last executing test programs: 1m26.252925187s ago: executing program 2 (id=736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff, 0x2e9, 0xb}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000006c00000000000000ffffffff000000000000000000000000000000000100"/500], 0x23c}}, 0x0) 1m17.227049918s ago: executing program 1 (id=1342): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) (async) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) (async) 1m16.195477657s ago: executing program 2 (id=736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff, 0x2e9, 0xb}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000006c00000000000000ffffffff000000000000000000000000000000000100"/500], 0x23c}}, 0x0) 1m1.765407402s ago: executing program 1 (id=1342): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) (async) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) (async) 1m0.712956448s ago: executing program 2 (id=736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff, 0x2e9, 0xb}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000231095cf9c94fa2390402fb606a2fde8b16fa8ac6efa3e50b2c9aba2bf9bcc85c84f2cace22faf6f412013944ddd6dd81ff156eeb59bd80bd7498ddb1bfd90b872ff773bf6376bab771934b1eb8d09995a8a60d12c0840cc8d304bbcbe4d874e153dabdc41bbefba2292e8a53334bf95e0f4e9f0fb837b973f4aa0833e50f6b8764b5ba300c2df86a3c1ef4718fab61506c883d839f5ec6cf06750add43371f3d36232af25798b0433d09b3200896a79d86f0a5598820ef219822c8496864ad8051ed4341e39d8a40a4518654f921a8744", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000006c00000000000000ffffffff000000000000000000000000000000000100"/500], 0x23c}}, 0x0) 46.765128632s ago: executing program 1 (id=1342): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) (async) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) (async) 45.535878782s ago: executing program 2 (id=736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff, 0x2e9, 0xb}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000231095cf9c94fa2390402fb606a2fde8b16fa8ac6efa3e50b2c9aba2bf9bcc85c84f2cace22faf6f412013944ddd6dd81ff156eeb59bd80bd7498ddb1bfd90b872ff773bf6376bab771934b1eb8d09995a8a60d12c0840cc8d304bbcbe4d874e153dabdc41bbefba2292e8a53334bf95e0f4e9f0fb837b973f4aa0833e50f6b8764b5ba300c2df86a3c1ef4718fab61506c883d839f5ec6cf06750add43371f3d36232af25798b0433d09b3200896a79d86f0a5598820ef219822c8496864ad8051ed4341e39d8a40a4518654f921a8744", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000006c00000000000000ffffffff000000000000000000000000000000000100"/500], 0x23c}}, 0x0) 32.730368769s ago: executing program 1 (id=1342): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) (async) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) (async) 31.402504946s ago: executing program 2 (id=736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff, 0x2e9, 0xb}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000006c00000000000000ffffffff000000000000000000000000000000000100"/500], 0x23c}}, 0x0) 16.48779128s ago: executing program 1 (id=1342): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) (async) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) (async) 15.20954475s ago: executing program 2 (id=736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff, 0x2e9, 0xb}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000006c00000000000000ffffffff000000000000000000000000000000000100"/500], 0x23c}}, 0x0) 1.149439118s ago: executing program 3 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10a080}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@noop, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010101, 0x7}]}, @cipso={0x86, 0x2c, 0x3, [{0x2, 0x6, "84924d89"}, {0x6, 0x2}, {0x2, 0xf, "d109567cb50ec760777fb80755"}, {0x5, 0xb, "c92d3002d91d907b79"}, {0x0, 0x2}, {0x0, 0x2}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "ade34b13"}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@dev={0xac, 0x14, 0x14, 0x31}]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x44}}, 0x0) 1.047045176s ago: executing program 4 (id=2400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000b0dcd0851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000766ffffff1f000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 990.442029ms ago: executing program 3 (id=2401): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x2, 0xb558, 0x49, @remote, @remote, 0x8000, 0x40, 0x0, 0xffe00000}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffcb8, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000000000645a9", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="61c441bef6bb3de8a074c3b7b5541c2541fb9535a62f8369a37c8ae71acc6fd95d34479da67bc19089ad4605a700fb9f412e77fcc8c42a98d9e324e060107f02ac6d471b1fc6ad46e9df27fdf78e4c669c960d9dfd24aaacba9152567853c3b1898ee658699e38794ff4a92ee3ba749afd5ceb64802d23943df793ba9c0a7109a64a332f0e250bb1887def4d9d0470e78dccebc04e3f0ee752580a06dbfac149e427bc8eb755f092a043854a639ac69c74d8f8d80b031814f1", 0xb9, 0x8004081, &(0x7f0000000180)={0x11, 0x0, r0, 0x1, 0x29, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x44, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff0000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) r7 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x24) 934.059745ms ago: executing program 0 (id=2402): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) 866.770875ms ago: executing program 4 (id=2403): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0e000000020049310000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000500)={0x1, &(0x7f0000001e40)=[{0x25a, 0x18, &(0x7f0000000c00)="633a2335f5588c332d032f24829323b6caebdd9a1cf64fdc", 0x1, 0x1}]}) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$netlink(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, 0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000300)={0x5, 0x6, 0x80}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 759.837587ms ago: executing program 0 (id=2404): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa10000d0ffffff07010000f8ffffffb702000008000000b703000000000000850000003100000095ba"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) 726.744259ms ago: executing program 3 (id=2405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@empty, @in6=@private1, 0x4e22, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x1, 0x7fff}, 0xa, 0x200000, 0x2, 0x1, 0x3}}, 0xb8}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000280), 0x0}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000003c0)) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0xffdfff4b, 0x0, 0x0, 0x1}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000200)=0xc) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0000d20b06000500029700"], 0x24}}, 0x0) 632.699259ms ago: executing program 4 (id=2406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x2) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3d, &(0x7f0000000040)=""/243, &(0x7f0000000140)=0xf3) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4040000) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e23, 0xd, @remote, 0x1}, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1, {[0xffffc0f6, 0x10, 0xffffffff, 0x2c17, 0x7, 0xd1a8, 0x6, 0x6]}}, 0x5c) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000340)=0x80000000, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4045}, 0x20000000) (async) r5 = accept4$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x6e, 0x800) connect$unix(r5, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r3, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0xaf9c, 0x3, 0x808, r6, 0x8, '\x00', r4, r7, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001bc0)={'ip6gre0\x00', &(0x7f0000001b40)={'ip6_vti0\x00', r4, 0x2f, 0x4, 0x3, 0x8, 0x7e, @empty, @remote, 0x20, 0x7, 0x5, 0x9}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c80)={r6, 0x58, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{&(0x7f0000000700)={0xa, 0x4e20, 0x8, @loopback}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000740)="5960fa18361b6074752a", 0xa}, {&(0x7f0000000780)="4b8f301dfdc017ea21f570d4536f05a1ec9d55126605ffa85b588f63f2e8056ee1c162d253b61f52486712ccdb2547731d23c783125d5c0f413c73dfe37d8d2a1ad77f47ab793d4d8a3bb94c1d6fa2f179c3f5e192bb394342bd6703511562eaca79da7214a63365167eb90fb1a6d777e5c9ad26b2ccd4c44832df4274055411e8ef5e2c32cb9a5f1f", 0x89}, {&(0x7f0000000840)="a73b8617346381649dcfee5a23f83daa50b82672248abd814b5cddcfcd78039d541b468bffb52a6a0d4196d3f4e490c3327a55569dec475f710b3b19ab67d99e9ab5678ed4903b92cedcf0c56c106f0c4c328ece2cff2bcda7cb9033b74afddabcabff6dcca4f396f302faa6d829b25d93f9e9a8b5f3141a26be7f7980b3676104217cce1ea1616d58741d78b9ffea36037203edbd98ecba8a5083986478e13f3555b2a32e442cf4321ce42962800c5b6fdbc8f8bb21ca37058de475f70a8d66b9de2899d8b7ec219a64c474afa3e96871d5f610538caefb95ad257f1fb90907eaed033156af34cd5da37553cb60c87819dce54f8c575d2a07a6c3ab9e3f00", 0xff}], 0x3, &(0x7f0000000980)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x26}}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x2}}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x1, 0x4, 0x0, [@mcast2]}}}], 0x88}}, {{&(0x7f0000000a40)={0xa, 0x4e22, 0x9, @mcast2, 0x401}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000a80)="28c973df12ab475ccfec7d0b13273df7faa5d4f492761d15d47c4945c8d76c7ea8ed4712b3fb1e2d6f7f53ae2029d31bfe13fbf1855fc62efb90d5b93157f2493825e0fc420fba954e728d100dd37b1a38fc013774521f8932d114ee0e0eb18f00c09ef66a40c43cefc736c84bb14cbc8cc4af8d43816c47c57b2b311dc400d66b7fb863e368742908d5eae1b14fe56920773cd87676e3aea99f1501945581d8af1dfcf0f05ce4f3b88187847cf6bdbadd2ca49e604f027353db6f8864b605e8121fe42f78e125a67dc1ef9d128475525b1394b815b5a2a2321e0772a4b5eb8c186e6ccb7654f2758d5b83dbfdc3b724", 0xf0}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="085a1b2a70e53555575d223d00ed5224f9a34c8e2388a2161ee6862770af652ae0abdd348a4cf96d4b3535a5f58c1a049aa7d255c7a62297a5e581454163583ffad358da8d9545f41eb8acc2457547dcfcb2765a01e0f44b035923d6bf9563d1e34ad1e1406900d3408c8a444834c5427f1eb40079e07f41c6fc8cda7c49f6d80d693086ba38c2f189766eea58a876ec37", 0x91}, {&(0x7f0000000c80)="a1eab19745b43dcd83d9dfb186158a762d5fff2a08e554567bafdb64347c9b642966842dbaf9b9ee5251a3948a291facb3a468a6583ec7389b8066590b243d8be0fd6cd9ae0f7579d8c25712badd939e5b53628634193cc48469af26082f512db4b49723d4a49620595acea8aaa2a95ab82751518e17ec1996bd70381d5fb8463217a8e1f4975ed428b7f9212273e770635a72b9b8e45dce9a34d845661d1f949ffbf5c81eb750ebb95eb316b78316081f2648c87e131567575c85e9adff92713b1ea47037184494c05886faca5ea43262b9df553b2c2397b5d241ab2db336", 0xdf}], 0x4, &(0x7f0000000dc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9e1}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dstopts={{0x30, 0x29, 0x37, {0x88, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xfff}, @generic={0x4, 0xd, "888969dbdd083c1a32ef3299d3"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0xa8, 0x29, 0x39, {0x84, 0x12, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x138}}, {{&(0x7f0000000f00)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000f40)="fb84c292104ab6b39b622431de351d0f0c6c4491b7f70c73", 0x18}, {&(0x7f0000000f80)="28ce96ceadc907b64203a1991ec89f34d60e75dee80b14f8f187b0e97be8983b260643b0e1553725bdb62fb2a68c44de9ae41de9ffec1f90f7f2", 0x3a}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)="03567174fcce5a554482137c809e17edc7ba04cffe3cc15393461bfc21560be8c19ae5c1dc7300e026", 0x29}, {&(0x7f0000001040)="45892ba962a468da5dd042b42b38456f3ee85e57751979ce804db94acedf22ba04ef908df1138d1e45fe055399b42d97cce418b6c880880e7307d0862b8a5232811aa168c790d1793b32499536a1db959fd00100aa8f37f0de2ad1cf5b1f3ccb3932fdb041526e960721eee71107bc6db1e1c639dfdc8038ab2d44ab0c28785f140f7015f9cdb276c412b57215e4b3de40ddbb0fd8d546db754dd3a4e0111e501897e9fc1b253b707dbc3f808e055bb354fc5b3e902970fb130148d87c5b36d6f2ab3ac6efdb9e678586eb587f1785d85c48359e96c1356f7817d93827b46379", 0xe0}, {&(0x7f0000001140)="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", 0xfc}, {&(0x7f0000001240)="6c667cccde457be55c6aef1ec1d7257c2824def3e9ac1b6f4b6e331f969afd3d285b96c60016c99cda8b189eb19a49fc7a9da6cb6c710318b981a2c93644f7dba73a18e772ec1c7701dd9b4c754b74e6677d260308bab861efd6d11da3e6bc9b515b7ef57af01f1bc5b4e32568172fd068dc0188deed3ada8e5e1914e67abfb57f174416e3a58e7c5e4756c8d625d9f9732f9eae54711bb8b1821acef32c6876f91342d733da117cd894c0de6fbc3acd3c315e482882024d723a248b2dac", 0xbe}, {&(0x7f0000001300)="24b03aab7e1b7d1402af336715ebb0bb78a1bcc709260f2aab69a78b4d22ee9979a428afeec90f7e5c7519b7e108b5508eb43ed678e52f129ee9ecd750d81bb9736fa7afa9c9187b5d611ca90e152fcd443bc3a754924f893c7c0d6ed96f0e78444a196467685af0da748ed3ea96587bb98507c21417127457e74f75a34683c26a784532f1f7ee70389827a1938c2d793efb4d56eb04f5b02892ffc5803971f5c4982555714fe5906dd34c5241da4123a27dabb303d3b9acb47c0286cc56a670ef999236be80fec527e3b8807d435fe948a031473c1774256acf13f7f36254c806c35c99", 0xe4}], 0x8}}, {{&(0x7f0000001480)={0xa, 0x4e24, 0x3, @empty, 0x2}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000014c0)="df4e6f0e02303a7c334059c0b881428e922ef8f7e528379b976995240232a535f0fd9289c570da49d5e4902070b9441ee38e393b", 0x34}, {&(0x7f0000001500)="1b3034656f6b68719210a9c33a5465f5c94b99146024cc363b22a5b190e3299526d32fd73758c8e341511b66bfe5afe399f4fc90fe60c2a761325e32c285feb3c84d24a4b5c20145303a5752bfad7caad3e8d022182047c124b7a25dfc96fb406cd90366601551f993f60ada93d2d060609f4753d6eafc6296d4b782d171e09a53c38d6ae74f7e039dba697ec17d9fae45c4532d9dcfc8d04317bb05033ad6398068f01afc7859eb9a012f131d64b41851c1b6455f6bd9cad2ef0acc1751bbfa83d7d94c", 0xc4}, {&(0x7f0000001600)="e257b7df3926dba810e7fc0769cde705a43235", 0x13}], 0x3, &(0x7f0000001680)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r4}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2e, 0x2, 0x2, 0x6, 0x0, [@empty]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x84, 0xe, 0x0, 0xae, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @empty, @mcast1, @mcast1, @local, @local]}}}], 0xd8}}, {{&(0x7f0000001780)={0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f00000017c0)="dd214e5c20055a0d218c947d103d66db86be7851d4e5792ecaa5dd8f48bdd5a773f13c0035945e5207c6ae779dcef6ac7475451f3dcfbab22e26215a9dddadb62d45f975a6e1ed1be93accd174c75260557ea7fabc23c12b92d98f13062c13c8d1e3528b3bbb5ceef7fb294772198f92ad89a5d329964f86ff225a6441e3c17bc599ddcf8e6b14", 0x87}, {&(0x7f0000001880)="364c6757242b8e41ea3785d563923cfa9455c464fe8d36238e7594cbc89eebde47a2e67d4dc8a518e05749fa04f14eb5fa87f14f0556321d51c3ad973038ac0f5284de06e4904f4e86209d1696774e5e7fbe2d5a92c6d85fff6c84f26067d476771e0b704897", 0x66}, {&(0x7f0000001900)="a14389e5543558e3fcd4006b2b981fc83f75597597a9e0bf3eb07393bdf897666d40af3f95359451b0ad44a3d646ee", 0x2f}, {&(0x7f0000001940)="7da9b3822f9aa7dae2d235cc3f277723da46ef35305cd54acda62e043d59877158367998de09ba4f9a6dab16f0ec5aa70413b0a0e8ed941e986c072256c3d834147581d90e8362fcd64f2ce918a57742de195984f23b9520767fefa8ff8239ca3370", 0x62}, {&(0x7f00000019c0)="82bb0489379766c2fb73a346ede5d21e018a0ff4c10b7b0d4487f2ee53250fdca8da1a17929c5dfef4d18c50d1ccd8c218c80ad6974a40fe037a59790e225502ce4b49a79465c20be824b2b864478a6809d65cb7534b386330ddd87c50bd52f76f67ba35c460aedd0432a2eb1fbeb0b13411b452981c18ed448975ec9b83da96df62ed3340262994c69c1315ab793c27021ca3544b5147df4abecefc7052e2d9e0aa8cbce8c57f7f94d4fbba50eff02507ca95b1a99323dff08263802a769b966ef4aa516493510ec1b56a7f3ca65f8d", 0xd0}], 0x5, &(0x7f0000001cc0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r4}}}, @dstopts={{0x60, 0x29, 0x37, {0x5c, 0x8, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x5, 0x0, [0x5, 0x4, 0x4, 0x0, 0x3, 0x7, 0x8211]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r9}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r10}}}, @hopopts={{0x20c8, 0x29, 0x36, {0x33, 0x415, '\x00', [@generic={0x8, 0x87, "e49a9fcd00e7d56573beb162970e051f83c1257feb18c65c2224656843123bde4929d65281330c48d45fcf7e9243f5167dfdb31a4d370ee017e5861ecb680c50a91ae333d28dbc9f9747ca8de51342755bbae1f6a50a156761c670c15e78aef2084a02469d3cb4519066527b08b4a709442730be758f193ffe7e7e12347aba065c5555cabbdea7"}, @generic={0x7, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x50, 0x1000, "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"}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x2f, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x400}, @hao={0xc9, 0x10, @remote}, @jumbo, @padn]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x2238}}], 0x5, 0x4000095) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000004040)={0x89, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0xfffeffff}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x9}]}, 0x48) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r8, 0xb559e000) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000040c0)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000004100), 0x200943, 0x0) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) (async) shutdown(r0, 0x0) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000004140)={0x1, 0x0, 0x6, r4, 0x9}, 0xc) (async) r12 = accept$packet(0xffffffffffffffff, &(0x7f0000004180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000041c0)=0x14) sendto$packet(r12, &(0x7f0000004200)="3d0ac2b531b5c33c85ff0a43aada22a07ecbb07ab7cd105f69196276a4abb567d1267a05bea0b48a5ad357af15f67564ea37d7938f11d407366e6a8992c45506c6a3041d747150dd7681bb8b1c66c9dd910b967d5463a70da9f5515a98cbda8edc158d6afba6f73ef2bb2c0f06c1acfb3205a3bbe8cb21cb1b4ef2ba3a56947269315e92ea37ea0861234dec31929957abad5dbf36a582c70773da5912db45331b", 0xa1, 0x800, 0x0, 0x0) (async, rerun: 64) r13 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) getsockopt$sock_buf(r13, 0x1, 0x3d, &(0x7f00000042c0)=""/144, &(0x7f0000004380)=0x90) 569.922985ms ago: executing program 0 (id=2407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x10, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000003850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4882) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x60}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r4]) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000003c0)={0x3, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) 569.50898ms ago: executing program 3 (id=2408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25120000000800", @ANYRES32=r2, @ANYBLOB="040081000a000600080211000001"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) 403.011812ms ago: executing program 4 (id=2409): socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80805, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x13) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x100000000000000}, 0x0) 387.250469ms ago: executing program 3 (id=2410): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="253c10cd0a56ebbb", 0x8}], 0x1}}], 0x1, 0x81) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x343, 0x5}}], 0x48}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r1, 0x0, r7, 0x0, 0x8, 0x0) 316.679571ms ago: executing program 0 (id=2411): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000b0dc00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000400000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 164.255782ms ago: executing program 0 (id=2412): bpf$MAP_CREATE(0x0, 0x0, 0x0) 163.053271ms ago: executing program 4 (id=2413): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xfffffffffffffe53, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r4, 0x4000, r4}, 0x18) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000002100)=0x7, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x7ff, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) socket(0x25, 0x803, 0x3) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 81.645083ms ago: executing program 1 (id=1342): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) (async) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x7, 0xddad, 0x26, @mcast1, @private0, 0x20, 0x40, 0x3, 0x9}}) (async) 39.099759ms ago: executing program 0 (id=2414): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) 38.837825ms ago: executing program 4 (id=2415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000b0dcd0851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000076608200000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=2416): bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x2}, 0xff2c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): nd [ 291.752278][T11696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20 [ 291.826693][T11701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1785'. [ 291.952101][T11701] netlink: 'syz.4.1785': attribute type 4 has an invalid length. [ 292.207404][T11628] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.223524][T11628] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.241600][T11628] bridge_slave_0: entered allmulticast mode [ 292.267054][T11628] bridge_slave_0: entered promiscuous mode [ 292.286967][T11628] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.294115][T11628] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.315170][T11628] bridge_slave_1: entered allmulticast mode [ 292.323284][T11628] bridge_slave_1: entered promiscuous mode [ 292.338923][T11701] lo speed is unknown, defaulting to 1000 [ 292.430190][ T8007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.455344][T11628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.483486][T11628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.582738][ T8007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.634112][T11628] team0: Port device team_slave_0 added [ 292.657192][ T8007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.673112][T11628] team0: Port device team_slave_1 added [ 292.701866][T11628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.708965][T11628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.735238][T11628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.748413][T11628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.757344][T11628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.783385][T11628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.800268][ T5833] Bluetooth: hci0: command tx timeout [ 292.818677][ T8007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.870296][T11628] hsr_slave_0: entered promiscuous mode [ 292.877028][T11628] hsr_slave_1: entered promiscuous mode [ 292.883293][T11628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.890960][T11628] Cannot create hsr debugfs directory [ 293.048732][ T8007] bridge_slave_1: left allmulticast mode [ 293.054428][ T8007] bridge_slave_1: left promiscuous mode [ 293.060342][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.072521][ T8007] bridge_slave_0: left allmulticast mode [ 293.078744][ T8007] bridge_slave_0: left promiscuous mode [ 293.084433][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.488820][ T8007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.503861][ T8007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.525378][ T8007] bond0 (unregistering): Released all slaves [ 293.843252][T11727] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1792'. [ 293.936935][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.946680][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.961139][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.969512][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.978652][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.073123][T11730] lo speed is unknown, defaulting to 1000 [ 294.402678][T11737] lo speed is unknown, defaulting to 1000 [ 294.552592][ T8007] hsr_slave_0: left promiscuous mode [ 294.559222][ T8007] hsr_slave_1: left promiscuous mode [ 294.566042][ T8007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.573503][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.587573][ T8007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.595589][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.627718][ T8007] veth1_macvtap: left promiscuous mode [ 294.635138][ T8007] veth0_macvtap: left promiscuous mode [ 294.641066][ T8007] veth1_vlan: left promiscuous mode [ 294.647024][ T8007] veth0_vlan: left promiscuous mode [ 294.885200][ T5845] Bluetooth: hci0: command tx timeout [ 295.172823][ T8007] team0 (unregistering): Port device team_slave_1 removed [ 295.229500][ T8007] team0 (unregistering): Port device team_slave_0 removed [ 295.302056][T11759] Cannot find add_set index 4 as target [ 295.591594][T11765] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1805'. [ 295.988978][T11730] chnl_net:caif_netlink_parms(): no params data found [ 296.004778][ T5845] Bluetooth: hci2: command tx timeout [ 296.011492][T11628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.049457][T11771] sit0: entered promiscuous mode [ 296.107415][T11771] netlink: 'syz.4.1806': attribute type 1 has an invalid length. [ 296.124842][T11771] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1806'. [ 296.147910][T11628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.181769][T11628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.260067][T11628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.470052][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.478759][T11730] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.486521][T11730] bridge_slave_0: entered allmulticast mode [ 296.494950][T11730] bridge_slave_0: entered promiscuous mode [ 296.522593][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.531259][T11730] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.545803][T11730] bridge_slave_1: entered allmulticast mode [ 296.553988][T11730] bridge_slave_1: entered promiscuous mode [ 296.663493][T11730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.684158][T11730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.763577][T11730] team0: Port device team_slave_0 added [ 296.763825][T11802] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1816'. [ 296.793914][T11730] team0: Port device team_slave_1 added [ 296.950023][T11730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.965120][ T5845] Bluetooth: hci0: command tx timeout [ 296.967223][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.028871][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 297.040002][T11730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.064212][T11808] dummy0: left allmulticast mode [ 297.070404][T11808] bridge0: port 1(dummy0) entered disabled state [ 297.087530][T11808] batman_adv: batadv0: Adding interface: dummy0 [ 297.093847][T11808] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem. [ 297.123082][T11808] batman_adv: batadv0: Interface activated: dummy0 [ 297.146287][T11730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.153287][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.181881][T11813] Cannot find add_set index 4 as target [ 297.182660][T11730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.431826][T11730] hsr_slave_0: entered promiscuous mode [ 297.440804][T11730] hsr_slave_1: entered promiscuous mode [ 297.459270][T11730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.474721][T11730] Cannot create hsr debugfs directory [ 297.561136][T11628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.634889][T11824] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 297.699306][T11628] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.766384][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.773601][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.806473][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.813692][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.083379][ T5845] Bluetooth: hci2: command tx timeout [ 298.366645][T11854] netlink: 'syz.0.1839': attribute type 10 has an invalid length. [ 298.384446][T11852] sctp: [Deprecated]: syz.4.1838 (pid 11852) Use of int in maxseg socket option. [ 298.384446][T11852] Use struct sctp_assoc_value instead [ 298.386918][T11854] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 298.669176][T11628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.683014][T11866] macsec0: entered promiscuous mode [ 298.691442][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1840'. [ 298.722297][T11730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 298.750981][T11869] macsec0 (unregistering): left promiscuous mode [ 298.772685][T11730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 298.798328][T11730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 298.826958][T11730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.910567][T11628] veth0_vlan: entered promiscuous mode [ 298.987533][T11628] veth1_vlan: entered promiscuous mode [ 299.153252][T11628] veth0_macvtap: entered promiscuous mode [ 299.212362][T11628] veth1_macvtap: entered promiscuous mode [ 299.230611][T11730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.312032][T11730] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.353434][T11628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.394482][T11628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.425017][T11897] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 299.450407][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.457686][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.521200][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.528454][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.642029][ T5930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.663985][ T5930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.685630][ T5930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.710305][ T6118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.814330][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 300.128363][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.146103][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.155795][ T5833] Bluetooth: hci2: command tx timeout [ 300.261482][T11909] Cannot find add_set index 4 as target [ 300.284969][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.292829][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.322715][T11909] veth0: entered promiscuous mode [ 300.335732][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1854'. [ 300.477599][T11909] veth0 (unregistering): left promiscuous mode [ 300.760565][T11730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.913329][T11730] veth0_vlan: entered promiscuous mode [ 300.948675][T11730] veth1_vlan: entered promiscuous mode [ 301.028593][T11730] veth0_macvtap: entered promiscuous mode [ 301.047658][T11730] veth1_macvtap: entered promiscuous mode [ 301.116762][T11730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.136998][T11730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.188841][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.217653][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.393984][ T1100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.437272][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.450691][T11937] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1864'. [ 301.457394][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.517669][ T1100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.657922][ T1100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.713317][ T8007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.724253][ T8007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.759266][ T1100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.791185][ T8007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.799405][ T8007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.977128][ T1100] bridge_slave_1: left allmulticast mode [ 301.982836][ T1100] bridge_slave_1: left promiscuous mode [ 301.990014][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.002053][ T1100] bridge_slave_0: left allmulticast mode [ 302.008225][ T1100] bridge_slave_0: left promiscuous mode [ 302.013960][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.732831][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.761385][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.773829][ T1100] bond0 (unregistering): Released all slaves [ 302.776951][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.792739][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.801908][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.818610][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.831344][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.975468][T11951] lo speed is unknown, defaulting to 1000 [ 303.150731][ T1100] hsr_slave_0: left promiscuous mode [ 303.158919][ T1100] hsr_slave_1: left promiscuous mode [ 303.168618][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.177619][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.188359][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.199426][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.218662][ T1100] veth1_macvtap: left promiscuous mode [ 303.224210][ T1100] veth0_macvtap: left promiscuous mode [ 303.230145][ T1100] veth1_vlan: left promiscuous mode [ 303.236058][ T1100] veth0_vlan: left promiscuous mode [ 303.879587][T11966] Cannot find add_set index 4 as target [ 303.907746][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 304.112754][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 304.182235][T11980] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1877'. [ 304.291995][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.301668][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.314176][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.339186][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.347284][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.728910][T11951] chnl_net:caif_netlink_parms(): no params data found [ 304.969897][T11990] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 304.974647][ T5845] Bluetooth: hci0: command tx timeout [ 305.012203][T11994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1881'. [ 305.054147][T11981] lo speed is unknown, defaulting to 1000 [ 305.252564][T11951] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.261403][T11951] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.276048][T11951] bridge_slave_0: entered allmulticast mode [ 305.286841][T11951] bridge_slave_0: entered promiscuous mode [ 305.320624][T11951] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.330750][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.344359][T11951] bridge_slave_1: entered allmulticast mode [ 305.365677][T11951] bridge_slave_1: entered promiscuous mode [ 305.559742][T11951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.641000][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1886'. [ 305.652410][T12011] tipc: New replicast peer: 255.255.255.255 [ 305.687081][T12011] tipc: Enabled bearer , priority 10 [ 305.727978][T11951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.906952][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1886'. [ 305.942354][T12012] tipc: Disabling bearer [ 305.988547][T11951] team0: Port device team_slave_0 added [ 306.104693][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.281554][T11951] team0: Port device team_slave_1 added [ 306.361687][T12019] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1888'. [ 306.411742][ T5845] Bluetooth: hci2: command tx timeout [ 306.489817][T12027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1893'. [ 306.490219][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.611385][T11951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.626228][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.684990][T11951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.762034][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.871785][T11951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.883516][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.911104][T11951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.976253][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.012345][T12044] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 307.036146][ T5845] Bluetooth: hci0: command tx timeout [ 307.214063][T12042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.348270][T11951] hsr_slave_0: entered promiscuous mode [ 307.373172][T11951] hsr_slave_1: entered promiscuous mode [ 307.381048][T11951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.399279][T11951] Cannot create hsr debugfs directory [ 307.427806][T11981] chnl_net:caif_netlink_parms(): no params data found [ 307.473727][T12042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.589522][T12062] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1906'. [ 307.763408][T12064] lo speed is unknown, defaulting to 1000 [ 307.836733][T12042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.090998][T12069] veth1_to_batadv: entered promiscuous mode [ 308.112824][T12042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.473728][T11981] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.484684][ T5845] Bluetooth: hci2: command tx timeout [ 308.489048][T11981] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.502450][T11981] bridge_slave_0: entered allmulticast mode [ 308.514489][T11981] bridge_slave_0: entered promiscuous mode [ 308.531123][ T1100] bridge_slave_1: left allmulticast mode [ 308.543432][ T1100] bridge_slave_1: left promiscuous mode [ 308.549533][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.562831][ T1100] bridge_slave_0: left allmulticast mode [ 308.568757][ T1100] bridge_slave_0: left promiscuous mode [ 308.574641][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.951261][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.962961][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.973416][ T1100] bond0 (unregistering): Released all slaves [ 308.993780][T11981] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.002700][T11981] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.010323][T11981] bridge_slave_1: entered allmulticast mode [ 309.018389][T11981] bridge_slave_1: entered promiscuous mode [ 309.117491][ T5845] Bluetooth: hci0: command tx timeout [ 309.198853][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.218627][T12087] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 309.272762][T11981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.288102][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.393352][T11981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.438953][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.534288][T11981] team0: Port device team_slave_0 added [ 309.581861][ T1100] hsr_slave_0: left promiscuous mode [ 309.591269][ T1100] hsr_slave_1: left promiscuous mode [ 309.602557][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.611063][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.619419][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.627245][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.660609][ T1100] veth1_macvtap: left promiscuous mode [ 309.663438][T12097] FAULT_INJECTION: forcing a failure. [ 309.663438][T12097] name failslab, interval 1, probability 0, space 0, times 0 [ 309.666948][ T1100] veth0_macvtap: left promiscuous mode [ 309.683425][T12097] CPU: 0 UID: 0 PID: 12097 Comm: syz.0.1919 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 309.683449][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.683460][T12097] Call Trace: [ 309.683468][T12097] [ 309.683475][T12097] dump_stack_lvl+0x189/0x250 [ 309.683508][T12097] ? __pfx____ratelimit+0x10/0x10 [ 309.683528][T12097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.683553][T12097] ? __pfx__printk+0x10/0x10 [ 309.683578][T12097] ? __pfx___might_resched+0x10/0x10 [ 309.683608][T12097] should_fail_ex+0x414/0x560 [ 309.683636][T12097] should_failslab+0xa8/0x100 [ 309.683657][T12097] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 309.683676][T12097] ? __get_vm_area_node+0x13f/0x300 [ 309.683699][T12097] __get_vm_area_node+0x13f/0x300 [ 309.683723][T12097] __vmalloc_node_range_noprof+0x301/0x12f0 [ 309.683743][T12097] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 309.683769][T12097] ? is_bpf_text_address+0x26/0x2b0 [ 309.683827][T12097] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.683846][T12097] ? __might_fault+0xb0/0x130 [ 309.683862][T12097] ? __pfx_aa_get_newest_label+0x10/0x10 [ 309.683884][T12097] ? _parse_integer_limit+0x1ae/0x1f0 [ 309.683913][T12097] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 309.683935][T12097] __vmalloc_noprof+0xb1/0xf0 [ 309.683954][T12097] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 309.683981][T12097] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 309.684010][T12097] bpf_prog_alloc+0x3c/0x1a0 [ 309.684037][T12097] bpf_prog_load+0x735/0x1930 [ 309.684074][T12097] ? __pfx_bpf_prog_load+0x10/0x10 [ 309.684120][T12097] ? bpf_lsm_bpf+0x9/0x20 [ 309.684135][T12097] ? security_bpf+0x7e/0x300 [ 309.684158][T12097] __sys_bpf+0x5f1/0x860 [ 309.684183][T12097] ? __pfx___sys_bpf+0x10/0x10 [ 309.684219][T12097] ? ksys_write+0x22a/0x250 [ 309.684238][T12097] ? __pfx_ksys_write+0x10/0x10 [ 309.684252][T12097] ? rcu_is_watching+0x15/0xb0 [ 309.684285][T12097] __x64_sys_bpf+0x7c/0x90 [ 309.684307][T12097] do_syscall_64+0xfa/0x3b0 [ 309.684325][T12097] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.684342][T12097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.684359][T12097] ? clear_bhb_loop+0x60/0xb0 [ 309.684381][T12097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.684398][T12097] RIP: 0033:0x7f1ddb18e929 [ 309.684416][T12097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.684432][T12097] RSP: 002b:00007f1ddbf9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.684453][T12097] RAX: ffffffffffffffda RBX: 00007f1ddb3b5fa0 RCX: 00007f1ddb18e929 [ 309.684465][T12097] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 309.684477][T12097] RBP: 00007f1ddbf9c090 R08: 0000000000000000 R09: 0000000000000000 [ 309.684489][T12097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.684499][T12097] R13: 0000000000000000 R14: 00007f1ddb3b5fa0 R15: 00007ffc00925228 [ 309.684533][T12097] [ 309.684648][T12097] syz.0.1919: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 309.702165][ T1100] veth1_vlan: left promiscuous mode [ 309.733333][T12097] ,cpuset= [ 309.741966][ T1100] veth0_vlan: left promiscuous mode [ 309.743533][T12097] /,mems_allowed=0-1 [ 310.009394][T12097] CPU: 0 UID: 0 PID: 12097 Comm: syz.0.1919 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 310.009419][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.009429][T12097] Call Trace: [ 310.009436][T12097] [ 310.009445][T12097] dump_stack_lvl+0x189/0x250 [ 310.009478][T12097] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 310.009504][T12097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.009532][T12097] ? __pfx__printk+0x10/0x10 [ 310.009553][T12097] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 310.009574][T12097] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 310.009603][T12097] warn_alloc+0x214/0x310 [ 310.009628][T12097] ? __pfx_warn_alloc+0x10/0x10 [ 310.009646][T12097] ? __get_vm_area_node+0x13f/0x300 [ 310.009665][T12097] ? __get_vm_area_node+0x2b5/0x300 [ 310.009685][T12097] __vmalloc_node_range_noprof+0x326/0x12f0 [ 310.009703][T12097] ? is_bpf_text_address+0x26/0x2b0 [ 310.009746][T12097] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 310.009760][T12097] ? __might_fault+0xb0/0x130 [ 310.009774][T12097] ? __pfx_aa_get_newest_label+0x10/0x10 [ 310.009800][T12097] ? _parse_integer_limit+0x1ae/0x1f0 [ 310.009825][T12097] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 310.009843][T12097] __vmalloc_noprof+0xb1/0xf0 [ 310.009859][T12097] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 310.009882][T12097] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 310.009906][T12097] bpf_prog_alloc+0x3c/0x1a0 [ 310.009928][T12097] bpf_prog_load+0x735/0x1930 [ 310.009959][T12097] ? __pfx_bpf_prog_load+0x10/0x10 [ 310.009999][T12097] ? bpf_lsm_bpf+0x9/0x20 [ 310.010010][T12097] ? security_bpf+0x7e/0x300 [ 310.010029][T12097] __sys_bpf+0x5f1/0x860 [ 310.010051][T12097] ? __pfx___sys_bpf+0x10/0x10 [ 310.010081][T12097] ? ksys_write+0x22a/0x250 [ 310.010097][T12097] ? __pfx_ksys_write+0x10/0x10 [ 310.010109][T12097] ? rcu_is_watching+0x15/0xb0 [ 310.010137][T12097] __x64_sys_bpf+0x7c/0x90 [ 310.010155][T12097] do_syscall_64+0xfa/0x3b0 [ 310.010170][T12097] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.010184][T12097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.010199][T12097] ? clear_bhb_loop+0x60/0xb0 [ 310.010217][T12097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.010231][T12097] RIP: 0033:0x7f1ddb18e929 [ 310.010245][T12097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.010258][T12097] RSP: 002b:00007f1ddbf9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.010275][T12097] RAX: ffffffffffffffda RBX: 00007f1ddb3b5fa0 RCX: 00007f1ddb18e929 [ 310.010286][T12097] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 310.010295][T12097] RBP: 00007f1ddbf9c090 R08: 0000000000000000 R09: 0000000000000000 [ 310.010304][T12097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.010313][T12097] R13: 0000000000000000 R14: 00007f1ddb3b5fa0 R15: 00007ffc00925228 [ 310.010338][T12097] [ 310.010365][T12097] Mem-Info: [ 310.303596][T12097] active_anon:13606 inactive_anon:0 isolated_anon:0 [ 310.303596][T12097] active_file:1687 inactive_file:39944 isolated_file:0 [ 310.303596][T12097] unevictable:768 dirty:106 writeback:0 [ 310.303596][T12097] slab_reclaimable:11751 slab_unreclaimable:110085 [ 310.303596][T12097] mapped:37398 shmem:7112 pagetables:1014 [ 310.303596][T12097] sec_pagetables:0 bounce:0 [ 310.303596][T12097] kernel_misc_reclaimable:0 [ 310.303596][T12097] free:1304128 free_pcp:19005 free_cma:0 [ 310.350672][T12097] Node 0 active_anon:54424kB inactive_anon:0kB active_file:6748kB inactive_file:159572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149592kB dirty:424kB writeback:0kB shmem:26912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11664kB pagetables:3916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 310.385102][T12097] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 310.418116][T12097] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.447512][T12097] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 310.453492][T12097] Node 0 DMA32 free:1299308kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54380kB inactive_anon:0kB active_file:6748kB inactive_file:157728kB unevictable:1536kB writepending:424kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:56988kB local_pcp:18308kB free_cma:0kB [ 310.488872][T12097] lowmem_reserve[]: 0 0 1 1 1 [ 310.495572][T12097] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 310.525200][T12097] lowmem_reserve[]: 0 0 0 0 0 [ 310.529955][T12097] Node 1 Normal free:3901840kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19168kB local_pcp:8512kB free_cma:0kB [ 310.561515][ T5845] Bluetooth: hci2: command tx timeout [ 310.580237][T12097] lowmem_reserve[]: 0 0 0 0 0 [ 310.592126][T12097] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 310.615134][T12097] Node 0 DMA32: 3*4kB (E) 8*8kB (UE) 2*16kB (ME) 10*32kB (UME) 1*64kB (E) 313*128kB (UE) 261*256kB (UME) 182*512kB (UE) 107*1024kB (UME) 9*2048kB (UME) 237*4096kB (UM) = 1299308kB [ 310.652183][T12097] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 310.670165][T12097] Node 1 Normal: 170*4kB (UME) 57*8kB (UME) 48*16kB (UME) 125*32kB (UME) 46*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3901840kB [ 310.710180][T12097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.731544][T12097] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.741803][T12097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.753662][T12097] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.786610][T12097] 48740 total pagecache pages [ 310.791354][T12097] 0 pages in swap cache [ 310.807860][T12097] Free swap = 124996kB [ 310.812052][T12097] Total swap = 124996kB [ 310.816353][T12097] 2097051 pages RAM [ 310.820205][T12097] 0 pages HighMem/MovableOnly [ 310.832758][T12097] 424693 pages reserved [ 310.837111][T12097] 0 pages cma reserved [ 311.181008][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 311.196587][ T5845] Bluetooth: hci0: command tx timeout [ 311.254833][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 311.687879][ T6118] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.739213][T11981] team0: Port device team_slave_1 added [ 311.833363][T11981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.848685][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.881685][T11981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.935084][T11981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.953694][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.005101][T11981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.018468][T12110] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 312.232755][T11981] hsr_slave_0: entered promiscuous mode [ 312.262090][T11981] hsr_slave_1: entered promiscuous mode [ 312.292209][T11981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.318537][T11981] Cannot create hsr debugfs directory [ 312.646044][ T5845] Bluetooth: hci2: command tx timeout [ 312.745296][T11951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.821299][T11951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.916620][T11951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.939447][T12145] lo: entered promiscuous mode [ 312.959539][T12145] lo: entered allmulticast mode [ 312.969429][T12145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.037012][T11951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.054929][ T5911] lo speed is unknown, defaulting to 1000 [ 313.070799][ T5911] syz2: Port: 1 Link DOWN [ 313.649522][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1944'. [ 313.721116][T11951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.797091][T11951] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.847706][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.854963][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.920251][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.927496][ T5930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.101030][T11981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.160954][T11981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.190940][T11981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.226280][T11981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.461930][T11981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.541980][T11981] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.595192][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.602423][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.642262][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.649483][ T8007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.808363][T11951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.974867][T11951] veth0_vlan: entered promiscuous mode [ 315.033408][T11951] veth1_vlan: entered promiscuous mode [ 315.117279][T11951] veth0_macvtap: entered promiscuous mode [ 315.153098][T11951] veth1_macvtap: entered promiscuous mode [ 315.227169][T11951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.269917][T11951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.339626][ T1100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.357428][ T1100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.389210][ T1100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.439313][ T1100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.550318][T11981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.608804][ T5930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.626112][ T5930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.781142][T11981] veth0_vlan: entered promiscuous mode [ 315.801229][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.821499][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.835337][T11981] veth1_vlan: entered promiscuous mode [ 315.983775][T11981] veth0_macvtap: entered promiscuous mode [ 316.000331][T11981] veth1_macvtap: entered promiscuous mode [ 316.145165][T12230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1963'. [ 316.161658][T11981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.219982][T11981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.248639][T12228] lo speed is unknown, defaulting to 1000 [ 316.275157][ T6118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.370637][ T6118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.390317][ T6118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.416693][ T6118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.880790][ T5930] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.011694][ T8007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.074982][ T8007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.147275][ T5930] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.280564][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.301739][ T5930] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.335772][ T8007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.343736][ T8007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.660868][ T5930] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.060249][ T5930] bridge_slave_1: left allmulticast mode [ 318.075508][ T5930] bridge_slave_1: left promiscuous mode [ 318.081356][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.107397][ T5930] bridge_slave_0: left allmulticast mode [ 318.113127][ T5930] bridge_slave_0: left promiscuous mode [ 318.134903][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.497757][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.507348][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.517610][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.533287][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.546590][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.844158][ T5930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.859565][ T5930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.871862][ T5930] bond0 (unregistering): Released all slaves [ 318.939622][T12247] lo speed is unknown, defaulting to 1000 [ 319.217166][ T5930] hsr_slave_0: left promiscuous mode [ 319.223398][ T5930] hsr_slave_1: left promiscuous mode [ 319.234256][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.242003][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.250637][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.260759][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.285479][ T5930] veth1_macvtap: left promiscuous mode [ 319.291028][ T5930] veth0_macvtap: left promiscuous mode [ 319.297194][ T5930] veth1_vlan: left promiscuous mode [ 319.302479][ T5930] veth0_vlan: left promiscuous mode [ 319.655156][T12264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1974'. [ 319.928396][T12270] Cannot find add_set index 4 as target [ 319.970047][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.003277][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.018127][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.040390][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.049821][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.492044][ T5930] team0 (unregistering): Port device team_slave_1 removed [ 320.548420][ T5930] team0 (unregistering): Port device team_slave_0 removed [ 320.644810][ T5833] Bluetooth: hci0: command tx timeout [ 321.063724][T12247] chnl_net:caif_netlink_parms(): no params data found [ 321.245176][T12273] lo speed is unknown, defaulting to 1000 [ 321.575257][T12247] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.604881][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.622324][T12247] bridge_slave_0: entered allmulticast mode [ 321.663618][T12247] bridge_slave_0: entered promiscuous mode [ 321.725789][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.737569][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.753377][T12247] bridge_slave_1: entered allmulticast mode [ 321.773825][T12247] bridge_slave_1: entered promiscuous mode [ 321.932723][T12247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.993194][T12247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.075909][ T5833] Bluetooth: hci2: command tx timeout [ 322.149081][T12247] team0: Port device team_slave_0 added [ 322.216866][T12247] team0: Port device team_slave_1 added [ 322.352846][T12247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.370413][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.409056][T12247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.570032][T12247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.578334][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.609482][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.718449][ T5833] Bluetooth: hci0: command tx timeout [ 322.743697][T12366] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2010'. [ 322.793933][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 322.806128][T12357] xt_TCPMSS: Only works on TCP SYN packets [ 322.806451][ T5930] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.837911][T12273] chnl_net:caif_netlink_parms(): no params data found [ 322.936598][ T5930] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.984828][T12362] lo speed is unknown, defaulting to 1000 [ 323.023869][T12247] hsr_slave_0: entered promiscuous mode [ 323.030940][T12247] hsr_slave_1: entered promiscuous mode [ 323.048336][T12247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.056680][T12247] Cannot create hsr debugfs directory [ 323.111280][ T5930] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.333671][ T5930] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.339458][T12384] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 323.443458][T12273] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.451146][T12273] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.458932][T12273] bridge_slave_0: entered allmulticast mode [ 323.468876][T12273] bridge_slave_0: entered promiscuous mode [ 323.584742][T12273] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.591861][T12273] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.614820][T12273] bridge_slave_1: entered allmulticast mode [ 323.622972][T12273] bridge_slave_1: entered promiscuous mode [ 323.800384][T12273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.816917][T12273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.001630][T12396] lo speed is unknown, defaulting to 1000 [ 324.012422][T12273] team0: Port device team_slave_0 added [ 324.072319][T12273] team0: Port device team_slave_1 added [ 324.154725][ T5833] Bluetooth: hci2: command tx timeout [ 324.333390][T12273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.351234][T12273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.382850][T12273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.404360][ T5930] bridge_slave_1: left allmulticast mode [ 324.410652][ T5930] bridge_slave_1: left promiscuous mode [ 324.416870][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.427784][ T5930] bridge_slave_0: left allmulticast mode [ 324.433631][ T5930] bridge_slave_0: left promiscuous mode [ 324.439760][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.613862][T12395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.797381][ T5833] Bluetooth: hci0: command tx timeout [ 324.842651][ T5930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.855401][ T5930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.865880][ T5930] bond0 (unregistering): Released all slaves [ 324.950237][T12412] team0: Port device veth3 added [ 324.988375][T12273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.005618][T12273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.044378][T12273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.472343][T12273] hsr_slave_0: entered promiscuous mode [ 325.498639][T12273] hsr_slave_1: entered promiscuous mode [ 325.521121][T12273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.529576][T12273] Cannot create hsr debugfs directory [ 325.668239][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2031'. [ 325.721492][T12439] netlink: 'syz.0.2031': attribute type 21 has an invalid length. [ 325.812485][T12439] netlink: 'syz.0.2031': attribute type 6 has an invalid length. [ 325.827336][T12439] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2031'. [ 325.915486][ T5930] hsr_slave_0: left promiscuous mode [ 325.934609][ T5930] hsr_slave_1: left promiscuous mode [ 325.940980][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.951467][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.972500][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.984261][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.015164][ T5930] veth1_macvtap: left promiscuous mode [ 326.020821][ T5930] veth0_macvtap: left promiscuous mode [ 326.027897][ T5930] veth1_vlan: left promiscuous mode [ 326.033563][ T5930] veth0_vlan: left promiscuous mode [ 326.037248][T12449] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2037'. [ 326.234972][ T5833] Bluetooth: hci2: command tx timeout [ 326.772424][ T5930] team0 (unregistering): Port device team_slave_1 removed [ 326.817975][ T5930] team0 (unregistering): Port device team_slave_0 removed [ 326.875371][ T5833] Bluetooth: hci0: command tx timeout [ 327.269337][T12465] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 327.353407][T12247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.389064][T12247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.456390][T12469] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 327.507812][T12247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.551062][T12247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.193675][T12503] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2054'. [ 328.212847][T12505] netlink: 'syz.0.2055': attribute type 2 has an invalid length. [ 328.245948][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.256093][T12507] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 328.310446][T12505] þ`Ì: entered promiscuous mode [ 328.327985][ T5833] Bluetooth: hci2: command tx timeout [ 328.370049][T12513] netlink: zone id is out of range [ 328.375363][T12513] netlink: zone id is out of range [ 328.380785][T12513] netlink: zone id is out of range [ 328.389286][T12513] netlink: zone id is out of range [ 328.395309][T12513] netlink: zone id is out of range [ 328.400966][T12513] netlink: zone id is out of range [ 328.407561][T12513] netlink: zone id is out of range [ 328.412802][T12513] netlink: zone id is out of range [ 328.438153][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.499789][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.507005][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.603081][T12515] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 328.623856][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.631162][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.859437][T12273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.905468][T12273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.948569][T12273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.009379][T12273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.313493][T12273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.438556][T12273] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.490649][T12550] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2067'. [ 329.492171][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.506943][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.537332][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.544576][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.672094][T12247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.813949][T12556] Cannot find add_set index 4 as target [ 329.976720][T12247] veth0_vlan: entered promiscuous mode [ 330.025282][T12247] veth1_vlan: entered promiscuous mode [ 330.051801][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 330.099005][T12565] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input21 [ 330.120202][T12247] veth0_macvtap: entered promiscuous mode [ 330.159879][T12247] veth1_macvtap: entered promiscuous mode [ 330.235639][T12247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.289882][T12247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.334040][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.391352][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.413376][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.479946][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.552115][T12273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.731518][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.754634][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.900754][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.909940][T12273] veth0_vlan: entered promiscuous mode [ 330.927652][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.970075][T12273] veth1_vlan: entered promiscuous mode [ 331.084294][T12273] veth0_macvtap: entered promiscuous mode [ 331.121907][T12273] veth1_macvtap: entered promiscuous mode [ 331.264092][T12273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.303098][T12273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.372802][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.393006][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.417148][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.447740][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.851703][ T6118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.914043][T12619] lo speed is unknown, defaulting to 1000 [ 331.974135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.996819][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.021331][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2095'. [ 332.080517][ T6118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.196959][ T5930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.207810][ T5930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.342066][ T6118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.452923][ T6118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.623030][ T6118] bridge_slave_1: left allmulticast mode [ 332.630016][ T6118] bridge_slave_1: left promiscuous mode [ 332.645513][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.686163][ T6118] bridge_slave_0: left allmulticast mode [ 332.692775][ T6118] bridge_slave_0: left promiscuous mode [ 332.704544][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.430107][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.445478][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.471498][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.480059][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.495903][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.577533][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.588961][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.599415][ T6118] bond0 (unregistering): Released all slaves [ 333.644471][T12634] lo speed is unknown, defaulting to 1000 [ 333.892941][ T6118] hsr_slave_0: left promiscuous mode [ 333.899479][ T6118] hsr_slave_1: left promiscuous mode [ 333.910383][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.921262][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.929945][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.937885][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.957213][ T6118] veth1_macvtap: left promiscuous mode [ 333.962770][ T6118] veth0_macvtap: left promiscuous mode [ 333.968934][ T6118] veth1_vlan: left promiscuous mode [ 333.974385][ T6118] veth0_vlan: left promiscuous mode [ 334.738872][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 334.807884][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 334.852639][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.863602][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.890851][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.907867][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.915985][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.325919][T12647] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 335.337968][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 335.417705][T12634] chnl_net:caif_netlink_parms(): no params data found [ 335.604733][ T5833] Bluetooth: hci0: command tx timeout [ 335.673461][T12656] lo speed is unknown, defaulting to 1000 [ 335.681968][T12670] netlink: 'syz.4.2106': attribute type 1 has an invalid length. [ 335.702709][T12670] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2106'. [ 335.713075][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2106'. [ 335.776058][T12634] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.783269][T12634] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.804282][T12634] bridge_slave_0: entered allmulticast mode [ 335.814114][T12634] bridge_slave_0: entered promiscuous mode [ 335.823604][T12634] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.831141][T12634] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.838837][T12634] bridge_slave_1: entered allmulticast mode [ 335.855210][T12634] bridge_slave_1: entered promiscuous mode [ 335.867072][T12664] lo speed is unknown, defaulting to 1000 [ 336.011916][T12680] net_ratelimit: 32 callbacks suppressed [ 336.011937][T12680] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.095432][T12634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.151125][T12634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.273049][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 336.300295][T12634] team0: Port device team_slave_0 added [ 336.319837][T12634] team0: Port device team_slave_1 added [ 336.552741][T12680] lo speed is unknown, defaulting to 1000 [ 336.599886][T12634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.608268][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.646188][T12634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.679618][T12634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.695645][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.754714][T12634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.954730][ T5833] Bluetooth: hci2: command tx timeout [ 337.229691][ T6118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.261137][T12717] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 337.280678][T12717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2112'. [ 337.337942][T12634] hsr_slave_0: entered promiscuous mode [ 337.344919][T12634] hsr_slave_1: entered promiscuous mode [ 337.351419][T12634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.365164][T12634] Cannot create hsr debugfs directory [ 337.451081][ T6118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.657445][ T6118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.675195][ T5833] Bluetooth: hci0: command tx timeout [ 337.692256][T12656] chnl_net:caif_netlink_parms(): no params data found [ 337.791625][ T6118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.037527][T12656] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.061098][T12656] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.069420][T12656] bridge_slave_0: entered allmulticast mode [ 338.096890][T12656] bridge_slave_0: entered promiscuous mode [ 338.116228][T12656] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.135368][T12656] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.147519][T12656] bridge_slave_1: entered allmulticast mode [ 338.210749][T12656] bridge_slave_1: entered promiscuous mode [ 338.533831][T12656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.556781][T12754] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 338.632339][T12656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.858493][T12656] team0: Port device team_slave_0 added [ 338.868298][ T6118] bridge_slave_1: left allmulticast mode [ 338.875098][ T6118] bridge_slave_1: left promiscuous mode [ 338.885341][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.986000][ T6118] bridge_slave_0: left allmulticast mode [ 338.991717][ T6118] bridge_slave_0: left promiscuous mode [ 338.998547][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.034725][ T5833] Bluetooth: hci2: command tx timeout [ 339.441401][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.453943][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.466824][ T6118] bond0 (unregistering): Released all slaves [ 339.521597][T12656] team0: Port device team_slave_1 added [ 339.556052][T12769] batman_adv: batadv0: Adding interface: ip6gretap1 [ 339.563470][T12769] batman_adv: batadv0: Interface activated: ip6gretap1 [ 339.733960][T12777] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.743048][ T5840] IPVS: starting estimator thread 0... [ 339.762949][ T5833] Bluetooth: hci0: command tx timeout [ 339.873052][T12779] IPVS: using max 26 ests per chain, 62400 per kthread [ 339.906053][T12656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.913216][T12656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.981693][T12656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.055351][T12656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.062346][T12656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.098947][T12656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.249584][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 340.322307][ T6118] hsr_slave_0: left promiscuous mode [ 340.339844][ T6118] hsr_slave_1: left promiscuous mode [ 340.346971][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.354578][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.362777][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.370479][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.392490][ T6118] veth1_macvtap: left promiscuous mode [ 340.398337][ T6118] veth0_macvtap: left promiscuous mode [ 340.403952][ T6118] veth1_vlan: left promiscuous mode [ 340.410116][ T6118] veth0_vlan: left promiscuous mode [ 341.078212][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 341.116142][ T5833] Bluetooth: hci2: command tx timeout [ 341.132441][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 341.549560][T12656] hsr_slave_0: entered promiscuous mode [ 341.556716][T12656] hsr_slave_1: entered promiscuous mode [ 341.563148][T12656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.578158][T12656] Cannot create hsr debugfs directory [ 341.628676][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'. [ 341.642043][T12805] tipc: Enabling of bearer rejected, failed to enable media [ 341.775554][T12634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.838210][ T5833] Bluetooth: hci0: command tx timeout [ 341.907255][T12634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.952458][T12634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.123706][T12634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.327701][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2148'. [ 342.564932][T12843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2149'. [ 342.741649][T12858] netlink: 'syz.4.2153': attribute type 6 has an invalid length. [ 342.762477][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 342.870891][T12634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.929299][T12634] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.962722][T12864] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 343.028367][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.035597][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.083457][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.090688][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.110312][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2159'. [ 343.183717][T12870] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input22 [ 343.195005][ T5845] Bluetooth: hci2: command tx timeout [ 343.356863][T12868] macsec0: entered promiscuous mode [ 343.375418][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2157'. [ 343.420816][T12867] macsec0 (unregistering): left promiscuous mode [ 343.469693][T12656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.523565][T12656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.541142][T12656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 343.556609][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 343.586856][T12656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 343.732782][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 343.752589][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2162'. [ 343.870394][T12656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.921794][T12656] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.954392][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.961707][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.052204][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.059432][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.085444][T12911] netlink: 'syz.3.2165': attribute type 1 has an invalid length. [ 344.094117][T12911] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2165'. [ 344.137275][T12634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.290996][T12634] veth0_vlan: entered promiscuous mode [ 344.326119][T12634] veth1_vlan: entered promiscuous mode [ 344.442005][T12634] veth0_macvtap: entered promiscuous mode [ 344.474094][T12634] veth1_macvtap: entered promiscuous mode [ 344.593215][T12634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.674948][T12634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.745168][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.771314][T12656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.791359][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.809601][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.839314][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.954906][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 345.034415][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.073952][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.198615][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.203064][T12656] veth0_vlan: entered promiscuous mode [ 345.242885][T12944] netlink: 'syz.3.2177': attribute type 10 has an invalid length. [ 345.253068][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.254954][T12656] veth1_vlan: entered promiscuous mode [ 345.269507][T12944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2177'. [ 345.283355][T12944] batman_adv: batadv0: Interface deactivated: dummy0 [ 345.294475][T12944] batman_adv: batadv0: Removing interface: dummy0 [ 345.309306][T12944] bridge0: port 1(dummy0) entered blocking state [ 345.318982][T12944] bridge0: port 1(dummy0) entered disabled state [ 345.329387][T12944] dummy0: entered allmulticast mode [ 345.520389][T12656] veth0_macvtap: entered promiscuous mode [ 345.559912][T12656] veth1_macvtap: entered promiscuous mode [ 345.592008][T12656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.638027][T12656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.674343][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.959141][ T1100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.010743][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.041211][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.063125][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.147569][ T1100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.267203][ T1100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.284146][ T8007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.299222][ T8007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.332074][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.343947][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.640958][ T1100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.888375][ T1100] bridge_slave_1: left allmulticast mode [ 346.896121][ T1100] bridge_slave_1: left promiscuous mode [ 346.902024][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.912342][ T1100] bridge_slave_0: left allmulticast mode [ 346.919026][ T1100] bridge_slave_0: left promiscuous mode [ 346.927284][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.498772][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.508133][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.517903][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.550092][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.567674][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.653078][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.664163][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.675900][ T1100] bond0 (unregistering): Released all slaves [ 347.718480][T12974] lo speed is unknown, defaulting to 1000 [ 347.962013][T12974] chnl_net:caif_netlink_parms(): no params data found [ 348.018341][ T1100] hsr_slave_0: left promiscuous mode [ 348.024382][ T1100] hsr_slave_1: left promiscuous mode [ 348.031206][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.038686][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.047278][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.055616][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.077868][ T1100] veth1_macvtap: left promiscuous mode [ 348.083396][ T1100] veth0_macvtap: left promiscuous mode [ 348.089229][ T1100] veth1_vlan: left promiscuous mode [ 348.094601][ T1100] veth0_vlan: left promiscuous mode [ 348.569622][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 348.664004][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 348.732782][T12986] __nla_validate_parse: 1 callbacks suppressed [ 348.732803][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'. [ 349.367089][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.376944][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.379934][T13004] FAULT_INJECTION: forcing a failure. [ 349.379934][T13004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.403771][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.4.2196 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 349.403800][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.403812][T13004] Call Trace: [ 349.403820][T13004] [ 349.403828][T13004] dump_stack_lvl+0x189/0x250 [ 349.403863][T13004] ? __pfx____ratelimit+0x10/0x10 [ 349.403883][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.403911][T13004] ? __pfx__printk+0x10/0x10 [ 349.403932][T13004] ? __might_fault+0xb0/0x130 [ 349.403963][T13004] should_fail_ex+0x414/0x560 [ 349.403993][T13004] _copy_from_user+0x2d/0xb0 [ 349.404014][T13004] vmemdup_user+0x59/0xd0 [ 349.404045][T13004] map_get_next_key+0x1be/0x5f0 [ 349.404072][T13004] ? bpf_lsm_bpf+0x9/0x20 [ 349.404086][T13004] ? security_bpf+0x7e/0x300 [ 349.404111][T13004] __sys_bpf+0x7bf/0x860 [ 349.404138][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 349.404177][T13004] ? ksys_write+0x22a/0x250 [ 349.404199][T13004] ? __pfx_ksys_write+0x10/0x10 [ 349.404215][T13004] ? rcu_is_watching+0x15/0xb0 [ 349.404251][T13004] __x64_sys_bpf+0x7c/0x90 [ 349.404275][T13004] do_syscall_64+0xfa/0x3b0 [ 349.404294][T13004] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.404313][T13004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.404332][T13004] ? clear_bhb_loop+0x60/0xb0 [ 349.404356][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.404374][T13004] RIP: 0033:0x7f210a98e929 [ 349.404392][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.404408][T13004] RSP: 002b:00007f210b8dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.404431][T13004] RAX: ffffffffffffffda RBX: 00007f210abb5fa0 RCX: 00007f210a98e929 [ 349.404456][T13004] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 349.404468][T13004] RBP: 00007f210b8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 349.404480][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.404490][T13004] R13: 0000000000000000 R14: 00007f210abb5fa0 R15: 00007ffc5d5b3708 [ 349.404519][T13004] [ 349.617717][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.665374][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.685019][ T5833] Bluetooth: hci0: command tx timeout [ 349.694301][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.059530][T12991] lo: left promiscuous mode [ 350.064099][T12991] lo: left allmulticast mode [ 350.191887][T12991] sit0: left promiscuous mode [ 350.385241][T12991] bridge_slave_0: left promiscuous mode [ 351.007156][T12991] bond2: left promiscuous mode [ 351.012053][T12991] bond2: left allmulticast mode [ 351.088814][T12991] ip6gre1: left allmulticast mode [ 351.203955][ T6118] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.218703][ T6118] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.275823][T13003] lo speed is unknown, defaulting to 1000 [ 351.310664][ T6118] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.320786][ T6118] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.480660][T13034] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 351.516574][T12974] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.523802][T12974] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.552196][T12974] bridge_slave_0: entered allmulticast mode [ 351.572568][T12974] bridge_slave_0: entered promiscuous mode [ 351.584827][T12974] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.595278][T12974] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.607221][T12974] bridge_slave_1: entered allmulticast mode [ 351.616942][T12974] bridge_slave_1: entered promiscuous mode [ 351.691339][T13044] FAULT_INJECTION: forcing a failure. [ 351.691339][T13044] name failslab, interval 1, probability 0, space 0, times 0 [ 351.722132][T13044] CPU: 1 UID: 0 PID: 13044 Comm: syz.0.2208 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 351.722162][T13044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.722173][T13044] Call Trace: [ 351.722182][T13044] [ 351.722191][T13044] dump_stack_lvl+0x189/0x250 [ 351.722226][T13044] ? __pfx____ratelimit+0x10/0x10 [ 351.722247][T13044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.722276][T13044] ? __pfx__printk+0x10/0x10 [ 351.722304][T13044] ? __pfx___might_resched+0x10/0x10 [ 351.722339][T13044] should_fail_ex+0x414/0x560 [ 351.722369][T13044] ? map_get_next_key+0x22a/0x5f0 [ 351.722394][T13044] should_failslab+0xa8/0x100 [ 351.722417][T13044] __kvmalloc_node_noprof+0x161/0x5f0 [ 351.722437][T13044] ? map_get_next_key+0x22a/0x5f0 [ 351.722468][T13044] ? _copy_from_user+0x94/0xb0 [ 351.722492][T13044] map_get_next_key+0x22a/0x5f0 [ 351.722519][T13044] ? bpf_lsm_bpf+0x9/0x20 [ 351.722540][T13044] __sys_bpf+0x7bf/0x860 [ 351.722569][T13044] ? __pfx___sys_bpf+0x10/0x10 [ 351.722610][T13044] ? ksys_write+0x22a/0x250 [ 351.722632][T13044] ? __pfx_ksys_write+0x10/0x10 [ 351.722647][T13044] ? rcu_is_watching+0x15/0xb0 [ 351.722685][T13044] __x64_sys_bpf+0x7c/0x90 [ 351.722709][T13044] do_syscall_64+0xfa/0x3b0 [ 351.722728][T13044] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.722747][T13044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.722766][T13044] ? clear_bhb_loop+0x60/0xb0 [ 351.722791][T13044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.722809][T13044] RIP: 0033:0x7f1ddb18e929 [ 351.722827][T13044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.722845][T13044] RSP: 002b:00007f1ddbf9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.722868][T13044] RAX: ffffffffffffffda RBX: 00007f1ddb3b5fa0 RCX: 00007f1ddb18e929 [ 351.722882][T13044] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 351.722895][T13044] RBP: 00007f1ddbf9c090 R08: 0000000000000000 R09: 0000000000000000 [ 351.722907][T13044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.722919][T13044] R13: 0000000000000000 R14: 00007f1ddb3b5fa0 R15: 00007ffc00925228 [ 351.722952][T13044] [ 351.966253][ T5845] Bluetooth: hci0: command tx timeout [ 351.971782][ T5845] Bluetooth: hci2: command tx timeout [ 351.998819][T12974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.012155][T12974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.054041][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 352.146767][T13048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input23 [ 352.174100][T12974] team0: Port device team_slave_0 added [ 352.206695][T12974] team0: Port device team_slave_1 added [ 352.378912][T13058] bridge: RTM_NEWNEIGH with invalid ether address [ 352.453332][T12974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.467680][T12974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.507337][T12974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.549328][T12974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.574672][T12974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.640982][T12974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.681445][T13003] chnl_net:caif_netlink_parms(): no params data found [ 352.702209][T13079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2218'. [ 352.796116][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.829743][T13081] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 353.063637][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 353.168699][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.219131][T12974] hsr_slave_0: entered promiscuous mode [ 353.231744][T12974] hsr_slave_1: entered promiscuous mode [ 353.238308][T12974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.245993][T12974] Cannot create hsr debugfs directory [ 353.310986][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.550628][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.622782][T13003] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.632781][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.641655][T13003] bridge_slave_0: entered allmulticast mode [ 353.650459][T13003] bridge_slave_0: entered promiscuous mode [ 353.670188][T13003] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.686428][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.701883][T13003] bridge_slave_1: entered allmulticast mode [ 353.721670][T13003] bridge_slave_1: entered promiscuous mode [ 353.841550][T13003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.911784][T13003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.976898][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'. [ 353.994146][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2234'. [ 354.004312][ T5833] Bluetooth: hci2: command tx timeout [ 354.010864][ T5845] Bluetooth: hci0: command tx timeout [ 354.032912][T13122] netlink: 'syz.3.2234': attribute type 5 has an invalid length. [ 354.098356][T13003] team0: Port device team_slave_0 added [ 354.117982][T13003] team0: Port device team_slave_1 added [ 354.222597][T13132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2237'. [ 354.303459][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 354.322300][T13003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.332951][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.366127][T13003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.383233][ T1100] bridge_slave_1: left allmulticast mode [ 354.394616][ T1100] bridge_slave_1: left promiscuous mode [ 354.404959][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.417116][ T1100] bridge_slave_0: left allmulticast mode [ 354.428146][ T1100] bridge_slave_0: left promiscuous mode [ 354.437352][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.907214][T13137] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2238'. [ 354.971077][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.989173][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.003168][ T1100] bond0 (unregistering): Released all slaves [ 355.130563][T13003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.154619][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.182689][T13003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.309780][T13148] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2242'. [ 355.494441][T13158] netlink: 'syz.0.2243': attribute type 10 has an invalid length. [ 355.576851][T13003] hsr_slave_0: entered promiscuous mode [ 355.584121][T13003] hsr_slave_1: entered promiscuous mode [ 355.597000][T13003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.605471][T13003] Cannot create hsr debugfs directory [ 355.798165][ T1100] hsr_slave_0: left promiscuous mode [ 355.810246][ T1100] hsr_slave_1: left promiscuous mode [ 355.821345][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.834784][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.843088][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.853454][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.887156][ T1100] veth1_macvtap: left promiscuous mode [ 355.892873][ T1100] veth0_macvtap: left promiscuous mode [ 355.899520][ T1100] veth1_vlan: left promiscuous mode [ 355.906644][ T1100] veth0_vlan: left promiscuous mode [ 356.078780][ T5833] Bluetooth: hci2: command tx timeout [ 356.084292][ T5845] Bluetooth: hci0: command tx timeout [ 356.336709][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'. [ 356.720887][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 356.768923][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 357.265984][T13188] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 357.792013][T13206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2264'. [ 357.812935][T12974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 357.848670][T12974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 357.885475][T12974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.950517][T12974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.980628][T13215] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 357.981362][T13212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2267'. [ 358.033747][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 358.114649][T13219] FAULT_INJECTION: forcing a failure. [ 358.114649][T13219] name failslab, interval 1, probability 0, space 0, times 0 [ 358.129195][T13219] CPU: 1 UID: 0 PID: 13219 Comm: syz.3.2270 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 358.129223][T13219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 358.129233][T13219] Call Trace: [ 358.129241][T13219] [ 358.129250][T13219] dump_stack_lvl+0x189/0x250 [ 358.129285][T13219] ? __pfx____ratelimit+0x10/0x10 [ 358.129305][T13219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.129332][T13219] ? __pfx__printk+0x10/0x10 [ 358.129358][T13219] ? __pfx___might_resched+0x10/0x10 [ 358.129391][T13219] should_fail_ex+0x414/0x560 [ 358.129421][T13219] should_failslab+0xa8/0x100 [ 358.129444][T13219] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 358.129464][T13219] ? __alloc_skb+0x112/0x2d0 [ 358.129495][T13219] __alloc_skb+0x112/0x2d0 [ 358.129524][T13219] netlink_sendmsg+0x5c6/0xb30 [ 358.129560][T13219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.129587][T13219] ? aa_sock_msg_perm+0x94/0x160 [ 358.129613][T13219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.129645][T13219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.129670][T13219] __sock_sendmsg+0x21c/0x270 [ 358.129695][T13219] ____sys_sendmsg+0x505/0x830 [ 358.129730][T13219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.129769][T13219] ? import_iovec+0x74/0xa0 [ 358.129793][T13219] ___sys_sendmsg+0x21f/0x2a0 [ 358.129823][T13219] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.129892][T13219] ? __fget_files+0x2a/0x420 [ 358.129911][T13219] ? __fget_files+0x3a0/0x420 [ 358.129944][T13219] __x64_sys_sendmsg+0x19b/0x260 [ 358.129973][T13219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.130008][T13219] ? __pfx_ksys_write+0x10/0x10 [ 358.130022][T13219] ? rcu_is_watching+0x15/0xb0 [ 358.130055][T13219] ? do_syscall_64+0xbe/0x3b0 [ 358.130080][T13219] do_syscall_64+0xfa/0x3b0 [ 358.130097][T13219] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.130116][T13219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.130134][T13219] ? clear_bhb_loop+0x60/0xb0 [ 358.130156][T13219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.130173][T13219] RIP: 0033:0x7fc35798e929 [ 358.130190][T13219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.130205][T13219] RSP: 002b:00007fc35883c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.130226][T13219] RAX: ffffffffffffffda RBX: 00007fc357bb5fa0 RCX: 00007fc35798e929 [ 358.130238][T13219] RDX: 00000000000080c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 358.130250][T13219] RBP: 00007fc35883c090 R08: 0000000000000000 R09: 0000000000000000 [ 358.130262][T13219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.130274][T13219] R13: 0000000000000000 R14: 00007fc357bb5fa0 R15: 00007fffaea23128 [ 358.130306][T13219] [ 358.154795][ T5833] Bluetooth: hci2: command tx timeout [ 358.678126][T12974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.732233][T13243] netlink: 'syz.0.2274': attribute type 178 has an invalid length. [ 358.813869][T12974] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.950062][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.957362][ T8007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.977805][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.985078][ T8007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.017929][T13250] __nla_validate_parse: 4 callbacks suppressed [ 359.017949][T13250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2276'. [ 359.059807][T13254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2278'. [ 359.105201][T13003] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.158405][T13003] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.187737][T13003] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.195585][T13260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2279'. [ 359.231228][T13003] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.436890][T13273] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 359.516096][T13279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2283'. [ 359.641924][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'. [ 359.656887][T13003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.747265][T13003] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.763183][T13286] FAULT_INJECTION: forcing a failure. [ 359.763183][T13286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.792188][T13286] CPU: 1 UID: 0 PID: 13286 Comm: syz.3.2285 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 359.792218][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.792229][T13286] Call Trace: [ 359.792238][T13286] [ 359.792246][T13286] dump_stack_lvl+0x189/0x250 [ 359.792281][T13286] ? __pfx____ratelimit+0x10/0x10 [ 359.792302][T13286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.792331][T13286] ? __pfx__printk+0x10/0x10 [ 359.792351][T13286] ? __might_fault+0xb0/0x130 [ 359.792384][T13286] should_fail_ex+0x414/0x560 [ 359.792414][T13286] _copy_from_iter+0x1db/0x16f0 [ 359.792445][T13286] ? rcu_is_watching+0x15/0xb0 [ 359.792484][T13286] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 359.792503][T13286] ? __pfx__copy_from_iter+0x10/0x10 [ 359.792532][T13286] ? __build_skb_around+0x257/0x3e0 [ 359.792560][T13286] ? netlink_sendmsg+0x642/0xb30 [ 359.792581][T13286] ? skb_put+0x11b/0x210 [ 359.792610][T13286] netlink_sendmsg+0x6b2/0xb30 [ 359.792645][T13286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.792674][T13286] ? aa_sock_msg_perm+0x94/0x160 [ 359.792700][T13286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.792722][T13286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.792747][T13286] __sock_sendmsg+0x21c/0x270 [ 359.792773][T13286] ____sys_sendmsg+0x505/0x830 [ 359.792807][T13286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.792846][T13286] ? import_iovec+0x74/0xa0 [ 359.792868][T13286] ___sys_sendmsg+0x21f/0x2a0 [ 359.792898][T13286] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.792969][T13286] ? __fget_files+0x2a/0x420 [ 359.792989][T13286] ? __fget_files+0x3a0/0x420 [ 359.793021][T13286] __x64_sys_sendmsg+0x19b/0x260 [ 359.793052][T13286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.793091][T13286] ? __pfx_ksys_write+0x10/0x10 [ 359.793105][T13286] ? rcu_is_watching+0x15/0xb0 [ 359.793137][T13286] ? do_syscall_64+0xbe/0x3b0 [ 359.793159][T13286] do_syscall_64+0xfa/0x3b0 [ 359.793176][T13286] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.793194][T13286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.793213][T13286] ? clear_bhb_loop+0x60/0xb0 [ 359.793237][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.793254][T13286] RIP: 0033:0x7fc35798e929 [ 359.793272][T13286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.793289][T13286] RSP: 002b:00007fc35883c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.793310][T13286] RAX: ffffffffffffffda RBX: 00007fc357bb5fa0 RCX: 00007fc35798e929 [ 359.793324][T13286] RDX: 00000000000080c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 359.793337][T13286] RBP: 00007fc35883c090 R08: 0000000000000000 R09: 0000000000000000 [ 359.793349][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.793360][T13286] R13: 0000000000000000 R14: 00007fc357bb5fa0 R15: 00007fffaea23128 [ 359.793391][T13286] [ 360.114121][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2287'. [ 360.142030][T12974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.153308][T13297] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 360.173506][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.180704][ T8007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.277442][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.284914][ T8003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.498539][T12974] veth0_vlan: entered promiscuous mode [ 360.543631][T12974] veth1_vlan: entered promiscuous mode [ 360.640922][T12974] veth0_macvtap: entered promiscuous mode [ 360.658277][T12974] veth1_macvtap: entered promiscuous mode [ 360.698113][T12974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.729235][T12974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.779946][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.805433][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.840705][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.900108][ T8003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.134710][ T8007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.150625][ T8007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.238586][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.251803][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.342176][T13003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.619722][T13003] veth0_vlan: entered promiscuous mode [ 361.650143][T13345] bond0: (slave wlan1): Releasing backup interface [ 361.671912][T13345] team0: Port device veth3 removed [ 361.709561][T13003] veth1_vlan: entered promiscuous mode [ 361.731805][T13346] lo speed is unknown, defaulting to 1000 [ 361.815257][T13347] team0: Mode changed to "broadcast" [ 361.845582][T13347] vlan0: entered promiscuous mode [ 361.876859][T13347] tipc: Enabled bearer , priority 0 [ 362.044091][T13003] veth0_macvtap: entered promiscuous mode [ 362.079824][T13003] veth1_macvtap: entered promiscuous mode [ 362.176259][ T6118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.253785][T13003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.271929][T13003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.299608][ T8007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.329500][ T6118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.344352][ T8007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.355225][ T8007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.365795][ T8007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.448553][ T8003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.462318][ T8003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.497085][ T6118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.534259][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.542762][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.661162][ T6118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.852240][ T6118] bridge_slave_1: left allmulticast mode [ 362.858518][ T6118] bridge_slave_1: left promiscuous mode [ 362.866446][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.876481][ T6118] bridge_slave_0: left allmulticast mode [ 362.882127][ T6118] bridge_slave_0: left promiscuous mode [ 362.888293][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.994788][ T10] tipc: Node number set to 3368309296 [ 363.430877][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.454394][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.477199][ T6118] bond0 (unregistering): Released all slaves [ 363.517914][T13361] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 363.701463][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.712684][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.722660][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.734153][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.743986][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.825998][T13362] lo speed is unknown, defaulting to 1000 [ 363.876884][ T6118] hsr_slave_0: left promiscuous mode [ 363.883768][ T6118] hsr_slave_1: left promiscuous mode [ 363.890898][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.901330][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.909868][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.917941][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.938029][ T6118] veth1_macvtap: left promiscuous mode [ 363.943590][ T6118] veth0_macvtap: left promiscuous mode [ 363.949498][ T6118] veth1_vlan: left promiscuous mode [ 363.955189][ T6118] veth0_vlan: left promiscuous mode [ 364.453462][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 364.503194][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 365.006431][T13366] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2310'. [ 365.025369][T13368] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 365.230269][T13373] netlink: 'syz.4.2313': attribute type 58 has an invalid length. [ 365.277010][T13373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2313'. [ 365.634170][T13362] chnl_net:caif_netlink_parms(): no params data found [ 365.649775][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.665439][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.677151][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.701338][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.713703][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.836109][ T5845] Bluetooth: hci0: command tx timeout [ 365.882693][T13393] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 365.965939][T13396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2319'. [ 366.059742][T13393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2318'. [ 366.096873][T13398] netlink: 'syz.0.2319': attribute type 11 has an invalid length. [ 366.128298][T13398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2319'. [ 366.133576][T13385] lo speed is unknown, defaulting to 1000 [ 366.288691][ T6118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.335185][T13362] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.342788][T13362] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.372146][T13362] bridge_slave_0: entered allmulticast mode [ 366.388266][T13362] bridge_slave_0: entered promiscuous mode [ 366.418956][T13403] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 366.582006][ T6118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.632609][T13362] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.653459][T13362] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.669169][T13362] bridge_slave_1: entered allmulticast mode [ 366.687644][T13362] bridge_slave_1: entered promiscuous mode [ 366.753500][T13411] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2324'. [ 366.970518][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2326'. [ 367.120052][T13424] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input24 [ 367.233403][T13408] veth0_macvtap: left allmulticast mode [ 367.497726][ T6118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.619170][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.635370][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.655432][ T6112] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.663944][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.703619][T13428] bpq0: left promiscuous mode [ 367.708650][T13428] bpq0: left allmulticast mode [ 367.754819][ T5845] Bluetooth: hci2: command tx timeout [ 367.810822][ T6118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.810867][T13432] FAULT_INJECTION: forcing a failure. [ 367.810867][T13432] name failslab, interval 1, probability 0, space 0, times 0 [ 367.838219][T13432] CPU: 1 UID: 0 PID: 13432 Comm: syz.0.2328 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 367.838249][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.838261][T13432] Call Trace: [ 367.838269][T13432] [ 367.838278][T13432] dump_stack_lvl+0x189/0x250 [ 367.838312][T13432] ? __pfx____ratelimit+0x10/0x10 [ 367.838334][T13432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.838363][T13432] ? __pfx__printk+0x10/0x10 [ 367.838408][T13432] ? __pfx___might_resched+0x10/0x10 [ 367.838435][T13432] ? fs_reclaim_acquire+0x7d/0x100 [ 367.838463][T13432] should_fail_ex+0x414/0x560 [ 367.838493][T13432] should_failslab+0xa8/0x100 [ 367.838516][T13432] __kmalloc_noprof+0xcb/0x4f0 [ 367.838534][T13432] ? bpf_test_init+0xc2/0x170 [ 367.838562][T13432] bpf_test_init+0xc2/0x170 [ 367.838590][T13432] bpf_prog_test_run_xdp+0x37c/0x1000 [ 367.838632][T13432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 367.838660][T13432] ? __fget_files+0x2a/0x420 [ 367.838686][T13432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 367.838712][T13432] bpf_prog_test_run+0x2c4/0x340 [ 367.838740][T13432] __sys_bpf+0x4a4/0x860 [ 367.838766][T13432] ? __pfx___sys_bpf+0x10/0x10 [ 367.838803][T13432] ? ksys_write+0x22a/0x250 [ 367.838824][T13432] ? __pfx_ksys_write+0x10/0x10 [ 367.838839][T13432] ? rcu_is_watching+0x15/0xb0 [ 367.838875][T13432] __x64_sys_bpf+0x7c/0x90 [ 367.838898][T13432] do_syscall_64+0xfa/0x3b0 [ 367.838917][T13432] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.838934][T13432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.838953][T13432] ? clear_bhb_loop+0x60/0xb0 [ 367.838976][T13432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.838993][T13432] RIP: 0033:0x7f1ddb18e929 [ 367.839011][T13432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.839027][T13432] RSP: 002b:00007f1ddbf9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.839049][T13432] RAX: ffffffffffffffda RBX: 00007f1ddb3b5fa0 RCX: 00007f1ddb18e929 [ 367.839061][T13432] RDX: 0000000000000057 RSI: 0000200000000240 RDI: 000000000000000a [ 367.839072][T13432] RBP: 00007f1ddbf9c090 R08: 0000000000000000 R09: 0000000000000000 [ 367.839084][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.839094][T13432] R13: 0000000000000000 R14: 00007f1ddb3b5fa0 R15: 00007ffc00925228 [ 367.839126][T13432] [ 368.099511][ T5833] Bluetooth: hci0: command tx timeout [ 368.129345][T13362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.143142][T13362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.360630][T13362] team0: Port device team_slave_0 added [ 368.398636][T13362] team0: Port device team_slave_1 added [ 368.585945][T13362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.592937][T13362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.665256][T13362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.670863][T13445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2333'. [ 368.685503][T13362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.685523][T13362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.685562][T13362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.821479][T13362] hsr_slave_0: entered promiscuous mode [ 368.832573][T13362] hsr_slave_1: entered promiscuous mode [ 368.845815][T13362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.853797][T13362] Cannot create hsr debugfs directory [ 368.908371][ T6118] bridge_slave_1: left allmulticast mode [ 368.914110][ T6118] bridge_slave_1: left promiscuous mode [ 368.955715][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.982867][ T6118] bridge_slave_0: left allmulticast mode [ 368.994417][T13457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2337'. [ 368.994717][ T6118] bridge_slave_0: left promiscuous mode [ 369.011413][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.189774][T13464] FAULT_INJECTION: forcing a failure. [ 369.189774][T13464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.206606][T13464] CPU: 0 UID: 0 PID: 13464 Comm: syz.4.2340 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 369.206636][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.206648][T13464] Call Trace: [ 369.206656][T13464] [ 369.206666][T13464] dump_stack_lvl+0x189/0x250 [ 369.206700][T13464] ? __pfx____ratelimit+0x10/0x10 [ 369.206720][T13464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.206755][T13464] ? __pfx__printk+0x10/0x10 [ 369.206792][T13464] should_fail_ex+0x414/0x560 [ 369.206823][T13464] _copy_from_user+0x2d/0xb0 [ 369.206844][T13464] bpf_test_init+0xf8/0x170 [ 369.206872][T13464] bpf_prog_test_run_xdp+0x37c/0x1000 [ 369.206915][T13464] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.206942][T13464] ? __fget_files+0x2a/0x420 [ 369.206971][T13464] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.206995][T13464] bpf_prog_test_run+0x2c4/0x340 [ 369.207027][T13464] __sys_bpf+0x4a4/0x860 [ 369.207054][T13464] ? __pfx___sys_bpf+0x10/0x10 [ 369.207093][T13464] ? ksys_write+0x22a/0x250 [ 369.207114][T13464] ? __pfx_ksys_write+0x10/0x10 [ 369.207126][T13464] ? rcu_is_watching+0x15/0xb0 [ 369.207158][T13464] __x64_sys_bpf+0x7c/0x90 [ 369.207181][T13464] do_syscall_64+0xfa/0x3b0 [ 369.207198][T13464] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.207216][T13464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.207235][T13464] ? clear_bhb_loop+0x60/0xb0 [ 369.207258][T13464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.207277][T13464] RIP: 0033:0x7f210a98e929 [ 369.207295][T13464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.207312][T13464] RSP: 002b:00007f210b8dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.207332][T13464] RAX: ffffffffffffffda RBX: 00007f210abb5fa0 RCX: 00007f210a98e929 [ 369.207363][T13464] RDX: 0000000000000057 RSI: 0000200000000240 RDI: 000000000000000a [ 369.207376][T13464] RBP: 00007f210b8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 369.207387][T13464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.207398][T13464] R13: 0000000000000000 R14: 00007f210abb5fa0 R15: 00007ffc5d5b3708 [ 369.207430][T13464] [ 369.814434][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.828392][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.837042][ T5833] Bluetooth: hci2: command tx timeout [ 369.844173][ T6118] bond0 (unregistering): Released all slaves [ 370.159820][ T5833] Bluetooth: hci0: command tx timeout [ 370.367257][T13385] chnl_net:caif_netlink_parms(): no params data found [ 370.498382][T13493] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2347'. [ 370.590420][T13495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2348'. [ 370.613707][ T6118] hsr_slave_0: left promiscuous mode [ 370.634369][ T6118] hsr_slave_1: left promiscuous mode [ 370.660143][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.668381][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.688551][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.707938][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.742593][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2350'. [ 370.745768][ T6118] veth1_macvtap: left promiscuous mode [ 370.757730][ T6118] veth0_macvtap: left promiscuous mode [ 370.763420][ T6118] veth1_vlan: left promiscuous mode [ 370.770687][ T6118] veth0_vlan: left promiscuous mode [ 370.804721][T13505] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2350'. [ 371.300382][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 371.351015][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 371.830979][T13492] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2347'. [ 371.915917][ T5833] Bluetooth: hci2: command tx timeout [ 372.234962][ T5833] Bluetooth: hci0: command tx timeout [ 372.374023][T13522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2354'. [ 372.411776][T13524] netlink: 'syz.3.2355': attribute type 15 has an invalid length. [ 372.418698][T13526] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2356'. [ 372.429756][T13385] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.435253][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2354'. [ 372.440856][T13385] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.461572][T13385] bridge_slave_0: entered allmulticast mode [ 372.473721][T13385] bridge_slave_0: entered promiscuous mode [ 372.661961][T13385] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.670101][T13385] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.681802][T13385] bridge_slave_1: entered allmulticast mode [ 372.694388][T13385] bridge_slave_1: entered promiscuous mode [ 372.889233][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'. [ 372.967386][T13539] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 373.065492][T13531] lo speed is unknown, defaulting to 1000 [ 373.085354][T13385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.145296][T13385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.443706][T13553] netlink: 'syz.0.2363': attribute type 10 has an invalid length. [ 373.452225][T13553] openvswitch: netlink: Flow key attr not present in new flow. [ 373.572767][T13385] team0: Port device team_slave_0 added [ 373.639889][T13385] team0: Port device team_slave_1 added [ 373.762283][T13564] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2368'. [ 373.836300][T13385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.857051][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.883828][T13385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.932831][T13385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.940142][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.967466][T13385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.982387][T13572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.003237][ T5845] Bluetooth: hci2: command tx timeout [ 374.136266][T13385] hsr_slave_0: entered promiscuous mode [ 374.143241][T13385] hsr_slave_1: entered promiscuous mode [ 374.151832][T13385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.159873][T13385] Cannot create hsr debugfs directory [ 374.207458][T13362] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.243224][T13362] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.255562][T13576] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 374.271216][T13362] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.294361][T13362] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.620539][T13590] netlink: 'syz.3.2374': attribute type 27 has an invalid length. [ 374.724058][T13590] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 374.731634][T13590] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 374.739230][T13590] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 374.797671][T13590] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 374.838462][T13362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.863075][ T1100] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.884320][ T1100] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.910811][ T1100] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.937934][ T1100] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.021686][T13362] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.046819][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.053993][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.103624][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.110878][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.343700][T13362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.379629][T13385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.427721][T13385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.476881][T13385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.513765][T13616] __nla_validate_parse: 6 callbacks suppressed [ 375.513786][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2384'. [ 375.540193][T13385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.567460][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'. [ 375.864319][T13636] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 375.880832][T13385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.940757][T13385] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.981174][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.988410][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.037583][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.044798][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.075586][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 376.249631][T13362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.480075][T13362] veth0_vlan: entered promiscuous mode [ 376.524030][T13362] veth1_vlan: entered promiscuous mode [ 376.532830][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2394'. [ 376.577626][T13655] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input25 [ 376.668683][T13362] veth0_macvtap: entered promiscuous mode [ 376.757502][T13362] veth1_macvtap: entered promiscuous mode [ 376.799079][T13362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.853186][T13362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.923513][ T6118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.952861][ T6118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.983379][T13385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.011796][T13666] lo speed is unknown, defaulting to 1000 [ 377.018212][ T6118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.028699][ T6118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.036905][T13669] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2397'. [ 377.321864][T13676] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 377.558856][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.587225][T13683] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 377.601566][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.662036][T13385] veth0_vlan: entered promiscuous mode [ 377.784829][T13385] veth1_vlan: entered promiscuous mode [ 377.806351][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.843962][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.952382][T13697] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2408'. [ 377.969333][T13385] veth0_macvtap: entered promiscuous mode [ 378.005696][T13385] veth1_macvtap: entered promiscuous mode [ 378.062358][T13385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.103160][T13385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.288567][ T6118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.325843][ T6112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.417972][ T6112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.450306][ T6112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.552176][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.609227][T13713] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 378.728756][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.766839][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.823521][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.841149][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.877586][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.911270][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.921354][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.988500][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.038224][T13555] ------------[ cut here ]------------ [ 379.044033][T13555] refcount_t: underflow; use-after-free. [ 379.050264][T13555] WARNING: CPU: 1 PID: 13555 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 379.059993][T13555] Modules linked in: [ 379.064217][T13555] CPU: 1 UID: 0 PID: 13555 Comm: kbnepd bnep0 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 379.076795][T13555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.087638][T13555] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 379.093893][T13555] Code: 00 41 e2 8b e8 97 92 c2 fc 90 0f 0b 90 90 eb d7 e8 db e7 fe fc c6 05 35 ae c9 0a 01 90 48 c7 c7 60 41 e2 8b e8 77 92 c2 fc 90 <0f> 0b 90 90 eb b7 e8 bb e7 fe fc c6 05 12 ae c9 0a 01 90 48 c7 c7 [ 379.114141][T13555] RSP: 0018:ffffc90003c2f6a0 EFLAGS: 00010246 [ 379.120923][T13555] RAX: 6541462a6f360800 RBX: 0000000000000003 RCX: ffff888030820000 [ 379.129116][T13555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 379.137266][T13555] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 379.145516][T13555] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dffffc0000000000 [ 379.153505][T13555] R13: ffff888057ce4460 R14: ffff888057ce4478 R15: ffffffff85f66570 [ 379.161735][T13555] FS: 0000000000000000(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 379.171067][T13555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.177848][T13555] CR2: 00007f1ddb380ab8 CR3: 0000000076350000 CR4: 00000000003526f0 [ 379.186466][T13555] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.194448][T13555] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.202824][T13555] Call Trace: [ 379.206122][T13555] [ 379.209052][T13555] klist_dec_and_del+0x3c7/0x3d0 [ 379.213992][T13555] ? __pfx_klist_children_put+0x10/0x10 [ 379.219932][T13555] klist_del+0xa6/0x110 [ 379.224089][T13555] device_del+0x280/0x8e0 [ 379.228436][T13555] ? _raw_spin_unlock_irq+0x2e/0x50 [ 379.233631][T13555] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 379.239710][T13555] ? __pfx_device_del+0x10/0x10 [ 379.244568][T13555] ? netdev_unregister_kobject+0x344/0x450 [ 379.250395][T13555] unregister_netdevice_many_notify+0x1d52/0x2320 [ 379.256828][T13555] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 379.263606][T13555] ? rcu_is_watching+0x15/0xb0 [ 379.268669][T13555] ? trace_contention_end+0x39/0x120 [ 379.273952][T13555] ? __mutex_lock+0x330/0xe80 [ 379.278665][T13555] ? __lock_acquire+0xab9/0xd20 [ 379.283513][T13555] ? __lock_acquire+0xab9/0xd20 [ 379.288821][T13555] unregister_netdevice_queue+0x33c/0x380 [ 379.294908][T13555] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 379.301157][T13555] ? rtnl_net_dev_lock+0x36/0x2f0 [ 379.306197][T13555] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 379.311324][T13555] unregister_netdev+0x1f/0x60 [ 379.316662][T13555] bnep_session+0x294d/0x2b40 [ 379.321343][T13555] ? trace_sched_exit_tp+0x38/0x120 [ 379.326561][T13555] ? __lock_acquire+0xab9/0xd20 [ 379.331423][T13555] ? __pfx_bnep_session+0x10/0x10 [ 379.336593][T13555] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 379.342496][T13555] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.348860][T13555] ? __pfx_woken_wake_function+0x10/0x10 [ 379.354506][T13555] ? __kthread_parkme+0x7b/0x200 [ 379.359434][T13555] ? __kthread_parkme+0x1a1/0x200 [ 379.364453][T13555] kthread+0x70e/0x8a0 [ 379.368760][T13555] ? __pfx_bnep_session+0x10/0x10 [ 379.373781][T13555] ? __pfx_kthread+0x10/0x10 [ 379.378382][T13555] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.383594][T13555] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.389225][T13555] ? __pfx_kthread+0x10/0x10 [ 379.393854][T13555] ret_from_fork+0x3f9/0x770 [ 379.398796][T13555] ? __pfx_ret_from_fork+0x10/0x10 [ 379.403921][T13555] ? __switch_to_asm+0x39/0x70 [ 379.408708][T13555] ? __switch_to_asm+0x33/0x70 [ 379.413459][T13555] ? __pfx_kthread+0x10/0x10 [ 379.418284][T13555] ret_from_fork_asm+0x1a/0x30 [ 379.423055][T13555] [ 379.426088][T13555] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 379.433383][T13555] CPU: 1 UID: 0 PID: 13555 Comm: kbnepd bnep0 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) [ 379.445622][T13555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.455677][T13555] Call Trace: [ 379.458963][T13555] [ 379.461901][T13555] dump_stack_lvl+0x99/0x250 [ 379.466514][T13555] ? __asan_memcpy+0x40/0x70 [ 379.471126][T13555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.476319][T13555] ? __pfx__printk+0x10/0x10 [ 379.480999][T13555] panic+0x2db/0x790 [ 379.484888][T13555] ? __pfx_panic+0x10/0x10 [ 379.489310][T13555] ? show_trace_log_lvl+0x4fb/0x550 [ 379.494530][T13555] ? ret_from_fork_asm+0x1a/0x30 [ 379.499482][T13555] __warn+0x31b/0x4b0 [ 379.503468][T13555] ? refcount_warn_saturate+0x11a/0x1d0 [ 379.509015][T13555] ? refcount_warn_saturate+0x11a/0x1d0 [ 379.514556][T13555] report_bug+0x2be/0x4f0 [ 379.518888][T13555] ? refcount_warn_saturate+0x11a/0x1d0 [ 379.524423][T13555] ? refcount_warn_saturate+0x11a/0x1d0 [ 379.530045][T13555] ? refcount_warn_saturate+0x11c/0x1d0 [ 379.535599][T13555] handle_bug+0x84/0x160 [ 379.539855][T13555] exc_invalid_op+0x1a/0x50 [ 379.544382][T13555] asm_exc_invalid_op+0x1a/0x20 [ 379.549234][T13555] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 379.555382][T13555] Code: 00 41 e2 8b e8 97 92 c2 fc 90 0f 0b 90 90 eb d7 e8 db e7 fe fc c6 05 35 ae c9 0a 01 90 48 c7 c7 60 41 e2 8b e8 77 92 c2 fc 90 <0f> 0b 90 90 eb b7 e8 bb e7 fe fc c6 05 12 ae c9 0a 01 90 48 c7 c7 [ 379.574979][T13555] RSP: 0018:ffffc90003c2f6a0 EFLAGS: 00010246 [ 379.581128][T13555] RAX: 6541462a6f360800 RBX: 0000000000000003 RCX: ffff888030820000 [ 379.589110][T13555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 379.597092][T13555] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 379.605104][T13555] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dffffc0000000000 [ 379.613084][T13555] R13: ffff888057ce4460 R14: ffff888057ce4478 R15: ffffffff85f66570 [ 379.621089][T13555] ? __pfx_klist_children_put+0x10/0x10 [ 379.626658][T13555] klist_dec_and_del+0x3c7/0x3d0 [ 379.631617][T13555] ? __pfx_klist_children_put+0x10/0x10 [ 379.637689][T13555] klist_del+0xa6/0x110 [ 379.641837][T13555] device_del+0x280/0x8e0 [ 379.646167][T13555] ? _raw_spin_unlock_irq+0x2e/0x50 [ 379.651373][T13555] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 379.657433][T13555] ? __pfx_device_del+0x10/0x10 [ 379.662272][T13555] ? netdev_unregister_kobject+0x344/0x450 [ 379.668082][T13555] unregister_netdevice_many_notify+0x1d52/0x2320 [ 379.674494][T13555] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 379.681244][T13555] ? rcu_is_watching+0x15/0xb0 [ 379.686188][T13555] ? trace_contention_end+0x39/0x120 [ 379.691549][T13555] ? __mutex_lock+0x330/0xe80 [ 379.696214][T13555] ? __lock_acquire+0xab9/0xd20 [ 379.701057][T13555] ? __lock_acquire+0xab9/0xd20 [ 379.705922][T13555] unregister_netdevice_queue+0x33c/0x380 [ 379.711644][T13555] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 379.717875][T13555] ? rtnl_net_dev_lock+0x36/0x2f0 [ 379.722891][T13555] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 379.727991][T13555] unregister_netdev+0x1f/0x60 [ 379.732828][T13555] bnep_session+0x294d/0x2b40 [ 379.737498][T13555] ? trace_sched_exit_tp+0x38/0x120 [ 379.742691][T13555] ? __lock_acquire+0xab9/0xd20 [ 379.747555][T13555] ? __pfx_bnep_session+0x10/0x10 [ 379.752572][T13555] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 379.758458][T13555] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.764789][T13555] ? __pfx_woken_wake_function+0x10/0x10 [ 379.770760][T13555] ? __kthread_parkme+0x7b/0x200 [ 379.775685][T13555] ? __kthread_parkme+0x1a1/0x200 [ 379.780712][T13555] kthread+0x70e/0x8a0 [ 379.784858][T13555] ? __pfx_bnep_session+0x10/0x10 [ 379.789873][T13555] ? __pfx_kthread+0x10/0x10 [ 379.794472][T13555] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.799662][T13555] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.804843][T13555] ? __pfx_kthread+0x10/0x10 [ 379.809423][T13555] ret_from_fork+0x3f9/0x770 [ 379.814006][T13555] ? __pfx_ret_from_fork+0x10/0x10 [ 379.819388][T13555] ? __switch_to_asm+0x39/0x70 [ 379.824140][T13555] ? __switch_to_asm+0x33/0x70 [ 379.828901][T13555] ? __pfx_kthread+0x10/0x10 [ 379.833497][T13555] ret_from_fork_asm+0x1a/0x30 [ 379.838346][T13555] [ 380.988456][T13555] Shutting down cpus with NMI [ 380.993580][T13555] Kernel Offset: disabled [ 380.997902][T13555] Rebooting in 86400 seconds..