last executing test programs: 55.808593439s ago: executing program 4 (id=463): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x170, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x5, 0x5}, {0x8, 0xe}, {0xfff2, 0x5}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x0, 0x2, 0x1, 0x9, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0xaaa, 0x9]}}, {{0x1c, 0x1, {0x3, 0x4, 0xf748, 0x8, 0x1, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0x7, 0x9, 0x8001]}}, {{0x1c, 0x1, {0x5b, 0xe, 0x5a, 0xa, 0x2, 0x203, 0x85, 0x2}}, {0x8, 0x2, [0x3ff, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3, 0x8001, 0x80000000, 0x1, 0xde0, 0x3, 0x4}}, {0xc, 0x2, [0x8, 0x1ff, 0x3, 0x7]}}, {{0x1c, 0x1, {0x0, 0x0, 0xa, 0x8, 0x2, 0x9, 0x3ff, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x45d]}}, {{0x1c, 0x1, {0x7, 0x6, 0x6, 0x5, 0x0, 0x6, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0xb, 0x3, 0x6, 0x0, 0x0, 0x5093, 0x2, 0x6}}, {0x10, 0x2, [0xd, 0x2, 0x1, 0x3, 0x4, 0x48]}}, {{0x1c, 0x1, {0xbf, 0xbb, 0x8, 0x3, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0xfffc, 0x1, 0x7, 0xc, 0xd9a, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x170}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163005b9aed73"], 0x5c}}, 0x20000000) (async) socketpair(0x1a, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x20, 0x7, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xe}, {0x6}]}, 0x10) (async) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000e4ff0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8fa00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 44.369700079s ago: executing program 4 (id=463): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x170, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x5, 0x5}, {0x8, 0xe}, {0xfff2, 0x5}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x0, 0x2, 0x1, 0x9, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0xaaa, 0x9]}}, {{0x1c, 0x1, {0x3, 0x4, 0xf748, 0x8, 0x1, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0x7, 0x9, 0x8001]}}, {{0x1c, 0x1, {0x5b, 0xe, 0x5a, 0xa, 0x2, 0x203, 0x85, 0x2}}, {0x8, 0x2, [0x3ff, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3, 0x8001, 0x80000000, 0x1, 0xde0, 0x3, 0x4}}, {0xc, 0x2, [0x8, 0x1ff, 0x3, 0x7]}}, {{0x1c, 0x1, {0x0, 0x0, 0xa, 0x8, 0x2, 0x9, 0x3ff, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x45d]}}, {{0x1c, 0x1, {0x7, 0x6, 0x6, 0x5, 0x0, 0x6, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0xb, 0x3, 0x6, 0x0, 0x0, 0x5093, 0x2, 0x6}}, {0x10, 0x2, [0xd, 0x2, 0x1, 0x3, 0x4, 0x48]}}, {{0x1c, 0x1, {0xbf, 0xbb, 0x8, 0x3, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0xfffc, 0x1, 0x7, 0xc, 0xd9a, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x170}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163005b9aed73"], 0x5c}}, 0x20000000) (async) socketpair(0x1a, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x20, 0x7, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xe}, {0x6}]}, 0x10) (async) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000e4ff0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8fa00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 33.595511749s ago: executing program 4 (id=463): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x170, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x5, 0x5}, {0x8, 0xe}, {0xfff2, 0x5}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x0, 0x2, 0x1, 0x9, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0xaaa, 0x9]}}, {{0x1c, 0x1, {0x3, 0x4, 0xf748, 0x8, 0x1, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0x7, 0x9, 0x8001]}}, {{0x1c, 0x1, {0x5b, 0xe, 0x5a, 0xa, 0x2, 0x203, 0x85, 0x2}}, {0x8, 0x2, [0x3ff, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3, 0x8001, 0x80000000, 0x1, 0xde0, 0x3, 0x4}}, {0xc, 0x2, [0x8, 0x1ff, 0x3, 0x7]}}, {{0x1c, 0x1, {0x0, 0x0, 0xa, 0x8, 0x2, 0x9, 0x3ff, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x45d]}}, {{0x1c, 0x1, {0x7, 0x6, 0x6, 0x5, 0x0, 0x6, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0xb, 0x3, 0x6, 0x0, 0x0, 0x5093, 0x2, 0x6}}, {0x10, 0x2, [0xd, 0x2, 0x1, 0x3, 0x4, 0x48]}}, {{0x1c, 0x1, {0xbf, 0xbb, 0x8, 0x3, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0xfffc, 0x1, 0x7, 0xc, 0xd9a, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x170}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163005b9aed73"], 0x5c}}, 0x20000000) (async) socketpair(0x1a, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x20, 0x7, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xe}, {0x6}]}, 0x10) (async) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000e4ff0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8fa00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 25.056991614s ago: executing program 4 (id=463): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x170, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x5, 0x5}, {0x8, 0xe}, {0xfff2, 0x5}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x0, 0x2, 0x1, 0x9, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0xaaa, 0x9]}}, {{0x1c, 0x1, {0x3, 0x4, 0xf748, 0x8, 0x1, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0x7, 0x9, 0x8001]}}, {{0x1c, 0x1, {0x5b, 0xe, 0x5a, 0xa, 0x2, 0x203, 0x85, 0x2}}, {0x8, 0x2, [0x3ff, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3, 0x8001, 0x80000000, 0x1, 0xde0, 0x3, 0x4}}, {0xc, 0x2, [0x8, 0x1ff, 0x3, 0x7]}}, {{0x1c, 0x1, {0x0, 0x0, 0xa, 0x8, 0x2, 0x9, 0x3ff, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x45d]}}, {{0x1c, 0x1, {0x7, 0x6, 0x6, 0x5, 0x0, 0x6, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0xb, 0x3, 0x6, 0x0, 0x0, 0x5093, 0x2, 0x6}}, {0x10, 0x2, [0xd, 0x2, 0x1, 0x3, 0x4, 0x48]}}, {{0x1c, 0x1, {0xbf, 0xbb, 0x8, 0x3, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0xfffc, 0x1, 0x7, 0xc, 0xd9a, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x170}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163005b9aed73"], 0x5c}}, 0x20000000) (async) socketpair(0x1a, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x20, 0x7, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xe}, {0x6}]}, 0x10) (async) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000e4ff0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8fa00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 16.968306911s ago: executing program 4 (id=463): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x170, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x5, 0x5}, {0x8, 0xe}, {0xfff2, 0x5}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x0, 0x2, 0x1, 0x9, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0xaaa, 0x9]}}, {{0x1c, 0x1, {0x3, 0x4, 0xf748, 0x8, 0x1, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0x7, 0x9, 0x8001]}}, {{0x1c, 0x1, {0x5b, 0xe, 0x5a, 0xa, 0x2, 0x203, 0x85, 0x2}}, {0x8, 0x2, [0x3ff, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3, 0x8001, 0x80000000, 0x1, 0xde0, 0x3, 0x4}}, {0xc, 0x2, [0x8, 0x1ff, 0x3, 0x7]}}, {{0x1c, 0x1, {0x0, 0x0, 0xa, 0x8, 0x2, 0x9, 0x3ff, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x45d]}}, {{0x1c, 0x1, {0x7, 0x6, 0x6, 0x5, 0x0, 0x6, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0xb, 0x3, 0x6, 0x0, 0x0, 0x5093, 0x2, 0x6}}, {0x10, 0x2, [0xd, 0x2, 0x1, 0x3, 0x4, 0x48]}}, {{0x1c, 0x1, {0xbf, 0xbb, 0x8, 0x3, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0xfffc, 0x1, 0x7, 0xc, 0xd9a, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x170}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163005b9aed73"], 0x5c}}, 0x20000000) (async) socketpair(0x1a, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x20, 0x7, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xe}, {0x6}]}, 0x10) (async) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000e4ff0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8fa00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 7.739872293s ago: executing program 4 (id=463): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x170, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x5, 0x5}, {0x8, 0xe}, {0xfff2, 0x5}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x0, 0x2, 0x1, 0x9, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0xaaa, 0x9]}}, {{0x1c, 0x1, {0x3, 0x4, 0xf748, 0x8, 0x1, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0x7, 0x9, 0x8001]}}, {{0x1c, 0x1, {0x5b, 0xe, 0x5a, 0xa, 0x2, 0x203, 0x85, 0x2}}, {0x8, 0x2, [0x3ff, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3, 0x8001, 0x80000000, 0x1, 0xde0, 0x3, 0x4}}, {0xc, 0x2, [0x8, 0x1ff, 0x3, 0x7]}}, {{0x1c, 0x1, {0x0, 0x0, 0xa, 0x8, 0x2, 0x9, 0x3ff, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x45d]}}, {{0x1c, 0x1, {0x7, 0x6, 0x6, 0x5, 0x0, 0x6, 0x1, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0xb, 0x3, 0x6, 0x0, 0x0, 0x5093, 0x2, 0x6}}, {0x10, 0x2, [0xd, 0x2, 0x1, 0x3, 0x4, 0x48]}}, {{0x1c, 0x1, {0xbf, 0xbb, 0x8, 0x3, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0xfffc, 0x1, 0x7, 0xc, 0xd9a, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x170}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163005b9aed73"], 0x5c}}, 0x20000000) (async) socketpair(0x1a, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x20, 0x7, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xe}, {0x6}]}, 0x10) (async) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000e4ff0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8fa00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 1.704014905s ago: executing program 0 (id=1096): r0 = socket(0x15, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000000)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000000000000100000d0a0000000400000000030000000000000100000604000000000000017f0000000000305f5f2e61006000"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) (async) getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r3}) 1.472443622s ago: executing program 0 (id=1099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100ff05008a"], 0x30}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 1.471744343s ago: executing program 3 (id=1100): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) (async, rerun: 32) close(r1) (rerun: 32) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000040)) 1.361561899s ago: executing program 3 (id=1101): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x13, &(0x7f0000000480)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3000007, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085004000190000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0xe3, &(0x7f0000001840)=""/227, 0x41000, 0x42, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001c40)="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", 0x21e) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)}], 0x1, 0x4004) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001680)}}], 0x1, 0x42, 0x0) recvfrom$llc(r4, &(0x7f00000004c0)=""/76, 0x4c, 0x40010002, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000002c0)=0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRESOCT=r5, @ANYBLOB="0900000020000200200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYRES8=r4, @ANYRES32=r7], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 1.299262869s ago: executing program 0 (id=1103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002075400000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x200000000000001) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.189163331s ago: executing program 2 (id=1104): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000800)="5aee41dea43e63a3f7fb7f11c72bbbab20a1b7b4", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x4) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl0\x00', r3, 0x0, 0x9, 0x3a, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x10, 0x40, 0x9, 0x4}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2d95b9a2c4e03d3fea209412aedf9e9770575cd657a4eee9520eded7547174c0fb0208c9b5e826b9f6d5e9bbf3ae6969d523bee7c61ab9781b26f6fc66b29861ed62c3c8f336e5fc7a4909d181d020cbdbc73963b582b5d204f661aabb988fb4dd07f1cef097cbd8d3d075108422b8f1252ee1c7fca4d13ecf868d448f0d5f9aa44765a4b13628e45f12f88ba9c2ae8417288a59a539ab4ef1a73c5fd748c17fa4ca55e7bd95c0aa6c2f5f4cd09549e7605834ba15f293570bfc344d86149a38cf062f5ab0eea34eb1087c8a2baf7cc36865bf5ba5aa052c21c6ca90230c2d86e2f0b50b89511817", 0xe8}, {&(0x7f0000000380)="3f9e7f5aa3c48afd2fb7e9c17c6653451a3b9a9cd2af7d09222736e8726ed26f89cbf77fe3a6b1131733fa88995fc0b1762b171b2d70ecc192743d7de77fd5ebff075d8dc7918c0fb0d594e3b8106825f0a4b268f6c835f0ca38dd4c6ed87fb739b073de3cee707229a927ddc2922243be81aa9931a5b375dafdf4a5c0c8dbe37ece6d7d4bb11c42a2476604e6b902b81dd2ef4c479356bf384d600f8c4b5f61fbde44233a1278d198401e", 0xab}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x128}, 0x8014) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000800)="5aee41dea43e63a3f7fb7f11c72bbbab20a1b7b4", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000580)=0x4) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl0\x00', r3, 0x0, 0x9, 0x3a, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x10, 0x40, 0x9, 0x4}}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2d95b9a2c4e03d3fea209412aedf9e9770575cd657a4eee9520eded7547174c0fb0208c9b5e826b9f6d5e9bbf3ae6969d523bee7c61ab9781b26f6fc66b29861ed62c3c8f336e5fc7a4909d181d020cbdbc73963b582b5d204f661aabb988fb4dd07f1cef097cbd8d3d075108422b8f1252ee1c7fca4d13ecf868d448f0d5f9aa44765a4b13628e45f12f88ba9c2ae8417288a59a539ab4ef1a73c5fd748c17fa4ca55e7bd95c0aa6c2f5f4cd09549e7605834ba15f293570bfc344d86149a38cf062f5ab0eea34eb1087c8a2baf7cc36865bf5ba5aa052c21c6ca90230c2d86e2f0b50b89511817", 0xe8}, {&(0x7f0000000380)="3f9e7f5aa3c48afd2fb7e9c17c6653451a3b9a9cd2af7d09222736e8726ed26f89cbf77fe3a6b1131733fa88995fc0b1762b171b2d70ecc192743d7de77fd5ebff075d8dc7918c0fb0d594e3b8106825f0a4b268f6c835f0ca38dd4c6ed87fb739b073de3cee707229a927ddc2922243be81aa9931a5b375dafdf4a5c0c8dbe37ece6d7d4bb11c42a2476604e6b902b81dd2ef4c479356bf384d600f8c4b5f61fbde44233a1278d198401e", 0xab}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000000000002000000000000000000000011000000000000000000000001000000060000000000000014000000000000000000000002000000810000000000000014000000000000000000000002000000af02000000000000c8000000000000000707d66401010244446611ac1414bb000000006401010100000009ffffffff000000016401010100000401e000000100000fffac1414aaffffffffffffffff80000001000000007fffffff866a00000001020f42a996f701d4058c7a2454961c0105253fb10612fa07a0f34d42b68db9df7443fc1edde10009dccf33d6cc40aa0510a813370ae667c7e22735f29d1f42050addf8cfa6b237ef4206076d20fabba200020212b2425bc7ae77a6119dd641c4cf261aa1000000"], 0x128}, 0x8014) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) (async) 1.185941861s ago: executing program 3 (id=1105): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2, &(0x7f0000000480)={0x6, {{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000740)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_test={0x51, 0x0, 0x6, 0x1}}) 1.177165875s ago: executing program 1 (id=1106): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0001000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={r0, 0x98, 0x0, 0x5}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x2, 0xd, 0xa, 0x8e29, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r4, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0000dd6001010000181100fc020000000000000000000000000000ff02000000000000000000000000000100004e000000000000000300000040fb96ca0000000000000a7c5559fc24a7"], 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async, rerun: 64) close(r3) (async, rerun: 64) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xe, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x28}, 0x2000}], 0x2, 0x0, 0x0) (rerun: 32) 1.062979626s ago: executing program 2 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000004001e0000000000", 0x24) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x74, r1, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x56, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7f}, @device_b, @device_a, @initial, {0x0, 0xf4e}}, 0x10000, @random=0x8001, 0x4002, @void, @val, @val={0x3, 0x1, 0x3c}, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0x40, 0x3, 0x5, 0x0, {0x4, 0x1, 0x0, 0x84, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x4}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x40}}}}]}, 0x74}}, 0x0) 1.016740228s ago: executing program 3 (id=1108): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00100000140001002001000000000000000000000000000014000100fe800000000000000000000000000044"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) splice(r2, 0x0, r1, &(0x7f0000000000), 0x7fffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r5, &(0x7f0000002b40)={&(0x7f00000003c0)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff9}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000400)="57cbce92fcaedf03d18c4020905fbff6317e9a2dee7e5aa98b6291ab945caaeef5f52a851423a292ca971eaed4537128b66d29d3b88d67a70a5c788d890f76de4dae8f1018f98f5f67bb77baf37e2bda6cffda4f24e866c983444004c7daeacae4ad3b81830d4f6fb53cb2e5bf099810d561c40b565515b528b75ff5379f118b4e942cf3a70505e5939e33702772e670b139a162c912f2e1959ffea4a305145422a319bf2defb27fe99f3c07546a26bbbdbb58", 0xb3}, {&(0x7f00000004c0)="e3e3034abee84279954a41a0664efc809a86e92976673702ecce5e3e6ea9f72cebe2b40ff19cdb", 0x27}, {&(0x7f0000001680)="1db82d318bd95ed97a09c8593dc63afda7b7ce348554db430747bc30c0ee61945efdcc5442c2101e9883211f8a5215e6a4f18ba5091e0c56da344085a7650d663f61fb12deb9ca9e4089fa822d2793f476961c7e6b71dc06d52004543a01765ee72a5c7537998106e417aaf59273366674da143a0ddcd3c27111d7502cf2dfd820afd2b8b5cf63bbfd73018b07b19655e450", 0x92}, {&(0x7f0000001740)="30ae5497423ef8b1b4feb55f561a09b21d54b0d8e62345af48f360d3a6d6239f3d6098a38dda022632c34124f4629a32828c29556c024a1a64b6517e9222e4e705c3797a28ca53a46571e597742e1f7acc026706993114784996bde597153d3842ce17b7c62fdcf8ea28ce3353e069cad55f5bbd971819fb40e0d576293c64a5c84b70d09300785b3ca0f55cfa090bdf277cb694b4238d4fd012ec47b78e61e44e193b90e0a38b1092f1fa6f9256e67cce3811d3b1180dae937595692c997281904327", 0xc3}], 0x4, &(0x7f0000005900)=ANY=[@ANYBLOB="240000000000000029000000320d37d7d294fb00000000000000000000000000000000000001", @ANYRES32=r4, @ANYBLOB="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"], 0x1300}, 0x48000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x3, 0x3}}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x330, 0xd0, 0xffffffff, 0x330, 0xd0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, &(0x7f0000000080), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xff000000, 'lo\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x62, 0x0, 0x36}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @icmp_id=0x67, @port=0x4e22}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xff000000, 'veth0\x00', 'pim6reg\x00', {}, {}, 0x29, 0x0, 0x41}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x2, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, @gre_key=0x401, @icmp_id=0x67}}}, {{@ip={@multicast2, @remote, 0xffffff00, 0xff, 'batadv0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x2, 0x2}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x402, 0x200, 0x0, 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x0, 0x1}, {0xffffffffffffffff, 0x5, 0x3}, 0x5, 0x80000001}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x0, 0x4, 0x0, 0x2, 0x4, 0x6], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @empty, @private=0xa010102, @icmp_id=0x66, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007f9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r7, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) socket(0x8000000010, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 978.944572ms ago: executing program 0 (id=1109): unshare(0x24020400) (async, rerun: 64) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc1, 0x12d5c, 0x12d59}}, 0x44) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @binary='\vo[9'}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 868.720542ms ago: executing program 2 (id=1110): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)={0x70, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x24004000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x8890) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000104000000000000000000001fb2", @ANYRES32=r3, @ANYBLOB="0000000000000000180012800b000100697036746e6c000008000280040013"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000200fe80"], 0x74}}, 0x0) 746.408124ms ago: executing program 1 (id=1111): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe45, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', r0}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x7, 0x5e0, 0x300000}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x21, "6e177a3d81252e6f54065504a5fdf04e7a60a5587364d9923b7dd2af77d2f5f5a1"}, &(0x7f0000000200)=0x29) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0x7f, 0xd4f, 0x40, 0x8, 0x7, 0x200, 0x40, {r3, @in6={{0xa, 0x4e24, 0xc5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe3}}, 0x400, 0xff, 0x6, 0x8001, 0x7}}, &(0x7f0000000300)=0xb0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@int=0x3ff, 0x4) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getrule={0x14, 0x22, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xc}, @IEEE802154_ATTR_TXPOWER={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x29}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4844) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2, 0xf, 0xb, 0x4, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}}, 0x8000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000680)={r4, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f0000000740)=0x84) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r8) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r10, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r11, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf0}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4004810) connect$netlink(r1, &(0x7f0000000b40)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000b80)={r6, 0x200, 0x7, 0x2}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r11, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x976}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bind$alg(r12, &(0x7f0000000cc0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e40)={@map=r12, 0x20, 0x0, 0x6, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000d80)=[0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000e80)={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff, 0x8, 0x8, 0x100, 0x7, 0x2000012}) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000f00)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000001000)=0xe8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001040)={r13, 0x5b7f, 0x5, 0xfffffffffffffff2}) sendmsg$ETHTOOL_MSG_EEE_GET(r15, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x44c1e103030e6ef0}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x844) 723.379452ms ago: executing program 2 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x4000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {0x0}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001480)=""/177, 0xb1}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x7}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x1, 'veth0_macvtap\x00', {}, 0xfff}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1}}) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x40010, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}, {0x0, [0x5f, 0x5f, 0x6f, 0x61, 0x2e, 0x2e]}}, &(0x7f0000001600)=""/46, 0x38, 0x2e, 0x1, 0x8, 0xbd2bc498ccb3bf75, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001540)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x1000}) 577.044195ms ago: executing program 1 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x15, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x1087}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd6c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000d00)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0x1, 0xb83b, {{0x3a, 0x4, 0x3, 0x5, 0xe8, 0x66, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x46, 0x3, 0x8, [{@multicast1, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff97}, {@broadcast, 0x8}, {@remote, 0x80000000}]}, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x2, 0xe, "f63d9f8feb9ec97feeb64131"}, {0x0, 0x4, "6fff"}, {0x6, 0x10, "b74dfbd81674bd2c1f4949c0ec49"}, {0x1, 0x5, "1315b5"}]}, @rr={0x7, 0xf, 0x79, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x2b, 0xa8, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010100, @empty, @loopback, @private=0xa010102, @rand_addr=0x64010100, @loopback, @local]}, @timestamp_addr={0x44, 0x44, 0xaa, 0x1, 0xa, [{@loopback, 0x3ff}, {@broadcast, 0x4e5b}, {@private=0xa010100, 0x2}, {@remote, 0x1}, {@local}, {@multicast1, 0x9}, {@broadcast, 0x7}, {@multicast2, 0x8000}]}]}}}}}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x5, 0x7, 0x1}]}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000ec0)=""/4096, 0x57, 0x1000, 0x0, 0x6, 0x10000, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x6, 0x39, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x820}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x0, 0xa, 0x4, 0xa, 0xfffffffffffffff4}, @call={0x85, 0x0, 0x0, 0x86}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0xfe, 0x7, 0x4, 0x1000, 0xfffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x24c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0xfffffffa, 0x53, &(0x7f0000000800)=""/83, 0x41100, 0x20, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000001f00)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001f40)={0x3, 0xf, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001f80)=[{0x3, 0x1, 0x8, 0x17}], 0x10, 0x6, @void, @value}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x7, 0x0, 0x4, 0x10000, {{0xe, 0x4, 0x2, 0x6, 0x38, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @remote, {[@ssrr={0x89, 0x23, 0x6b, [@dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101, @broadcast, @local, @private=0xa010102, @loopback, @private=0xa010101, @multicast2]}, @end]}}}}}) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000009000000b7080000000000007b8af8ff00000000b70800007f0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000004a08040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000085200000010000001832000001000000000000000000000014af80000800000013640400fcffffff"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x3e, &(0x7f0000000380)=""/62, 0x40f00, 0x1, '\x00', r7, 0x18, r8, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x220df, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000006c0)=[{0x0, 0x2, 0x7, 0xb}, {0x0, 0x1, 0x5, 0xa}], 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r13 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r13, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40040800}, 0x20000085) setsockopt$TIPC_GROUP_LEAVE(r12, 0x10f, 0x88) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r11, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc77c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 573.689906ms ago: executing program 2 (id=1114): socketpair(0x1d, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)={0x50, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa}, @device_a, @device_b, @from_mac, {0x2, 0x6}, "", @void, @value=@ver_80211n={0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, @random="c6434df5008244"}}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}}, 0x10004080) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x3c, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x7c}}, 0x0) 482.065856ms ago: executing program 1 (id=1115): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000001c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc4106(gcm(aes)))\x00'}, 0x80, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000061102b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000280)={0x1a5, 0x9, 0x48, 0xfff, 0x3}, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x3c, r5, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xff0e60e3d52e13e6}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf256400000008000300", @ANYRES32=r7, @ANYBLOB="0c009908e80000004f000000"], 0x28}, 0x1, 0x0, 0x0, 0x6}, 0x81) 417.199669ms ago: executing program 0 (id=1116): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r7], 0x20}, 0x1, 0x6}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)="817e", 0x2}], 0x1}, 0x8861) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000001280), 0x4) readv(r9, &(0x7f0000001380)=[{&(0x7f0000002240)=""/4094, 0xffe}], 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x48, 0x0, &(0x7f00007d0000)) 239.355182ms ago: executing program 1 (id=1117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r2, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0x20003, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r4, &(0x7f0000000800), 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 133.506595ms ago: executing program 2 (id=1118): r0 = socket(0xa, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b5952cbd7000ffdbdf250a3f0000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) unshare(0x400) unshare(0x40000000) 69.411024ms ago: executing program 3 (id=1119): syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[], 0x0) 68.983302ms ago: executing program 0 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000002c0), 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x28, r9, 0x801, 0x3, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xfd}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 8.566013ms ago: executing program 1 (id=1121): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r0, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}}}, 0x108) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r2) 0s ago: executing program 3 (id=1122): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)={0x70, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x24004000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x24}}, 0x8890) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000104000000000000000000001fb2", @ANYRES32=r3, @ANYBLOB="0000000000000000180012800b000100697036746e6c000008000280040013"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000200fe80"], 0x74}}, 0x0) kernel console output (not intermixed with test programs): NG [ 88.865223][ T6490] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 88.921645][ T6494] batadv0: entered promiscuous mode [ 88.940955][ T6494] macsec1: entered promiscuous mode [ 88.970906][ T6494] macsec1: entered allmulticast mode [ 88.976263][ T6494] batadv0: entered allmulticast mode [ 88.998165][ T6506] netlink: 48 bytes leftover after parsing attributes in process `syz.2.131'. [ 89.009746][ T5852] Bluetooth: hci0: command 0x0c20 tx timeout [ 89.017169][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 89.033744][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 89.167412][ T11] syzkaller0: tun_net_xmit 76 [ 89.187638][ T11] syzkaller0: tun_net_xmit 48 [ 89.193858][ T5888] syzkaller0: tun_net_xmit 76 [ 89.206810][ T6512] syzkaller0: create flow: hash 2440697601 index 2 [ 89.352392][ T6517] syzkaller0: delete flow: hash 2440697601 index 2 [ 89.369669][ T8] syzkaller0: tun_net_xmit 76 [ 89.580640][ T6533] netlink: 'syz.1.139': attribute type 12 has an invalid length. [ 90.136422][ T5889] IPVS: starting estimator thread 0... [ 90.263399][ T6551] IPVS: using max 33 ests per chain, 79200 per kthread [ 91.010875][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 91.079938][ T5843] Bluetooth: hci0: command 0x0c20 tx timeout [ 91.110696][ T6544] lo speed is unknown, defaulting to 1000 [ 91.169034][ T6555] Cannot find add_set index 0 as target [ 91.244050][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'. [ 91.666395][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 92.104120][ T6597] lo speed is unknown, defaulting to 1000 [ 92.266103][ T6612] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.282184][ T6612] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.284503][ T6611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 92.292498][ T6612] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.309328][ T6612] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.320502][ T6612] geneve2: entered promiscuous mode [ 92.325865][ T6612] geneve2: entered allmulticast mode [ 92.336176][ T6612] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.345620][ T6612] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.354839][ T6612] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.364315][ T6612] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.553100][ T6617] netlink: 'syz.3.163': attribute type 13 has an invalid length. [ 92.562763][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.163'. [ 92.586038][ T6619] trusted_key: syz.3.163 sent an empty control message without MSG_MORE. [ 92.956538][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.167'. [ 93.002786][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 93.403844][ T5843] Bluetooth: hci4: command tx timeout [ 93.590715][ T6660] netlink: 408 bytes leftover after parsing attributes in process `syz.3.173'. [ 93.904596][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 93.947986][ T6672] macvlan1: left allmulticast mode [ 93.999873][ T6672] veth1_vlan: left allmulticast mode [ 94.039406][ T6672] macvlan1: left promiscuous mode [ 94.053011][ T6672] bridge0: port 3(macvlan1) entered disabled state [ 94.101617][ T6672] bridge_slave_1: left allmulticast mode [ 94.117449][ T6672] bridge_slave_1: left promiscuous mode [ 94.124884][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.141417][ T6672] bridge_slave_0: left allmulticast mode [ 94.147433][ T6672] bridge_slave_0: left promiscuous mode [ 94.156423][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.290386][ T6682] netlink: 148 bytes leftover after parsing attributes in process `syz.3.178'. [ 94.328615][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 94.407572][ T6688] A link change request failed with some changes committed already. Interface ip6tnl1 may have been left with an inconsistent configuration, please check. [ 94.581509][ T6697] IPVS: Error connecting to the multicast addr [ 94.727633][ T6704] netlink: 44 bytes leftover after parsing attributes in process `syz.0.186'. [ 94.874711][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'. [ 95.604622][ T6736] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 95.836423][ T6755] dvmrp5: entered allmulticast mode [ 95.862954][ T6755] dvmrp5: left allmulticast mode [ 95.928625][ T6760] netlink: 'syz.3.206': attribute type 1 has an invalid length. [ 96.023597][ T6760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.052563][ T6760] bond1: (slave bond2): making interface the new active one [ 96.070305][ T6760] bond1: (slave bond2): Enslaving as an active interface with an up link [ 96.095305][ T6773] A link change request failed with some changes committed already. Interface ip6tnl1 may have been left with an inconsistent configuration, please check. [ 96.115474][ T6759] lo speed is unknown, defaulting to 1000 [ 96.310509][ T6785] xt_TCPMSS: Only works on TCP SYN packets [ 97.975321][ T6790] macvlan1: entered promiscuous mode [ 97.986753][ T6790] team0: Port device macvlan1 added [ 98.170276][ T6825] FAULT_INJECTION: forcing a failure. [ 98.170276][ T6825] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.184703][ T6825] CPU: 0 UID: 0 PID: 6825 Comm: syz.1.224 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 98.195359][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.205423][ T6825] Call Trace: [ 98.208690][ T6825] [ 98.211612][ T6825] dump_stack_lvl+0x241/0x360 [ 98.216295][ T6825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.221483][ T6825] ? __pfx__printk+0x10/0x10 [ 98.226162][ T6825] ? __pfx_lock_release+0x10/0x10 [ 98.231207][ T6825] should_fail_ex+0x3b0/0x4e0 [ 98.235968][ T6825] _copy_from_user+0x2f/0xc0 [ 98.240586][ T6825] copy_msghdr_from_user+0xae/0x680 [ 98.245826][ T6825] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 98.251666][ T6825] __sys_sendmmsg+0x36d/0x730 [ 98.256344][ T6825] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.261545][ T6825] ? __pfx_lock_release+0x10/0x10 [ 98.266564][ T6825] ? kstrtouint_from_user+0x128/0x190 [ 98.271939][ T6825] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 98.277818][ T6825] ? ksys_write+0x229/0x2b0 [ 98.282309][ T6825] ? __pfx_lock_release+0x10/0x10 [ 98.287343][ T6825] ? vfs_write+0x730/0xd30 [ 98.291790][ T6825] ? __mutex_unlock_slowpath+0x21d/0x750 [ 98.297445][ T6825] ? __fget_files+0x3f3/0x470 [ 98.302120][ T6825] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.308124][ T6825] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.314447][ T6825] ? do_syscall_64+0x100/0x230 [ 98.319198][ T6825] __x64_sys_sendmmsg+0xa0/0xb0 [ 98.324052][ T6825] do_syscall_64+0xf3/0x230 [ 98.328547][ T6825] ? clear_bhb_loop+0x35/0x90 [ 98.333220][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.339119][ T6825] RIP: 0033:0x7f127297e719 [ 98.343558][ T6825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.363172][ T6825] RSP: 002b:00007f12723ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.371576][ T6825] RAX: ffffffffffffffda RBX: 00007f1272b35f80 RCX: 00007f127297e719 [ 98.379985][ T6825] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 98.387946][ T6825] RBP: 00007f12723ff090 R08: 0000000000000000 R09: 0000000000000000 [ 98.396030][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.403992][ T6825] R13: 0000000000000000 R14: 00007f1272b35f80 R15: 00007ffc0c6b9c08 [ 98.411974][ T6825] [ 98.431658][ T6827] ax25_connect(): syz.4.225 uses autobind, please contact jreuter@yaina.de [ 99.738602][ T6826] __nla_validate_parse: 7 callbacks suppressed [ 99.738621][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 99.778459][ T6826] A link change request failed with some changes committed already. Interface ip6tnl2 may have been left with an inconsistent configuration, please check. [ 99.937681][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 99.978023][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.230'. [ 100.001825][ T6840] xt_hashlimit: max too large, truncated to 1048576 [ 100.033945][ T6840] netlink: 'syz.1.230': attribute type 7 has an invalid length. [ 100.168891][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 100.224114][ T6848] netlink: 'syz.1.233': attribute type 10 has an invalid length. [ 100.328493][ T6848] team0: Failed to send options change via netlink (err -105) [ 100.359094][ T6848] team0: Port device netdevsim0 added [ 100.382446][ T6851] netlink: 'syz.1.233': attribute type 10 has an invalid length. [ 100.433424][ T6851] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 100.514221][ T6851] team0: Failed to send options change via netlink (err -105) [ 100.545269][ T6851] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 100.567682][ T6851] team0: Port device netdevsim0 removed [ 100.578279][ T6851] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 100.631107][ T6864] lo speed is unknown, defaulting to 1000 [ 100.994166][ T6887] netlink: 276 bytes leftover after parsing attributes in process `syz.2.241'. [ 101.304049][ T6895] netlink: 72 bytes leftover after parsing attributes in process `syz.2.244'. [ 101.429690][ T6909] nbd: illegal input index -1 [ 101.676218][ T6912] netlink: 'syz.2.249': attribute type 2 has an invalid length. [ 101.791536][ T6916] Bluetooth: MGMT ver 1.23 [ 101.925983][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 102.443266][ T6951] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 102.455519][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 103.677795][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 103.686946][ T6945] netlink: 'syz.2.258': attribute type 3 has an invalid length. [ 103.700858][ T6945] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.709908][ T6945] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.718646][ T6945] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.727548][ T6945] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.901242][ T6966] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 104.131265][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.197808][ T6993] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 104.224849][ T6996] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 104.239924][ T6986] lo speed is unknown, defaulting to 1000 [ 104.279180][ T6992] FAULT_INJECTION: forcing a failure. [ 104.279180][ T6992] name failslab, interval 1, probability 0, space 0, times 0 [ 104.293488][ T6999] netlink: 'syz.3.271': attribute type 1 has an invalid length. [ 104.310860][ T6992] CPU: 0 UID: 0 PID: 6992 Comm: syz.1.269 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 104.321508][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.331603][ T6992] Call Trace: [ 104.334916][ T6992] [ 104.337875][ T6992] dump_stack_lvl+0x241/0x360 [ 104.342599][ T6992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.347837][ T6992] ? __pfx__printk+0x10/0x10 [ 104.352468][ T6992] ? ref_tracker_alloc+0x332/0x490 [ 104.357615][ T6992] should_fail_ex+0x3b0/0x4e0 [ 104.362370][ T6992] ? skb_clone+0x20c/0x390 [ 104.366825][ T6992] should_failslab+0xac/0x100 [ 104.371540][ T6992] ? skb_clone+0x20c/0x390 [ 104.375992][ T6992] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 104.381400][ T6992] skb_clone+0x20c/0x390 [ 104.385683][ T6992] __netlink_deliver_tap+0x3cc/0x7c0 [ 104.391011][ T6992] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.396239][ T6992] netlink_deliver_tap+0x19d/0x1b0 [ 104.401389][ T6992] netlink_unicast+0x7c4/0x990 [ 104.406186][ T6992] ? __pfx_netlink_unicast+0x10/0x10 [ 104.411495][ T6992] ? __virt_addr_valid+0x183/0x530 [ 104.416631][ T6992] ? __check_object_size+0x48e/0x900 [ 104.421949][ T6992] netlink_sendmsg+0x8e4/0xcb0 [ 104.426762][ T6992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.432078][ T6992] ? aa_sock_msg_perm+0x91/0x160 [ 104.437026][ T6992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.442313][ T6992] __sock_sendmsg+0x221/0x270 [ 104.446992][ T6992] ____sys_sendmsg+0x52a/0x7e0 [ 104.451764][ T6992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.457060][ T6992] __sys_sendmmsg+0x3ab/0x730 [ 104.461752][ T6992] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.466969][ T6992] ? __pfx_lock_release+0x10/0x10 [ 104.472005][ T6992] ? kstrtouint_from_user+0x128/0x190 [ 104.477397][ T6992] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 104.483302][ T6992] ? ksys_write+0x229/0x2b0 [ 104.487809][ T6992] ? __pfx_lock_release+0x10/0x10 [ 104.492843][ T6992] ? vfs_write+0x730/0xd30 [ 104.497266][ T6992] ? __mutex_unlock_slowpath+0x21d/0x750 [ 104.503049][ T6992] ? __fget_files+0x3f3/0x470 [ 104.507738][ T6992] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.513721][ T6992] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.520062][ T6992] ? do_syscall_64+0x100/0x230 [ 104.524834][ T6992] __x64_sys_sendmmsg+0xa0/0xb0 [ 104.529687][ T6992] do_syscall_64+0xf3/0x230 [ 104.534184][ T6992] ? clear_bhb_loop+0x35/0x90 [ 104.538858][ T6992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.544756][ T6992] RIP: 0033:0x7f127297e719 [ 104.549179][ T6992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.568792][ T6992] RSP: 002b:00007f12723ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.577220][ T6992] RAX: ffffffffffffffda RBX: 00007f1272b35f80 RCX: 00007f127297e719 [ 104.585197][ T6992] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 104.593165][ T6992] RBP: 00007f12723ff090 R08: 0000000000000000 R09: 0000000000000000 [ 104.601130][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.609120][ T6992] R13: 0000000000000000 R14: 00007f1272b35f80 R15: 00007ffc0c6b9c08 [ 104.617188][ T6992] [ 104.892790][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 104.918182][ T7017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.275'. [ 104.918547][ T7020] dccp_invalid_packet: P.Data Offset(100) too large [ 104.968270][ T7019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'. [ 105.072514][ T7031] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 105.223768][ T7029] lo speed is unknown, defaulting to 1000 [ 105.297744][ T7032] lo speed is unknown, defaulting to 1000 [ 105.463350][ T7048] FAULT_INJECTION: forcing a failure. [ 105.463350][ T7048] name failslab, interval 1, probability 0, space 0, times 0 [ 105.486948][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.0.284 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 105.497602][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.507691][ T7048] Call Trace: [ 105.510995][ T7048] [ 105.513945][ T7048] dump_stack_lvl+0x241/0x360 [ 105.518656][ T7048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.523885][ T7048] ? __pfx__printk+0x10/0x10 [ 105.528485][ T7048] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 105.534476][ T7048] ? __pfx___might_resched+0x10/0x10 [ 105.539775][ T7048] should_fail_ex+0x3b0/0x4e0 [ 105.544461][ T7048] should_failslab+0xac/0x100 [ 105.549140][ T7048] ? __alloc_skb+0x1c3/0x440 [ 105.553731][ T7048] kmem_cache_alloc_node_noprof+0x71/0x320 [ 105.559630][ T7048] __alloc_skb+0x1c3/0x440 [ 105.564058][ T7048] ? __pfx___alloc_skb+0x10/0x10 [ 105.569001][ T7048] ? netlink_ack_tlv_len+0x6e/0x200 [ 105.574207][ T7048] netlink_ack+0x13f/0xa30 [ 105.578629][ T7048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.584122][ T7048] netlink_rcv_skb+0x262/0x430 [ 105.588894][ T7048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.594366][ T7048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.599677][ T7048] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.604891][ T7048] netlink_unicast+0x7f6/0x990 [ 105.609667][ T7048] ? __pfx_netlink_unicast+0x10/0x10 [ 105.614958][ T7048] ? __virt_addr_valid+0x183/0x530 [ 105.620108][ T7048] ? __check_object_size+0x48e/0x900 [ 105.625405][ T7048] netlink_sendmsg+0x8e4/0xcb0 [ 105.630198][ T7048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.635499][ T7048] ? aa_sock_msg_perm+0x91/0x160 [ 105.640455][ T7048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.645748][ T7048] __sock_sendmsg+0x221/0x270 [ 105.650439][ T7048] ____sys_sendmsg+0x52a/0x7e0 [ 105.655218][ T7048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.660522][ T7048] __sys_sendmmsg+0x3ab/0x730 [ 105.665212][ T7048] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.670434][ T7048] ? __pfx_lock_release+0x10/0x10 [ 105.675471][ T7048] ? kstrtouint_from_user+0x128/0x190 [ 105.680867][ T7048] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 105.686772][ T7048] ? ksys_write+0x229/0x2b0 [ 105.691286][ T7048] ? __pfx_lock_release+0x10/0x10 [ 105.696326][ T7048] ? vfs_write+0x730/0xd30 [ 105.700783][ T7048] ? __mutex_unlock_slowpath+0x21d/0x750 [ 105.706436][ T7048] ? __fget_files+0x3f3/0x470 [ 105.711149][ T7048] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.717248][ T7048] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.723610][ T7048] ? do_syscall_64+0x100/0x230 [ 105.728398][ T7048] __x64_sys_sendmmsg+0xa0/0xb0 [ 105.733274][ T7048] do_syscall_64+0xf3/0x230 [ 105.737780][ T7048] ? clear_bhb_loop+0x35/0x90 [ 105.742456][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.748352][ T7048] RIP: 0033:0x7f5f3237e719 [ 105.752765][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.772371][ T7048] RSP: 002b:00007f5f330ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.780794][ T7048] RAX: ffffffffffffffda RBX: 00007f5f32535f80 RCX: 00007f5f3237e719 [ 105.788762][ T7048] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 105.796730][ T7048] RBP: 00007f5f330ff090 R08: 0000000000000000 R09: 0000000000000000 [ 105.804717][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.812699][ T7048] R13: 0000000000000000 R14: 00007f5f32535f80 R15: 00007fff7c48f118 [ 105.820742][ T7048] [ 106.251696][ T7067] syz.3.289[7067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.251791][ T7067] syz.3.289[7067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.309021][ T7067] syz.3.289[7067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.358280][ T7072] Illegal XDP return value 4294967274 on prog (id 106) dev N/A, expect packet loss! [ 106.384201][ T7067] syz.3.289[7067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.384294][ T7067] syz.3.289[7067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.429531][ T7067] syz.3.289[7067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.451864][ T7073] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 106.865074][ T7091] bridge_slave_0: left allmulticast mode [ 106.913657][ T7092] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 106.929955][ T7091] bridge_slave_0: left promiscuous mode [ 106.957873][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.999871][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 107.023472][ T7091] bridge_slave_1: left allmulticast mode [ 107.040456][ T7091] bridge_slave_1: left promiscuous mode [ 107.057091][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.086099][ T7091] bond0: (slave bond_slave_0): Releasing backup interface [ 107.132380][ T7091] bond0: (slave bond_slave_1): Releasing backup interface [ 107.226640][ T7091] team0: Port device team_slave_0 removed [ 107.258648][ T7091] team0: Port device team_slave_1 removed [ 107.286674][ T7091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.297661][ T7091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.311820][ T7091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.321004][ T7091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.344196][ T7091] bond0: (slave netdevsim0): Releasing backup interface [ 107.351719][ T7106] x_tables: duplicate underflow at hook 2 [ 107.461906][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 108.190067][ T7150] FAULT_INJECTION: forcing a failure. [ 108.190067][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 108.190317][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 108.234596][ T7150] CPU: 1 UID: 0 PID: 7150 Comm: syz.4.309 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 108.245697][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.255772][ T7150] Call Trace: [ 108.259083][ T7150] [ 108.262059][ T7150] dump_stack_lvl+0x241/0x360 [ 108.266742][ T7150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.271954][ T7150] ? __pfx__printk+0x10/0x10 [ 108.276564][ T7150] ? ref_tracker_alloc+0x332/0x490 [ 108.281685][ T7150] should_fail_ex+0x3b0/0x4e0 [ 108.286379][ T7150] ? skb_clone+0x20c/0x390 [ 108.290811][ T7150] should_failslab+0xac/0x100 [ 108.295512][ T7150] ? skb_clone+0x20c/0x390 [ 108.299948][ T7150] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 108.305356][ T7150] skb_clone+0x20c/0x390 [ 108.309637][ T7150] __netlink_deliver_tap+0x3cc/0x7c0 [ 108.314973][ T7150] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.320175][ T7150] netlink_deliver_tap+0x19d/0x1b0 [ 108.325294][ T7150] netlink_sendskb+0x68/0x140 [ 108.329972][ T7150] netlink_unicast+0x39d/0x990 [ 108.334731][ T7150] ? __asan_memcpy+0x40/0x70 [ 108.339334][ T7150] ? __pfx_netlink_unicast+0x10/0x10 [ 108.344659][ T7150] netlink_rcv_skb+0x262/0x430 [ 108.349480][ T7150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.354960][ T7150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.360272][ T7150] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.365478][ T7150] netlink_unicast+0x7f6/0x990 [ 108.370254][ T7150] ? __pfx_netlink_unicast+0x10/0x10 [ 108.375539][ T7150] ? __virt_addr_valid+0x183/0x530 [ 108.380762][ T7150] ? __check_object_size+0x48e/0x900 [ 108.386048][ T7150] netlink_sendmsg+0x8e4/0xcb0 [ 108.390823][ T7150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.396111][ T7150] ? aa_sock_msg_perm+0x91/0x160 [ 108.401052][ T7150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.406335][ T7150] __sock_sendmsg+0x221/0x270 [ 108.411013][ T7150] ____sys_sendmsg+0x52a/0x7e0 [ 108.415783][ T7150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.421080][ T7150] __sys_sendmmsg+0x3ab/0x730 [ 108.425763][ T7150] ? __pfx___sys_sendmmsg+0x10/0x10 [ 108.430975][ T7150] ? __pfx_lock_release+0x10/0x10 [ 108.435998][ T7150] ? kstrtouint_from_user+0x128/0x190 [ 108.441383][ T7150] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 108.447357][ T7150] ? ksys_write+0x229/0x2b0 [ 108.451867][ T7150] ? __pfx_lock_release+0x10/0x10 [ 108.456894][ T7150] ? vfs_write+0x730/0xd30 [ 108.461315][ T7150] ? __mutex_unlock_slowpath+0x21d/0x750 [ 108.466954][ T7150] ? __fget_files+0x3f3/0x470 [ 108.471650][ T7150] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.477633][ T7150] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.483968][ T7150] ? do_syscall_64+0x100/0x230 [ 108.488728][ T7150] __x64_sys_sendmmsg+0xa0/0xb0 [ 108.493580][ T7150] do_syscall_64+0xf3/0x230 [ 108.498084][ T7150] ? clear_bhb_loop+0x35/0x90 [ 108.502757][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.508737][ T7150] RIP: 0033:0x7f23fcf7e719 [ 108.513151][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.532842][ T7150] RSP: 002b:00007f23fdd3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 108.541785][ T7150] RAX: ffffffffffffffda RBX: 00007f23fd135f80 RCX: 00007f23fcf7e719 [ 108.549841][ T7150] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 108.557805][ T7150] RBP: 00007f23fdd3a090 R08: 0000000000000000 R09: 0000000000000000 [ 108.565772][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.573745][ T7150] R13: 0000000000000000 R14: 00007f23fd135f80 R15: 00007ffefddd8b88 [ 108.581753][ T7150] [ 108.607195][ T7148] A link change request failed with some changes committed already. Interface ip6tnl1 may have been left with an inconsistent configuration, please check. [ 110.039261][ T7193] netlink: 'syz.0.323': attribute type 2 has an invalid length. [ 110.854886][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 110.908797][ T7196] A link change request failed with some changes committed already. Interface ip6tnl1 may have been left with an inconsistent configuration, please check. [ 111.009652][ T7203] sctp: [Deprecated]: syz.0.326 (pid 7203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.009652][ T7203] Use struct sctp_sack_info instead [ 111.035910][ T7200] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 111.044230][ T7200] netlink: 40 bytes leftover after parsing attributes in process `syz.4.327'. [ 111.056997][ T7200] batman_adv: batadv0: Adding interface: vlan1 [ 111.064907][ T7200] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.069717][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 111.117819][ T7200] batman_adv: batadv0: Interface activated: vlan1 [ 111.244780][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 111.338515][ T7224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.331'. [ 111.344425][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 111.372582][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 111.407336][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 111.419032][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.330'. [ 111.528624][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.825131][ T7247] lo speed is unknown, defaulting to 1000 [ 111.845571][ T7253] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.922268][ T7253] pim6reg1: entered promiscuous mode [ 111.937368][ T7253] pim6reg1: entered allmulticast mode [ 111.961091][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 112.230068][ T7271] team0: entered promiscuous mode [ 112.245162][ T7269] ipt_rpfilter: unknown options [ 112.269722][ T7271] team_slave_0: entered promiscuous mode [ 112.275881][ T7271] team_slave_1: entered promiscuous mode [ 112.294789][ T7269] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 112.309567][ T7271] netlink: 'syz.2.345': attribute type 39 has an invalid length. [ 112.593348][ T7270] team0: left promiscuous mode [ 112.619566][ T7270] team_slave_0: left promiscuous mode [ 112.626931][ T7270] team_slave_1: left promiscuous mode [ 113.265773][ T7300] syzkaller1: entered promiscuous mode [ 113.289413][ T7300] syzkaller1: entered allmulticast mode [ 113.743112][ T7331] batadv_slave_1: entered promiscuous mode [ 113.883942][ T7331] batadv_slave_1 (unregistering): left promiscuous mode [ 113.965723][ T7343] FAULT_INJECTION: forcing a failure. [ 113.965723][ T7343] name failslab, interval 1, probability 0, space 0, times 0 [ 113.988218][ T7343] CPU: 0 UID: 0 PID: 7343 Comm: syz.3.369 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 113.998879][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.008960][ T7343] Call Trace: [ 114.012262][ T7343] [ 114.015225][ T7343] dump_stack_lvl+0x241/0x360 [ 114.019940][ T7343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.025168][ T7343] ? __pfx__printk+0x10/0x10 [ 114.029786][ T7343] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 114.035802][ T7343] ? __pfx___might_resched+0x10/0x10 [ 114.041121][ T7343] ? aa_label_sk_perm+0x4f3/0x6c0 [ 114.046181][ T7343] should_fail_ex+0x3b0/0x4e0 [ 114.050895][ T7343] should_failslab+0xac/0x100 [ 114.055608][ T7343] ? __alloc_skb+0x1c3/0x440 [ 114.060223][ T7343] kmem_cache_alloc_node_noprof+0x71/0x320 [ 114.066073][ T7343] __alloc_skb+0x1c3/0x440 [ 114.070520][ T7343] ? __pfx___alloc_skb+0x10/0x10 [ 114.075493][ T7343] netlink_sendmsg+0x638/0xcb0 [ 114.080292][ T7343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.085622][ T7343] ? aa_sock_msg_perm+0x91/0x160 [ 114.090596][ T7343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.095912][ T7343] __sock_sendmsg+0x221/0x270 [ 114.100619][ T7343] ____sys_sendmsg+0x52a/0x7e0 [ 114.105422][ T7343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.110745][ T7343] ? rcu_is_watching+0x15/0xb0 [ 114.115540][ T7343] ? __might_fault+0xaa/0x120 [ 114.120254][ T7343] __sys_sendmmsg+0x3ab/0x730 [ 114.124972][ T7343] ? __pfx___sys_sendmmsg+0x10/0x10 [ 114.130217][ T7343] ? __pfx_lock_release+0x10/0x10 [ 114.135276][ T7343] ? kstrtouint_from_user+0x128/0x190 [ 114.141124][ T7343] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 114.147057][ T7343] ? ksys_write+0x229/0x2b0 [ 114.151586][ T7343] ? __pfx_lock_release+0x10/0x10 [ 114.156640][ T7343] ? vfs_write+0x730/0xd30 [ 114.161093][ T7343] ? __mutex_unlock_slowpath+0x21d/0x750 [ 114.166770][ T7343] ? __fget_files+0x3f3/0x470 [ 114.171498][ T7343] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.177512][ T7343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.183874][ T7343] ? do_syscall_64+0x100/0x230 [ 114.188664][ T7343] __x64_sys_sendmmsg+0xa0/0xb0 [ 114.193550][ T7343] do_syscall_64+0xf3/0x230 [ 114.198079][ T7343] ? clear_bhb_loop+0x35/0x90 [ 114.202794][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.208722][ T7343] RIP: 0033:0x7fd52dd7e719 [ 114.213168][ T7343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.232896][ T7343] RSP: 002b:00007fd52eb10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 114.241345][ T7343] RAX: ffffffffffffffda RBX: 00007fd52df35f80 RCX: 00007fd52dd7e719 [ 114.249321][ T7343] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 114.257294][ T7343] RBP: 00007fd52eb10090 R08: 0000000000000000 R09: 0000000000000000 [ 114.265265][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.273231][ T7343] R13: 0000000000000000 R14: 00007fd52df35f80 R15: 00007ffd4b531dd8 [ 114.281213][ T7343] [ 114.345411][ T7354] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 114.360562][ T5843] Bluetooth: hci0: command 0x0c20 tx timeout [ 114.387087][ T7354] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 115.257281][ T7401] FAULT_INJECTION: forcing a failure. [ 115.257281][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 115.287438][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.2.383 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 115.298095][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.308174][ T7401] Call Trace: [ 115.311565][ T7401] [ 115.314517][ T7401] dump_stack_lvl+0x241/0x360 [ 115.319229][ T7401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.324464][ T7401] ? __pfx__printk+0x10/0x10 [ 115.329090][ T7401] ? ref_tracker_alloc+0x332/0x490 [ 115.334234][ T7401] should_fail_ex+0x3b0/0x4e0 [ 115.338939][ T7401] ? skb_clone+0x20c/0x390 [ 115.343391][ T7401] should_failslab+0xac/0x100 [ 115.348179][ T7401] ? skb_clone+0x20c/0x390 [ 115.350954][ T7404] lo speed is unknown, defaulting to 1000 [ 115.352610][ T7401] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 115.363743][ T7401] skb_clone+0x20c/0x390 [ 115.368030][ T7401] __netlink_deliver_tap+0x3cc/0x7c0 [ 115.373356][ T7401] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.378599][ T7401] netlink_deliver_tap+0x19d/0x1b0 [ 115.383738][ T7401] netlink_unicast+0x7c4/0x990 [ 115.388549][ T7401] ? __pfx_netlink_unicast+0x10/0x10 [ 115.393861][ T7401] ? __virt_addr_valid+0x183/0x530 [ 115.399010][ T7401] ? __check_object_size+0x48e/0x900 [ 115.404328][ T7401] netlink_sendmsg+0x8e4/0xcb0 [ 115.409218][ T7401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.414534][ T7401] ? aa_sock_msg_perm+0x91/0x160 [ 115.419506][ T7401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.424812][ T7401] __sock_sendmsg+0x221/0x270 [ 115.429521][ T7401] ____sys_sendmsg+0x52a/0x7e0 [ 115.434328][ T7401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.439641][ T7401] ? rcu_is_watching+0x15/0xb0 [ 115.444431][ T7401] ? __might_fault+0xaa/0x120 [ 115.449141][ T7401] __sys_sendmmsg+0x3ab/0x730 [ 115.453854][ T7401] ? __pfx___sys_sendmmsg+0x10/0x10 [ 115.459088][ T7401] ? __pfx_lock_release+0x10/0x10 [ 115.464144][ T7401] ? kstrtouint_from_user+0x128/0x190 [ 115.469559][ T7401] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 115.475475][ T7401] ? ksys_write+0x229/0x2b0 [ 115.479996][ T7401] ? __pfx_lock_release+0x10/0x10 [ 115.485047][ T7401] ? vfs_write+0x730/0xd30 [ 115.489493][ T7401] ? __mutex_unlock_slowpath+0x21d/0x750 [ 115.495155][ T7401] ? __fget_files+0x3f3/0x470 [ 115.499865][ T7401] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.505872][ T7401] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.512226][ T7401] ? do_syscall_64+0x100/0x230 [ 115.517013][ T7401] __x64_sys_sendmmsg+0xa0/0xb0 [ 115.521897][ T7401] do_syscall_64+0xf3/0x230 [ 115.526424][ T7401] ? clear_bhb_loop+0x35/0x90 [ 115.531123][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.537039][ T7401] RIP: 0033:0x7f33e1b7e719 [ 115.541473][ T7401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.561106][ T7401] RSP: 002b:00007f33e15ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.569554][ T7401] RAX: ffffffffffffffda RBX: 00007f33e1d35f80 RCX: 00007f33e1b7e719 [ 115.577558][ T7401] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 115.585551][ T7401] RBP: 00007f33e15ff090 R08: 0000000000000000 R09: 0000000000000000 [ 115.593550][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.601581][ T7401] R13: 0000000000000000 R14: 00007f33e1d35f80 R15: 00007ffeddad0bf8 [ 115.609601][ T7401] [ 115.845580][ T7404] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20001 [ 115.860403][ T7424] __nla_validate_parse: 14 callbacks suppressed [ 115.860418][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 115.879850][ T7427] IPv6: NLM_F_REPLACE set, but no existing node found! [ 115.902804][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 116.060020][ T7432] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 116.085949][ T7434] netlink: 52 bytes leftover after parsing attributes in process `syz.0.393'. [ 116.267919][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 116.496466][ T7453] ip6gretap0: entered promiscuous mode [ 116.514738][ T7453] ip6gretap0: left promiscuous mode [ 116.555429][ T7456] netlink: 104 bytes leftover after parsing attributes in process `syz.0.399'. [ 116.904927][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 117.015618][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 117.045638][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 117.055553][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 117.333704][ T7509] netlink: 'syz.1.414': attribute type 5 has an invalid length. [ 117.362264][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 117.381539][ T7511] netlink: 'syz.4.416': attribute type 11 has an invalid length. [ 117.422540][ T7513] bridge: RTM_NEWNEIGH with invalid ether address [ 117.822270][ T7524] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.838827][ T7524] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 117.939882][ T7548] netlink: 'syz.2.425': attribute type 16 has an invalid length. [ 118.106301][ T7554] netlink: 'syz.4.428': attribute type 12 has an invalid length. [ 118.120396][ T7554] netlink: 'syz.4.428': attribute type 2 has an invalid length. [ 118.128246][ T7554] netlink: 'syz.4.428': attribute type 10 has an invalid length. [ 118.321806][ T7575] netlink: 'syz.2.429': attribute type 2 has an invalid length. [ 118.845900][ T7601] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.175106][ T7621] sctp: [Deprecated]: syz.3.448 (pid 7621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.175106][ T7621] Use struct sctp_sack_info instead [ 119.439665][ T7634] lo speed is unknown, defaulting to 1000 [ 120.486199][ T7680] vxcan1: entered promiscuous mode [ 121.054810][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.065592][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.074843][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.086318][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.094486][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 121.102471][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.208255][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.243347][ T7690] IPv6: sit1: Disabled Multicast RS [ 121.621017][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.684144][ T7717] lo speed is unknown, defaulting to 1000 [ 121.818814][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.857513][ T7744] __nla_validate_parse: 21 callbacks suppressed [ 121.857532][ T7744] netlink: 48 bytes leftover after parsing attributes in process `syz.0.477'. [ 121.927917][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 122.001524][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.137853][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 122.221490][ T7759] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 35396 - 0 [ 122.230627][ T7759] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 35396 - 0 [ 122.239532][ T7759] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 35396 - 0 [ 122.250040][ T7759] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 35396 - 0 [ 122.259081][ T7759] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 53858 - 0 [ 122.268100][ T7759] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 53858 - 0 [ 122.277166][ T7759] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 53858 - 0 [ 122.310408][ T7759] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 53858 - 0 [ 122.319860][ T7759] geneve2: entered promiscuous mode [ 122.325416][ T7759] geneve2: entered allmulticast mode [ 122.337157][ T61] bridge_slave_1: left allmulticast mode [ 122.344661][ T61] bridge_slave_1: left promiscuous mode [ 122.355412][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.392668][ T61] bridge_slave_0: left allmulticast mode [ 122.398686][ T61] bridge_slave_0: left promiscuous mode [ 122.419751][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 122.429797][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.722962][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.733753][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.745919][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.756611][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.766886][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.778598][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.790184][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.801261][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.882865][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 123.159377][ T5843] Bluetooth: hci4: command tx timeout [ 123.544129][ T7717] chnl_net:caif_netlink_parms(): no params data found [ 123.739671][ T7811] lo speed is unknown, defaulting to 1000 [ 123.740784][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 123.888409][ T7816] lo speed is unknown, defaulting to 1000 [ 123.931834][ T7831] netlink: 'syz.3.496': attribute type 9 has an invalid length. [ 123.943811][ T7831] bond_slave_0: entered promiscuous mode [ 123.950535][ T7831] bond_slave_1: entered promiscuous mode [ 123.957183][ T7831] macvlan2: entered promiscuous mode [ 123.962920][ T7831] bond0: entered promiscuous mode [ 123.969961][ T7831] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.049322][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.059506][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.077262][ T7717] bridge_slave_0: entered allmulticast mode [ 124.085322][ T7717] bridge_slave_0: entered promiscuous mode [ 124.106018][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.114129][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.121884][ T7717] bridge_slave_1: entered allmulticast mode [ 124.129399][ T7717] bridge_slave_1: entered promiscuous mode [ 124.167671][ T7839] netlink: 332 bytes leftover after parsing attributes in process `syz.3.498'. [ 124.199361][ T7839] netlink: 104 bytes leftover after parsing attributes in process `syz.3.498'. [ 124.208970][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.498'. [ 124.264791][ T7717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.319346][ T61] hsr_slave_0: left promiscuous mode [ 124.347533][ T61] hsr_slave_1: left promiscuous mode [ 124.386162][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.406149][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.428801][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.450030][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.480229][ T61] batman_adv: batadv0: Interface deactivated: vlan1 [ 124.486918][ T61] batman_adv: batadv0: Removing interface: vlan1 [ 124.551509][ T61] veth0_macvtap: left promiscuous mode [ 124.567626][ T61] veth1_vlan: left promiscuous mode [ 124.577923][ T61] veth0_vlan: left promiscuous mode [ 125.231189][ T61] team0 (unregistering): Port device team_slave_1 removed [ 125.239833][ T5843] Bluetooth: hci4: command tx timeout [ 125.274880][ T61] team0 (unregistering): Port device team_slave_0 removed [ 125.638437][ T7717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.668645][ T7846] veth1_macvtap: left promiscuous mode [ 125.674333][ T7846] macsec0: entered promiscuous mode [ 125.821460][ T7717] team0: Port device team_slave_0 added [ 125.851665][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.501'. [ 125.900174][ T7717] team0: Port device team_slave_1 added [ 126.051790][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.064937][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.110974][ T7717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.144051][ T7870] sit0: entered promiscuous mode [ 126.163735][ T7878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.174790][ T7870] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 126.231578][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.238583][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.305910][ T7717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.493320][ T61] IPVS: stop unused estimator thread 0... [ 126.572862][ T7717] hsr_slave_0: entered promiscuous mode [ 126.619620][ T7717] hsr_slave_1: entered promiscuous mode [ 126.666456][ T7717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.699329][ T7717] Cannot create hsr debugfs directory [ 127.064549][ T7915] lo speed is unknown, defaulting to 1000 [ 127.319445][ T5843] Bluetooth: hci4: command tx timeout [ 127.885838][ T7954] netlink: 'syz.3.516': attribute type 2 has an invalid length. [ 127.903021][ T7955] netlink: 'syz.2.517': attribute type 2 has an invalid length. [ 127.980415][ T7970] __nla_validate_parse: 4 callbacks suppressed [ 127.980434][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 128.145110][ T7972] netlink: 128 bytes leftover after parsing attributes in process `syz.0.522'. [ 128.268241][ T7979] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 128.464761][ T7983] netem: incorrect ge model size [ 128.489417][ T7983] netem: change failed [ 128.514620][ T7983] netlink: 'syz.0.526': attribute type 21 has an invalid length. [ 128.534050][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 128.546018][ T7717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.566712][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 128.586565][ T7717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.618304][ T7717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.660534][ T7717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.897742][ T8011] syz_tun: entered promiscuous mode [ 128.924123][ T8021] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 128.931760][ T8011] syz_tun: left promiscuous mode [ 129.148712][ T8030] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.535'. [ 129.185853][ T8026] lo speed is unknown, defaulting to 1000 [ 129.215131][ T7717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.267375][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 129.298857][ T7717] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.348568][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.539'. [ 129.399818][ T5843] Bluetooth: hci4: command tx timeout [ 129.515533][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.522738][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.559483][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.567509][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.757272][ T8049] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 129.772948][ T8049] macvlan2: entered allmulticast mode [ 129.778398][ T8049] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 129.797059][ T8049] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 129.997422][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 130.432751][ T7717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.761493][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 131.241858][ T3022] wlan1: Trigger new scan to find an IBSS to join [ 131.252308][ T7717] veth0_vlan: entered promiscuous mode [ 131.292073][ T7717] veth1_vlan: entered promiscuous mode [ 131.408418][ T7717] veth0_macvtap: entered promiscuous mode [ 131.475223][ T7717] veth1_macvtap: entered promiscuous mode [ 131.585287][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.629433][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.650899][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.673010][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.701967][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.727977][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.755380][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.787732][ T8184] netlink: 'syz.2.561': attribute type 10 has an invalid length. [ 131.815389][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.840861][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.879514][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.924933][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.944942][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.969561][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.997374][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.029095][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 132.059640][ T7717] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.068383][ T7717] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.109266][ T7717] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.118019][ T7717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.151967][ T8202] netlink: 'syz.2.564': attribute type 4 has an invalid length. [ 132.353569][ T8095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.387839][ T8095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.488347][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.525410][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.865040][ T8241] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 133.244683][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.355888][ T8095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.601898][ T8095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.673580][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 133.698426][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 133.948358][ T8095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.059286][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 134.077190][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.087926][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.588'. [ 134.097090][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.136220][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.175597][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.178199][ T8095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.196055][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 134.206153][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.280783][ T12] wlan1: Trigger new scan to find an IBSS to join [ 134.324409][ T8310] lo speed is unknown, defaulting to 1000 [ 134.556863][ T8095] bridge_slave_1: left allmulticast mode [ 134.564677][ T8095] bridge_slave_1: left promiscuous mode [ 134.571902][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 134.593552][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.645450][ T8095] bridge_slave_0: left allmulticast mode [ 134.682039][ T8095] bridge_slave_0: left promiscuous mode [ 134.688316][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.473372][ T8095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.485930][ T8095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.507900][ T8095] bond0 (unregistering): Released all slaves [ 135.539803][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 136.108944][ T8403] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.601'. [ 136.279776][ T5843] Bluetooth: hci4: command tx timeout [ 136.342978][ T8310] chnl_net:caif_netlink_parms(): no params data found [ 136.371694][ T8395] lo speed is unknown, defaulting to 1000 [ 136.411093][ T8415] pim6reg1: entered promiscuous mode [ 136.420546][ T8415] pim6reg1: entered allmulticast mode [ 136.463726][ T8423] netlink: 296 bytes leftover after parsing attributes in process `syz.2.606'. [ 136.598886][ T8095] hsr_slave_0: left promiscuous mode [ 136.632583][ T8435] Dead loop on virtual device ipvlan1, fix it urgently! [ 136.730321][ T8095] hsr_slave_1: left promiscuous mode [ 136.753154][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.762763][ T8440] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 136.772085][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.783686][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.792775][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.857963][ T8095] veth1_macvtap: left promiscuous mode [ 136.863944][ T8095] veth0_macvtap: left promiscuous mode [ 136.876128][ T8095] veth1_vlan: left promiscuous mode [ 136.881811][ T8095] veth0_vlan: left promiscuous mode [ 137.249432][ T1099] wlan1: Trigger new scan to find an IBSS to join [ 137.285425][ T8095] team0 (unregistering): Port device team_slave_1 removed [ 137.326799][ T8095] team0 (unregistering): Port device team_slave_0 removed [ 137.376409][ T8435] syz.0.607 (8435) used greatest stack depth: 632 bytes left [ 137.721529][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 137.872339][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.881179][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.890562][ T8310] bridge_slave_0: entered allmulticast mode [ 137.897563][ T8310] bridge_slave_0: entered promiscuous mode [ 137.941014][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.948202][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.956145][ T8310] bridge_slave_1: entered allmulticast mode [ 137.965870][ T8310] bridge_slave_1: entered promiscuous mode [ 137.974352][ T8454] netlink: 132 bytes leftover after parsing attributes in process `syz.2.612'. [ 138.140567][ T8310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.177895][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.188271][ T8310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.351918][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.616'. [ 138.360079][ T5843] Bluetooth: hci4: command tx timeout [ 138.388010][ T8310] team0: Port device team_slave_0 added [ 138.440740][ T8310] team0: Port device team_slave_1 added [ 138.681632][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.688752][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.745863][ T8310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.776131][ T8489] bridge0: entered promiscuous mode [ 138.851185][ T8490] __nla_validate_parse: 64 callbacks suppressed [ 138.851204][ T8490] netlink: 148 bytes leftover after parsing attributes in process `syz.1.619'. [ 138.872348][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.886058][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.912211][ T8310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.005205][ T8512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 139.016836][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.624'. [ 139.045034][ T8310] hsr_slave_0: entered promiscuous mode [ 139.063070][ T8310] hsr_slave_1: entered promiscuous mode [ 139.103074][ T8310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.123137][ T8310] Cannot create hsr debugfs directory [ 139.690108][ T8543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 139.740632][ T8543] veth1_macvtap: entered promiscuous mode [ 139.767078][ T8543] macsec0: left promiscuous mode [ 140.106030][ T8310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.149575][ T8310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.174680][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 140.196276][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 140.214514][ T8310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.303583][ T8310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.439380][ T5843] Bluetooth: hci4: command tx timeout [ 140.616587][ T8310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.688196][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 140.724093][ T8310] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.761399][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 140.780729][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.787871][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.856233][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.863419][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.999422][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 141.178087][ T8627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 141.223496][ T8627] ip6tnl2: entered allmulticast mode [ 141.454401][ T8310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.580012][ T8647] netlink: 'syz.3.657': attribute type 4 has an invalid length. [ 141.828486][ T8667] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.519412][ T5843] Bluetooth: hci4: command tx timeout [ 142.604635][ T8310] veth0_vlan: entered promiscuous mode [ 142.615802][ T8310] veth1_vlan: entered promiscuous mode [ 142.638600][ T8310] veth0_macvtap: entered promiscuous mode [ 142.648095][ T8310] veth1_macvtap: entered promiscuous mode [ 142.663097][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.673929][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.684105][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.695015][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.705238][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.715970][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.729017][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.738847][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.749396][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.759472][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.769961][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.779810][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.790339][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.805426][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.933352][ T8310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.942657][ T8310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.957563][ T8704] Dead loop on virtual device ipvlan1, fix it urgently! [ 142.962785][ T8310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.989337][ T8310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.058452][ T8710] IPv6: sit1: Disabled Multicast RS [ 143.284263][ T8721] Dead loop on virtual device ipvlan1, fix it urgently! [ 143.427018][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.446858][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.561269][ T8736] netlink: 'syz.3.674': attribute type 3 has an invalid length. [ 143.572982][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.586714][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.595309][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.606526][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.120345][ T8756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.579727][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.665029][ T8779] netlink: 'syz.3.683': attribute type 10 has an invalid length. [ 144.699529][ T8779] syz_tun: entered promiscuous mode [ 144.738078][ T8779] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 144.850647][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.040051][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.055458][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.055665][ T8761] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 145.070267][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.125929][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.161834][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.170580][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.175901][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.244522][ T8794] IPv6: sit1: Disabled Multicast RS [ 145.433878][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.489458][ T8788] lo speed is unknown, defaulting to 1000 [ 145.541718][ T8814] __nla_validate_parse: 3 callbacks suppressed [ 145.541737][ T8814] netlink: 60 bytes leftover after parsing attributes in process `syz.3.695'. [ 145.608459][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'. [ 145.922112][ T12] bridge_slave_1: left allmulticast mode [ 145.927853][ T12] bridge_slave_1: left promiscuous mode [ 145.937011][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.002489][ T12] bridge_slave_0: left allmulticast mode [ 146.008195][ T12] bridge_slave_0: left promiscuous mode [ 146.014026][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.130109][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.704'. [ 146.586919][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.604339][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.616210][ T12] bond0 (unregistering): Released all slaves [ 146.682424][ T8839] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.691252][ T8839] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.700155][ T8839] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.708866][ T8839] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.749401][ T8839] vxlan0: entered promiscuous mode [ 146.754580][ T8839] vxlan0: entered allmulticast mode [ 146.777876][ T8839] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.787075][ T8839] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.796154][ T8839] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.805140][ T8839] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.875415][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 146.909297][ T29] audit: type=1107 audit(1730827256.755:2): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 146.994508][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 147.106467][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 147.135799][ T59] IPVS: starting estimator thread 0... [ 147.190985][ T8874] IPv6: sit2: Disabled Multicast RS [ 147.197953][ T8788] chnl_net:caif_netlink_parms(): no params data found [ 147.240112][ T8888] IPVS: using max 21 ests per chain, 50400 per kthread [ 147.247222][ T5852] Bluetooth: hci4: command tx timeout [ 147.618124][ T12] hsr_slave_0: left promiscuous mode [ 147.625669][ T12] hsr_slave_1: left promiscuous mode [ 147.632723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.641251][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.655934][ T8915] IPVS: length: 128 != 24 [ 147.668837][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.682000][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.709427][ T12] veth1_macvtap: left promiscuous mode [ 147.715105][ T12] veth0_macvtap: left promiscuous mode [ 147.721178][ T12] veth1_vlan: left promiscuous mode [ 147.727153][ T12] veth0_vlan: left promiscuous mode [ 148.148634][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.189406][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.560516][ T8909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.717'. [ 148.743882][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.781190][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.808544][ T8941] netlink: set zone limit has 4 unknown bytes [ 148.808785][ T8788] bridge_slave_0: entered allmulticast mode [ 148.860409][ T8788] bridge_slave_0: entered promiscuous mode [ 148.910250][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.917388][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.997163][ T8788] bridge_slave_1: entered allmulticast mode [ 149.016884][ T8788] bridge_slave_1: entered promiscuous mode [ 149.140652][ T8957] netlink: 76 bytes leftover after parsing attributes in process `syz.2.728'. [ 149.202218][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.244300][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.321851][ T8966] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 149.329982][ T5852] Bluetooth: hci4: command tx timeout [ 149.442894][ T8788] team0: Port device team_slave_0 added [ 149.463649][ T8788] team0: Port device team_slave_1 added [ 149.548854][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.569680][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.602550][ T8788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.627098][ T8984] sctp: [Deprecated]: syz.3.733 (pid 8984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.627098][ T8984] Use struct sctp_sack_info instead [ 149.633336][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.653032][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.698795][ T8788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.836783][ T8788] hsr_slave_0: entered promiscuous mode [ 149.845197][ T8788] hsr_slave_1: entered promiscuous mode [ 149.864739][ T8788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.873474][ T8788] Cannot create hsr debugfs directory [ 150.311516][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 150.325820][ T9017] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.740'. [ 150.388121][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 150.843987][ T9047] Dead loop on virtual device ipvlan1, fix it urgently! [ 150.981956][ T8788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.018288][ T8788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.034680][ T8788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.099509][ T8788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.363074][ T9063] netlink: 296 bytes leftover after parsing attributes in process `syz.2.751'. [ 151.399647][ T5852] Bluetooth: hci4: command tx timeout [ 151.408329][ T9064] netlink: 'syz.2.751': attribute type 33 has an invalid length. [ 151.422527][ T9064] netlink: 160 bytes leftover after parsing attributes in process `syz.2.751'. [ 151.504037][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 151.527505][ T8788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.530302][ T9071] xt_bpf: check failed: parse error [ 151.612144][ T8788] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.636471][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.643655][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.673460][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.680675][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.711957][ T9077] xt_HMARK: spi-set and port-set can't be combined [ 151.824040][ T9082] netlink: 'syz.0.755': attribute type 4 has an invalid length. [ 151.964247][ T9090] x_tables: duplicate underflow at hook 3 [ 152.024219][ T9087] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 152.129857][ T9097] tipc: Started in network mode [ 152.145078][ T9097] tipc: Node identity 923691eb0015, cluster identity 4711 [ 152.166376][ T9097] tipc: Enabled bearer , priority 0 [ 152.237283][ T9095] tipc: Disabling bearer [ 152.298466][ T8788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.468227][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 152.489773][ T9118] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 152.548357][ T9122] Dead loop on virtual device ipvlan1, fix it urgently! [ 152.720857][ T9135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.728150][ T9135] IPv6: NLM_F_CREATE should be set when creating new route [ 152.869598][ T9149] netlink: 732 bytes leftover after parsing attributes in process `syz.2.770'. [ 152.878828][ T9149] netlink: 732 bytes leftover after parsing attributes in process `syz.2.770'. [ 152.908500][ T9149] xt_SECMARK: invalid mode: 0 [ 152.919070][ T9149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.770'. [ 153.358574][ T8788] veth0_vlan: entered promiscuous mode [ 153.404269][ T8788] veth1_vlan: entered promiscuous mode [ 153.479545][ T5852] Bluetooth: hci4: command tx timeout [ 153.485810][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 153.538102][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 153.611433][ T8788] veth0_macvtap: entered promiscuous mode [ 153.658076][ T8788] veth1_macvtap: entered promiscuous mode [ 153.696620][ T9192] netlink: 'syz.3.781': attribute type 32 has an invalid length. [ 153.726499][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 153.738619][ T9192] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 153.793770][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.804642][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.866131][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.923438][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.968541][ T9] IPVS: starting estimator thread 0... [ 153.987363][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.051429][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.069373][ T9219] IPVS: using max 20 ests per chain, 48000 per kthread [ 154.090876][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.118130][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.130508][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.140497][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.164046][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.209424][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.239422][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.293558][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.359949][ T8788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.378749][ T8788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.387607][ T8788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.396405][ T8788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.525048][ T9254] netlink: 'syz.0.789': attribute type 11 has an invalid length. [ 154.550429][ T9253] netlink: 'syz.0.789': attribute type 11 has an invalid length. [ 154.641759][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.677807][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.742172][ T9269] netlink: 'syz.1.791': attribute type 11 has an invalid length. [ 154.764622][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.803056][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.417256][ T8095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.560350][ T8095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.614823][ T8095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.743511][ T8095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.916189][ T8095] bridge_slave_1: left allmulticast mode [ 155.922206][ T8095] bridge_slave_1: left promiscuous mode [ 155.928881][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.938398][ T8095] bridge_slave_0: left allmulticast mode [ 155.944476][ T8095] bridge_slave_0: left promiscuous mode [ 155.979412][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.263990][ T9315] Dead loop on virtual device ipvlan1, fix it urgently! [ 156.279494][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.288392][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.297802][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.314265][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.326861][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.335148][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.541502][ T8095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.555501][ T8095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.566401][ T8095] bond0 (unregistering): Released all slaves [ 156.581771][ T9304] __nla_validate_parse: 5 callbacks suppressed [ 156.581787][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 156.715124][ T9316] lo speed is unknown, defaulting to 1000 [ 156.921515][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 157.173405][ T9343] netlink: 'syz.0.813': attribute type 10 has an invalid length. [ 157.233210][ T9345] lo speed is unknown, defaulting to 1000 [ 157.501255][ T8095] hsr_slave_0: left promiscuous mode [ 157.520656][ T8095] hsr_slave_1: left promiscuous mode [ 157.540790][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.543355][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 157.549383][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.576762][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.592995][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.621418][ T8095] veth1_macvtap: left promiscuous mode [ 157.628311][ T8095] veth0_macvtap: left promiscuous mode [ 157.634127][ T8095] veth1_vlan: left promiscuous mode [ 157.653201][ T9363] Bluetooth: MGMT ver 1.23 [ 157.653742][ T8095] veth0_vlan: left promiscuous mode [ 158.274775][ T8095] team0 (unregistering): Port device team_slave_1 removed [ 158.313273][ T8095] team0 (unregistering): Port device team_slave_0 removed [ 158.363461][ T5843] Bluetooth: hci4: command tx timeout [ 158.667874][ T9386] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 158.698528][ T9376] macvlan1: entered allmulticast mode [ 158.792477][ T9388] netlink: 'syz.1.824': attribute type 46 has an invalid length. [ 158.818991][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 158.857286][ T9391] lo speed is unknown, defaulting to 1000 [ 158.858058][ T9316] chnl_net:caif_netlink_parms(): no params data found [ 159.157470][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.174843][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.182282][ T9316] bridge_slave_0: entered allmulticast mode [ 159.189043][ T9316] bridge_slave_0: entered promiscuous mode [ 159.204457][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 159.216007][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.226049][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.250600][ T9316] bridge_slave_1: entered allmulticast mode [ 159.257600][ T9316] bridge_slave_1: entered promiscuous mode [ 159.330290][ T9316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.362541][ T9316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.516131][ T9316] team0: Port device team_slave_0 added [ 159.629481][ T9316] team0: Port device team_slave_1 added [ 159.672947][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.680094][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.706482][ T9316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.719138][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.726654][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.753257][ T9316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.794618][ T9424] hsr0: entered promiscuous mode [ 159.800560][ T9424] macsec1: entered allmulticast mode [ 159.805872][ T9424] hsr0: entered allmulticast mode [ 159.811710][ T9424] hsr_slave_0: entered allmulticast mode [ 159.817369][ T9424] hsr_slave_1: entered allmulticast mode [ 159.826046][ T9424] hsr0: left allmulticast mode [ 159.831249][ T9424] hsr_slave_0: left allmulticast mode [ 159.836650][ T9424] hsr_slave_1: left allmulticast mode [ 159.885487][ T9316] hsr_slave_0: entered promiscuous mode [ 159.895015][ T9316] hsr_slave_1: entered promiscuous mode [ 159.901756][ T9316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.909571][ T9316] Cannot create hsr debugfs directory [ 160.290211][ T9316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.303103][ T9316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.313521][ T9316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.325314][ T9316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.440003][ T5843] Bluetooth: hci4: command tx timeout [ 160.488989][ T9316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.506176][ T9316] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.542554][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.549722][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.563976][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 160.651691][ T9432] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.693724][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.700941][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.727098][ T9437] netlink: 'syz.2.834': attribute type 39 has an invalid length. [ 161.328755][ T9460] tipc: Started in network mode [ 161.335856][ T9460] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 161.347189][ T9460] tipc: Enabled bearer , priority 0 [ 161.355927][ T9463] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61695) [ 161.368795][ T9463] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 161.383820][ T9316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.485043][ T9475] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 161.507064][ T9475] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 161.675089][ T9484] netlink: 168 bytes leftover after parsing attributes in process `syz.2.846'. [ 161.900047][ T9495] netlink: 68 bytes leftover after parsing attributes in process `syz.3.849'. [ 161.925288][ T9316] veth0_vlan: entered promiscuous mode [ 161.963257][ T9316] veth1_vlan: entered promiscuous mode [ 162.023369][ T9316] veth0_macvtap: entered promiscuous mode [ 162.057234][ T9316] veth1_macvtap: entered promiscuous mode [ 162.085108][ T9499] lo speed is unknown, defaulting to 1000 [ 162.107435][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.126257][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.138034][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.153881][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.165566][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.187121][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.200640][ T9316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.257669][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.276048][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.293883][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.305721][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.316256][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.327397][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.342263][ T9316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.365668][ T9316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.386834][ T9316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.406220][ T9316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.424037][ T9316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.461193][ T9] tipc: Node number set to 11578026 [ 162.508733][ T9512] syzkaller1: entered promiscuous mode [ 162.519448][ T5843] Bluetooth: hci4: command tx timeout [ 162.532657][ T9512] syzkaller1: entered allmulticast mode [ 162.808815][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.851826][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.983207][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.000352][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.126578][ T9537] gtp0: entered promiscuous mode [ 163.368758][ T9545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.863'. [ 163.386922][ T9546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.863'. [ 163.915028][ T8095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.942300][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 163.962930][ T9562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.867'. [ 164.154541][ T8095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.343131][ T8095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.383420][ T8095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.510386][ T8095] bridge_slave_1: left allmulticast mode [ 164.516074][ T8095] bridge_slave_1: left promiscuous mode [ 164.524097][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.599970][ T8095] bridge_slave_0: left allmulticast mode [ 164.605672][ T8095] bridge_slave_0: left promiscuous mode [ 164.632200][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.873413][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.885377][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.894681][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.903223][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.912461][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.920293][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.158604][ T8095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.173782][ T8095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.186944][ T8095] bond0 (unregistering): Released all slaves [ 165.204364][ T9575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.871'. [ 165.293934][ T9593] lo speed is unknown, defaulting to 1000 [ 165.411178][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 165.433036][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 165.450967][ T9600] netlink: 'syz.1.875': attribute type 10 has an invalid length. [ 165.462951][ T9600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.875'. [ 165.476769][ T9600] bridge0: port 1(syz_tun) entered blocking state [ 165.498126][ T9600] bridge0: port 1(syz_tun) entered disabled state [ 165.511895][ T9600] syz_tun: entered allmulticast mode [ 165.518572][ T9600] syz_tun: entered promiscuous mode [ 165.527687][ T9600] bridge0: port 1(syz_tun) entered blocking state [ 165.535037][ T9600] bridge0: port 1(syz_tun) entered forwarding state [ 165.779154][ T8095] hsr_slave_0: left promiscuous mode [ 165.787923][ T8095] hsr_slave_1: left promiscuous mode [ 165.815899][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.855244][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.873005][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.887442][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.920278][ T8095] veth1_macvtap: left promiscuous mode [ 165.925951][ T8095] veth0_macvtap: left promiscuous mode [ 165.932088][ T8095] veth1_vlan: left promiscuous mode [ 165.937587][ T8095] veth0_vlan: left promiscuous mode [ 165.943395][ T9629] netlink: 'syz.1.881': attribute type 9 has an invalid length. [ 165.951772][ T9629] netlink: 'syz.1.881': attribute type 7 has an invalid length. [ 165.959651][ T9629] netlink: 'syz.1.881': attribute type 8 has an invalid length. [ 166.446776][ T8095] team0 (unregistering): Port device team_slave_1 removed [ 166.487701][ T8095] team0 (unregistering): Port device team_slave_0 removed [ 166.856358][ T9624] __nla_validate_parse: 1 callbacks suppressed [ 166.856378][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.881'. [ 166.904832][ T9593] chnl_net:caif_netlink_parms(): no params data found [ 166.999652][ T5843] Bluetooth: hci4: command tx timeout [ 167.151971][ T9655] netlink: 104 bytes leftover after parsing attributes in process `syz.1.885'. [ 167.165533][ T9593] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.173985][ T9647] netlink: 104 bytes leftover after parsing attributes in process `syz.1.885'. [ 167.184248][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.192800][ T9593] bridge_slave_0: entered allmulticast mode [ 167.233788][ T9593] bridge_slave_0: entered promiscuous mode [ 167.280500][ T9593] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.287840][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.307050][ T9593] bridge_slave_1: entered allmulticast mode [ 167.314761][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.887'. [ 167.326921][ T9593] bridge_slave_1: entered promiscuous mode [ 167.399679][ T9649] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 167.452209][ T9593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.461625][ T9651] netlink: 'syz.3.887': attribute type 4 has an invalid length. [ 167.511565][ T9593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.612992][ T9593] team0: Port device team_slave_0 added [ 167.631774][ T9593] team0: Port device team_slave_1 added [ 167.716648][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.735780][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.787400][ T9593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.802140][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.809400][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.836191][ T9593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.964202][ T9593] hsr_slave_0: entered promiscuous mode [ 167.973301][ T9593] hsr_slave_1: entered promiscuous mode [ 167.979714][ T9593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.987417][ T9593] Cannot create hsr debugfs directory [ 167.987682][ T9702] netlink: 'syz.2.901': attribute type 3 has an invalid length. [ 168.038851][ T9698] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 168.311617][ T9716] tipc: Started in network mode [ 168.316553][ T9716] tipc: Node identity 0000000000000000402000000000002d, cluster identity 4711 [ 168.327557][ T9716] tipc: Enabling of bearer rejected, failed to enable media [ 168.791387][ T9593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.831993][ T9593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.872640][ T9593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.883558][ T9751] lo speed is unknown, defaulting to 1000 [ 168.891501][ T9593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.946336][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 169.038477][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 169.080394][ T5843] Bluetooth: hci4: command tx timeout [ 169.202412][ T9593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.237049][ T9593] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.297695][ T9767] ip6tnl2: entered allmulticast mode [ 169.328036][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.335218][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.383866][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.391051][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.439881][ T9776] netlink: 64 bytes leftover after parsing attributes in process `syz.3.920'. [ 169.741927][ T9790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.821043][ T9593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.878608][ T9800] netlink: 'syz.1.924': attribute type 1 has an invalid length. [ 170.028666][ T9810] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 170.068461][ T9810] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 170.196267][ T9593] veth0_vlan: entered promiscuous mode [ 170.215390][ T9593] veth1_vlan: entered promiscuous mode [ 170.228721][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 170.304895][ T9593] veth0_macvtap: entered promiscuous mode [ 170.320809][ T9593] veth1_macvtap: entered promiscuous mode [ 170.356171][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.376581][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.388461][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.425108][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.441213][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.453072][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.466414][ T9593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.480790][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.491799][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.519248][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.530457][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.549238][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.565896][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.581660][ T9593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.650163][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 170.678178][ T9836] bond_slave_0: entered promiscuous mode [ 170.684014][ T9836] bond_slave_1: entered promiscuous mode [ 170.710477][ T9836] macvtap1: entered promiscuous mode [ 170.715907][ T9836] bond0: entered promiscuous mode [ 170.721924][ T9836] macvtap1: entered allmulticast mode [ 170.727403][ T9836] bond0: entered allmulticast mode [ 170.733378][ T9836] bond_slave_0: entered allmulticast mode [ 170.739423][ T9836] bond_slave_1: entered allmulticast mode [ 170.746118][ T9836] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 170.761448][ T9593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.784319][ T9593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.798140][ T9593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.808833][ T9593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.834884][ T9843] macvtap1: left promiscuous mode [ 170.844280][ T9843] bond0: left promiscuous mode [ 170.849781][ T9843] macvtap1: left allmulticast mode [ 170.855128][ T9843] bond0: left allmulticast mode [ 170.863869][ T9843] bond_slave_0: left allmulticast mode [ 170.869580][ T9843] bond_slave_1: left allmulticast mode [ 170.985636][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.019871][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.070163][ T8095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.090006][ T8095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.159482][ T5843] Bluetooth: hci4: command tx timeout [ 171.208873][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 171.417578][ T9863] vlan3: entered allmulticast mode [ 171.422856][ T9863] macvtap0: entered allmulticast mode [ 171.428250][ T9863] veth0_macvtap: entered allmulticast mode [ 171.801313][ T9878] netlink: 'syz.3.947': attribute type 4 has an invalid length. [ 171.927038][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.948132][ T9880] __nla_validate_parse: 2 callbacks suppressed [ 171.948150][ T9880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.948'. [ 171.968448][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 172.170133][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.474302][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.671420][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.753262][ T9898] bridge1: entered promiscuous mode [ 172.758672][ T9898] bridge1: entered allmulticast mode [ 172.783164][ T9898] team0: Port device bridge1 added [ 172.814144][ T9896] netlink: 72 bytes leftover after parsing attributes in process `syz.0.953'. [ 172.886468][ T9898] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 172.924631][ T9898] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 172.955819][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.983692][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.992772][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.002159][ T9900] bridge0: port 2(ip6gretap0) entered blocking state [ 173.002197][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.008906][ T9900] bridge0: port 2(ip6gretap0) entered disabled state [ 173.044251][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.052354][ T9900] ip6gretap0: entered allmulticast mode [ 173.058212][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.066396][ T9900] ip6gretap0: entered promiscuous mode [ 173.091086][ T9900] bridge0: port 2(ip6gretap0) entered blocking state [ 173.097882][ T9900] bridge0: port 2(ip6gretap0) entered forwarding state [ 173.126877][ T9915] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 173.197963][ T9915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.294527][ T9918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.304874][ T9918] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 173.317668][ T9918] bond3: (slave vti0): Error -95 calling set_mac_address [ 173.357887][ T9907] lo speed is unknown, defaulting to 1000 [ 173.358537][ T51] bridge_slave_1: left allmulticast mode [ 173.382186][ T51] bridge_slave_1: left promiscuous mode [ 173.390497][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.400781][ T51] bridge_slave_0: left allmulticast mode [ 173.407255][ T51] bridge_slave_0: left promiscuous mode [ 173.413588][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.458478][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 173.468546][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 173.478337][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.959'. [ 173.917563][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.936890][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.967633][ T51] bond0 (unregistering): Released all slaves [ 173.982810][ T9915] veth1_macvtap: left promiscuous mode [ 173.996685][ T9918] veth1_macvtap: entered promiscuous mode [ 174.148570][ T9945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.965'. [ 174.206917][ T9939] tap0: tun_chr_ioctl cmd 1074812118 [ 174.485203][ T9907] chnl_net:caif_netlink_parms(): no params data found [ 174.495964][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.0.971'. [ 174.540966][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 174.642120][ T51] hsr_slave_0: left promiscuous mode [ 174.659151][ T51] hsr_slave_1: left promiscuous mode [ 174.686087][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.706412][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.727519][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.748931][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.828656][ T51] veth1_macvtap: left promiscuous mode [ 174.839169][ T51] veth0_macvtap: left promiscuous mode [ 174.847116][ T51] veth1_vlan: left promiscuous mode [ 174.853597][ T51] veth0_vlan: left promiscuous mode [ 175.161045][ T5852] Bluetooth: hci4: command tx timeout [ 175.386665][ T51] team0 (unregistering): Port device team_slave_1 removed [ 175.432291][ T51] team0 (unregistering): Port device team_slave_0 removed [ 175.854844][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.976'. [ 176.035204][ T9992] xfrm1: entered allmulticast mode [ 176.211238][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.219713][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.226952][ T9907] bridge_slave_0: entered allmulticast mode [ 176.239051][ T9907] bridge_slave_0: entered promiscuous mode [ 176.248209][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.255584][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.263265][ T9907] bridge_slave_1: entered allmulticast mode [ 176.271203][ T9907] bridge_slave_1: entered promiscuous mode [ 176.349461][T10005] netlink: 'syz.2.982': attribute type 21 has an invalid length. [ 176.363759][ T9907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.382585][ T9907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.392456][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.399654][T10017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.407180][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.414369][T10017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.450739][T10017] bridge0: entered promiscuous mode [ 176.456010][T10017] bridge0: entered allmulticast mode [ 176.588046][ T9907] team0: Port device team_slave_0 added [ 176.619090][ T9907] team0: Port device team_slave_1 added [ 176.645847][T10028] Dead loop on virtual device ipvlan1, fix it urgently! [ 176.730260][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.737256][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.767275][ T9907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.783585][T10035] netlink: 'syz.2.991': attribute type 10 has an invalid length. [ 176.792255][T10035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.807356][T10035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.827559][T10035] batadv_slave_0: entered promiscuous mode [ 176.850155][T10035] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 176.874075][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.886951][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.949636][ T9907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.994951][T10046] Dead loop on virtual device ipvlan1, fix it urgently! [ 177.084367][T10046] __nla_validate_parse: 3 callbacks suppressed [ 177.084385][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 177.103857][ T9907] hsr_slave_0: entered promiscuous mode [ 177.113200][ T9907] hsr_slave_1: entered promiscuous mode [ 177.127775][ T9907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.151632][ T9907] Cannot create hsr debugfs directory [ 177.175955][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 177.241151][ T5852] Bluetooth: hci4: command tx timeout [ 177.357066][T10059] atomic_op ffff88807f73e198 conn xmit_atomic 0000000000000000 [ 177.926084][ T9907] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.950189][ T9907] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.006583][ T9907] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.025755][ T9907] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.151791][ T9907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.192662][ T9907] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.248881][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.256059][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.285370][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.292576][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.366086][ T9907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.380087][ T9907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.535422][T10110] netlink: 'syz.2.1011': attribute type 3 has an invalid length. [ 178.584953][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 178.743955][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1017'. [ 179.268038][ T9907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.284058][T10140] netlink: 'syz.0.1020': attribute type 21 has an invalid length. [ 179.307830][T10140] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1020'. [ 179.319404][ T5852] Bluetooth: hci4: command tx timeout [ 179.513166][T10150] syz.3.1022 (10150) used obsolete PPPIOCDETACH ioctl [ 179.713665][T10164] tipc: Enabling of bearer rejected, failed to enable media [ 179.807439][T10165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 179.863678][ T9907] veth0_vlan: entered promiscuous mode [ 179.936583][ T9907] veth1_vlan: entered promiscuous mode [ 180.019029][ T9907] veth0_macvtap: entered promiscuous mode [ 180.040116][ T9907] veth1_macvtap: entered promiscuous mode [ 180.074603][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.104894][T10186] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1030'. [ 180.117044][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.127103][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.137667][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.149033][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.158546][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.169131][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.179151][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.189792][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.199884][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.210786][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.222734][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.266845][ T9907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.280320][ T9907] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.289052][ T9907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.313464][ T9907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.313671][T10186] can: request_module (can-proto-0) failed. [ 180.427621][T10202] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 180.497344][ T5887] hid-generic 0005:07C0:FFF9.0001: item fetching failed at offset 0/1 [ 180.542709][ T5887] hid-generic 0005:07C0:FFF9.0001: probe with driver hid-generic failed with error -22 [ 180.710501][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.730881][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.780858][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.798943][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.947451][T10231] team0: entered promiscuous mode [ 181.022931][T10231] team0: left promiscuous mode [ 181.037349][T10233] vlan3: entered promiscuous mode [ 181.071099][T10233] team0: Port device vlan3 added [ 181.207886][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.230189][T10239] netlink: 'syz.0.1045': attribute type 2 has an invalid length. [ 181.238852][T10240] netlink: 'syz.0.1045': attribute type 2 has an invalid length. [ 181.270159][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 181.331400][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.416154][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.586612][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.681698][ T12] bridge_slave_1: left allmulticast mode [ 181.687768][ T12] bridge_slave_1: left promiscuous mode [ 181.695727][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.705531][ T12] bridge_slave_0: left allmulticast mode [ 181.711768][ T12] bridge_slave_0: left promiscuous mode [ 181.717430][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.115510][T10255] can: request_module (can-proto-0) failed. [ 182.137382][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.162115][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.185987][ T12] bond0 (unregistering): Released all slaves [ 182.248460][T10257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1052'. [ 182.385391][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1050'. [ 182.497896][T10267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1053'. [ 182.564194][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.577726][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.586598][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.594821][T10274] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 182.622053][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.635779][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 182.644812][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.821248][T10263] lo speed is unknown, defaulting to 1000 [ 182.854620][T10286] tun0: tun_chr_ioctl cmd 2147767511 [ 182.871811][T10272] lo speed is unknown, defaulting to 1000 [ 182.892209][T10288] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1059'. [ 183.046338][T10291] erspan0: entered promiscuous mode [ 183.075341][T10291] erspan0: left promiscuous mode [ 183.142220][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 183.174081][ T12] hsr_slave_0: left promiscuous mode [ 183.189956][ T12] hsr_slave_1: left promiscuous mode [ 183.210097][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.217573][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.250534][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.257993][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.316490][ T12] veth1_macvtap: left promiscuous mode [ 183.337723][ T12] veth0_macvtap: left promiscuous mode [ 183.346912][ T12] veth1_vlan: left promiscuous mode [ 183.357532][ T12] veth0_vlan: left promiscuous mode [ 184.089085][ T12] team0 (unregistering): Port device team_slave_1 removed [ 184.145483][ T12] team0 (unregistering): Port device team_slave_0 removed [ 184.539910][T10308] lo speed is unknown, defaulting to 1000 [ 184.735330][T10272] chnl_net:caif_netlink_parms(): no params data found [ 184.759323][ T5852] Bluetooth: hci4: command tx timeout [ 184.951912][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1071'. [ 184.965346][T10334] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 184.978108][T10334] tipc: Invalid UDP bearer configuration [ 184.978154][T10334] tipc: Enabling of bearer rejected, failed to enable media [ 184.997853][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 185.037288][T10272] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.045250][T10272] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.053138][T10272] bridge_slave_0: entered allmulticast mode [ 185.062765][T10272] bridge_slave_0: entered promiscuous mode [ 185.071720][T10272] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.079031][T10272] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.087031][T10272] bridge_slave_1: entered allmulticast mode [ 185.094318][T10272] bridge_slave_1: entered promiscuous mode [ 185.123613][T10272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.156567][T10272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.260646][T10272] team0: Port device team_slave_0 added [ 185.278102][T10272] team0: Port device team_slave_1 added [ 185.352304][T10272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.364891][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.398182][T10272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.515836][T10272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.534913][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.570419][T10272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.718602][T10272] hsr_slave_0: entered promiscuous mode [ 185.744395][T10272] hsr_slave_1: entered promiscuous mode [ 185.776016][T10272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.796471][T10272] Cannot create hsr debugfs directory [ 185.869430][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 185.975367][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 186.096341][T10384] syzkaller1: entered promiscuous mode [ 186.104699][T10384] syzkaller1: entered allmulticast mode [ 186.114673][T10390] netlink: 'syz.0.1087': attribute type 9 has an invalid length. [ 186.161881][T10384] Cannot find add_set index 0 as target [ 186.411782][T10272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.425832][T10272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.438163][T10272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.448139][T10272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.511350][T10272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.533991][T10272] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.545395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.552551][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.571163][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.578237][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.718067][T10272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.839503][ T5843] Bluetooth: hci4: command tx timeout [ 187.013481][ T5887] hid-generic 0005:04F3:FFF9.0002: unknown main item tag 0xe [ 187.031154][T10272] veth0_vlan: entered promiscuous mode [ 187.045060][ T5887] hid-generic 0005:04F3:FFF9.0002: item fetching failed at offset 3/4 [ 187.061588][ T5887] hid-generic 0005:04F3:FFF9.0002: probe with driver hid-generic failed with error -22 [ 187.075541][T10272] veth1_vlan: entered promiscuous mode [ 187.178066][T10272] veth0_macvtap: entered promiscuous mode [ 187.198318][T10272] veth1_macvtap: entered promiscuous mode [ 187.227907][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.246865][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.257287][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.273849][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.287094][T10272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.301485][T10429] __nla_validate_parse: 61 callbacks suppressed [ 187.301502][T10429] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1095'. [ 187.320739][T10429] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1095'. [ 187.337990][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'. [ 187.366300][T10429] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1095'. [ 187.392720][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.413029][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.428786][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.446935][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.457244][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.475050][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.498078][T10272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.505974][T10429] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1095'. [ 187.515392][T10429] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1095'. [ 187.528323][T10429] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1095'. [ 187.545609][T10429] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1095'. [ 187.578710][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1101'. [ 187.594606][T10429] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1095'. [ 187.626833][T10272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.654979][T10272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.680475][T10272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.708647][T10272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.746006][T10456] tun0: tun_chr_ioctl cmd 1074812117 [ 187.931131][T10470] netlink: 'syz.2.1107': attribute type 30 has an invalid length. [ 188.021328][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.046548][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.113167][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.166546][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.260349][T10486] unsupported nlmsg_type 40 [ 188.441273][T10496] can: request_module (can-proto-5) failed. [ 188.471270][T10498] bond1: entered promiscuous mode [ 188.476703][T10498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.597384][T10498] bond1 (unregistering): Released all slaves [ 188.888597][T10518] macsec2: entered promiscuous mode [ 188.909623][T10518] macvlan1: entered promiscuous mode [ 188.920464][ T5843] Bluetooth: hci4: command 0x040f tx timeout [ 188.943453][T10519] lo speed is unknown, defaulting to 1000 [ 188.995140][T10423] ================================================================== [ 189.003251][T10423] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6c0/0xd70 [ 189.010740][T10423] Read of size 8 at addr ffff88805debc060 by task khidpd_04f3fff9/10423 [ 189.019082][T10423] [ 189.021417][T10423] CPU: 1 UID: 0 PID: 10423 Comm: khidpd_04f3fff9 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 189.032618][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.042677][T10423] Call Trace: [ 189.045972][T10423] [ 189.048928][T10423] dump_stack_lvl+0x241/0x360 [ 189.053631][T10423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.058859][T10423] ? __pfx__printk+0x10/0x10 [ 189.063476][T10423] ? _printk+0xd5/0x120 [ 189.067631][T10423] ? __virt_addr_valid+0x183/0x530 [ 189.072737][T10423] ? __virt_addr_valid+0x183/0x530 [ 189.077847][T10423] print_report+0x169/0x550 [ 189.082348][T10423] ? __virt_addr_valid+0x183/0x530 [ 189.087454][T10423] ? __virt_addr_valid+0x183/0x530 [ 189.092553][T10423] ? __virt_addr_valid+0x45f/0x530 [ 189.097653][T10423] ? __phys_addr+0xba/0x170 [ 189.102153][T10423] ? __mutex_lock+0x6c0/0xd70 [ 189.106826][T10423] kasan_report+0x143/0x180 [ 189.111327][T10423] ? __mutex_lock+0x6c0/0xd70 [ 189.115996][T10423] __mutex_lock+0x6c0/0xd70 [ 189.120494][T10423] ? __mutex_lock+0x52a/0xd70 [ 189.125158][T10423] ? l2cap_unregister_user+0x6a/0x1c0 [ 189.130526][T10423] ? __pfx___mutex_lock+0x10/0x10 [ 189.135539][T10423] ? __pfx___timer_delete_sync+0x10/0x10 [ 189.141171][T10423] l2cap_unregister_user+0x6a/0x1c0 [ 189.146362][T10423] hidp_session_thread+0x450/0x490 [ 189.151465][T10423] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 189.157353][T10423] ? __pfx_hidp_session_thread+0x10/0x10 [ 189.162978][T10423] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 189.168869][T10423] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 189.175105][T10423] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 189.181338][T10423] ? __kthread_parkme+0x169/0x1d0 [ 189.186359][T10423] ? __pfx_hidp_session_thread+0x10/0x10 [ 189.192070][T10423] kthread+0x2f0/0x390 [ 189.196128][T10423] ? __pfx_hidp_session_thread+0x10/0x10 [ 189.201757][T10423] ? __pfx_kthread+0x10/0x10 [ 189.206381][T10423] ret_from_fork+0x4b/0x80 [ 189.210795][T10423] ? __pfx_kthread+0x10/0x10 [ 189.215376][T10423] ret_from_fork_asm+0x1a/0x30 [ 189.220140][T10423] [ 189.223148][T10423] [ 189.225461][T10423] Allocated by task 10272: [ 189.229877][T10423] kasan_save_track+0x3f/0x80 [ 189.234567][T10423] __kasan_kmalloc+0x98/0xb0 [ 189.239181][T10423] __kmalloc_noprof+0x1fc/0x400 [ 189.244074][T10423] hci_alloc_dev_priv+0x27/0x2030 [ 189.249103][T10423] vhci_create_device+0x116/0x6a0 [ 189.254130][T10423] vhci_write+0x3cf/0x490 [ 189.258465][T10423] vfs_write+0xaeb/0xd30 [ 189.262714][T10423] ksys_write+0x183/0x2b0 [ 189.267134][T10423] do_syscall_64+0xf3/0x230 [ 189.271643][T10423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.277551][T10423] [ 189.279874][T10423] Freed by task 10272: [ 189.283941][T10423] kasan_save_track+0x3f/0x80 [ 189.288710][T10423] kasan_save_free_info+0x40/0x50 [ 189.293760][T10423] __kasan_slab_free+0x59/0x70 [ 189.298538][T10423] kfree+0x1a0/0x440 [ 189.302433][T10423] hci_release_dev+0x1525/0x16b0 [ 189.307367][T10423] bt_host_release+0x83/0x90 [ 189.311953][T10423] device_release+0x99/0x1c0 [ 189.316541][T10423] kobject_put+0x22f/0x480 [ 189.320956][T10423] vhci_release+0x88/0xd0 [ 189.325292][T10423] __fput+0x23f/0x880 [ 189.329283][T10423] task_work_run+0x24f/0x310 [ 189.333872][T10423] do_exit+0xa2f/0x28e0 [ 189.338024][T10423] do_group_exit+0x207/0x2c0 [ 189.342621][T10423] __x64_sys_exit_group+0x3f/0x40 [ 189.347648][T10423] x64_sys_call+0x2634/0x2640 [ 189.352327][T10423] do_syscall_64+0xf3/0x230 [ 189.356845][T10423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.362747][T10423] [ 189.365067][T10423] Last potentially related work creation: [ 189.370774][T10423] kasan_save_stack+0x3f/0x60 [ 189.375449][T10423] __kasan_record_aux_stack+0xac/0xc0 [ 189.380818][T10423] insert_work+0x3e/0x330 [ 189.385151][T10423] __queue_work+0xc8b/0xf50 [ 189.389646][T10423] call_timer_fn+0x18e/0x650 [ 189.394227][T10423] __run_timer_base+0x695/0x8e0 [ 189.399068][T10423] run_timer_softirq+0xb7/0x170 [ 189.403912][T10423] handle_softirqs+0x2c5/0x980 [ 189.408669][T10423] __irq_exit_rcu+0xf4/0x1c0 [ 189.413251][T10423] irq_exit_rcu+0x9/0x30 [ 189.417503][T10423] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 189.423156][T10423] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.429148][T10423] [ 189.431465][T10423] Second to last potentially related work creation: [ 189.438037][T10423] kasan_save_stack+0x3f/0x60 [ 189.442809][T10423] __kasan_record_aux_stack+0xac/0xc0 [ 189.448174][T10423] insert_work+0x3e/0x330 [ 189.452528][T10423] __queue_work+0xb66/0xf50 [ 189.457058][T10423] queue_work_on+0x1c2/0x380 [ 189.461745][T10423] process_scheduled_works+0xa63/0x1850 [ 189.467294][T10423] worker_thread+0x870/0xd30 [ 189.471896][T10423] kthread+0x2f0/0x390 [ 189.475966][T10423] ret_from_fork+0x4b/0x80 [ 189.480383][T10423] ret_from_fork_asm+0x1a/0x30 [ 189.485148][T10423] [ 189.487463][T10423] The buggy address belongs to the object at ffff88805debc000 [ 189.487463][T10423] which belongs to the cache kmalloc-8k of size 8192 [ 189.501512][T10423] The buggy address is located 96 bytes inside of [ 189.501512][T10423] freed 8192-byte region [ffff88805debc000, ffff88805debe000) [ 189.515299][T10423] [ 189.517621][T10423] The buggy address belongs to the physical page: [ 189.524032][T10423] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5deb8 [ 189.532781][T10423] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 189.541271][T10423] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 189.549272][T10423] page_type: f5(slab) [ 189.553248][T10423] raw: 00fff00000000040 ffff88801ac42280 0000000000000000 dead000000000001 [ 189.561820][T10423] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 189.570397][T10423] head: 00fff00000000040 ffff88801ac42280 0000000000000000 dead000000000001 [ 189.579056][T10423] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 189.587714][T10423] head: 00fff00000000003 ffffea000177ae01 ffffffffffffffff 0000000000000000 [ 189.596377][T10423] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 189.605041][T10423] page dumped because: kasan: bad access detected [ 189.611459][T10423] page_owner tracks the page as allocated [ 189.617161][T10423] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7717, tgid 7717 (syz-executor), ts 123660415892, free_ts 123171882661 [ 189.636597][T10423] post_alloc_hook+0x1f3/0x230 [ 189.641362][T10423] get_page_from_freelist+0x303f/0x3190 [ 189.646894][T10423] __alloc_pages_noprof+0x292/0x710 [ 189.652080][T10423] alloc_pages_mpol_noprof+0x3e8/0x680 [ 189.657528][T10423] alloc_slab_page+0x6a/0x120 [ 189.662195][T10423] allocate_slab+0x5a/0x2f0 [ 189.666684][T10423] ___slab_alloc+0xcd1/0x14b0 [ 189.671361][T10423] __slab_alloc+0x58/0xa0 [ 189.675688][T10423] __kmalloc_noprof+0x25a/0x400 [ 189.680534][T10423] batadv_hash_new+0x7c/0x2a0 [ 189.685206][T10423] batadv_tt_init+0xbc/0x2a0 [ 189.689824][T10423] batadv_mesh_init+0x3cc/0x730 [ 189.694756][T10423] batadv_softif_init_late+0xa30/0xef0 [ 189.700292][T10423] register_netdevice+0x6d7/0x1b00 [ 189.705396][T10423] rtnl_newlink_create+0x2df/0xa30 [ 189.710497][T10423] rtnl_newlink+0xfa9/0x1550 [ 189.715077][T10423] page last free pid 5213 tgid 5213 stack trace: [ 189.721396][T10423] free_unref_page+0xcfb/0xf20 [ 189.726155][T10423] __put_partials+0xeb/0x130 [ 189.730738][T10423] put_cpu_partial+0x17c/0x250 [ 189.735490][T10423] __slab_free+0x2ea/0x3d0 [ 189.739893][T10423] qlist_free_all+0x9a/0x140 [ 189.744474][T10423] kasan_quarantine_reduce+0x14f/0x170 [ 189.749929][T10423] __kasan_slab_alloc+0x23/0x80 [ 189.754773][T10423] __kmalloc_noprof+0x1a6/0x400 [ 189.759616][T10423] tomoyo_realpath_from_path+0xcf/0x5e0 [ 189.765155][T10423] tomoyo_path_perm+0x2b7/0x740 [ 189.770014][T10423] security_inode_getattr+0x130/0x330 [ 189.775408][T10423] vfs_getattr+0x45/0x430 [ 189.779746][T10423] vfs_fstatat+0xe4/0x190 [ 189.784161][T10423] __x64_sys_newfstatat+0x11d/0x1a0 [ 189.789355][T10423] do_syscall_64+0xf3/0x230 [ 189.793847][T10423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.799753][T10423] [ 189.802071][T10423] Memory state around the buggy address: [ 189.807697][T10423] ffff88805debbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.815762][T10423] ffff88805debbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.823820][T10423] >ffff88805debc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.831870][T10423] ^ [ 189.839056][T10423] ffff88805debc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.847106][T10423] ffff88805debc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.855156][T10423] ================================================================== [ 189.865965][T10423] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 189.873196][T10423] CPU: 1 UID: 0 PID: 10423 Comm: khidpd_04f3fff9 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 189.884503][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.894576][T10423] Call Trace: [ 189.897875][T10423] [ 189.900826][T10423] dump_stack_lvl+0x241/0x360 [ 189.905529][T10423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.910752][T10423] ? __pfx__printk+0x10/0x10 [ 189.915376][T10423] ? vscnprintf+0x5d/0x90 [ 189.919717][T10423] panic+0x349/0x880 [ 189.923615][T10423] ? check_panic_on_warn+0x21/0xb0 [ 189.928723][T10423] ? __pfx_panic+0x10/0x10 [ 189.933135][T10423] ? mark_lock+0x9a/0x360 [ 189.937455][T10423] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 189.943359][T10423] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 189.949250][T10423] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 189.955575][T10423] ? print_report+0x502/0x550 [ 189.960252][T10423] check_panic_on_warn+0x86/0xb0 [ 189.965181][T10423] ? __mutex_lock+0x6c0/0xd70 [ 189.969852][T10423] end_report+0x77/0x160 [ 189.974090][T10423] kasan_report+0x154/0x180 [ 189.978602][T10423] ? __mutex_lock+0x6c0/0xd70 [ 189.983284][T10423] __mutex_lock+0x6c0/0xd70 [ 189.987781][T10423] ? __mutex_lock+0x52a/0xd70 [ 189.992455][T10423] ? l2cap_unregister_user+0x6a/0x1c0 [ 189.997829][T10423] ? __pfx___mutex_lock+0x10/0x10 [ 190.002854][T10423] ? __pfx___timer_delete_sync+0x10/0x10 [ 190.008487][T10423] l2cap_unregister_user+0x6a/0x1c0 [ 190.013685][T10423] hidp_session_thread+0x450/0x490 [ 190.018800][T10423] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 190.024696][T10423] ? __pfx_hidp_session_thread+0x10/0x10 [ 190.030323][T10423] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 190.036211][T10423] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 190.042452][T10423] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 190.048697][T10423] ? __kthread_parkme+0x169/0x1d0 [ 190.053722][T10423] ? __pfx_hidp_session_thread+0x10/0x10 [ 190.059354][T10423] kthread+0x2f0/0x390 [ 190.063440][T10423] ? __pfx_hidp_session_thread+0x10/0x10 [ 190.069079][T10423] ? __pfx_kthread+0x10/0x10 [ 190.073673][T10423] ret_from_fork+0x4b/0x80 [ 190.078101][T10423] ? __pfx_kthread+0x10/0x10 [ 190.082695][T10423] ret_from_fork_asm+0x1a/0x30 [ 190.087474][T10423] [ 190.090781][T10423] Kernel Offset: disabled [ 190.095100][T10423] Rebooting in 86400 seconds..