfx_sock_ioctl+0x10/0x10 [ 282.741550][T13453] __se_sys_ioctl+0xf5/0x170 [ 282.746175][T13453] do_syscall_64+0xf3/0x230 [ 282.750711][T13453] ? clear_bhb_loop+0x35/0x90 [ 282.755460][T13453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.761392][T13453] RIP: 0033:0x7f9766985d29 [ 282.765838][T13453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.785481][T13453] RSP: 002b:00007f9767899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.793940][T13453] RAX: ffffffffffffffda RBX: 00007f9766b75fa0 RCX: 00007f9766985d29 [ 282.801942][T13453] RDX: 0000000020002400 RSI: 00000000000089f1 RDI: 0000000000000006 [ 282.809957][T13453] RBP: 00007f9767899090 R08: 0000000000000000 R09: 0000000000000000 [ 282.817964][T13453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.825971][T13453] R13: 0000000000000000 R14: 00007f9766b75fa0 R15: 00007fff9fc71f18 [ 282.833992][T13453] [ 283.111270][T13469] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 283.506262][T13475] netlink: 'syz.2.2210': attribute type 1 has an invalid length. [ 283.656204][ T3009] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 283.787276][T13486] ip6t_srh: unknown srh invflags 4000 [ 284.087708][T13497] FAULT_INJECTION: forcing a failure. [ 284.087708][T13497] name failslab, interval 1, probability 0, space 0, times 0 [ 284.137906][T13497] CPU: 0 UID: 0 PID: 13497 Comm: syz.0.2217 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 284.148738][T13497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 284.158821][T13497] Call Trace: [ 284.162145][T13497] [ 284.165093][T13497] dump_stack_lvl+0x241/0x360 [ 284.169808][T13497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.175039][T13497] ? __pfx__printk+0x10/0x10 [ 284.179659][T13497] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 284.185057][T13497] ? __pfx___might_resched+0x10/0x10 [ 284.190373][T13497] should_fail_ex+0x3b0/0x4e0 [ 284.195081][T13497] should_failslab+0xac/0x100 [ 284.199791][T13497] __kmalloc_node_noprof+0xe1/0x4d0 [ 284.205014][T13497] ? __kvmalloc_node_noprof+0x72/0x190 [ 284.210491][T13497] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 284.215977][T13497] __kvmalloc_node_noprof+0x72/0x190 [ 284.221282][T13497] alloc_netdev_mqs+0xa4/0x1080 [ 284.226161][T13497] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 284.231645][T13497] ? sized_strscpy+0x9a/0x2b0 [ 284.236357][T13497] ip6_tnl_locate+0x607/0x820 [ 284.241073][T13497] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 284.246291][T13497] ? __might_fault+0xc6/0x120 [ 284.250992][T13497] ? ip6_tnl_siocdevprivate+0x9c3/0x1700 [ 284.256676][T13497] ip6_tnl_siocdevprivate+0x9e9/0x1700 [ 284.262171][T13497] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 284.268095][T13497] ? trace_contention_end+0x3c/0x120 [ 284.273413][T13497] ? __pfx_lock_acquire+0x10/0x10 [ 284.278461][T13497] ? full_name_hash+0x93/0xe0 [ 284.283168][T13497] dev_ifsioc+0xaec/0xe70 [ 284.287523][T13497] ? __pfx_dev_ifsioc+0x10/0x10 [ 284.292401][T13497] ? dev_load+0x21/0x1f0 [ 284.296669][T13497] dev_ioctl+0x881/0x1340 [ 284.301027][T13497] sock_ioctl+0x7ef/0x8e0 [ 284.305384][T13497] ? __pfx_sock_ioctl+0x10/0x10 [ 284.310272][T13497] ? __pfx_sock_ioctl+0x10/0x10 [ 284.315149][T13497] __se_sys_ioctl+0xf5/0x170 [ 284.319759][T13497] do_syscall_64+0xf3/0x230 [ 284.324283][T13497] ? clear_bhb_loop+0x35/0x90 [ 284.328999][T13497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.334919][T13497] RIP: 0033:0x7f9766985d29 [ 284.339354][T13497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.358988][T13497] RSP: 002b:00007f9767899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.367446][T13497] RAX: ffffffffffffffda RBX: 00007f9766b75fa0 RCX: 00007f9766985d29 [ 284.375441][T13497] RDX: 0000000020002400 RSI: 00000000000089f1 RDI: 0000000000000006 [ 284.383432][T13497] RBP: 00007f9767899090 R08: 0000000000000000 R09: 0000000000000000 [ 284.391425][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.399418][T13497] R13: 0000000000000000 R14: 00007f9766b75fa0 R15: 00007fff9fc71f18 [ 284.407431][T13497] [ 284.415726][T13501] __nla_validate_parse: 2 callbacks suppressed [ 284.415744][T13501] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2219'. [ 284.443891][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2219'. [ 284.922621][T13510] team0: Device gtp0 is of different type [ 284.960082][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2223'. [ 284.970463][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 284.995693][ T70] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 285.098325][T13509] bridge_slave_0: left allmulticast mode [ 285.104181][T13509] bridge_slave_0: left promiscuous mode [ 285.111615][T13509] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.282329][T13525] netlink: 'syz.4.2223': attribute type 21 has an invalid length. [ 285.445150][T13525] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2223'. [ 285.475380][T13525] netlink: 'syz.4.2223': attribute type 4 has an invalid length. [ 285.491467][T13525] netlink: 'syz.4.2223': attribute type 5 has an invalid length. [ 285.521657][T13525] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2223'. [ 285.936132][T13553] FAULT_INJECTION: forcing a failure. [ 285.936132][T13553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.951649][T13554] netlink: 'syz.2.2231': attribute type 7 has an invalid length. [ 285.960591][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 285.986216][T13553] CPU: 1 UID: 0 PID: 13553 Comm: syz.4.2232 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 285.997055][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.003453][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 286.007115][T13553] Call Trace: [ 286.007154][T13553] [ 286.007163][T13553] dump_stack_lvl+0x241/0x360 [ 286.007196][T13553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.032241][T13553] ? __pfx__printk+0x10/0x10 [ 286.036878][T13553] ? __pfx_lock_release+0x10/0x10 [ 286.041939][T13553] ? __lock_acquire+0x1397/0x2100 [ 286.047002][T13553] should_fail_ex+0x3b0/0x4e0 [ 286.051700][T13553] _copy_from_user+0x2f/0xc0 [ 286.056310][T13553] kstrtouint_from_user+0xc6/0x190 [ 286.061428][T13553] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 286.067151][T13553] ? __pfx_lock_acquire+0x10/0x10 [ 286.072184][T13553] proc_fail_nth_write+0xaa/0x2d0 [ 286.077214][T13553] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 286.083115][T13553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 286.088755][T13553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 286.094392][T13553] vfs_write+0x2a3/0xd30 [ 286.098645][T13553] ? __pfx_vfs_write+0x10/0x10 [ 286.103415][T13553] ? __fget_files+0x2a/0x410 [ 286.108008][T13553] ? __fget_files+0x395/0x410 [ 286.112689][T13553] ? __fget_files+0x2a/0x410 [ 286.117292][T13553] ksys_write+0x18f/0x2b0 [ 286.121711][T13553] ? __pfx_ksys_write+0x10/0x10 [ 286.126561][T13553] ? do_syscall_64+0x100/0x230 [ 286.131328][T13553] ? do_syscall_64+0xb6/0x230 [ 286.136007][T13553] do_syscall_64+0xf3/0x230 [ 286.140511][T13553] ? clear_bhb_loop+0x35/0x90 [ 286.145201][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.151098][T13553] RIP: 0033:0x7f89bcd847df [ 286.155515][T13553] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 286.175125][T13553] RSP: 002b:00007f89bdb9f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 286.183544][T13553] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f89bcd847df [ 286.191522][T13553] RDX: 0000000000000001 RSI: 00007f89bdb9f0a0 RDI: 0000000000000007 [ 286.199497][T13553] RBP: 00007f89bdb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 286.207472][T13553] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 286.215445][T13553] R13: 0000000000000000 R14: 00007f89bcf75fa0 R15: 00007fffa5250b38 [ 286.223446][T13553] [ 286.359166][ T7104] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 286.461977][T13572] netlink: 'syz.3.2236': attribute type 1 has an invalid length. [ 286.606041][T13583] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 286.825137][T13588] netlink: 'syz.4.2242': attribute type 10 has an invalid length. [ 287.085707][T13584] lo speed is unknown, defaulting to 1000 [ 287.526141][ T3009] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 287.562483][T13618] Bluetooth: MGMT ver 1.23 [ 287.580768][T13618] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 287.673558][T13622] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.987494][T13622] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.056603][T13641] veth0: left promiscuous mode [ 288.133040][T13622] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.279017][T13622] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.567255][T13622] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.643855][T13622] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.682174][ T3009] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 288.751349][T13622] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.826247][T13622] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.046886][T13675] netlink: 'syz.3.2266': attribute type 5 has an invalid length. [ 289.094499][T13680] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 289.336668][T13689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2269'. [ 289.835826][ T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 289.901246][T13712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2276'. [ 289.984256][T13710] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2274'. [ 290.023037][T13710] 0·: renamed from hsr0 (while UP) [ 290.043194][T13710] 0·: entered allmulticast mode [ 290.051821][T13710] hsr_slave_0: entered allmulticast mode [ 290.064293][T13710] hsr_slave_1: entered allmulticast mode [ 290.085429][T13710] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 290.146224][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 290.172675][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 290.200624][T13724] netlink: 'syz.3.2280': attribute type 1 has an invalid length. [ 290.209397][T13730] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2281'. [ 290.244058][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2280'. [ 290.307340][ T5842] block nbd0: Receive control failed (result -107) [ 290.380393][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 290.494415][T13743] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (5) [ 290.653268][T13748] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 290.691202][T13750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2288'. [ 290.787991][T13755] netlink: 'syz.4.2288': attribute type 10 has an invalid length. [ 290.965616][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 290.991033][T13762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2291'. [ 291.019244][T13765] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2292'. [ 291.471441][T13785] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 291.588443][T13795] netlink: 'syz.1.2303': attribute type 9 has an invalid length. [ 292.075629][ T3435] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 293.161395][T13839] netlink: 'syz.0.2315': attribute type 2 has an invalid length. [ 293.175040][T13839] netlink: 'syz.0.2315': attribute type 9 has an invalid length. [ 293.204955][ T70] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 293.494302][T13852] netlink: 'syz.3.2321': attribute type 3 has an invalid length. [ 293.517323][T13856] netlink: 'syz.1.2320': attribute type 9 has an invalid length. [ 294.154042][T13861] lo speed is unknown, defaulting to 1000 [ 294.253285][T13892] vlan1: entered promiscuous mode [ 294.276430][T13892] vlan1: entered allmulticast mode [ 294.324885][ T7104] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 295.025783][T13933] __nla_validate_parse: 15 callbacks suppressed [ 295.025806][T13933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2344'. [ 295.464541][T13967] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2351'. [ 295.486087][ T3009] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 295.668297][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2351'. [ 296.298645][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2361'. [ 296.582939][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'. [ 296.656505][ T70] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 297.133318][T14066] netlink: 'syz.1.2375': attribute type 6 has an invalid length. [ 297.253436][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2377'. [ 297.262846][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2377'. [ 297.273113][T14074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2377'. [ 297.287257][T14074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2377'. [ 297.298966][T14070] tipc: Enabled bearer , priority 10 [ 297.677854][T14099] bridge0: entered promiscuous mode [ 297.683816][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 297.775846][ T131] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 297.798503][T14100] bridge0 (unregistering): left promiscuous mode [ 298.195374][ T3009] wlan1: Trigger new scan to find an IBSS to join [ 298.333706][T14117] netlink: 'syz.0.2388': attribute type 21 has an invalid length. [ 298.344913][T14117] netlink: 'syz.0.2388': attribute type 6 has an invalid length. [ 298.415077][ T8159] tipc: Node number set to 2344107822 [ 298.484986][T14131] netlink: 'syz.2.2394': attribute type 4 has an invalid length. [ 298.491211][T14133] netlink: 'syz.4.2392': attribute type 7 has an invalid length. [ 298.717076][T14149] nicvf0: tun_chr_ioctl cmd 1074025676 [ 298.722643][T14149] nicvf0: owner set to 0 [ 298.885981][T14129] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 299.110340][T14175] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 299.143149][T14175] macvlan3: entered allmulticast mode [ 299.163352][T14175] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 299.554912][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 299.563830][T14204] netlink: 'syz.4.2412': attribute type 1 has an invalid length. [ 299.827458][T14222] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 299.845703][T14222] bridge6: entered promiscuous mode [ 299.851429][T14222] bridge6: entered allmulticast mode [ 300.015205][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 300.461453][T14234] lo speed is unknown, defaulting to 1000 [ 300.555690][T14247] __nla_validate_parse: 8 callbacks suppressed [ 300.555715][T14247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2426'. [ 300.769940][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2430'. [ 300.806118][T14256] batadv0: entered promiscuous mode [ 301.145270][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 301.145455][T14269] netlink: 'syz.4.2437': attribute type 4 has an invalid length. [ 301.249385][ T7107] wlan1: Trigger new scan to find an IBSS to join [ 301.266832][T14277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2438'. [ 301.426511][T14284] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 301.437570][T14281] netlink: 'syz.0.2440': attribute type 3 has an invalid length. [ 301.456380][T14287] ebt_limit: overflow, try lower: 0/0 [ 301.690449][T14284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.742817][T14284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.773776][T14284] bond0 (unregistering): (slave team0): Releasing backup interface [ 301.799915][T14284] bond0 (unregistering): Released all slaves [ 301.833016][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 302.315364][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 302.726520][T14340] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2457'. [ 302.742920][T14336] bond0: (slave bond_slave_0): Releasing backup interface [ 302.759523][T14336] bond0: (slave bond_slave_1): Releasing backup interface [ 302.822123][T14336] team0: Port device team_slave_0 removed [ 302.865716][T14336] team0: Port device team_slave_1 removed [ 302.872232][T14336] bond1: left allmulticast mode [ 302.919309][T14336] bond1: left promiscuous mode [ 302.924260][T14336] bridge1: port 1(bond1) entered disabled state [ 302.933945][T14336] bond3: (slave bridge4): Releasing backup interface [ 302.958325][T14341] team0: Mode changed to "loadbalance" [ 303.023326][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 303.161338][T14364] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 303.196579][T14366] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 303.205598][T14361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2461'. [ 303.388449][T14373] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2465'. [ 303.445223][T14391] netlink: 'syz.3.2465': attribute type 10 has an invalid length. [ 303.464949][T14391] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.482830][T14391] bond0: (slave team0): Enslaving as an active interface with an up link [ 303.505164][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 303.890224][T14405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2474'. [ 304.108221][T14413] x_tables: duplicate underflow at hook 2 [ 304.195147][T14383] wlan1: Creating new IBSS network, BSSID 7e:47:75:16:fe:10 [ 304.234519][T14419] ip6tnl2: entered promiscuous mode [ 304.248267][T14419] ip6tnl2: entered allmulticast mode [ 304.493353][T14430] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2482'. [ 304.617652][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 304.816970][T14446] netlink: 'syz.1.2485': attribute type 1 has an invalid length. [ 305.209691][T14474] netlink: 'syz.2.2493': attribute type 58 has an invalid length. [ 305.254368][T14477] netlink: 'syz.2.2493': attribute type 58 has an invalid length. [ 305.765565][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 305.820685][T14488] lo speed is unknown, defaulting to 1000 [ 305.961571][T14511] __nla_validate_parse: 4 callbacks suppressed [ 305.961591][T14511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2503'. [ 306.332353][T14526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.355720][T14526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2507'. [ 306.410405][T14529] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 306.590482][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'. [ 306.877349][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 307.059806][T14552] pimreg: entered allmulticast mode [ 307.072398][T14551] pimreg: left allmulticast mode [ 307.275281][T14566] dvmrp0: entered allmulticast mode [ 307.355311][T14573] dvmrp5: entered allmulticast mode [ 307.384363][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 307.409611][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 307.445485][T14573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2522'. [ 307.491123][T14571] dvmrp5: left allmulticast mode [ 307.600240][T14561] lo speed is unknown, defaulting to 1000 [ 307.771356][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2527'. [ 307.819094][T14589] netlink: 'syz.4.2527': attribute type 6 has an invalid length. [ 307.853486][T14593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2529'. [ 308.013180][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 308.029214][T14563] dvmrp0: left allmulticast mode [ 308.263196][T14613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.326244][T14616] tun0: tun_chr_ioctl cmd 1074025681 [ 308.876113][T14639] netlink: 'syz.2.2540': attribute type 10 has an invalid length. [ 308.897050][T14639] team0: Device ipvlan1 failed to register rx_handler [ 309.146203][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 309.316709][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2545'. [ 309.577006][T14670] batman_adv: batadv0: Adding interface: dummy0 [ 309.583309][T14670] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.669266][T14670] batman_adv: batadv0: Interface activated: dummy0 [ 309.735667][T14670] batadv0: mtu less than device minimum [ 309.756423][T14670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.769619][T14670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.782256][T14670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.794930][T14670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.807395][T14670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.819782][T14670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.831327][T14670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.843830][T14670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.935272][T14654] lo speed is unknown, defaulting to 1000 [ 310.116788][T14677] netlink: 204156 bytes leftover after parsing attributes in process `syz.2.2549'. [ 310.438892][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 311.552321][T14711] lo speed is unknown, defaulting to 1000 [ 311.566646][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 311.853488][T14718] lo speed is unknown, defaulting to 1000 [ 312.412344][T14723] lo speed is unknown, defaulting to 1000 [ 312.669899][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 312.839810][T14757] tipc: Enabled bearer , priority 0 [ 313.399499][T14769] __nla_validate_parse: 4 callbacks suppressed [ 313.399521][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 313.416865][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 313.726454][T14749] tipc: Disabling bearer [ 313.756123][T14781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2578'. [ 313.775443][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 313.836948][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2578'. [ 314.013392][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 314.317708][T14800] sctp: [Deprecated]: syz.4.2582 (pid 14800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.317708][T14800] Use struct sctp_sack_info instead [ 314.602962][T14804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2582'. [ 314.905174][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 315.240580][T14819] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2587'. [ 315.450304][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 315.491503][T14834] net_ratelimit: 23 callbacks suppressed [ 315.491526][T14834] openvswitch: netlink: Flow actions attr not present in new flow. [ 315.571006][T14841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2594'. [ 315.612205][T14839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2592'. [ 315.727187][T14853] netlink: 'syz.2.2596': attribute type 2 has an invalid length. [ 315.767963][T14857] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 315.832265][T14853] fþ: entered promiscuous mode [ 316.064831][T14379] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 316.219029][T14883] netlink: 'syz.1.2604': attribute type 6 has an invalid length. [ 316.508807][T14901] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 316.523077][T14901] netlink: 'syz.1.2610': attribute type 11 has an invalid length. [ 317.089517][T14935] lo: entered allmulticast mode [ 317.205070][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 317.488534][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.599339][T14967] netlink: 'syz.4.2630': attribute type 10 has an invalid length. [ 317.664507][T14943] lo speed is unknown, defaulting to 1000 [ 317.848753][T14980] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 318.314942][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 318.434131][T15001] __nla_validate_parse: 8 callbacks suppressed [ 318.434150][T15001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2640'. [ 318.458442][T14949] lo speed is unknown, defaulting to 1000 [ 318.542034][T15013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2642'. [ 318.630113][T14379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.641906][T14379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.654093][T15017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2644'. [ 319.258363][T15017] lo speed is unknown, defaulting to 1000 [ 319.451565][T15040] sctp: [Deprecated]: syz.2.2650 (pid 15040) Use of int in max_burst socket option deprecated. [ 319.451565][T15040] Use struct sctp_assoc_value instead [ 319.456153][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 319.809034][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2655'. [ 319.827173][T15057] netlink: 'syz.1.2654': attribute type 5 has an invalid length. [ 319.841889][T15057] sit0: entered promiscuous mode [ 319.855305][T15057] netlink: 'syz.1.2654': attribute type 1 has an invalid length. [ 319.863261][T15057] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2654'. [ 319.882968][T15057] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 319.896258][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'. [ 319.992855][T15057] bond0: entered promiscuous mode [ 320.072380][T15057] bond0: entered allmulticast mode [ 320.095964][T15057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.656098][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 321.268279][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 321.290226][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 321.497707][ T5842] Bluetooth: hci4: link tx timeout [ 321.505059][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.594929][ T54] Bluetooth: hci4: link tx timeout [ 321.600263][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.630798][ T54] Bluetooth: hci4: link tx timeout [ 321.636448][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.644281][ T54] Bluetooth: hci4: link tx timeout [ 321.649699][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.677936][ T54] Bluetooth: hci4: link tx timeout [ 321.683219][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.691308][ T54] Bluetooth: hci4: link tx timeout [ 321.705146][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.785138][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 321.884267][ T7107] tipc: Subscription rejected, illegal request [ 322.109036][T15140] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 322.145426][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2680'. [ 322.256450][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 322.977721][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 323.415982][T15184] xt_hashlimit: size too large, truncated to 1048576 [ 323.433301][T15167] lo speed is unknown, defaulting to 1000 [ 323.502111][T15193] __nla_validate_parse: 2 callbacks suppressed [ 323.502134][T15193] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2695'. [ 323.546799][T15195] : renamed from bond0 (while UP) [ 323.585070][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 323.631101][T15186] ÛÌî]-Ñ: renamed from lo [ 323.791607][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2696'. [ 323.835762][T15203] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 323.891659][T15204] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2697'. [ 323.994237][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 324.039116][T15213] netlink: 'syz.1.2697': attribute type 10 has an invalid length. [ 324.107341][T15218] netlink: 18128 bytes leftover after parsing attributes in process `syz.0.2700'. [ 324.114812][T15213] hsr0: entered promiscuous mode [ 324.117102][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 324.198367][T15171] IPVS: Error connecting to the multicast addr [ 324.569829][T15235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2705'. [ 324.602119][T15235] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2705'. [ 324.621914][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2705'. [ 324.739185][T15236] netlink: 'syz.1.2704': attribute type 30 has an invalid length. [ 325.325915][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 326.008652][T15257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2711'. [ 326.495161][T15272] SET target dimension over the limit! [ 326.505696][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 326.754876][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 327.119339][T15293] netlink: 'syz.3.2721': attribute type 10 has an invalid length. [ 327.256488][T15297] xt_hashlimit: size too large, truncated to 1048576 [ 327.291025][T15302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2725'. [ 327.635888][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 327.832194][T15329] netlink: 'syz.2.2732': attribute type 1 has an invalid length. [ 327.892136][T15329] 8021q: adding VLAN 0 to HW filter on device bond5 [ 327.908289][T15329] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 327.919653][T15329] bond5: (slave batadv3): making interface the new active one [ 327.928393][T15329] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 328.123496][T15339] SET target dimension over the limit! [ 328.281494][T15331] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 328.308338][T15331] bond5: (slave batadv4): Enslaving as an active interface with an up link [ 328.326436][T15342] netlink: 'syz.1.2736': attribute type 5 has an invalid length. [ 328.835125][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 329.341959][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.353273][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.362014][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.370204][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.379696][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 329.406977][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.653819][T15358] lo speed is unknown, defaulting to 1000 [ 329.950019][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 330.031113][T15381] netlink: 'syz.4.2747': attribute type 4 has an invalid length. [ 330.043103][T15385] netlink: 'syz.1.2748': attribute type 1 has an invalid length. [ 330.083032][T15388] netlink: 'syz.4.2747': attribute type 4 has an invalid length. [ 330.122127][T15385] 8021q: adding VLAN 0 to HW filter on device bond6 [ 330.176519][T15389] 8021q: adding VLAN 0 to HW filter on device bond6 [ 330.207636][T15389] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 330.245586][T15389] bond6: (slave vcan0): Error -95 calling set_mac_address [ 330.337134][T15385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.376490][T15385] bond6: (slave batadv0): making interface the new active one [ 330.393891][T15385] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 330.772937][T15387] lo speed is unknown, defaulting to 1000 [ 331.075082][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 331.126293][T15392] IPVS: Error connecting to the multicast addr [ 331.490446][ T54] Bluetooth: hci1: command tx timeout [ 331.883035][T15358] chnl_net:caif_netlink_parms(): no params data found [ 331.926065][T15423] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 331.931918][T15423] dvmrp1: linktype set to 780 [ 332.074394][T15437] netlink: 'syz.0.2759': attribute type 1 has an invalid length. [ 332.178048][T15442] __nla_validate_parse: 1 callbacks suppressed [ 332.178067][T15442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2762'. [ 332.215221][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 332.372876][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 332.438677][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.446223][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.463470][T15358] bridge_slave_0: entered allmulticast mode [ 332.515234][T15358] bridge_slave_0: entered promiscuous mode [ 332.535664][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.543673][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.551431][T15358] bridge_slave_1: entered allmulticast mode [ 332.559142][T15358] bridge_slave_1: entered promiscuous mode [ 332.578295][T15453] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2764'. [ 332.625554][T15453] 0ªX¹¦À: renamed from caif0 [ 332.638244][T15453] 0ªX¹¦À: entered allmulticast mode [ 332.643563][T15453] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 332.662399][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.698261][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.818415][T15358] team0: Port device team_slave_0 added [ 332.832893][T15358] team0: Port device team_slave_1 added [ 332.856954][T15458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2765'. [ 333.123487][T15475] FAULT_INJECTION: forcing a failure. [ 333.123487][T15475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.137983][T15475] CPU: 1 UID: 0 PID: 15475 Comm: syz.2.2769 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 333.148806][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.158904][T15475] Call Trace: [ 333.162212][T15475] [ 333.165171][T15475] dump_stack_lvl+0x241/0x360 [ 333.169892][T15475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.175121][T15475] ? __pfx__printk+0x10/0x10 [ 333.179756][T15475] ? __pfx_lock_release+0x10/0x10 [ 333.184829][T15475] should_fail_ex+0x3b0/0x4e0 [ 333.189552][T15475] _copy_from_user+0x2f/0xc0 [ 333.194191][T15475] copy_msghdr_from_user+0xae/0x680 [ 333.199423][T15475] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 333.205242][T15475] ? __fget_files+0x2a/0x410 [ 333.209848][T15475] ? __fget_files+0x2a/0x410 [ 333.214524][T15475] __sys_sendmsg+0x209/0x350 [ 333.219128][T15475] ? __pfx_lock_release+0x10/0x10 [ 333.224156][T15475] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.229276][T15475] ? __pfx_vfs_write+0x10/0x10 [ 333.234059][T15475] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.240387][T15475] ? do_syscall_64+0x100/0x230 [ 333.245173][T15475] ? do_syscall_64+0xb6/0x230 [ 333.249873][T15475] do_syscall_64+0xf3/0x230 [ 333.254378][T15475] ? clear_bhb_loop+0x35/0x90 [ 333.259073][T15475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.264988][T15475] RIP: 0033:0x7f56db585d29 [ 333.269405][T15475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.289019][T15475] RSP: 002b:00007f56dc338038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.297451][T15475] RAX: ffffffffffffffda RBX: 00007f56db775fa0 RCX: 00007f56db585d29 [ 333.305426][T15475] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 333.313396][T15475] RBP: 00007f56dc338090 R08: 0000000000000000 R09: 0000000000000000 [ 333.321370][T15475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.329344][T15475] R13: 0000000000000000 R14: 00007f56db775fa0 R15: 00007ffe2d91e558 [ 333.337328][T15475] [ 333.402578][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.419928][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.456177][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 333.464505][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.473329][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2772'. [ 333.508468][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.544536][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.555075][ T54] Bluetooth: hci1: command tx timeout [ 333.609670][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.680466][T15478] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 333.705102][T15478] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 333.776814][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2771'. [ 333.916242][T15498] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2774'. [ 333.959257][T15358] hsr_slave_0: entered promiscuous mode [ 333.981361][T15358] hsr_slave_1: entered promiscuous mode [ 333.997971][T15358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.007156][T15358] Cannot create hsr debugfs directory [ 334.085174][T15502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2776'. [ 334.276406][T15481] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 334.319929][T15509] wg1: entered promiscuous mode [ 334.345157][T15509] vlan0: entered promiscuous mode [ 334.362449][T15509] wg1: left promiscuous mode [ 334.417305][T15519] FAULT_INJECTION: forcing a failure. [ 334.417305][T15519] name failslab, interval 1, probability 0, space 0, times 0 [ 334.442246][T15519] CPU: 1 UID: 0 PID: 15519 Comm: syz.1.2781 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 334.453077][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.463166][T15519] Call Trace: [ 334.466472][T15519] [ 334.469440][T15519] dump_stack_lvl+0x241/0x360 [ 334.474157][T15519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.479400][T15519] ? __pfx__printk+0x10/0x10 [ 334.484052][T15519] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 334.490072][T15519] ? __pfx___might_resched+0x10/0x10 [ 334.495372][T15519] should_fail_ex+0x3b0/0x4e0 [ 334.500064][T15519] should_failslab+0xac/0x100 [ 334.504769][T15519] kmem_cache_alloc_node_noprof+0x77/0x380 [ 334.510586][T15519] ? __alloc_skb+0x1c3/0x440 [ 334.515183][T15519] __alloc_skb+0x1c3/0x440 [ 334.519605][T15519] ? __pfx___alloc_skb+0x10/0x10 [ 334.524546][T15519] ? netlink_autobind+0xd6/0x2f0 [ 334.529491][T15519] ? netlink_autobind+0x2b0/0x2f0 [ 334.534523][T15519] netlink_sendmsg+0x638/0xcb0 [ 334.539304][T15519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.544700][T15519] ? aa_sock_msg_perm+0x91/0x160 [ 334.549650][T15519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.554937][T15519] __sock_sendmsg+0x221/0x270 [ 334.559649][T15519] ____sys_sendmsg+0x52a/0x7e0 [ 334.564421][T15519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.569704][T15519] ? __fget_files+0x2a/0x410 [ 334.574302][T15519] ? __fget_files+0x2a/0x410 [ 334.579159][T15519] __sys_sendmsg+0x269/0x350 [ 334.583763][T15519] ? __pfx_lock_release+0x10/0x10 [ 334.588796][T15519] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.593920][T15519] ? __pfx_vfs_write+0x10/0x10 [ 334.598709][T15519] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.605051][T15519] ? do_syscall_64+0x100/0x230 [ 334.609821][T15519] ? do_syscall_64+0xb6/0x230 [ 334.614504][T15519] do_syscall_64+0xf3/0x230 [ 334.619012][T15519] ? clear_bhb_loop+0x35/0x90 [ 334.623699][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.629599][T15519] RIP: 0033:0x7f5684585d29 [ 334.634015][T15519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.653629][T15519] RSP: 002b:00007f56853b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.662052][T15519] RAX: ffffffffffffffda RBX: 00007f5684775fa0 RCX: 00007f5684585d29 [ 334.670028][T15519] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 334.677997][T15519] RBP: 00007f56853b9090 R08: 0000000000000000 R09: 0000000000000000 [ 334.685972][T15519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.693945][T15519] R13: 0000000000000000 R14: 00007f5684775fa0 R15: 00007fff71f35198 [ 334.701931][T15519] [ 334.715628][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2782'. [ 334.724639][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2782'. [ 334.816993][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 334.974445][T15358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.158595][T15358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.302669][T15358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.586168][T15358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.635168][ T54] Bluetooth: hci1: command tx timeout [ 335.689163][T15572] syzkaller0: entered promiscuous mode [ 335.695145][T15572] syzkaller0: entered allmulticast mode [ 335.702431][T15573] netlink: 'syz.4.2795': attribute type 1 has an invalid length. [ 336.037170][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 336.682296][ T3021] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.176187][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 337.715090][ T54] Bluetooth: hci1: command tx timeout [ 338.285250][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 338.779025][T15607] __nla_validate_parse: 8 callbacks suppressed [ 338.779045][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2806'. [ 338.788940][T15358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 338.845757][T15358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 338.885779][T15358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 338.939236][T15358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.221137][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.285594][T15358] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.328185][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.335382][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.377849][T14380] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.385021][T14380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.395320][T14129] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 339.560545][T15657] FAULT_INJECTION: forcing a failure. [ 339.560545][T15657] name failslab, interval 1, probability 0, space 0, times 0 [ 339.590809][T15657] CPU: 0 UID: 0 PID: 15657 Comm: syz.1.2819 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 339.601638][T15657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 339.611735][T15657] Call Trace: [ 339.615035][T15657] [ 339.617990][T15657] dump_stack_lvl+0x241/0x360 [ 339.622713][T15657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.627952][T15657] ? __pfx__printk+0x10/0x10 [ 339.632578][T15657] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 339.638593][T15657] ? __pfx___might_resched+0x10/0x10 [ 339.643917][T15657] should_fail_ex+0x3b0/0x4e0 [ 339.648639][T15657] should_failslab+0xac/0x100 [ 339.653330][T15657] kmem_cache_alloc_node_noprof+0x77/0x380 [ 339.659154][T15657] ? __alloc_skb+0x1c3/0x440 [ 339.663753][T15657] __alloc_skb+0x1c3/0x440 [ 339.668178][T15657] ? __pfx___alloc_skb+0x10/0x10 [ 339.673136][T15657] ? netlink_ack_tlv_len+0x6e/0x200 [ 339.678341][T15657] netlink_ack+0x145/0xa50 [ 339.682761][T15657] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 339.688154][T15657] ? __pfx_nl80211_post_doit+0x10/0x10 [ 339.693620][T15657] ? __pfx___might_resched+0x10/0x10 [ 339.698917][T15657] netlink_rcv_skb+0x262/0x430 [ 339.703684][T15657] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.708713][T15657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.714042][T15657] genl_rcv+0x28/0x40 [ 339.718051][T15657] netlink_unicast+0x7f6/0x990 [ 339.722839][T15657] ? __pfx_netlink_unicast+0x10/0x10 [ 339.728129][T15657] ? __virt_addr_valid+0x45f/0x530 [ 339.733251][T15657] ? __phys_addr_symbol+0x2f/0x70 [ 339.738282][T15657] ? __check_object_size+0x47a/0x730 [ 339.743596][T15657] netlink_sendmsg+0x8e4/0xcb0 [ 339.748376][T15657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.753669][T15657] ? aa_sock_msg_perm+0x91/0x160 [ 339.758625][T15657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.763909][T15657] __sock_sendmsg+0x221/0x270 [ 339.768600][T15657] ____sys_sendmsg+0x52a/0x7e0 [ 339.773372][T15657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.778686][T15657] ? __fget_files+0x2a/0x410 [ 339.783296][T15657] ? __fget_files+0x2a/0x410 [ 339.787903][T15657] __sys_sendmsg+0x269/0x350 [ 339.792503][T15657] ? __pfx_lock_release+0x10/0x10 [ 339.797533][T15657] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.802659][T15657] ? __pfx_vfs_write+0x10/0x10 [ 339.807447][T15657] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.813778][T15657] ? do_syscall_64+0x100/0x230 [ 339.818550][T15657] ? do_syscall_64+0xb6/0x230 [ 339.823232][T15657] do_syscall_64+0xf3/0x230 [ 339.827736][T15657] ? clear_bhb_loop+0x35/0x90 [ 339.832419][T15657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.838341][T15657] RIP: 0033:0x7f5684585d29 [ 339.842761][T15657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.862371][T15657] RSP: 002b:00007f56853b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.870882][T15657] RAX: ffffffffffffffda RBX: 00007f5684775fa0 RCX: 00007f5684585d29 [ 339.878863][T15657] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 339.886840][T15657] RBP: 00007f56853b9090 R08: 0000000000000000 R09: 0000000000000000 [ 339.894824][T15657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.902806][T15657] R13: 0000000000000000 R14: 00007f5684775fa0 R15: 00007fff71f35198 [ 339.910792][T15657] [ 339.993010][T15358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.030793][T15358] veth0_vlan: entered promiscuous mode [ 340.043884][T15358] veth1_vlan: entered promiscuous mode [ 340.143350][T15358] veth0_macvtap: entered promiscuous mode [ 340.152472][T15358] veth1_macvtap: entered promiscuous mode [ 340.168163][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.178827][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.191904][T15358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.204158][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.214829][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.226130][T15358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.237268][T15358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.246441][T15358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.255581][T15358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.264316][T15358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.335874][T15671] nbd: socks must be embedded in a SOCK_ITEM attr [ 340.351756][T15677] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2821'. [ 340.393798][T15677] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2821'. [ 340.406371][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'. [ 340.517184][T14134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.529755][T14134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.599048][T14134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.625601][T14134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.659072][T15687] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 340.666849][T15687] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 340.722183][T15693] netlink: 'syz.4.2828': attribute type 32 has an invalid length. [ 340.727535][T15691] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 340.777295][T15691] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 340.826422][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 341.147277][T15718] pimreg: entered allmulticast mode [ 341.188738][T15718] ebt_among: dst integrity fail: 200 [ 341.218689][T15718] pimreg: left allmulticast mode [ 341.955307][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 341.982089][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'. [ 341.991699][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'. [ 342.155706][T15775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2853'. [ 342.229093][ T7107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.330239][T15775] netlink: 572 bytes leftover after parsing attributes in process `syz.0.2853'. [ 342.894051][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.907143][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.917184][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.925187][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2859'. [ 342.934489][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.935866][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'. [ 342.956394][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.963906][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.071530][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 343.312671][T15791] lo speed is unknown, defaulting to 1000 [ 343.477499][ T7107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.503221][T15819] veth0: entered promiscuous mode [ 343.515776][T15819] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 343.624827][T15829] netlink: zone id is out of range [ 343.630263][T15829] netlink: zone id is out of range [ 343.641291][T15829] netlink: zone id is out of range [ 343.647028][T15829] netlink: zone id is out of range [ 343.652173][T15829] netlink: zone id is out of range [ 343.657878][T15829] netlink: zone id is out of range [ 343.663062][T15829] netlink: zone id is out of range [ 343.668550][T15829] netlink: zone id is out of range [ 343.673747][T15829] netlink: zone id is out of range [ 343.692933][T15835] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 343.711010][ T7107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.772990][T15836] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.834377][T15837] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.847682][T15837] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.865689][T15837] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.885001][T15837] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.899869][T15837] bond6: (slave geneve2): making interface the new active one [ 343.915848][T15837] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 343.956577][ T7107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.993207][T15836] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.139392][T15836] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.225044][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 344.294178][T15836] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.401183][T15791] chnl_net:caif_netlink_parms(): no params data found [ 344.427050][T15857] tipc: Started in network mode [ 344.436486][T15857] tipc: Node identity 080211000001, cluster identity 4711 [ 344.455961][T15857] tipc: Enabled bearer , priority 0 [ 344.538231][ T7107] bridge_slave_1: left allmulticast mode [ 344.545189][ T7107] bridge_slave_1: left promiscuous mode [ 344.553048][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.578193][ T7107] bridge_slave_0: left allmulticast mode [ 344.581949][T15865] __nla_validate_parse: 3 callbacks suppressed [ 344.581968][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'. [ 344.583900][ T7107] bridge_slave_0: left promiscuous mode [ 344.610510][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.995809][ T54] Bluetooth: hci1: command tx timeout [ 345.190194][ T7107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.202311][ T7107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.215145][ T7107] bond0 (unregistering): Released all slaves [ 345.355291][ T3021] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 345.403106][T15836] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.542666][T15836] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.559000][T15836] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.575110][ T8159] tipc: Node number set to 134418688 [ 345.605255][T15791] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.612400][T15791] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.651387][T15791] bridge_slave_0: entered allmulticast mode [ 345.666083][T15791] bridge_slave_0: entered promiscuous mode [ 345.681884][T15836] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.705253][T15888] netlink: 'syz.1.2882': attribute type 12 has an invalid length. [ 345.765799][T15791] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.772997][T15791] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.801817][T15791] bridge_slave_1: entered allmulticast mode [ 345.824954][T15791] bridge_slave_1: entered promiscuous mode [ 345.860320][T15896] xt_CT: No such helper "netbios-ns" [ 346.142323][T15791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.173400][T15913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2888'. [ 346.175218][T15791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.455331][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 346.604638][T15791] team0: Port device team_slave_0 added [ 346.617775][T15791] team0: Port device team_slave_1 added [ 346.683672][T15921] pim6reg1: entered allmulticast mode [ 346.705161][ T7107] hsr_slave_0: left promiscuous mode [ 346.713655][ T7107] hsr_slave_1: left promiscuous mode [ 346.722157][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.744985][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.763512][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.774852][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.830838][T15943] netlink: 'syz.0.2896': attribute type 18 has an invalid length. [ 346.837508][ T7107] veth1_macvtap: left promiscuous mode [ 346.846471][ T7107] veth0_macvtap: left promiscuous mode [ 346.852527][ T7107] veth1_vlan: left promiscuous mode [ 346.858974][ T7107] veth0_vlan: left promiscuous mode [ 347.075084][ T54] Bluetooth: hci1: command tx timeout [ 347.396762][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2897'. [ 347.596066][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 347.863160][ T7107] team0 (unregistering): Port device team_slave_1 removed [ 347.950695][ T7107] team0 (unregistering): Port device team_slave_0 removed [ 348.599949][T15961] netlink: 'syz.4.2901': attribute type 8 has an invalid length. [ 348.616618][T15961] net_ratelimit: 306 callbacks suppressed [ 348.616638][T15961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.656254][T15791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.663248][T15791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.725282][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 348.725784][T15791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.853963][T15791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.884816][T15791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.927608][T15791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.940282][T15969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2903'. [ 349.051646][T15975] xt_CT: No such helper "netbios-ns" [ 349.214557][ T54] Bluetooth: hci1: command tx timeout [ 349.216090][T15791] hsr_slave_0: entered promiscuous mode [ 349.273047][T15791] hsr_slave_1: entered promiscuous mode [ 349.298691][T15791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.325282][T15791] Cannot create hsr debugfs directory [ 349.502251][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'. [ 349.593798][T15996] batadv_slave_1: entered promiscuous mode [ 349.642249][T15998] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 349.655772][T15996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.770275][T15996] batadv_slave_1 (unregistering): left promiscuous mode [ 349.778260][T15996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.786221][T16007] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 349.846943][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 349.911639][T16011] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.2914'. [ 349.952620][T16011] netlink: zone id is out of range [ 350.095010][T16011] netlink: zone id is out of range [ 350.100222][T16011] netlink: zone id is out of range [ 350.138455][T16011] netlink: zone id is out of range [ 350.191945][T16011] netlink: zone id is out of range [ 350.235634][T16011] netlink: zone id is out of range [ 350.240832][T16011] netlink: zone id is out of range [ 350.268870][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2916'. [ 350.282015][T16011] netlink: zone id is out of range [ 350.295379][T16011] netlink: zone id is out of range [ 350.631595][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2919'. [ 350.659424][T16026] netlink: 'syz.0.2919': attribute type 7 has an invalid length. [ 350.730422][T16026] netlink: 'syz.0.2919': attribute type 8 has an invalid length. [ 350.773605][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'. [ 350.858208][T16033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 350.876207][T16033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.975385][T14129] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 351.018951][T16040] set match dimension is over the limit! [ 351.113716][T15791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.127402][T15791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.157981][T15791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.237631][ T54] Bluetooth: hci1: command tx timeout [ 351.259425][T15791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.571817][T15791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.604302][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 351.615713][T15791] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.647082][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'. [ 351.650067][T15791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.666761][T15791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.675766][T16065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2931'. [ 351.687680][T14380] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.694827][T14380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.706563][T14380] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.713744][T14380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.880945][T15791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.920034][T15791] veth0_vlan: entered promiscuous mode [ 351.948838][T15791] veth1_vlan: entered promiscuous mode [ 351.978270][T15791] veth0_macvtap: entered promiscuous mode [ 351.987933][T15791] veth1_macvtap: entered promiscuous mode [ 351.989789][T16076] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2935'. [ 352.004212][T15791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.015230][T15791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.026816][T15791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.038177][T15791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.049128][T15791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.058196][T15791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.067018][T15791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.076080][T15791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.156832][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 352.259159][T14382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.267274][T14382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.313595][T14134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.339039][T14134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.564579][T16089] netlink: 'syz.4.2940': attribute type 1 has an invalid length. [ 352.593382][T16089] bond4: entered promiscuous mode [ 352.599297][T16089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.697572][T16089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.711039][T16089] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 352.722676][T16089] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 352.736730][T16089] bond4: (slave ip6gre1): making interface the new active one [ 352.745312][T16089] ip6gre1: entered promiscuous mode [ 352.753218][T16089] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 352.846513][T16102] tipc: Trying to set illegal importance in message [ 352.857658][T16102] tipc: Trying to set illegal importance in message [ 353.017242][T16115] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2947'. [ 353.295038][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 353.358205][T16128] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2952'. [ 353.537383][T16125] lo speed is unknown, defaulting to 1000 [ 354.262568][T16148] vlan4: entered promiscuous mode [ 354.270079][T16148] erspan0: entered promiscuous mode [ 354.275559][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 354.313696][T16148] vlan4: entered allmulticast mode [ 354.338308][T16148] erspan0: entered allmulticast mode [ 354.525289][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 355.005060][T16156] lo speed is unknown, defaulting to 1000 [ 355.120597][T16161] netlink: 'syz.4.2960': attribute type 1 has an invalid length. [ 355.255494][T16169] xt_hashlimit: overflow, rate too high: 0 [ 355.273641][T16169] netlink: 'syz.4.2964': attribute type 46 has an invalid length. [ 355.300822][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2964'. [ 355.387074][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 355.435593][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 355.645518][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 355.767197][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 355.870006][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2974'. [ 355.879542][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 355.889316][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 355.898609][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 355.910011][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 356.151899][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 356.220319][ T7107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.354569][ T7107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.557063][ T7107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.760287][ T7107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.785906][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 356.971158][ T7107] bridge_slave_1: left allmulticast mode [ 356.979815][ T7107] bridge_slave_1: left promiscuous mode [ 357.051022][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.058559][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.079730][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.089691][ T7107] bridge_slave_0: left allmulticast mode [ 357.110080][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.112566][ T7107] bridge_slave_0: left promiscuous mode [ 357.129411][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.137854][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.138385][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.153247][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.798420][ T7107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.809835][ T7107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.821645][ T7107] bond0 (unregistering): Released all slaves [ 357.895163][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 358.128691][T16264] net_ratelimit: 23 callbacks suppressed [ 358.128714][T16264] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 358.307211][T16233] lo speed is unknown, defaulting to 1000 [ 358.539847][T16281] x_tables: duplicate underflow at hook 1 [ 358.687971][T16269] lo speed is unknown, defaulting to 1000 [ 358.865530][T16289] xt_hashlimit: size too large, truncated to 1048576 [ 359.006124][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 359.245437][ T54] Bluetooth: hci1: command tx timeout [ 359.695000][ T7107] hsr_slave_0: left promiscuous mode [ 359.719580][ T7107] hsr_slave_1: left promiscuous mode [ 359.735761][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.743251][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.757238][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.773884][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.828941][ T7107] veth1_macvtap: left promiscuous mode [ 359.835054][ T7107] veth0_macvtap: left promiscuous mode [ 359.840797][ T7107] veth1_vlan: left promiscuous mode [ 359.846905][ T7107] veth0_vlan: left promiscuous mode [ 360.135746][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 360.820440][ T7107] team0 (unregistering): Port device team_slave_1 removed [ 360.902558][ T7107] team0 (unregistering): Port device team_slave_0 removed [ 361.327809][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 361.404825][ T54] Bluetooth: hci1: command tx timeout [ 361.979859][T16233] chnl_net:caif_netlink_parms(): no params data found [ 362.309167][T16316] lo speed is unknown, defaulting to 1000 [ 362.315381][T16233] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.346898][T16233] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.354171][T16233] bridge_slave_0: entered allmulticast mode [ 362.435152][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 362.819545][T16233] bridge_slave_0: entered promiscuous mode [ 362.867877][T16233] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.908156][T16233] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.939701][T16233] bridge_slave_1: entered allmulticast mode [ 362.967117][T16233] bridge_slave_1: entered promiscuous mode [ 363.103584][T16233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.154599][T16233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.297010][T16233] team0: Port device team_slave_0 added [ 363.347213][T16233] team0: Port device team_slave_1 added [ 363.438001][T16233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.461694][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.494921][ T54] Bluetooth: hci1: command tx timeout [ 363.525461][T16233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.545124][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 363.555044][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 363.594083][T16233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.615660][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.661688][T16233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.875486][T16233] hsr_slave_0: entered promiscuous mode [ 363.891390][T16233] hsr_slave_1: entered promiscuous mode [ 363.900563][T16233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.908856][T16233] Cannot create hsr debugfs directory [ 363.914463][T16359] lo speed is unknown, defaulting to 1000 [ 364.156596][T16367] netlink: 'syz.4.3015': attribute type 1 has an invalid length. [ 364.205018][T16367] __nla_validate_parse: 11 callbacks suppressed [ 364.205041][T16367] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3015'. [ 364.503038][T16379] netlink: 'syz.4.3018': attribute type 10 has an invalid length. [ 364.562901][T16382] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 364.645480][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 364.920079][T16233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.966449][T16233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.015355][T16233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.037215][T16233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 365.113416][T16394] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3023'. [ 365.123038][T16394] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 365.309147][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'. [ 365.323928][T16233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.362954][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'. [ 365.445888][T16406] netlink: 'syz.1.3027': attribute type 21 has an invalid length. [ 365.466933][T16406] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3027'. [ 365.512527][T16406] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3027'. [ 365.555253][ T54] Bluetooth: hci1: command tx timeout [ 365.586519][T16233] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.614283][T16409] tap0: tun_chr_ioctl cmd 1074025678 [ 365.625175][T16409] tap0: group set to 0 [ 365.635798][T16410] tipc: Enabled bearer , priority 0 [ 365.665934][T16416] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 365.683756][T16416] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 365.692239][T16401] nbd: device at index 4 is going down [ 365.699797][T16416] tipc: Resetting bearer [ 365.729456][T14380] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.736663][T14380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.745386][T14129] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 365.816657][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3028'. [ 365.881281][T14380] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.888480][T14380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.929250][T16420] netlink: 'syz.1.3030': attribute type 1 has an invalid length. [ 366.082500][T16420] tun0: tun_chr_ioctl cmd 1074025677 [ 366.089453][T16420] tun0: linktype set to 823 [ 366.274646][T16433] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 366.324298][T16433] netlink: 'syz.4.3033': attribute type 9 has an invalid length. [ 366.363046][T16433] netlink: 'syz.4.3033': attribute type 7 has an invalid length. [ 366.375613][T16433] netlink: 'syz.4.3033': attribute type 8 has an invalid length. [ 366.493894][T16233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.561014][T16452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3038'. [ 366.627083][T16233] veth0_vlan: entered promiscuous mode [ 366.667071][T16233] veth1_vlan: entered promiscuous mode [ 366.747711][T16233] veth0_macvtap: entered promiscuous mode [ 366.778680][T16233] veth1_macvtap: entered promiscuous mode [ 366.831378][T16233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.856609][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 366.875507][T16233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.919002][T16233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.960017][T16466] netlink: 'syz.4.3042': attribute type 9 has an invalid length. [ 366.963505][T16233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.991496][T16462] netlink: 'syz.1.3041': attribute type 2 has an invalid length. [ 367.020414][T16462] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3041'. [ 367.037360][T16233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.069169][T16233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.095761][T16233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.117341][T16233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.178033][T16441] lo speed is unknown, defaulting to 1000 [ 367.346357][T16474] FAULT_INJECTION: forcing a failure. [ 367.346357][T16474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.381295][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.4.3043 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 367.392126][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.402214][T16474] Call Trace: [ 367.405529][T16474] [ 367.405541][T16474] dump_stack_lvl+0x241/0x360 [ 367.405572][T16474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.405595][T16474] ? __pfx__printk+0x10/0x10 [ 367.405619][T16474] ? __pfx_lock_release+0x10/0x10 [ 367.405647][T16474] should_fail_ex+0x3b0/0x4e0 [ 367.405680][T16474] _copy_from_user+0x2f/0xc0 [ 367.405705][T16474] sk_getsockopt+0x1c9/0x3770 [ 367.405734][T16474] ? __pfx_sk_getsockopt+0x10/0x10 [ 367.405770][T16474] ? __pfx___might_resched+0x10/0x10 [ 367.434257][T14383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.437491][T16474] ? __might_fault+0xaa/0x120 [ 367.437516][T16474] ? __pfx_lock_release+0x10/0x10 [ 367.437545][T16474] ? __might_fault+0xc6/0x120 [ 367.437565][T16474] do_sock_getsockopt+0x2d5/0x7e0 [ 367.437594][T16474] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 367.443307][T14129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.447366][T16474] ? __fget_files+0x2a/0x410 [ 367.447400][T16474] ? __fget_files+0x395/0x410 [ 367.447420][T16474] ? __fget_files+0x2a/0x410 [ 367.447447][T16474] __x64_sys_getsockopt+0x2a1/0x370 [ 367.447476][T16474] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 367.447497][T16474] ? do_syscall_64+0x100/0x230 [ 367.452890][T14383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.460608][T16474] ? do_syscall_64+0xb6/0x230 [ 367.460637][T16474] do_syscall_64+0xf3/0x230 [ 367.460656][T16474] ? clear_bhb_loop+0x35/0x90 [ 367.460682][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.460705][T16474] RIP: 0033:0x7f89bcd85d29 [ 367.460724][T16474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.460740][T16474] RSP: 002b:00007f89bdb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 367.460762][T16474] RAX: ffffffffffffffda RBX: 00007f89bcf75fa0 RCX: 00007f89bcd85d29 [ 367.460778][T16474] RDX: 0000000000000031 RSI: 0000000000000001 RDI: 0000000000000003 [ 367.460791][T16474] RBP: 00007f89bdb9f090 R08: 0000000020000b00 R09: 0000000000000000 [ 367.460804][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.460817][T16474] R13: 0000000000000000 R14: 00007f89bcf75fa0 R15: 00007fffa5250b38 [ 367.460846][T16474] [ 367.629688][T14129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.975582][T16479] lo speed is unknown, defaulting to 1000 [ 368.036209][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 368.675917][T14129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.897660][ T7107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.125467][ T7107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.136120][T14129] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 369.250185][ T5833] syz-executor (5833) used greatest stack depth: 17616 bytes left [ 369.410289][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.443993][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.453187][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.480359][ T7107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.491443][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.501269][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 369.509082][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.696727][ T7107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.964881][ T29] audit: type=1107 audit(1736041909.053:2): pid=16541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‡'WP‚<|Á' [ 370.027007][ T7107] bridge_slave_1: left allmulticast mode [ 370.045252][ T7107] bridge_slave_1: left promiscuous mode [ 370.060276][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.091586][ T7107] bridge_slave_0: left allmulticast mode [ 370.102333][ T7107] bridge_slave_0: left promiscuous mode [ 370.109114][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.118455][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.141523][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.152505][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.180481][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.192520][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 370.201320][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.245796][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 370.320683][T16557] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3066'. [ 370.903669][ T7107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.921177][ T7107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.934116][ T7107] bond0 (unregistering): Released all slaves [ 370.944369][T16524] lo speed is unknown, defaulting to 1000 [ 371.384260][T16559] lo speed is unknown, defaulting to 1000 [ 371.390487][T14379] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 371.555965][ T5842] Bluetooth: hci1: command tx timeout [ 371.812386][T16524] chnl_net:caif_netlink_parms(): no params data found [ 372.136720][T16524] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.157555][T16524] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.175514][T16524] bridge_slave_0: entered allmulticast mode [ 372.188424][T16524] bridge_slave_0: entered promiscuous mode [ 372.210994][T16524] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.240355][T16524] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.261303][T16524] bridge_slave_1: entered allmulticast mode [ 372.275719][ T5842] Bluetooth: hci3: command tx timeout [ 372.297170][T16524] bridge_slave_1: entered promiscuous mode [ 372.374787][T16550] lo speed is unknown, defaulting to 1000 [ 372.396973][T16524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.417841][T16524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.498605][T14379] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 372.592903][T16524] team0: Port device team_slave_0 added [ 372.603141][T16524] team0: Port device team_slave_1 added [ 372.631505][T16560] lo speed is unknown, defaulting to 1000 [ 372.731130][T16524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.758819][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.844844][T16524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.883622][T16524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.905325][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.961094][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 372.970824][T16524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.240594][T16524] hsr_slave_0: entered promiscuous mode [ 373.258565][T16524] hsr_slave_1: entered promiscuous mode [ 373.268737][T16524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.285021][T16524] Cannot create hsr debugfs directory [ 373.285960][T16605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3078'. [ 373.635536][T14382] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 373.642655][ T5842] Bluetooth: hci1: command tx timeout [ 373.737841][T16611] xt_l2tp: v2 sid > 0xffff: 262144 [ 373.930595][ T7107] hsr_slave_0: left promiscuous mode [ 373.937233][ T7107] hsr_slave_1: left promiscuous mode [ 373.943456][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.951241][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.959868][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.967571][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.023708][ T7107] veth1_macvtap: left promiscuous mode [ 374.037816][ T7107] veth0_macvtap: left promiscuous mode [ 374.043520][ T7107] veth1_vlan: left promiscuous mode [ 374.060865][ T7107] veth0_vlan: left promiscuous mode [ 374.357255][ T5842] Bluetooth: hci3: command tx timeout [ 374.685705][ T7107] team0 (unregistering): Port device team_slave_1 removed [ 374.740189][ T7107] team0 (unregistering): Port device team_slave_0 removed [ 374.796104][T14383] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 375.295036][T16612] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 375.303348][T16612] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 375.312131][T16612] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 375.320916][T16612] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 375.725296][ T5842] Bluetooth: hci1: command tx timeout [ 375.760210][T16619] lo speed is unknown, defaulting to 1000 [ 375.817343][T16550] chnl_net:caif_netlink_parms(): no params data found [ 375.915410][T14129] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 376.445336][ T5842] Bluetooth: hci3: command tx timeout [ 376.453863][T16550] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.481604][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.493706][T16550] bridge_slave_0: entered allmulticast mode [ 376.511195][T16550] bridge_slave_0: entered promiscuous mode [ 376.575930][T16550] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.583080][T16550] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.621130][T16550] bridge_slave_1: entered allmulticast mode [ 376.670371][T16550] bridge_slave_1: entered promiscuous mode [ 376.864384][T16550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.046503][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 377.068179][T16550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.202429][T16550] team0: Port device team_slave_0 added [ 377.231377][T16550] team0: Port device team_slave_1 added [ 377.438402][T16640] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3087'. [ 377.559038][T16640] bond0: entered promiscuous mode [ 377.577754][T16641] bond0: left promiscuous mode [ 377.655434][T16550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.662439][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.714527][T16550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.795869][ T5842] Bluetooth: hci1: command tx timeout [ 377.841738][T16643] vlan5: entered promiscuous mode [ 377.848233][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3090'. [ 377.859085][T16643] team0: entered promiscuous mode [ 377.864170][T16643] team_slave_0: entered promiscuous mode [ 377.870095][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3090'. [ 377.879249][T16648] netlink: 'syz.4.3090': attribute type 18 has an invalid length. [ 377.893702][T16643] team_slave_1: entered promiscuous mode [ 377.900389][T16643] vlan5: entered allmulticast mode [ 377.905690][T16643] team0: entered allmulticast mode [ 377.910858][T16643] team_slave_0: entered allmulticast mode [ 377.916922][T16643] team_slave_1: entered allmulticast mode [ 377.924358][T16550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.931646][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.958378][T16550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.960254][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3088'. [ 377.999954][T16524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 378.179330][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 378.189681][T16643] hsr_slave_1 (unregistering): left promiscuous mode [ 378.208742][T16524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 378.236551][T16550] hsr_slave_0: entered promiscuous mode [ 378.270235][T16550] hsr_slave_1: entered promiscuous mode [ 378.276734][T16550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.284359][T16550] Cannot create hsr debugfs directory [ 378.290749][T16524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 378.394230][T16524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.524544][ T5842] Bluetooth: hci3: command tx timeout [ 378.679377][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 378.803135][T16524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.896973][T16675] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3096'. [ 378.916040][T16678] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 378.928210][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.936587][T16678] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 378.955247][T16524] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.121061][T16683] tipc: Enabled bearer , priority 0 [ 379.174026][T14134] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.181248][T14134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.198472][T14134] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.205679][T14134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.238493][T16688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3102'. [ 379.306031][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 379.390182][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3103'. [ 379.426723][T16694] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3103'. [ 379.451423][T16696] syzkaller0: MTU too low for tipc bearer [ 379.474910][T16696] tipc: Disabling bearer [ 379.588101][T16550] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.618300][T16550] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.655576][T16550] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.702681][T16550] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.765588][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'. [ 379.787120][T16524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.930718][T16524] veth0_vlan: entered promiscuous mode [ 379.960357][T16550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.980636][T16524] veth1_vlan: entered promiscuous mode [ 380.066971][T16550] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.073348][T16723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.088435][T14129] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.095612][T14129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.149590][T14129] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.156820][T14129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.229944][T16524] veth0_macvtap: entered promiscuous mode [ 380.259901][T16524] veth1_macvtap: entered promiscuous mode [ 380.316783][T16524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.336132][T16524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.366280][T16524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.395241][T16524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.425278][T14129] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 380.445430][T16524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.464540][T16524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.488725][T16524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.508364][T16524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.632466][T16550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.666088][T16747] x_tables: duplicate entry at hook 1 [ 380.677078][T16748] lo: entered promiscuous mode [ 380.748385][T16751] x_tables: duplicate underflow at hook 1 [ 380.807754][T16550] veth0_vlan: entered promiscuous mode [ 380.827798][T16745] lo: left promiscuous mode [ 380.836729][T14134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.865322][T14134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.928006][T14129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.929836][T16550] veth1_vlan: entered promiscuous mode [ 380.950697][T14129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.059278][T16550] veth0_macvtap: entered promiscuous mode [ 381.097869][T16550] veth1_macvtap: entered promiscuous mode [ 381.149241][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.163090][T16769] FAULT_INJECTION: forcing a failure. [ 381.163090][T16769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.179844][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.190093][T16769] CPU: 1 UID: 0 PID: 16769 Comm: syz.1.3056 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 381.200899][T16769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.210983][T16769] Call Trace: [ 381.214286][T16769] [ 381.217245][T16769] dump_stack_lvl+0x241/0x360 [ 381.221962][T16769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.227196][T16769] ? __pfx__printk+0x10/0x10 [ 381.231826][T16769] should_fail_ex+0x3b0/0x4e0 [ 381.236552][T16769] _copy_to_user+0x31/0xb0 [ 381.241009][T16769] sk_getsockopt+0x2309/0x3770 [ 381.241120][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.245786][T16769] ? __pfx_sk_getsockopt+0x10/0x10 [ 381.245824][T16769] ? __pfx___might_resched+0x10/0x10 [ 381.245850][T16769] ? __might_fault+0xaa/0x120 [ 381.245868][T16769] ? __pfx_lock_release+0x10/0x10 [ 381.245897][T16769] ? __might_fault+0xc6/0x120 [ 381.245917][T16769] do_sock_getsockopt+0x2d5/0x7e0 [ 381.245945][T16769] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 381.245964][T16769] ? __fget_files+0x2a/0x410 [ 381.245987][T16769] ? __fget_files+0x395/0x410 [ 381.246009][T16769] ? __fget_files+0x2a/0x410 [ 381.246038][T16769] __x64_sys_getsockopt+0x2a1/0x370 [ 381.246065][T16769] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 381.246087][T16769] ? do_syscall_64+0x100/0x230 [ 381.246112][T16769] ? do_syscall_64+0xb6/0x230 [ 381.246135][T16769] do_syscall_64+0xf3/0x230 [ 381.246156][T16769] ? clear_bhb_loop+0x35/0x90 [ 381.246180][T16769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.246202][T16769] RIP: 0033:0x7f400b385d29 [ 381.246221][T16769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.246238][T16769] RSP: 002b:00007f400c138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 381.246261][T16769] RAX: ffffffffffffffda RBX: 00007f400b575fa0 RCX: 00007f400b385d29 [ 381.246275][T16769] RDX: 0000000000000031 RSI: 0000000000000001 RDI: 0000000000000003 [ 381.246288][T16769] RBP: 00007f400c138090 R08: 0000000020000b00 R09: 0000000000000000 [ 381.246301][T16769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.246315][T16769] R13: 0000000000000000 R14: 00007f400b575fa0 R15: 00007ffeec4f4738 [ 381.246343][T16769] [ 381.431112][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.442579][T16550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.455492][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.463094][T16773] netlink: 'syz.4.3120': attribute type 1 has an invalid length. [ 381.466582][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.467797][T16550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.597114][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 381.626504][T16550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.643438][T16550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.662771][T16550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.681293][T16550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.696611][T16784] bridge0: entered allmulticast mode [ 381.702312][T16784] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 381.884871][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.898198][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.961733][ T7107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.981262][ T7107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.091805][T16793] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 382.632221][T16815] __nla_validate_parse: 6 callbacks suppressed [ 382.632244][T16815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3135'. [ 382.735234][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 382.754476][T16830] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 382.901191][T16814] lo speed is unknown, defaulting to 1000 [ 383.410866][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.865258][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 384.063544][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.164869][T16846] netlink: 'syz.4.3144': attribute type 5 has an invalid length. [ 384.385719][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.396827][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.417293][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.419216][T16855] xt_hashlimit: size too large, truncated to 1048576 [ 384.442691][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.453728][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 384.461449][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.495297][T16855] xt_hashlimit: max too large, truncated to 1048576 [ 384.502219][T16855] xt_hashlimit: overflow, try lower: 0/0 [ 384.643217][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.765955][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3148'. [ 384.901002][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.957374][T16869] macvtap1: entered promiscuous mode [ 384.985031][T16869] bond0: entered promiscuous mode [ 384.994919][T16869] macvtap1: entered allmulticast mode [ 385.005374][T14379] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 385.022182][T16869] bond0: entered allmulticast mode [ 385.036792][T16869] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 385.064567][T16873] bond0: left allmulticast mode [ 385.072313][T16873] bond0: left promiscuous mode [ 385.086648][T16871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'. [ 385.116120][T16851] lo speed is unknown, defaulting to 1000 [ 385.353616][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3154'. [ 385.505743][T16896] netlink: 'syz.2.3156': attribute type 4 has an invalid length. [ 385.683259][ T11] bridge_slave_1: left allmulticast mode [ 385.691037][ T11] bridge_slave_1: left promiscuous mode [ 385.706446][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.762360][ T11] bridge_slave_0: left allmulticast mode [ 385.768382][ T11] bridge_slave_0: left promiscuous mode [ 385.774162][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.862022][T16909] netlink: zone id is out of range [ 385.867923][T16909] netlink: zone id is out of range [ 385.873186][T16909] netlink: zone id is out of range [ 385.879471][T16909] netlink: zone id is out of range [ 386.136550][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 386.222572][T16927] netlink: 'syz.0.3165': attribute type 1 has an invalid length. [ 386.521012][ T5842] Bluetooth: hci3: command tx timeout [ 386.594283][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.607320][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.618974][ T11] bond0 (unregistering): Released all slaves [ 386.644511][T16883] lo speed is unknown, defaulting to 1000 [ 386.725476][T16927] bond8: entered promiscuous mode [ 386.741430][T16927] bond8: entered allmulticast mode [ 386.767361][T16940] netlink: 'syz.2.3167': attribute type 9 has an invalid length. [ 386.782632][T16929] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 386.794139][T16929] bond8: (slave batadv2): making interface the new active one [ 386.802406][T16929] batadv2: entered promiscuous mode [ 386.808174][T16929] batadv2: entered allmulticast mode [ 386.814201][T16929] bond8: (slave batadv2): Enslaving as an active interface with an up link [ 386.899792][T16851] chnl_net:caif_netlink_parms(): no params data found [ 387.023559][T16931] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 387.265359][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 387.302448][T16851] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.323150][T16851] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.330970][T16851] bridge_slave_0: entered allmulticast mode [ 387.340813][T16851] bridge_slave_0: entered promiscuous mode [ 387.349330][T16962] netlink: 'syz.1.3172': attribute type 10 has an invalid length. [ 387.352464][T16851] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.366835][T16851] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.374116][T16851] bridge_slave_1: entered allmulticast mode [ 387.381612][T16851] bridge_slave_1: entered promiscuous mode [ 387.387809][T16963] netlink: 'syz.1.3172': attribute type 10 has an invalid length. [ 387.426158][T16963] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.435333][T16963] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.451429][T16963] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.458616][T16963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.466179][T16963] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.473319][T16963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.487491][T16963] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 387.502044][T14129] [ 387.505695][T14129] ============================= [ 387.510579][T14129] WARNING: suspicious RCU usage [ 387.515658][T14129] 6.13.0-rc5-syzkaller-00769-g356939999438 #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 387.522801][T14129] ----------------------------- [ 387.527784][T14129] net/sched/sch_generic.c:1256 suspicious rcu_dereference_protected() usage! [ 387.536946][T14129] [ 387.536946][T14129] other info that might help us debug this: [ 387.536946][T14129] [ 387.547314][T14129] [ 387.547314][T14129] rcu_scheduler_active = 2, debug_locks = 1 [ 387.555721][T14129] 3 locks held by kworker/u8:17/14129: [ 387.561217][T14129] #0: ffff88806320d948 ((wq_completion)bond0#7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 387.572837][T14129] #1: ffffc900100d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 387.585984][T14129] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 387.596028][T14129] [ 387.596028][T14129] stack backtrace: [ 387.601947][T14129] CPU: 0 UID: 0 PID: 14129 Comm: kworker/u8:17 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 387.612982][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 387.623047][T14129] Workqueue: bond0 bond_mii_monitor [ 387.628269][T14129] Call Trace: [ 387.631552][T14129] [ 387.634545][T14129] dump_stack_lvl+0x241/0x360 [ 387.639247][T14129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.644458][T14129] ? __pfx__printk+0x10/0x10 [ 387.649071][T14129] lockdep_rcu_suspicious+0x226/0x340 [ 387.654460][T14129] dev_activate+0xf8/0x1240 [ 387.658982][T14129] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 387.664893][T14129] ? lockdep_hardirqs_on+0x99/0x150 [ 387.670113][T14129] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 387.676012][T14129] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 387.682352][T14129] ? __pfx_dev_activate+0x10/0x10 [ 387.687382][T14129] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 387.693279][T14129] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 387.699623][T14129] ? rfc2863_policy+0x10e/0x3b0 [ 387.704479][T14129] linkwatch_do_dev+0xfb/0x170 [ 387.709257][T14129] ethtool_op_get_link+0x15/0x60 [ 387.714207][T14129] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 387.719849][T14129] bond_check_dev_link+0x1f1/0x3f0 [ 387.724980][T14129] ? __pfx_bond_check_dev_link+0x10/0x10 [ 387.730641][T14129] bond_mii_monitor+0x49a/0x3170 [ 387.735596][T14129] ? __lock_acquire+0x1397/0x2100 [ 387.740630][T14129] ? bond_mii_monitor+0x174/0x3170 [ 387.745754][T14129] ? do_raw_spin_unlock+0x13c/0x8b0 [ 387.750962][T14129] ? __pfx_bond_mii_monitor+0x10/0x10 [ 387.756356][T14129] ? __pfx_lock_acquire+0x10/0x10 [ 387.761392][T14129] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 387.767384][T14129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 387.773753][T14129] ? process_scheduled_works+0x976/0x1840 [ 387.779495][T14129] process_scheduled_works+0xa66/0x1840 [ 387.785083][T14129] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.791105][T14129] ? assign_work+0x364/0x3d0 [ 387.795717][T14129] worker_thread+0x870/0xd30 [ 387.800330][T14129] ? __kthread_parkme+0x169/0x1d0 [ 387.805382][T14129] ? __pfx_worker_thread+0x10/0x10 [ 387.810556][T14129] kthread+0x2f0/0x390 [ 387.814639][T14129] ? __pfx_worker_thread+0x10/0x10 [ 387.819757][T14129] ? __pfx_kthread+0x10/0x10 [ 387.824438][T14129] ret_from_fork+0x4b/0x80 [ 387.828872][T14129] ? __pfx_kthread+0x10/0x10 [ 387.833477][T14129] ret_from_fork_asm+0x1a/0x30 [ 387.838263][T14129] [ 387.842870][T14129] [ 387.845269][T14129] ============================= [ 387.850130][T14129] WARNING: suspicious RCU usage [ 387.855089][T14129] 6.13.0-rc5-syzkaller-00769-g356939999438 #0 Not tainted [ 387.862420][T14129] ----------------------------- [ 387.867762][T14129] net/sched/sch_generic.c:1234 suspicious rcu_dereference_protected() usage! [ 387.876809][T14129] [ 387.876809][T14129] other info that might help us debug this: [ 387.876809][T14129] [ 387.887125][T14129] [ 387.887125][T14129] rcu_scheduler_active = 2, debug_locks = 1 [ 387.895545][T14129] 3 locks held by kworker/u8:17/14129: [ 387.901031][T14129] #0: ffff88806320d948 ((wq_completion)bond0#7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 387.912224][T14129] #1: ffffc900100d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 387.925509][T14129] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 387.935362][T14129] [ 387.935362][T14129] stack backtrace: [ 387.941291][T14129] CPU: 0 UID: 0 PID: 14129 Comm: kworker/u8:17 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 387.952367][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 387.962463][T14129] Workqueue: bond0 bond_mii_monitor [ 387.967721][T14129] Call Trace: [ 387.971040][T14129] [ 387.973997][T14129] dump_stack_lvl+0x241/0x360 [ 387.978723][T14129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.983960][T14129] ? __pfx__printk+0x10/0x10 [ 387.988614][T14129] lockdep_rcu_suspicious+0x226/0x340 [ 387.994025][T14129] transition_one_qdisc+0x8e/0x1c0 [ 387.999177][T14129] dev_activate+0x838/0x1240 [ 388.003806][T14129] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.010166][T14129] ? __pfx_dev_activate+0x10/0x10 [ 388.015312][T14129] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 388.021240][T14129] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.027612][T14129] ? rfc2863_policy+0x10e/0x3b0 [ 388.032494][T14129] linkwatch_do_dev+0xfb/0x170 [ 388.037298][T14129] ethtool_op_get_link+0x15/0x60 [ 388.042296][T14129] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 388.047985][T14129] bond_check_dev_link+0x1f1/0x3f0 [ 388.053218][T14129] ? __pfx_bond_check_dev_link+0x10/0x10 [ 388.058911][T14129] bond_mii_monitor+0x49a/0x3170 [ 388.063931][T14129] ? __lock_acquire+0x1397/0x2100 [ 388.069090][T14129] ? bond_mii_monitor+0x174/0x3170 [ 388.074249][T14129] ? do_raw_spin_unlock+0x13c/0x8b0 [ 388.079485][T14129] ? __pfx_bond_mii_monitor+0x10/0x10 [ 388.084916][T14129] ? __pfx_lock_acquire+0x10/0x10 [ 388.089984][T14129] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 388.096008][T14129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 388.102385][T14129] ? process_scheduled_works+0x976/0x1840 [ 388.108168][T14129] process_scheduled_works+0xa66/0x1840 [ 388.113768][T14129] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.119787][T14129] ? assign_work+0x364/0x3d0 [ 388.124415][T14129] worker_thread+0x870/0xd30 [ 388.129055][T14129] ? __kthread_parkme+0x169/0x1d0 [ 388.134113][T14129] ? __pfx_worker_thread+0x10/0x10 [ 388.139256][T14129] kthread+0x2f0/0x390 [ 388.143376][T14129] ? __pfx_worker_thread+0x10/0x10 [ 388.148521][T14129] ? __pfx_kthread+0x10/0x10 [ 388.153157][T14129] ret_from_fork+0x4b/0x80 [ 388.157600][T14129] ? __pfx_kthread+0x10/0x10 [ 388.162217][T14129] ret_from_fork_asm+0x1a/0x30 [ 388.167023][T14129] [ 388.179704][T14129] [ 388.182084][T14129] ============================= [ 388.187060][T14129] WARNING: suspicious RCU usage [ 388.191931][T14129] 6.13.0-rc5-syzkaller-00769-g356939999438 #0 Not tainted [ 388.199553][T14129] ----------------------------- [ 388.204422][T14129] ./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage! [ 388.213560][T14129] [ 388.213560][T14129] other info that might help us debug this: [ 388.213560][T14129] [ 388.223896][T14129] [ 388.223896][T14129] rcu_scheduler_active = 2, debug_locks = 1 [ 388.232389][T14129] 3 locks held by kworker/u8:17/14129: [ 388.237930][T14129] #0: ffff88806320d948 ((wq_completion)bond0#7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 388.249110][T14129] #1: ffffc900100d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 388.262376][T14129] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 388.272319][T14129] [ 388.272319][T14129] stack backtrace: [ 388.278554][T14129] CPU: 0 UID: 0 PID: 14129 Comm: kworker/u8:17 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 388.289609][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.299705][T14129] Workqueue: bond0 bond_mii_monitor [ 388.304945][T14129] Call Trace: [ 388.308246][T14129] [ 388.311201][T14129] dump_stack_lvl+0x241/0x360 [ 388.315912][T14129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.321139][T14129] ? __pfx__printk+0x10/0x10 [ 388.325773][T14129] lockdep_rcu_suspicious+0x226/0x340 [ 388.331205][T14129] dev_activate+0x925/0x1240 [ 388.335836][T14129] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.342195][T14129] ? __pfx_dev_activate+0x10/0x10 [ 388.347254][T14129] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 388.353171][T14129] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.359521][T14129] ? rfc2863_policy+0x10e/0x3b0 [ 388.364383][T14129] linkwatch_do_dev+0xfb/0x170 [ 388.369159][T14129] ethtool_op_get_link+0x15/0x60 [ 388.374112][T14129] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 388.379755][T14129] bond_check_dev_link+0x1f1/0x3f0 [ 388.384889][T14129] ? __pfx_bond_check_dev_link+0x10/0x10 [ 388.390553][T14129] bond_mii_monitor+0x49a/0x3170 [ 388.395523][T14129] ? __lock_acquire+0x1397/0x2100 [ 388.400570][T14129] ? bond_mii_monitor+0x174/0x3170 [ 388.405753][T14129] ? do_raw_spin_unlock+0x13c/0x8b0 [ 388.410969][T14129] ? __pfx_bond_mii_monitor+0x10/0x10 [ 388.416362][T14129] ? __pfx_lock_acquire+0x10/0x10 [ 388.421395][T14129] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 388.427394][T14129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 388.433740][T14129] ? process_scheduled_works+0x976/0x1840 [ 388.439468][T14129] process_scheduled_works+0xa66/0x1840 [ 388.445048][T14129] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.451041][T14129] ? assign_work+0x364/0x3d0 [ 388.455642][T14129] worker_thread+0x870/0xd30 [ 388.460249][T14129] ? __kthread_parkme+0x169/0x1d0 [ 388.465286][T14129] ? __pfx_worker_thread+0x10/0x10 [ 388.470400][T14129] kthread+0x2f0/0x390 [ 388.474480][T14129] ? __pfx_worker_thread+0x10/0x10 [ 388.479613][T14129] ? __pfx_kthread+0x10/0x10 [ 388.484214][T14129] ret_from_fork+0x4b/0x80 [ 388.488642][T14129] ? __pfx_kthread+0x10/0x10 [ 388.493240][T14129] ret_from_fork_asm+0x1a/0x30 [ 388.498028][T14129] [ 388.502011][T14129] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 388.511626][T14129] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 14129, name: kworker/u8:17 [ 388.521244][T14129] preempt_count: 0, expected: 0 [ 388.526443][T14129] RCU nest depth: 1, expected: 0 [ 388.531416][T14129] 3 locks held by kworker/u8:17/14129: [ 388.537011][T14129] #0: ffff88806320d948 ((wq_completion)bond0#7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 388.548236][T14129] #1: ffffc900100d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 388.561552][T14129] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 388.571342][T14129] CPU: 0 UID: 0 PID: 14129 Comm: kworker/u8:17 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 388.582411][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.592505][T14129] Workqueue: bond0 bond_mii_monitor [ 388.597757][T14129] Call Trace: [ 388.601059][T14129] [ 388.604003][T14129] dump_stack_lvl+0x241/0x360 [ 388.608720][T14129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.613944][T14129] ? __pfx__printk+0x10/0x10 [ 388.618548][T14129] ? __schedule+0x1a09/0x4c30 [ 388.623265][T14129] __might_resched+0x5d4/0x780 [ 388.628061][T14129] ? preempt_schedule_notrace+0xf6/0x140 [ 388.633711][T14129] ? __pfx___might_resched+0x10/0x10 [ 388.639002][T14129] ? __pfx___schedule+0x10/0x10 [ 388.643863][T14129] ? irqentry_exit+0x63/0x90 [ 388.648461][T14129] ? lockdep_hardirqs_on+0x99/0x150 [ 388.653683][T14129] down_read+0x8e/0xa40 [ 388.657850][T14129] ? dump_stack_lvl+0x2f9/0x360 [ 388.662717][T14129] ? preempt_schedule_notrace+0x100/0x140 [ 388.668442][T14129] ? __pfx_down_read+0x10/0x10 [ 388.673217][T14129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.678437][T14129] ? __pfx__printk+0x10/0x10 [ 388.683043][T14129] ? dev_get_flags+0x147/0x1d0 [ 388.687830][T14129] wext_netdev_notifier_call+0x1f/0x120 [ 388.693396][T14129] notifier_call_chain+0x1a5/0x3f0 [ 388.698525][T14129] netdev_state_change+0x11f/0x1a0 [ 388.703652][T14129] ? __pfx_netdev_state_change+0x10/0x10 [ 388.709298][T14129] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 388.715200][T14129] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.721539][T14129] ? rfc2863_policy+0x10e/0x3b0 [ 388.726418][T14129] linkwatch_do_dev+0x112/0x170 [ 388.731287][T14129] ethtool_op_get_link+0x15/0x60 [ 388.736233][T14129] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 388.741874][T14129] bond_check_dev_link+0x1f1/0x3f0 [ 388.747138][T14129] ? __pfx_bond_check_dev_link+0x10/0x10 [ 388.752879][T14129] bond_mii_monitor+0x49a/0x3170 [ 388.757838][T14129] ? __lock_acquire+0x1397/0x2100 [ 388.763004][T14129] ? bond_mii_monitor+0x174/0x3170 [ 388.768128][T14129] ? do_raw_spin_unlock+0x13c/0x8b0 [ 388.773337][T14129] ? __pfx_bond_mii_monitor+0x10/0x10 [ 388.778733][T14129] ? __pfx_lock_acquire+0x10/0x10 [ 388.783771][T14129] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 388.789766][T14129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 388.796137][T14129] ? process_scheduled_works+0x976/0x1840 [ 388.801891][T14129] process_scheduled_works+0xa66/0x1840 [ 388.807514][T14129] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.813513][T14129] ? assign_work+0x364/0x3d0 [ 388.818119][T14129] worker_thread+0x870/0xd30 [ 388.822728][T14129] ? __kthread_parkme+0x169/0x1d0 [ 388.827764][T14129] ? __pfx_worker_thread+0x10/0x10 [ 388.832881][T14129] kthread+0x2f0/0x390 [ 388.836979][T14129] ? __pfx_worker_thread+0x10/0x10 [ 388.842182][T14129] ? __pfx_kthread+0x10/0x10 [ 388.846785][T14129] ret_from_fork+0x4b/0x80 [ 388.851203][T14129] ? __pfx_kthread+0x10/0x10 [ 388.855801][T14129] ret_from_fork_asm+0x1a/0x30 [ 388.860584][T14129] [ 388.864689][T14129] [ 388.867038][T14129] ============================= [ 388.871884][T14129] [ BUG: Invalid wait context ] [ 388.875122][ T5842] Bluetooth: hci3: command tx timeout [ 388.876715][T14129] 6.13.0-rc5-syzkaller-00769-g356939999438 #0 Tainted: G W [ 388.890657][T14129] ----------------------------- [ 388.895504][T14129] kworker/u8:17/14129 is trying to lock: [ 388.901127][T14129] ffffffff8fca7710 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 388.910613][T14129] other info that might help us debug this: [ 388.916504][T14129] context-{5:5} [ 388.919960][T14129] 3 locks held by kworker/u8:17/14129: [ 388.925450][T14129] #0: ffff88806320d948 ((wq_completion)bond0#7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 388.936530][T14129] #1: ffffc900100d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 388.949418][T14129] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 388.959089][T14129] stack backtrace: [ 388.962803][T14129] CPU: 0 UID: 0 PID: 14129 Comm: kworker/u8:17 Tainted: G W 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 388.975307][T14129] Tainted: [W]=WARN [ 388.979196][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.989255][T14129] Workqueue: bond0 bond_mii_monitor [ 388.994472][T14129] Call Trace: [ 388.997756][T14129] [ 389.000689][T14129] dump_stack_lvl+0x241/0x360 [ 389.005399][T14129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.010603][T14129] ? __pfx__printk+0x10/0x10 [ 389.015205][T14129] __lock_acquire+0x15a8/0x2100 [ 389.020065][T14129] lock_acquire+0x1ed/0x550 [ 389.024572][T14129] ? wext_netdev_notifier_call+0x1f/0x120 [ 389.030307][T14129] ? __pfx_lock_acquire+0x10/0x10 [ 389.035335][T14129] ? preempt_schedule_notrace+0xf6/0x140 [ 389.040969][T14129] ? __pfx___might_resched+0x10/0x10 [ 389.046256][T14129] ? __pfx___schedule+0x10/0x10 [ 389.051271][T14129] ? irqentry_exit+0x63/0x90 [ 389.055963][T14129] ? lockdep_hardirqs_on+0x99/0x150 [ 389.061201][T14129] down_read+0xb1/0xa40 [ 389.065362][T14129] ? wext_netdev_notifier_call+0x1f/0x120 [ 389.071106][T14129] ? dump_stack_lvl+0x2f9/0x360 [ 389.075963][T14129] ? preempt_schedule_notrace+0x100/0x140 [ 389.081681][T14129] ? __pfx_down_read+0x10/0x10 [ 389.086448][T14129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.091667][T14129] ? __pfx__printk+0x10/0x10 [ 389.096263][T14129] ? dev_get_flags+0x147/0x1d0 [ 389.101048][T14129] wext_netdev_notifier_call+0x1f/0x120 [ 389.106598][T14129] notifier_call_chain+0x1a5/0x3f0 [ 389.111714][T14129] netdev_state_change+0x11f/0x1a0 [ 389.116835][T14129] ? __pfx_netdev_state_change+0x10/0x10 [ 389.122472][T14129] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 389.128365][T14129] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 389.134693][T14129] ? rfc2863_policy+0x10e/0x3b0 [ 389.139563][T14129] linkwatch_do_dev+0x112/0x170 [ 389.144416][T14129] ethtool_op_get_link+0x15/0x60 [ 389.149404][T14129] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 389.155082][T14129] bond_check_dev_link+0x1f1/0x3f0 [ 389.160211][T14129] ? __pfx_bond_check_dev_link+0x10/0x10 [ 389.165862][T14129] bond_mii_monitor+0x49a/0x3170 [ 389.170806][T14129] ? __lock_acquire+0x1397/0x2100 [ 389.175836][T14129] ? bond_mii_monitor+0x174/0x3170 [ 389.180952][T14129] ? do_raw_spin_unlock+0x13c/0x8b0 [ 389.186151][T14129] ? __pfx_bond_mii_monitor+0x10/0x10 [ 389.191530][T14129] ? __pfx_lock_acquire+0x10/0x10 [ 389.196567][T14129] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 389.202554][T14129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 389.208888][T14129] ? process_scheduled_works+0x976/0x1840 [ 389.214607][T14129] process_scheduled_works+0xa66/0x1840 [ 389.220161][T14129] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.226145][T14129] ? assign_work+0x364/0x3d0 [ 389.230735][T14129] worker_thread+0x870/0xd30 [ 389.235329][T14129] ? __kthread_parkme+0x169/0x1d0 [ 389.240353][T14129] ? __pfx_worker_thread+0x10/0x10 [ 389.245467][T14129] kthread+0x2f0/0x390 [ 389.249538][T14129] ? __pfx_worker_thread+0x10/0x10 [ 389.254659][T14129] ? __pfx_kthread+0x10/0x10 [ 389.259258][T14129] ret_from_fork+0x4b/0x80 [ 389.263672][T14129] ? __pfx_kthread+0x10/0x10 [ 389.268265][T14129] ret_from_fork_asm+0x1a/0x30 [ 389.273040][T14129] [ 389.278554][T14129] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 389.343352][T16962] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.350608][T16962] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.565371][T14129] bond0: (slave bridge0): link status definitely down, disabling slave [ 389.933274][ T11] hsr_slave_0: left promiscuous mode [ 389.939295][ T11] hsr_slave_1: left promiscuous mode [ 389.948283][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.956167][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.963870][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.971728][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.988157][ T11] veth1_macvtap: left promiscuous mode [ 389.993701][ T11] veth0_macvtap: left promiscuous mode [ 389.999399][ T11] veth1_vlan: left promiscuous mode [ 390.004652][ T11] veth0_vlan: left promiscuous mode [ 390.167992][ T11] team0 (unregistering): Port device team_slave_1 removed [ 390.198161][ T11] team0 (unregistering): Port device team_slave_0 removed [ 390.405358][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 390.699307][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.798358][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.848957][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.920360][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.988679][ T11] bridge_slave_1: left allmulticast mode [ 390.994366][ T11] bridge_slave_1: left promiscuous mode [ 391.000088][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.008605][ T11] bridge_slave_0: left allmulticast mode [ 391.014270][ T11] bridge_slave_0: left promiscuous mode [ 391.019986][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.028298][ T11] bridge_slave_1: left allmulticast mode [ 391.033943][ T11] bridge_slave_1: left promiscuous mode [ 391.040017][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.048138][ T11] bridge_slave_0: left allmulticast mode [ 391.053815][ T11] bridge_slave_0: left promiscuous mode [ 391.059521][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.131941][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 391.210361][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.222031][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.231783][ T11] bond0 (unregistering): Released all slaves [ 391.240436][ T11] bond0 (unregistering): Released all slaves [ 391.505335][T14379] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 391.674653][ T11] hsr_slave_0: left promiscuous mode [ 391.680748][ T11] hsr_slave_1: left promiscuous mode [ 391.687434][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.700218][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.710942][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.720234][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.730152][ T11] veth1_macvtap: left promiscuous mode [ 391.735828][ T11] veth0_macvtap: left promiscuous mode [ 391.741365][ T11] veth1_vlan: left promiscuous mode [ 391.746749][ T11] veth0_vlan: left promiscuous mode [ 391.909800][ T11] team0 (unregistering): Port device team_slave_1 removed [ 391.940867][ T11] team0 (unregistering): Port device team_slave_0 removed [ 392.605129][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 393.705150][T14380] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 394.805065][ T7107] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 395.925270][T14134] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 397.025173][T14379] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!