last executing test programs: 2m34.239992897s ago: executing program 1 (id=1415): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044004}, 0x24040000) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB="08000a00ce0f335899d8255e0287d16671d509c98a6cb009296255d806eaeee1fabead08ed4b6398e7e167a8638dbeb197901b1a04602a2df47fb4b232badb214e5f07884e1a8f53288213147a5db3b2ed363db382d87e906afb491e8171825b31d6e3d8f2cae6fc8d8fa20d2189dc58d4f47aca189c394e54e5cbde907b4e8aea5722d02b0d71a0d347ab0537882b69a07c63d32416008119425d", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x2400c080) 2m32.843491875s ago: executing program 1 (id=1432): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000280)={0x8, 'batadv_slave_1\x00', {'wlan1\x00'}, 0x3ff}) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x15}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e", 0x63}, {&(0x7f0000000340)="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", 0x219}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x3}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326da", 0x1d5}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x3, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r7, @ANYBLOB="000000000000000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r9, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r5) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r11) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r12, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x33d7, 0x0, 0x1, 0x7f, '\x00', r13, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) 2m32.327713759s ago: executing program 1 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0x5, 0x62, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7800, 0x6, 0x9d0}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x700, 0x20, 0x101, 0x9, {{0x2e, 0x4, 0x3, 0x3, 0xb8, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0x23, 0x44, [@private=0xa010101, @multicast2, @broadcast, @private=0xa010100, @broadcast, @private=0xa010100, @private=0xa010100, @remote]}, @noop, @cipso={0x86, 0x3b, 0x3, [{0x6, 0x12, "41f57b1f6409da8b119171a179f90db7"}, {0x6, 0x2}, {0x2, 0x5, "9c9fb6"}, {0x2, 0x6, "b9a12399"}, {0x7, 0x10, "93f9d4de10fdeed64fbca3c4e782"}, {0x1, 0x3, "b9"}, {0x1, 0x3, "9e"}]}, @timestamp_prespec={0x44, 0xc, 0x3d, 0x3, 0x4, [{@rand_addr=0x64010101, 0x3}]}, @rr={0x7, 0x17, 0x5d, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0xab, [@private=0xa010101, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3b}, @local, @private=0xa010101]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="1d0825bd7000ffdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="0400ff0018002d80140000001f42f671a1177d841ca85d5961349df60400870008009e0020100000a1002a00db9b8bd5607de6c349237970cbb4e87b7e22b549455ddf8991c8997e5edbd655165cdb7ec6c3ba8685528b74a99cf0ad30e84992317520ef063dcb41ee2d9c8a197028ecd71ea05f8da57981df5f6eddd71b2e96339aa7fd287e0493594b7914498769daaf5a672cb4729e3c5105e967d703e4cb575cf9ea31243952e60a7b731b0907e4d387aa4ff0a788aa15ca80b64ef96d550d9621ab71c1a0f28f0000000400ff0080002d"], 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2m32.158328201s ago: executing program 1 (id=1439): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000088caffffffffffffaaaaaaaaaa0086dd"], 0x42) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x7b52, 0x4) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvfrom(r4, 0x0, 0x0, 0x2, 0x0, 0x0) 2m31.885159072s ago: executing program 1 (id=1440): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8f", 0x20) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0xa}, @enum={0xc, 0xa, 0x0, 0x6, 0x4, [{0xb, 0x9}, {0x0, 0xfff}, {0xf, 0x4}, {0xd, 0xd}, {0x2, 0xa0}, {0x7, 0xd}, {0xa, 0x10000}, {0x4, 0x6}, {0x7, 0x9a72}, {0x0, 0x2}]}]}}, 0x0, 0x86, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) 2m31.735829343s ago: executing program 1 (id=1441): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x6e, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='mm_vmscan_node_reclaim_begin\x00', r2}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0) close(r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000005c0)="f160ca6b240b193b1ba4d1ed03772cf16a18f01fabbf6eefd178131c41a0ee4d0ca8adb1ef68d7e68eed4d036aa751017cd8", 0x32}], 0x1, 0xb) 2m15.884746245s ago: executing program 32 (id=1441): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x6e, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='mm_vmscan_node_reclaim_begin\x00', r2}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0) close(r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000005c0)="f160ca6b240b193b1ba4d1ed03772cf16a18f01fabbf6eefd178131c41a0ee4d0ca8adb1ef68d7e68eed4d036aa751017cd8", 0x32}], 0x1, 0xb) 52.037838609s ago: executing program 2 (id=1825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076184754b272a11e96ddd7b6c6967b804a156b8b735acf7ca8381c4f5f8efca5f45cc792af4261dac12c4484cc38ae430098d3edd0274aa089ff52ef16df1914f4a8a879ff4f9c692c1b76b9c7add4ccddf2ce42"], 0xb8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000880}, 0x4000002) sendmsg$nl_route_sched_retired(r3, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000480)=@newchain={0xd0, 0x64, 0x800, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0xa0, 0x2, [@TCA_RSVP_ACT={0x9c, 0x6, [@m_mirred={0x98, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4}}}]}, {0x4b, 0x6, "c9884d8e16e9370d231296fe76063a8e6617cbdaef0ef28e2ece38f6b9798d3b2066f04efcd15734f711250c56f5629294b776497d6b0d2995306e1073d155b8a9b0e14f39058c"}, {0xc}, {0xc}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmsg$qrtr(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/224, 0xe0}], 0x1}, 0x38, 0x100) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x180000) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000300)="ea5689bd99fcd94567ba807d3b9980e9af8205349f7b5523fa1c11484a9f574d6115b4a488021ac71afd28560e3e33861a267de7b18b4db5ad55f4acda7b117bb770ce3630e4f38b3e62c9f6a34d10b011649c385f06e116fdc9ce7c6b630a0d5cd70db0f4aacf9e98baa80894e3a064b9bf4833c6e3987d702eea02ec4feb1530dde3da8bbf613036b0308be3719dce4c7d8c5157ccb1393262d45fde8b513e21290287c9b4d1b3ef89eec06c17f65c00a0b1873120ffadf5da5bccc5f78f21d90ff698f064196eaf83f2216519b89396e8189ff07799631cf257f005b56e4e7430aeb8cca0da76e674c16e0845f3df5ca1362e82ab1914e5de2a", 0xfb) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 43.19260628s ago: executing program 2 (id=1825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076184754b272a11e96ddd7b6c6967b804a156b8b735acf7ca8381c4f5f8efca5f45cc792af4261dac12c4484cc38ae430098d3edd0274aa089ff52ef16df1914f4a8a879ff4f9c692c1b76b9c7add4ccddf2ce42"], 0xb8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000880}, 0x4000002) sendmsg$nl_route_sched_retired(r3, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000480)=@newchain={0xd0, 0x64, 0x800, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0xa0, 0x2, [@TCA_RSVP_ACT={0x9c, 0x6, [@m_mirred={0x98, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4}}}]}, {0x4b, 0x6, "c9884d8e16e9370d231296fe76063a8e6617cbdaef0ef28e2ece38f6b9798d3b2066f04efcd15734f711250c56f5629294b776497d6b0d2995306e1073d155b8a9b0e14f39058c"}, {0xc}, {0xc}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmsg$qrtr(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/224, 0xe0}], 0x1}, 0x38, 0x100) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x180000) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000300)="ea5689bd99fcd94567ba807d3b9980e9af8205349f7b5523fa1c11484a9f574d6115b4a488021ac71afd28560e3e33861a267de7b18b4db5ad55f4acda7b117bb770ce3630e4f38b3e62c9f6a34d10b011649c385f06e116fdc9ce7c6b630a0d5cd70db0f4aacf9e98baa80894e3a064b9bf4833c6e3987d702eea02ec4feb1530dde3da8bbf613036b0308be3719dce4c7d8c5157ccb1393262d45fde8b513e21290287c9b4d1b3ef89eec06c17f65c00a0b1873120ffadf5da5bccc5f78f21d90ff698f064196eaf83f2216519b89396e8189ff07799631cf257f005b56e4e7430aeb8cca0da76e674c16e0845f3df5ca1362e82ab1914e5de2a", 0xfb) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 33.305814324s ago: executing program 2 (id=1825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076184754b272a11e96ddd7b6c6967b804a156b8b735acf7ca8381c4f5f8efca5f45cc792af4261dac12c4484cc38ae430098d3edd0274aa089ff52ef16df1914f4a8a879ff4f9c692c1b76b9c7add4ccddf2ce42"], 0xb8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000880}, 0x4000002) sendmsg$nl_route_sched_retired(r3, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000480)=@newchain={0xd0, 0x64, 0x800, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0xa0, 0x2, [@TCA_RSVP_ACT={0x9c, 0x6, [@m_mirred={0x98, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4}}}]}, {0x4b, 0x6, "c9884d8e16e9370d231296fe76063a8e6617cbdaef0ef28e2ece38f6b9798d3b2066f04efcd15734f711250c56f5629294b776497d6b0d2995306e1073d155b8a9b0e14f39058c"}, {0xc}, {0xc}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmsg$qrtr(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/224, 0xe0}], 0x1}, 0x38, 0x100) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x180000) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000300)="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", 0xfb) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 23.821038423s ago: executing program 2 (id=1825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076184754b272a11e96ddd7b6c6967b804a156b8b735acf7ca8381c4f5f8efca5f45cc792af4261dac12c4484cc38ae430098d3edd0274aa089ff52ef16df1914f4a8a879ff4f9c692c1b76b9c7add4ccddf2ce42"], 0xb8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000880}, 0x4000002) sendmsg$nl_route_sched_retired(r3, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000480)=@newchain={0xd0, 0x64, 0x800, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0xa0, 0x2, [@TCA_RSVP_ACT={0x9c, 0x6, [@m_mirred={0x98, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4}}}]}, {0x4b, 0x6, "c9884d8e16e9370d231296fe76063a8e6617cbdaef0ef28e2ece38f6b9798d3b2066f04efcd15734f711250c56f5629294b776497d6b0d2995306e1073d155b8a9b0e14f39058c"}, {0xc}, {0xc}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmsg$qrtr(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/224, 0xe0}], 0x1}, 0x38, 0x100) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x180000) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000300)="ea5689bd99fcd94567ba807d3b9980e9af8205349f7b5523fa1c11484a9f574d6115b4a488021ac71afd28560e3e33861a267de7b18b4db5ad55f4acda7b117bb770ce3630e4f38b3e62c9f6a34d10b011649c385f06e116fdc9ce7c6b630a0d5cd70db0f4aacf9e98baa80894e3a064b9bf4833c6e3987d702eea02ec4feb1530dde3da8bbf613036b0308be3719dce4c7d8c5157ccb1393262d45fde8b513e21290287c9b4d1b3ef89eec06c17f65c00a0b1873120ffadf5da5bccc5f78f21d90ff698f064196eaf83f2216519b89396e8189ff07799631cf257f005b56e4e7430aeb8cca0da76e674c16e0845f3df5ca1362e82ab1914e5de2a", 0xfb) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 15.13291883s ago: executing program 2 (id=1825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076184754b272a11e96ddd7b6c6967b804a156b8b735acf7ca8381c4f5f8efca5f45cc792af4261dac12c4484cc38ae430098d3edd0274aa089ff52ef16df1914f4a8a879ff4f9c692c1b76b9c7add4ccddf2ce42"], 0xb8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000880}, 0x4000002) sendmsg$nl_route_sched_retired(r3, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000480)=@newchain={0xd0, 0x64, 0x800, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0xa0, 0x2, [@TCA_RSVP_ACT={0x9c, 0x6, [@m_mirred={0x98, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4}}}]}, {0x4b, 0x6, "c9884d8e16e9370d231296fe76063a8e6617cbdaef0ef28e2ece38f6b9798d3b2066f04efcd15734f711250c56f5629294b776497d6b0d2995306e1073d155b8a9b0e14f39058c"}, {0xc}, {0xc}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmsg$qrtr(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/224, 0xe0}], 0x1}, 0x38, 0x100) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x180000) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000300)="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", 0xfb) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 4.961782922s ago: executing program 2 (id=1825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076184754b272a11e96ddd7b6c6967b804a156b8b735acf7ca8381c4f5f8efca5f45cc792af4261dac12c4484cc38ae430098d3edd0274aa089ff52ef16df1914f4a8a879ff4f9c692c1b76b9c7add4ccddf2ce42"], 0xb8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000880}, 0x4000002) sendmsg$nl_route_sched_retired(r3, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000480)=@newchain={0xd0, 0x64, 0x800, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0xa0, 0x2, [@TCA_RSVP_ACT={0x9c, 0x6, [@m_mirred={0x98, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4}}}]}, {0x4b, 0x6, "c9884d8e16e9370d231296fe76063a8e6617cbdaef0ef28e2ece38f6b9798d3b2066f04efcd15734f711250c56f5629294b776497d6b0d2995306e1073d155b8a9b0e14f39058c"}, {0xc}, {0xc}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmsg$qrtr(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/224, 0xe0}], 0x1}, 0x38, 0x100) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x180000) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000300)="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", 0xfb) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 2.759647038s ago: executing program 0 (id=2725): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) getsockopt$inet_int(r4, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r8, 0x8b26, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x48, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f1}]}]}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x108, r9, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69a62a25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37b26c35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x608f34fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e20504f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cad}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x185faee8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ad30c70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6152be18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4ec}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x232dc4c7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bdf9356}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c9a8059}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x2004811}, 0x40000) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x7ca8e000) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) 2.736630787s ago: executing program 5 (id=2727): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000001800600010002000000000000000000000000000000000747a6ef9aa27d5d00d2ef7b26040c92e3e4fd3c861b66e963e9e2047da3d00c59f2ebc0559c55d37026fa2f9f403e44bde8303488acface43c5c3dd90be6b0dad76c86f040b59"], 0x20}}, 0x0) 2.441181696s ago: executing program 5 (id=2728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff000006"], 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 2.107680476s ago: executing program 5 (id=2730): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f00000002c0)="d2", 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7}, &(0x7f0000000700), &(0x7f0000000740)=r6}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_netfilter(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040080) 1.755767342s ago: executing program 0 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010005000500070000000000080009000000000014002000ff05f7ff000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.732750907s ago: executing program 3 (id=2735): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x3}, {}, {0x1c, 0xfff1}}}, 0x24}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f0000000740)=""/34, 0x22}], 0x9, &(0x7f0000000980)=""/185, 0xb9}, 0x80}, {{&(0x7f0000000a40)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/190, 0xbe}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/156, 0x9c}, {&(0x7f0000000c40)=""/35, 0x23}], 0x4, &(0x7f0000000cc0)=""/110, 0x6e}, 0x8}], 0x2, 0x0, &(0x7f0000000dc0)) 1.665440328s ago: executing program 5 (id=2736): socket$packet(0x11, 0xa, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000000040)={@link_local, @local, @void, {@arp={0x806, @generic={0x20, 0xfbfb, 0x6, 0x0, 0x9, @empty, "", @local}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000088caffffffffffffaaaaaaaaaa0086dd608a6d55000800fffe80000000000000fe5e00000000000000000000000000002900010800000000"], 0x42) (async) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) (async) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216001002"], 0x10}}, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d5, 0x0) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="06e7ff0000000000010000330000000000000000877237b12518ff80", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000500"/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x66, r7, 0x990, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.659213759s ago: executing program 4 (id=2737): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x58, 0x10, 0x401, 0x0, 0x20, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1c0d0}, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 1.543316073s ago: executing program 0 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 1.486169276s ago: executing program 3 (id=2739): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5ff, 0x0, 0x0, [{0x1, 0x1, "00d414ce8ad4"}]}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20040100) 1.36401938s ago: executing program 4 (id=2740): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe8880ffffff0000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) 1.363576036s ago: executing program 5 (id=2741): unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000)=0x5, 0x12) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='&', 0x1) sendfile(r1, r0, 0x0, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="000000000000000000001c0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000fbffff"], 0x48) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) 1.301345288s ago: executing program 0 (id=2742): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009000400000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 1.242189826s ago: executing program 3 (id=2743): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b27045", 0xbd}, {&(0x7f0000000800)}], 0x2}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="3e7519ac8330ccb60569ee16c38b51cac8273d9b17b700ad7c7953159796843698b3f8ad0c0ab64aed40f7f9a8d2064c2d1e8461f2cea73d606546ce5dd36ef0984c8628cd8e491d555febff44642d77f1b58e90f30bbd5dd5645f49a82f412cc8d3b0be1f8bb33d23684b5cce588ff0ae6e195c532d1b5571", 0x79}], 0x1}}], 0x3, 0x0) 1.201330281s ago: executing program 4 (id=2744): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130014010ff"}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x1a, 0x1, 0xffff2e85) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c0) 1.101632228s ago: executing program 0 (id=2745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) getsockopt$inet_int(r4, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r8, 0x8b26, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x48, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f1}]}]}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x108, r9, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69a62a25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37b26c35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x608f34fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e20504f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cad}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x185faee8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ad30c70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6152be18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4ec}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x232dc4c7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bdf9356}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c9a8059}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x2004811}, 0x40000) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x7ca8e000) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) 1.034436399s ago: executing program 3 (id=2746): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="0aac0f00"]}]}, 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000a51f09f852f0009000000080000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = socket$inet_dccp(0x2, 0x6, 0x0) pselect6(0x40, &(0x7f0000000180)={0x2, 0x0, 0xa, 0x80000000, 0x3ad0, 0x7fffffffffffffff, 0x6, 0x9}, &(0x7f00000001c0)={0x1, 0xe541, 0x5, 0x5, 0xffffffffffffff80, 0x0, 0x100000001, 0x7}, &(0x7f0000000200)={0x5ebd, 0x8000000000000001, 0x1, 0x2, 0x5, 0x9, 0x7, 0x80}, &(0x7f0000000280)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000400)={[0x1]}, 0x8}) getsockopt$inet_int(r6, 0x10d, 0x85, &(0x7f0000000000), &(0x7f00000003c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="0aac0f00"]}]}, 0x1c}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000a51f09f852f0009000000080000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r5) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) pselect6(0x40, &(0x7f0000000180)={0x2, 0x0, 0xa, 0x80000000, 0x3ad0, 0x7fffffffffffffff, 0x6, 0x9}, &(0x7f00000001c0)={0x1, 0xe541, 0x5, 0x5, 0xffffffffffffff80, 0x0, 0x100000001, 0x7}, &(0x7f0000000200)={0x5ebd, 0x8000000000000001, 0x1, 0x2, 0x5, 0x9, 0x7, 0x80}, &(0x7f0000000280)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000400)={[0x1]}, 0x8}) (async) getsockopt$inet_int(r6, 0x10d, 0x85, &(0x7f0000000000), &(0x7f00000003c0)=0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) (async) 743.713153ms ago: executing program 4 (id=2747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'drbg_pr_sha384\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001995319c00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd170400000000000000829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177b91bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186d2d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "11fa8a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e464fb7d3bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f228db8dfd37ea691ffc87c6905bbc94d33e1ea71a28105f543e86a38a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c69670530c7786d779b8353aac33a57d79b05613a74ed8f61129017fb632dbf04542188b196a213408c258a6f"}, {0x4, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80c0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff0000060000000008000100ac1414"], 0x24}}, 0x0) 557.871468ms ago: executing program 3 (id=2748): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x440c0}, 0x8800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400000000000000", @ANYRES32=r2, @ANYBLOB="ea02000000000000280012800b00010062726964676500001800028005001900800000000c0021"], 0x48}}, 0x0) 378.258166ms ago: executing program 4 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010005000500070000000000080009000000000014002000ff05f7ff000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 141.301312ms ago: executing program 4 (id=2750): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x3}, {}, {0x1c, 0xfff1}}}, 0x24}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f0000000740)=""/34, 0x22}], 0x9, &(0x7f0000000980)=""/185, 0xb9}, 0x80}, {{&(0x7f0000000a40)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/190, 0xbe}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/156, 0x9c}, {&(0x7f0000000c40)=""/35, 0x23}], 0x4, &(0x7f0000000cc0)=""/110, 0x6e}, 0x8}], 0x2, 0x0, &(0x7f0000000dc0)) 97.681762ms ago: executing program 3 (id=2751): unshare(0x6020480) unshare(0x26020480) (fail_nth: 10) 59.645506ms ago: executing program 0 (id=2752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, &(0x7f0000000380)) (async) socket$netlink(0x10, 0x3, 0x5) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x9, 0x5, 0x5, 0x40aa, 0x102}, 0x14) (async) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e00000004fcff", 0x58}], 0x1) 0s ago: executing program 5 (id=2753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): 24-gbc6a5efe3dcd #0 [ 298.646268][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 298.649524][T12274] veth0_vlan: entered promiscuous mode [ 298.656323][T12446] Call Trace: [ 298.656371][T12446] [ 298.656382][T12446] dump_stack_lvl+0x241/0x360 [ 298.672782][T12446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.678024][T12446] ? __pfx__printk+0x10/0x10 [ 298.682635][T12446] ? __lock_acquire+0x1397/0x2100 [ 298.687666][T12446] should_fail_ex+0x3b0/0x4e0 [ 298.692357][T12446] prepare_alloc_pages+0x1da/0x5b0 [ 298.697565][T12446] __alloc_pages_noprof+0x16f/0x710 [ 298.702772][T12446] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 298.708507][T12446] ? __pfx_lock_acquire+0x10/0x10 [ 298.713538][T12446] ? validate_chain+0x11e/0x5920 [ 298.718494][T12446] alloc_pages_mpol_noprof+0x3e8/0x680 [ 298.723980][T12446] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 298.729993][T12446] vma_alloc_folio_noprof+0x12e/0x230 [ 298.735367][T12446] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 298.741271][T12446] folio_prealloc+0x2e/0x170 [ 298.745859][T12446] handle_pte_fault+0x2c98/0x5ed0 [ 298.750893][T12446] ? __lock_acquire+0x1397/0x2100 [ 298.755948][T12446] ? __pfx_handle_pte_fault+0x10/0x10 [ 298.761344][T12446] ? __lock_acquire+0x1397/0x2100 [ 298.766390][T12446] ? __pfx_lock_acquire+0x10/0x10 [ 298.771411][T12446] ? count_memcg_event_mm+0x94/0x420 [ 298.776703][T12446] ? do_raw_spin_lock+0x14f/0x370 [ 298.781737][T12446] handle_mm_fault+0x1106/0x1bb0 [ 298.786710][T12446] ? __pfx_handle_mm_fault+0x10/0x10 [ 298.792005][T12446] ? follow_page_pte+0x97f/0x1ca0 [ 298.797040][T12446] ? __pfx_find_vma+0x10/0x10 [ 298.801723][T12446] ? vma_is_secretmem+0xd/0x50 [ 298.806485][T12446] ? check_vma_flags+0x52b/0x5a0 [ 298.811436][T12446] __get_user_pages+0x1c82/0x49e0 [ 298.816486][T12446] ? 0xffffffffa000095c [ 298.820667][T12446] ? __pfx___get_user_pages+0x10/0x10 [ 298.826081][T12446] __gup_longterm_locked+0x49a/0x17f0 [ 298.831455][T12446] ? __pfx___might_resched+0x10/0x10 [ 298.836748][T12446] ? __pfx___gup_longterm_locked+0x10/0x10 [ 298.842554][T12446] ? down_read+0x82b/0xa40 [ 298.846980][T12446] ? is_valid_gup_args+0x124/0x200 [ 298.852177][T12446] pin_user_pages+0x137/0x1f0 [ 298.856854][T12446] ? __pfx_pin_user_pages+0x10/0x10 [ 298.862056][T12446] ? trace_kmalloc+0x1f/0xd0 [ 298.866660][T12446] xdp_umem_create+0x978/0xf30 [ 298.871438][T12446] xsk_setsockopt+0x732/0x950 [ 298.876126][T12446] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.881346][T12446] ? __pfx_lock_acquire+0x10/0x10 [ 298.886369][T12446] ? aa_sock_opt_perm+0x79/0x120 [ 298.891320][T12446] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.896523][T12446] do_sock_setsockopt+0x3af/0x720 [ 298.901556][T12446] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 298.907125][T12446] ? __fget_files+0x395/0x410 [ 298.911817][T12446] ? __fget_files+0x2a/0x410 [ 298.916418][T12446] __x64_sys_setsockopt+0x1ee/0x280 [ 298.921620][T12446] do_syscall_64+0xf3/0x230 [ 298.926123][T12446] ? clear_bhb_loop+0x35/0x90 [ 298.930806][T12446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.936698][T12446] RIP: 0033:0x7fd12af85d19 [ 298.941118][T12446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.960735][T12446] RSP: 002b:00007fd12be00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.969148][T12446] RAX: ffffffffffffffda RBX: 00007fd12b175fa0 RCX: 00007fd12af85d19 [ 298.977118][T12446] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000007 [ 298.985085][T12446] RBP: 00007fd12be00090 R08: 000000000000001c R09: 0000000000000000 [ 298.993060][T12446] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000002 [ 299.001119][T12446] R13: 0000000000000000 R14: 00007fd12b175fa0 R15: 00007ffdee895f58 [ 299.009102][T12446] [ 299.015185][T12274] veth1_vlan: entered promiscuous mode [ 299.031111][T12447] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2015'. [ 299.041656][T12447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2015'. [ 299.050632][T12447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2015'. [ 299.061334][T12447] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2015'. [ 299.103649][T12274] veth0_macvtap: entered promiscuous mode [ 299.148960][T12274] veth1_macvtap: entered promiscuous mode [ 299.198238][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.218788][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.229285][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.240402][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.281502][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.290358][T12452] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 299.292260][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.313952][T12274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.324387][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.335323][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.345723][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.356262][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.366246][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.376915][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.388160][T12274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.401041][T12274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.409851][T12274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.418752][T12274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.427683][T12274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.496591][T12455] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2018'. [ 299.622298][ T7939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.630627][ T7939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.654486][ T55] Bluetooth: hci2: command tx timeout [ 299.777658][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.802397][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.085104][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2028'. [ 300.134146][T12477] bridge0 (unregistering): left promiscuous mode [ 300.676123][T12497] netlink: 'syz.5.2034': attribute type 10 has an invalid length. [ 300.689036][T12497] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 301.410787][T12524] netlink: 'syz.5.2042': attribute type 10 has an invalid length. [ 301.521540][T12524] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 301.664227][T12533] rdma_rxe: rxe_newlink: failed to add lo [ 302.374598][T12545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.416928][T12545] __nla_validate_parse: 5 callbacks suppressed [ 302.416948][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2052'. [ 302.509893][T12551] netlink: 'syz.5.2054': attribute type 3 has an invalid length. [ 302.541648][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2054'. [ 302.573797][T12553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2055'. [ 302.581138][T12551] x_tables: unsorted underflow at hook 3 [ 302.647535][T12551] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 302.982231][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.992351][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.001547][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.020351][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.040706][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 303.048201][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.091951][T12577] netlink: 'syz.0.2061': attribute type 10 has an invalid length. [ 303.113374][T12574] rdma_rxe: rxe_newlink: failed to add lo [ 303.190046][T12570] lo speed is unknown, defaulting to 1000 [ 303.214484][T12578] netlink: 'syz.4.2059': attribute type 10 has an invalid length. [ 303.230065][T12577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2061'. [ 303.277543][T12577] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 303.313093][T12578] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2059'. [ 303.729641][T12570] chnl_net:caif_netlink_parms(): no params data found [ 303.867634][T12595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2067'. [ 303.949405][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'. [ 304.048601][T12570] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.059155][T12570] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.066924][T12570] bridge_slave_0: entered allmulticast mode [ 304.074162][T12570] bridge_slave_0: entered promiscuous mode [ 304.088308][T12570] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.097021][T12570] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.104824][T12570] bridge_slave_1: entered allmulticast mode [ 304.118827][T12570] bridge_slave_1: entered promiscuous mode [ 304.211962][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 304.269345][T12570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.285583][T12615] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 304.295274][T12570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.380384][T12570] team0: Port device team_slave_0 added [ 304.403550][T12570] team0: Port device team_slave_1 added [ 304.515672][T12570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.531498][T12570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.579540][T12570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.592906][T12570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.599938][T12570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.647024][T12570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.767634][T12631] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 304.806226][T12631] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 304.829984][T12631] gretap2: entered promiscuous mode [ 304.849676][T12631] gretap2: entered allmulticast mode [ 304.996820][T12570] hsr_slave_0: entered promiscuous mode [ 305.012459][T12570] hsr_slave_1: entered promiscuous mode [ 305.027795][T12570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.041146][T12570] Cannot create hsr debugfs directory [ 305.095567][ T5845] Bluetooth: hci2: command tx timeout [ 305.361879][T12570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.435786][T12570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.504073][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 305.546854][T12570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.624319][T12570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.730621][T12652] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 305.887410][T12570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 305.906088][T12570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 305.955543][T12570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.977196][T12570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 306.173660][T12570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.185650][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2092'. [ 306.223114][T12570] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.274147][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.281277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.351763][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.358925][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.731676][T12693] netlink: 'syz.4.2097': attribute type 9 has an invalid length. [ 306.756473][T12570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.793236][T12570] veth0_vlan: entered promiscuous mode [ 306.804391][T12570] veth1_vlan: entered promiscuous mode [ 306.805128][T12697] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 306.828917][T12570] veth0_macvtap: entered promiscuous mode [ 306.838625][T12570] veth1_macvtap: entered promiscuous mode [ 306.898395][T12570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.909197][T12570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.931392][T12570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.946306][T12570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.966864][T12570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.978125][T12570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.988716][T12570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.993889][T12701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.003948][T12570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.024465][T12570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.037910][T12570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.048941][T12570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.059623][T12570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.071113][T12570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.083658][T12570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.095520][T12570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.107561][T12570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.118683][T12570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.155769][T12570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.187366][T12570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.188306][ T5845] Bluetooth: hci2: command tx timeout [ 307.199951][T12570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.215721][T12570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.225117][T12570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.389526][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.420332][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.461440][ T7939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.475417][ T7939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.604201][T12714] netlink: 'syz.4.2103': attribute type 10 has an invalid length. [ 307.647954][T12714] __nla_validate_parse: 5 callbacks suppressed [ 307.647990][T12714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2103'. [ 307.681190][T12715] netlink: 'syz.3.2104': attribute type 10 has an invalid length. [ 307.737179][T12715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2104'. [ 308.194193][T12728] lo speed is unknown, defaulting to 1000 [ 308.203391][T12733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2108'. [ 308.242206][T12734] netlink: 'syz.4.2105': attribute type 10 has an invalid length. [ 308.310376][T12734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2105'. [ 308.336140][T12736] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 308.346028][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 308.472232][T12736] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 308.547025][T12736] gretap2: entered promiscuous mode [ 308.585847][T12736] gretap2: entered allmulticast mode [ 308.844271][T12732] siw: device registration error -23 [ 309.202022][T12750] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 310.004759][T12758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2114'. [ 310.373850][T12773] netlink: 'syz.0.2116': attribute type 10 has an invalid length. [ 310.413401][T12773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2116'. [ 310.435009][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.438035][T12773] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 310.467684][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.475736][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.492211][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.501068][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 310.508368][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.621175][T12775] lo speed is unknown, defaulting to 1000 [ 310.737166][T12769] netlink: 'syz.4.2119': attribute type 10 has an invalid length. [ 310.801054][T12769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2119'. [ 310.897783][T12775] chnl_net:caif_netlink_parms(): no params data found [ 311.065830][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.090417][T12775] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.120296][T12775] bridge_slave_0: entered allmulticast mode [ 311.126922][T12795] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 311.140891][T12775] bridge_slave_0: entered promiscuous mode [ 311.159352][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.191674][T12775] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.212566][T12775] bridge_slave_1: entered allmulticast mode [ 311.229847][T12775] bridge_slave_1: entered promiscuous mode [ 311.304049][T12775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.348926][T12775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.419315][T12775] team0: Port device team_slave_0 added [ 311.440875][T12775] team0: Port device team_slave_1 added [ 311.561210][T12775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.568338][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.636787][T12775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.678966][T12775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.686477][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.770490][T12775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.831944][T12815] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 311.913978][T12814] netlink: 'syz.4.2128': attribute type 4 has an invalid length. [ 311.961049][T12815] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 312.021422][T12815] gretap2: entered promiscuous mode [ 312.033784][T12815] gretap2: entered allmulticast mode [ 312.263053][T12824] netlink: 'syz.5.2132': attribute type 10 has an invalid length. [ 312.270929][T12824] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2132'. [ 312.272075][T12775] hsr_slave_0: entered promiscuous mode [ 312.292399][T12826] rdma_rxe: rxe_newlink: failed to add lo [ 312.317644][T12775] hsr_slave_1: entered promiscuous mode [ 312.345928][T12775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.353774][T12775] Cannot create hsr debugfs directory [ 312.416849][T12824] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 312.611822][ T5845] Bluetooth: hci2: command tx timeout [ 312.843112][T12837] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 312.908344][T12775] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.017725][T12775] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.167298][T12775] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.236116][T12775] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.337941][T12775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.357037][T12775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.367165][T12775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.376464][T12775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.450129][T12775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.470854][T12775] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.481691][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.488862][ T7939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.505924][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.513080][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.685158][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 313.784797][T12850] team0: Mode changed to "activebackup" [ 313.810388][T12775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.935268][T12775] veth0_vlan: entered promiscuous mode [ 313.984081][T12775] veth1_vlan: entered promiscuous mode [ 314.046995][T12775] veth0_macvtap: entered promiscuous mode [ 314.056497][T12857] netlink: 'syz.5.2138': attribute type 10 has an invalid length. [ 314.072567][T12857] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2138'. [ 314.087544][T12775] veth1_macvtap: entered promiscuous mode [ 314.123624][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.165611][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.198179][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.230465][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.261232][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.287828][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.308669][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.329509][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.349865][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.366484][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.378573][T12775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.395337][T12857] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 314.416223][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.443461][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.470780][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.491028][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.511126][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.541169][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 314.541262][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.551348][T12864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2144'. [ 314.572368][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.583665][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.593929][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.599625][T12864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2144'. [ 314.624891][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.693016][T12775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.703944][ T5845] Bluetooth: hci2: command tx timeout [ 314.796246][T12775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.847612][T12775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.859375][T12775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.879423][T12775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.077942][T12877] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 315.087423][T12875] netlink: 'syz.4.2146': attribute type 10 has an invalid length. [ 315.107765][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.128695][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2146'. [ 315.139427][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.265445][T12881] rdma_rxe: rxe_newlink: failed to add lo [ 315.302581][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.310524][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.868276][T12892] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2153'. [ 316.101737][T12906] hsr0: entered promiscuous mode [ 316.268364][T12911] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2159'. [ 316.368998][T12919] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 316.509789][T12923] gtp0: left promiscuous mode [ 316.521631][T12923] gtp0: left allmulticast mode [ 316.528413][T12917] netlink: 'syz.0.2160': attribute type 10 has an invalid length. [ 316.557527][T12917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2160'. [ 316.569160][T12923] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.578311][T12923] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.586885][T12923] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.595367][T12923] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.658484][T12923] gretap2: left promiscuous mode [ 316.671793][T12923] gretap2: left allmulticast mode [ 316.690111][T12917] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 316.726938][T12923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2162'. [ 316.821703][T12929] netlink: 'syz.5.2163': attribute type 10 has an invalid length. [ 316.855772][T12929] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 317.247660][T12942] rdma_rxe: rxe_newlink: failed to add lo [ 317.961395][T12950] vxcan1: tx address claim with dlc 1 [ 318.279423][T12962] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 318.311466][T12965] netlink: zone id is out of range [ 318.327622][T12965] netlink: zone id is out of range [ 318.333638][T12965] netlink: get zone limit has 8 unknown bytes [ 318.435237][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.445454][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.457157][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.466257][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.479155][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 318.487543][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.530826][T12970] lo speed is unknown, defaulting to 1000 [ 318.789245][T12970] chnl_net:caif_netlink_parms(): no params data found [ 319.127921][T13001] netlink: 'syz.0.2183': attribute type 10 has an invalid length. [ 319.156244][T13001] __nla_validate_parse: 2 callbacks suppressed [ 319.156263][T13001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2183'. [ 319.204662][T12990] rdma_rxe: rxe_newlink: failed to add lo [ 319.217258][T12970] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.248544][T12970] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.267520][T12970] bridge_slave_0: entered allmulticast mode [ 319.282473][T12970] bridge_slave_0: entered promiscuous mode [ 319.302469][T12970] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.319791][T12970] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.338397][T12970] bridge_slave_1: entered allmulticast mode [ 319.367932][T12970] bridge_slave_1: entered promiscuous mode [ 319.384378][T13001] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 319.519019][T13005] lo speed is unknown, defaulting to 1000 [ 319.522566][T12970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.558412][T12970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.647023][T13012] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2187'. [ 319.807687][T12970] team0: Port device team_slave_0 added [ 319.846295][T12970] team0: Port device team_slave_1 added [ 319.873764][T13016] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 319.997143][T12970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.021433][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.067531][T12970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.090908][T12970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.117692][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.144133][T12970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.379194][T12970] hsr_slave_0: entered promiscuous mode [ 320.389407][T12970] hsr_slave_1: entered promiscuous mode [ 320.411256][T12970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.419837][T12970] Cannot create hsr debugfs directory [ 320.544231][ T5845] Bluetooth: hci2: command tx timeout [ 320.608846][T13042] netlink: 204156 bytes leftover after parsing attributes in process `syz.0.2196'. [ 320.641742][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 320.668056][T13036] lo speed is unknown, defaulting to 1000 [ 320.671053][T13042] netlink: zone id is out of range [ 320.679008][T13042] netlink: zone id is out of range [ 320.712103][T13042] netlink: zone id is out of range [ 320.718401][T13042] netlink: zone id is out of range [ 320.773229][T13048] netlink: 'syz.3.2199': attribute type 10 has an invalid length. [ 320.870663][T13048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2199'. [ 321.280942][T12970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.387756][T13062] rdma_rxe: rxe_newlink: failed to add lo [ 321.419626][T13036] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 321.454901][T12970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.645143][T12970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.790178][T12970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.920352][T13079] nft_compat: unsupported protocol 0 [ 322.085238][T12970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.115004][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2211'. [ 322.127778][T12970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.142422][T12970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.159921][T12970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.444501][T12970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.492144][T12970] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.541963][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.549099][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.582961][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.590139][ T8731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.622744][T13107] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2219'. [ 322.633148][ T5845] Bluetooth: hci2: command tx timeout [ 322.729183][T13111] netlink: 'syz.5.2218': attribute type 8 has an invalid length. [ 323.224701][T12970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.230121][T13135] rdma_rxe: rxe_newlink: failed to add lo [ 323.331442][T13139] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 323.339324][T13139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2226'. [ 323.367131][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'. [ 323.396385][T12970] veth0_vlan: entered promiscuous mode [ 323.435355][T12970] veth1_vlan: entered promiscuous mode [ 323.495121][T13139] net_ratelimit: 13 callbacks suppressed [ 323.495138][T13139] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 323.600661][T12970] veth0_macvtap: entered promiscuous mode [ 323.622744][T12970] veth1_macvtap: entered promiscuous mode [ 323.695751][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.729022][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.769513][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.775632][T13155] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2232'. [ 323.801178][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.841201][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.861179][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.888791][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.926148][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.946440][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.999810][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.030473][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.055589][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.089727][T12970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.164877][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.203676][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.231242][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.255982][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.270398][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.291055][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.302743][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.319394][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.329569][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.340315][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.351117][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.362182][T13172] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 324.362214][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.402248][T12970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.448865][T12970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.501203][T12970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.520427][T12970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.553535][T12970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.613512][T13174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.692010][ T5845] Bluetooth: hci2: command tx timeout [ 324.860688][T13186] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2245'. [ 325.091590][ T7939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.122807][T13192] rdma_rxe: rxe_newlink: failed to add lo [ 325.130107][ T7939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.175139][T13201] netlink: 'syz.0.2249': attribute type 10 has an invalid length. [ 325.234424][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.251889][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.329573][T13201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2249'. [ 325.413914][T13201] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 325.800159][T13213] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 326.039803][T13218] pimreg3: entered allmulticast mode [ 326.897830][T13227] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2260'. [ 327.125168][T13235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2264'. [ 327.349495][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.360753][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.368976][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.379905][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.388153][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 327.396398][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.468975][T13242] lo speed is unknown, defaulting to 1000 [ 327.507277][T13248] netlink: 'syz.0.2268': attribute type 10 has an invalid length. [ 327.516078][T13248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2268'. [ 327.538848][T13248] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 327.754557][T13252] rdma_rxe: rxe_newlink: failed to add lo [ 327.867348][T13242] chnl_net:caif_netlink_parms(): no params data found [ 327.896084][T13255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2269'. [ 328.091365][T13258] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 328.239179][T13242] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.262764][T13242] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.289640][T13242] bridge_slave_0: entered allmulticast mode [ 328.318095][T13242] bridge_slave_0: entered promiscuous mode [ 328.349611][T13242] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.370192][T13242] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.382114][T13242] bridge_slave_1: entered allmulticast mode [ 328.415603][T13242] bridge_slave_1: entered promiscuous mode [ 328.515072][T13274] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2275'. [ 328.589962][T13242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.610344][T13242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.732638][T13242] team0: Port device team_slave_0 added [ 328.756101][T13280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2278'. [ 328.756658][T13242] team0: Port device team_slave_1 added [ 328.913886][T13242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.923166][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.965882][T13242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.979488][T13242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.986887][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.013771][T13242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.018033][T13288] netlink: 'syz.4.2281': attribute type 10 has an invalid length. [ 329.050000][T13288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2281'. [ 329.151253][T13242] hsr_slave_0: entered promiscuous mode [ 329.181689][T13242] hsr_slave_1: entered promiscuous mode [ 329.202061][T13242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.236093][T13242] Cannot create hsr debugfs directory [ 329.498485][T13299] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 329.505808][ T55] Bluetooth: hci2: command tx timeout [ 329.521186][T13242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.534085][T13300] rdma_rxe: rxe_newlink: failed to add lo [ 329.563318][T13299] IPv6: sit4: Disabled Multicast RS [ 329.687458][T13242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.788873][T13305] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 329.853266][T13242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.970906][T13242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.026139][T13313] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2290'. [ 330.178284][T13242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 330.209657][T13242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.252348][T13242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 330.279559][T13319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2292'. [ 330.322021][T13242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.480534][T13325] netlink: 'syz.5.2294': attribute type 10 has an invalid length. [ 330.529021][T13242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.539837][T13325] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2294'. [ 330.571524][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2295'. [ 330.589888][T13242] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.621959][T13325] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 330.729095][T13332] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2297'. [ 330.750935][T13334] netlink: 'syz.3.2298': attribute type 10 has an invalid length. [ 330.768709][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.775874][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.825562][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.832743][ T7939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.974618][T13342] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 331.188777][T13351] netlink: 'syz.4.2306': attribute type 6 has an invalid length. [ 331.254270][T13352] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2303'. [ 331.414117][T13362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2307'. [ 331.437620][T13242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.512326][T13365] rdma_rxe: rxe_newlink: failed to add lo [ 331.572735][ T55] Bluetooth: hci2: command 0x041b tx timeout [ 331.609566][T13242] veth0_vlan: entered promiscuous mode [ 331.664887][T13242] veth1_vlan: entered promiscuous mode [ 331.757261][T13242] veth0_macvtap: entered promiscuous mode [ 331.785990][T13372] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2311'. [ 331.800398][T13242] veth1_macvtap: entered promiscuous mode [ 331.871873][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.912694][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.931166][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.950216][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.964520][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.001957][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.012161][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.023061][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.033291][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.044309][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.055571][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.068472][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.078672][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.091429][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.114254][T13242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.134906][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.155121][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.165879][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.178452][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.191215][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.230302][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.254861][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.265818][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.286050][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.326747][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.339072][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.368483][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.380232][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.391582][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.403768][T13242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.463846][T13242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.485828][T13242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.498635][T13242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.508611][T13242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.711465][T13391] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2320'. [ 332.721112][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.749478][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.796860][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.800856][T13398] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2321'. [ 332.818211][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.222276][T13411] x_tables: unsorted entry at hook 2 [ 333.477529][T13420] rdma_rxe: rxe_newlink: failed to add lo [ 333.936909][T13430] FAULT_INJECTION: forcing a failure. [ 333.936909][T13430] name failslab, interval 1, probability 0, space 0, times 0 [ 333.966960][T13430] CPU: 0 UID: 0 PID: 13430 Comm: syz.0.2332 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 333.977858][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 333.987922][T13430] Call Trace: [ 333.991206][T13430] [ 333.994144][T13430] dump_stack_lvl+0x241/0x360 [ 333.998845][T13430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.004060][T13430] ? __pfx__printk+0x10/0x10 [ 334.008661][T13430] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 334.014053][T13430] ? __pfx___might_resched+0x10/0x10 [ 334.019351][T13430] should_fail_ex+0x3b0/0x4e0 [ 334.024063][T13430] should_failslab+0xac/0x100 [ 334.028763][T13430] __kmalloc_node_noprof+0xe1/0x4d0 [ 334.033980][T13430] ? __kvmalloc_node_noprof+0x72/0x190 [ 334.039459][T13430] __kvmalloc_node_noprof+0x72/0x190 [ 334.044758][T13430] bpf_test_run_xdp_live+0x290/0x2230 [ 334.050143][T13430] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 334.056063][T13430] ? __pfx_lock_release+0x10/0x10 [ 334.061108][T13430] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 334.066412][T13430] ? __pfx___might_resched+0x10/0x10 [ 334.071703][T13430] ? __mutex_unlock_slowpath+0x21e/0x790 [ 334.077345][T13430] ? __pfx_autoremove_wake_function+0x10/0x10 [ 334.083435][T13430] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 334.089255][T13430] ? synchronize_rcu+0x11b/0x360 [ 334.094212][T13430] ? __pfx_synchronize_rcu+0x10/0x10 [ 334.099548][T13430] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 334.105828][T13430] ? 0xffffffffa00020f0 [ 334.110032][T13430] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 334.115959][T13430] ? _copy_from_user+0x99/0xc0 [ 334.120740][T13430] ? bpf_test_init+0x15a/0x180 [ 334.125525][T13430] ? xdp_convert_md_to_buff+0x5b/0x330 [ 334.131007][T13430] bpf_prog_test_run_xdp+0x805/0x11e0 [ 334.136415][T13430] ? __pfx_lock_release+0x10/0x10 [ 334.142355][T13430] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 334.148174][T13430] ? __fget_files+0x2a/0x410 [ 334.152785][T13430] ? __fget_files+0x2a/0x410 [ 334.157392][T13430] ? fput+0x21b/0x290 [ 334.161383][T13430] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 334.167197][T13430] bpf_prog_test_run+0x2e4/0x360 [ 334.172166][T13430] __sys_bpf+0x48d/0x810 [ 334.176418][T13430] ? __pfx___sys_bpf+0x10/0x10 [ 334.181201][T13430] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.187194][T13430] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.193537][T13430] ? do_syscall_64+0x100/0x230 [ 334.198317][T13430] __x64_sys_bpf+0x7c/0x90 [ 334.202754][T13430] do_syscall_64+0xf3/0x230 [ 334.207298][T13430] ? clear_bhb_loop+0x35/0x90 [ 334.212015][T13430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.217949][T13430] RIP: 0033:0x7f2e84385d19 [ 334.222384][T13430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.242101][T13430] RSP: 002b:00007f2e851ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.250539][T13430] RAX: ffffffffffffffda RBX: 00007f2e84575fa0 RCX: 00007f2e84385d19 [ 334.258547][T13430] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 334.266532][T13430] RBP: 00007f2e851ef090 R08: 0000000000000000 R09: 0000000000000000 [ 334.274591][T13430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.282577][T13430] R13: 0000000000000000 R14: 00007f2e84575fa0 R15: 00007ffc6a9d93d8 [ 334.290577][T13430] [ 335.803232][T13454] __nla_validate_parse: 5 callbacks suppressed [ 335.803256][T13454] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2340'. [ 336.244015][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.277174][T13468] netlink: 'syz.4.2346': attribute type 4 has an invalid length. [ 336.337064][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.347093][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.395893][T13477] netlink: 'syz.5.2351': attribute type 1 has an invalid length. [ 336.416363][T13477] netlink: 'syz.5.2351': attribute type 3 has an invalid length. [ 336.441254][T13477] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2351'. [ 336.450330][T13477] NCSI netlink: No device for ifindex 813332851 [ 336.473910][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.493202][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2352'. [ 336.521270][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.577984][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.630097][T13466] lo speed is unknown, defaulting to 1000 [ 336.653851][T13482] bridge0: entered allmulticast mode [ 336.886447][T13484] rdma_rxe: rxe_newlink: failed to add lo [ 336.904313][T13466] chnl_net:caif_netlink_parms(): no params data found [ 336.967736][T13495] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2355'. [ 337.035516][T13466] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.042960][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.050215][T13466] bridge_slave_0: entered allmulticast mode [ 337.059917][T13466] bridge_slave_0: entered promiscuous mode [ 337.068773][T13466] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.077133][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.084831][T13466] bridge_slave_1: entered allmulticast mode [ 337.097261][T13466] bridge_slave_1: entered promiscuous mode [ 337.206392][T13466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.230953][T13466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.370594][T13466] team0: Port device team_slave_0 added [ 337.416756][T13466] team0: Port device team_slave_1 added [ 337.599551][T13502] IPv6: sit3: Disabled Multicast RS [ 337.612414][T13502] sit3: entered allmulticast mode [ 337.739990][T13466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.750882][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.785591][T13466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.841269][T13466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.885646][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.942013][T13466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.061449][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2365'. [ 338.099951][T13466] hsr_slave_0: entered promiscuous mode [ 338.130484][T13466] hsr_slave_1: entered promiscuous mode [ 338.142823][T13466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.150588][T13466] Cannot create hsr debugfs directory [ 338.196180][T13531] netlink: 'syz.5.2367': attribute type 72 has an invalid length. [ 338.535896][T13466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.621334][ T5845] Bluetooth: hci2: command tx timeout [ 338.629093][T13541] rdma_rxe: rxe_newlink: failed to add lo [ 338.730600][T13466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.788261][T13548] FAULT_INJECTION: forcing a failure. [ 338.788261][T13548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.806243][T13548] CPU: 1 UID: 0 PID: 13548 Comm: syz.3.2374 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 338.817055][T13548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 338.827141][T13548] Call Trace: [ 338.830470][T13548] [ 338.833434][T13548] dump_stack_lvl+0x241/0x360 [ 338.838159][T13548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.843380][T13548] ? __pfx__printk+0x10/0x10 [ 338.847990][T13548] ? __pfx_lock_release+0x10/0x10 [ 338.853060][T13548] should_fail_ex+0x3b0/0x4e0 [ 338.857762][T13548] _copy_from_iter+0x1e9/0x1c20 [ 338.862641][T13548] ? __virt_addr_valid+0x183/0x530 [ 338.867778][T13548] ? alloc_pages_mpol_noprof+0x417/0x680 [ 338.873435][T13548] ? __pfx__copy_from_iter+0x10/0x10 [ 338.878736][T13548] ? __virt_addr_valid+0x183/0x530 [ 338.883861][T13548] ? __virt_addr_valid+0x183/0x530 [ 338.888999][T13548] ? __virt_addr_valid+0x45f/0x530 [ 338.894123][T13548] ? __phys_addr_symbol+0x2f/0x70 [ 338.899154][T13548] ? __check_object_size+0x47a/0x730 [ 338.904453][T13548] af_alg_sendmsg+0x1519/0x2650 [ 338.909332][T13548] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 338.914545][T13548] ? skcipher_check_key+0x15c/0x1d0 [ 338.919767][T13548] ? skcipher_sendmsg_nokey+0x61/0x130 [ 338.925236][T13548] ? __pfx_skcipher_sendmsg_nokey+0x10/0x10 [ 338.931132][T13548] __sock_sendmsg+0x221/0x270 [ 338.935840][T13548] __sys_sendto+0x363/0x4c0 [ 338.940367][T13548] ? __pfx___sys_sendto+0x10/0x10 [ 338.945393][T13548] ? __mutex_unlock_slowpath+0x21e/0x790 [ 338.951054][T13548] ? __fget_files+0x2a/0x410 [ 338.955684][T13548] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.961677][T13548] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.968012][T13548] __x64_sys_sendto+0xde/0x100 [ 338.972800][T13548] do_syscall_64+0xf3/0x230 [ 338.977312][T13548] ? clear_bhb_loop+0x35/0x90 [ 338.982002][T13548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.987900][T13548] RIP: 0033:0x7fd12af85d19 [ 338.992318][T13548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.011938][T13548] RSP: 002b:00007fd12be00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 339.020365][T13548] RAX: ffffffffffffffda RBX: 00007fd12b175fa0 RCX: 00007fd12af85d19 [ 339.028688][T13548] RDX: 00000000ffffff9d RSI: 0000000020000080 RDI: 0000000000000004 [ 339.036663][T13548] RBP: 00007fd12be00090 R08: 0000000000000000 R09: 0000000000000000 [ 339.044634][T13548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.052624][T13548] R13: 0000000000000000 R14: 00007fd12b175fa0 R15: 00007ffdee895f58 [ 339.060645][T13548] [ 339.130546][T13553] FAULT_INJECTION: forcing a failure. [ 339.130546][T13553] name failslab, interval 1, probability 0, space 0, times 0 [ 339.171870][T13553] CPU: 0 UID: 0 PID: 13553 Comm: syz.5.2375 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 339.182696][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 339.192829][T13553] Call Trace: [ 339.196134][T13553] [ 339.199095][T13553] dump_stack_lvl+0x241/0x360 [ 339.203814][T13553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.209053][T13553] ? __pfx__printk+0x10/0x10 [ 339.213701][T13553] should_fail_ex+0x3b0/0x4e0 [ 339.218438][T13553] should_failslab+0xac/0x100 [ 339.223163][T13553] ? skb_clone+0x20c/0x390 [ 339.227613][T13553] kmem_cache_alloc_noprof+0x70/0x380 [ 339.233039][T13553] skb_clone+0x20c/0x390 [ 339.237328][T13553] __netlink_deliver_tap+0x3cc/0x7f0 [ 339.242663][T13553] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.247896][T13553] netlink_deliver_tap+0x19d/0x1b0 [ 339.253039][T13553] netlink_unicast+0x7c4/0x990 [ 339.257862][T13553] ? __pfx_netlink_unicast+0x10/0x10 [ 339.263208][T13553] ? __virt_addr_valid+0x45f/0x530 [ 339.268359][T13553] ? __phys_addr_symbol+0x2f/0x70 [ 339.273414][T13553] ? __check_object_size+0x47a/0x730 [ 339.278747][T13553] netlink_sendmsg+0x8e4/0xcb0 [ 339.283561][T13553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.288974][T13553] ? aa_sock_msg_perm+0x91/0x160 [ 339.293956][T13553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.299270][T13553] __sock_sendmsg+0x221/0x270 [ 339.304000][T13553] ____sys_sendmsg+0x52a/0x7e0 [ 339.308821][T13553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.314138][T13553] ? __fget_files+0x2a/0x410 [ 339.318794][T13553] ? __fget_files+0x2a/0x410 [ 339.323436][T13553] __sys_sendmsg+0x269/0x350 [ 339.328059][T13553] ? __pfx_lock_release+0x10/0x10 [ 339.333122][T13553] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.338286][T13553] ? __pfx_vfs_write+0x10/0x10 [ 339.343112][T13553] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.349477][T13553] ? do_syscall_64+0x100/0x230 [ 339.354280][T13553] ? do_syscall_64+0xb6/0x230 [ 339.358986][T13553] do_syscall_64+0xf3/0x230 [ 339.363523][T13553] ? clear_bhb_loop+0x35/0x90 [ 339.368244][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.374172][T13553] RIP: 0033:0x7fe1f4185d19 [ 339.378614][T13553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.398256][T13553] RSP: 002b:00007fe1f4f9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.406707][T13553] RAX: ffffffffffffffda RBX: 00007fe1f4375fa0 RCX: 00007fe1f4185d19 [ 339.414708][T13553] RDX: 3500000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 339.422741][T13553] RBP: 00007fe1f4f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 339.430748][T13553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.438745][T13553] R13: 0000000000000000 R14: 00007fe1f4375fa0 R15: 00007ffc2d751ca8 [ 339.446747][T13553] [ 339.464646][T13553] netlink: 'syz.5.2375': attribute type 3 has an invalid length. [ 339.475556][T13466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.489641][T13553] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2375'. [ 339.544848][T13557] netlink: 'syz.4.2377': attribute type 6 has an invalid length. [ 339.709412][T13466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.753628][T13566] netlink: 'syz.5.2381': attribute type 72 has an invalid length. [ 339.812027][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2380'. [ 339.823117][T13571] FAULT_INJECTION: forcing a failure. [ 339.823117][T13571] name failslab, interval 1, probability 0, space 0, times 0 [ 339.835879][T13571] CPU: 0 UID: 0 PID: 13571 Comm: syz.0.2382 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 339.846673][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 339.856740][T13571] Call Trace: [ 339.860028][T13571] [ 339.862971][T13571] dump_stack_lvl+0x241/0x360 [ 339.867676][T13571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.872896][T13571] ? __pfx__printk+0x10/0x10 [ 339.877514][T13571] should_fail_ex+0x3b0/0x4e0 [ 339.882228][T13571] should_failslab+0xac/0x100 [ 339.886919][T13571] ? skb_clone+0x20c/0x390 [ 339.891342][T13571] kmem_cache_alloc_noprof+0x70/0x380 [ 339.896727][T13571] skb_clone+0x20c/0x390 [ 339.900999][T13571] packet_rcv_spkt+0x133/0x530 [ 339.905774][T13571] ? __pfx_packet_rcv_spkt+0x10/0x10 [ 339.911077][T13571] __netif_receive_skb_core+0x9ab/0x4690 [ 339.916737][T13571] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 339.922821][T13571] ? mark_lock+0x9a/0x360 [ 339.927181][T13571] __netif_receive_skb+0x12f/0x650 [ 339.932303][T13571] ? __pfx_lock_acquire+0x10/0x10 [ 339.937347][T13571] ? kasan_save_track+0x51/0x80 [ 339.942202][T13571] ? __pfx___netif_receive_skb+0x10/0x10 [ 339.947843][T13571] ? build_skb+0x52/0x2a0 [ 339.952183][T13571] ? tun_get_user+0x2177/0x4890 [ 339.957049][T13571] ? tun_chr_write_iter+0x10d/0x1f0 [ 339.962262][T13571] ? do_syscall_64+0xf3/0x230 [ 339.966948][T13571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.973030][T13571] ? tun_rx_batched+0x160/0x8f0 [ 339.977902][T13571] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 339.983647][T13571] ? netif_receive_skb+0x131/0x890 [ 339.988777][T13571] ? netif_receive_skb+0x131/0x890 [ 339.993917][T13571] netif_receive_skb+0x1e8/0x890 [ 339.998869][T13571] ? tun_rx_batched+0x160/0x8f0 [ 340.003738][T13571] ? __pfx_netif_receive_skb+0x10/0x10 [ 340.009219][T13571] ? tun_rx_batched+0x160/0x8f0 [ 340.014082][T13571] tun_rx_batched+0x1b7/0x8f0 [ 340.018780][T13571] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.025124][T13571] ? __pfx_lock_acquire+0x10/0x10 [ 340.030161][T13571] ? __pfx_tun_rx_batched+0x10/0x10 [ 340.035386][T13571] tun_get_user+0x30d6/0x4890 [ 340.040077][T13571] ? tun_get_user+0x2bbe/0x4890 [ 340.044942][T13571] ? tun_get_user+0x86e/0x4890 [ 340.049720][T13571] ? __lock_acquire+0x1397/0x2100 [ 340.054759][T13571] ? __pfx_tun_get_user+0x10/0x10 [ 340.059808][T13571] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 340.065275][T13571] ? tun_get+0x1e/0x2f0 [ 340.069445][T13571] ? __pfx_lock_release+0x10/0x10 [ 340.074504][T13571] ? tun_get+0x1e/0x2f0 [ 340.078703][T13571] ? tun_get+0x27d/0x2f0 [ 340.082960][T13571] tun_chr_write_iter+0x10d/0x1f0 [ 340.088029][T13571] vfs_write+0xaeb/0xd30 [ 340.092284][T13571] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 340.097927][T13571] ? __pfx_vfs_write+0x10/0x10 [ 340.102697][T13571] ? __fget_files+0x2a/0x410 [ 340.107327][T13571] ? __fget_files+0x2a/0x410 [ 340.112288][T13571] ksys_write+0x18f/0x2b0 [ 340.116641][T13571] ? __pfx_ksys_write+0x10/0x10 [ 340.121502][T13571] ? do_syscall_64+0x100/0x230 [ 340.126289][T13571] ? do_syscall_64+0xb6/0x230 [ 340.130992][T13571] do_syscall_64+0xf3/0x230 [ 340.135518][T13571] ? clear_bhb_loop+0x35/0x90 [ 340.140212][T13571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.146117][T13571] RIP: 0033:0x7f2e843847cf [ 340.150542][T13571] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 340.170159][T13571] RSP: 002b:00007f2e851ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 340.178622][T13571] RAX: ffffffffffffffda RBX: 00007f2e84575fa0 RCX: 00007f2e843847cf [ 340.186616][T13571] RDX: 00000000000000d2 RSI: 0000000020000080 RDI: 00000000000000c8 [ 340.194603][T13571] RBP: 00007f2e851ef090 R08: 0000000000000000 R09: 0000000000000000 [ 340.202591][T13571] R10: 00000000000000d2 R11: 0000000000000293 R12: 0000000000000001 [ 340.210687][T13571] R13: 0000000000000000 R14: 00007f2e84575fa0 R15: 00007ffc6a9d93d8 [ 340.218683][T13571] [ 340.634282][T13466] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.670913][T13466] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.691731][ T5845] Bluetooth: hci2: command tx timeout [ 340.722866][T13466] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.844875][T13466] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.154926][T13598] rdma_rxe: rxe_newlink: failed to add lo [ 341.176980][T13466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.229838][T13466] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.304556][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.311733][ T7953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.347841][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.355008][ T7953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.483936][T13466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.506413][T13466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.802417][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2396'. [ 341.879999][T13466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.888620][T13620] netlink: 'syz.3.2397': attribute type 3 has an invalid length. [ 341.898342][T13620] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2397'. [ 341.993165][T13466] veth0_vlan: entered promiscuous mode [ 342.024465][T13466] veth1_vlan: entered promiscuous mode [ 342.074654][T13466] veth0_macvtap: entered promiscuous mode [ 342.103683][T13466] veth1_macvtap: entered promiscuous mode [ 342.136869][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.177568][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.202574][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.231186][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.256472][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.277742][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.298510][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.319250][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.344785][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.362109][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.372690][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.397000][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.415457][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.426450][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.456236][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.501945][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.523096][T13466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.543518][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.561123][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.595933][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.609460][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.631309][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.658879][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.679335][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.700168][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.711154][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.725139][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.751102][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.771608][ T5845] Bluetooth: hci2: command tx timeout [ 342.779972][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.791195][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.814454][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.824709][T13466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.835520][T13466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.896009][T13466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.973704][T13466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.993916][T13466] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.019402][T13466] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.038003][T13466] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.324084][ T8730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.339336][ T8730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.357721][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 343.379824][T13663] rdma_rxe: rxe_newlink: failed to add lo [ 343.443512][ T7939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.451582][ T7939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.340651][T13687] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2420'. [ 344.465095][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 344.540179][T13699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2424'. [ 345.884952][T13714] lo speed is unknown, defaulting to 1000 [ 345.961578][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.970830][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.979545][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.988436][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.996403][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.004188][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.137348][T13718] lo speed is unknown, defaulting to 1000 [ 346.191954][T13726] rdma_rxe: rxe_newlink: failed to add lo [ 346.293245][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2434'. [ 346.387110][T13714] xt_policy: output policy not valid in PREROUTING and INPUT [ 346.458240][T13714] netlink: 'syz.3.2431': attribute type 21 has an invalid length. [ 346.479604][T13714] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2431'. [ 346.489510][T13714] netlink: 'syz.3.2431': attribute type 5 has an invalid length. [ 346.513133][T13714] netlink: 'syz.3.2431': attribute type 6 has an invalid length. [ 346.513979][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2431'. [ 346.530833][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 346.539852][T13719] netlink: 'syz.3.2431': attribute type 14 has an invalid length. [ 346.548364][T13719] netlink: 'syz.3.2431': attribute type 13 has an invalid length. [ 346.677902][T13718] chnl_net:caif_netlink_parms(): no params data found [ 346.878176][T13747] __nla_validate_parse: 2 callbacks suppressed [ 346.878197][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2439'. [ 346.917387][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2440'. [ 347.087009][T13718] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.103802][T13718] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.122151][T13718] bridge_slave_0: entered allmulticast mode [ 347.134848][T13718] bridge_slave_0: entered promiscuous mode [ 347.174363][T13718] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.201322][T13718] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.211611][T13718] bridge_slave_1: entered allmulticast mode [ 347.229248][T13718] bridge_slave_1: entered promiscuous mode [ 347.291540][T13718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.303733][T13718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.479012][T13718] team0: Port device team_slave_0 added [ 347.494300][T13718] team0: Port device team_slave_1 added [ 347.596734][T13718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.614271][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.681254][T13718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.712989][T13718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.726810][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.802908][T13718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.911713][T13790] rdma_rxe: rxe_newlink: failed to add lo [ 347.987277][T13718] hsr_slave_0: entered promiscuous mode [ 348.016210][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2455'. [ 348.040164][T13718] hsr_slave_1: entered promiscuous mode [ 348.051157][ T5845] Bluetooth: hci2: command tx timeout [ 348.079214][T13718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.095318][T13718] Cannot create hsr debugfs directory [ 348.580685][T13718] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.760144][T13718] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.946456][T13823] FAULT_INJECTION: forcing a failure. [ 348.946456][T13823] name failslab, interval 1, probability 0, space 0, times 0 [ 348.959611][T13823] CPU: 1 UID: 0 PID: 13823 Comm: syz.5.2467 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 348.970409][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 348.980488][T13823] Call Trace: [ 348.983795][T13823] [ 348.986758][T13823] dump_stack_lvl+0x241/0x360 [ 348.991470][T13823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.996701][T13823] ? __pfx__printk+0x10/0x10 [ 349.001350][T13823] should_fail_ex+0x3b0/0x4e0 [ 349.006064][T13823] should_failslab+0xac/0x100 [ 349.010779][T13823] ? skb_clone+0x20c/0x390 [ 349.015214][T13823] kmem_cache_alloc_noprof+0x70/0x380 [ 349.020604][T13823] skb_clone+0x20c/0x390 [ 349.024860][T13823] __netlink_deliver_tap+0x3cc/0x7f0 [ 349.030191][T13823] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.035402][T13823] netlink_deliver_tap+0x19d/0x1b0 [ 349.040514][T13823] netlink_unicast+0x7c4/0x990 [ 349.045291][T13823] ? __pfx_netlink_unicast+0x10/0x10 [ 349.050581][T13823] ? __virt_addr_valid+0x45f/0x530 [ 349.055695][T13823] ? __phys_addr_symbol+0x2f/0x70 [ 349.060718][T13823] ? __check_object_size+0x47a/0x730 [ 349.066016][T13823] netlink_sendmsg+0x8e4/0xcb0 [ 349.070821][T13823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.076150][T13823] ? aa_sock_msg_perm+0x91/0x160 [ 349.081104][T13823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.086409][T13823] __sock_sendmsg+0x221/0x270 [ 349.091125][T13823] ____sys_sendmsg+0x52a/0x7e0 [ 349.095922][T13823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.101211][T13823] ? __fget_files+0x2a/0x410 [ 349.105808][T13823] ? __fget_files+0x2a/0x410 [ 349.110417][T13823] __sys_sendmsg+0x269/0x350 [ 349.115020][T13823] ? __pfx_lock_release+0x10/0x10 [ 349.120047][T13823] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.125168][T13823] ? __pfx_vfs_write+0x10/0x10 [ 349.129949][T13823] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.136292][T13823] ? do_syscall_64+0x100/0x230 [ 349.141061][T13823] ? do_syscall_64+0xb6/0x230 [ 349.145741][T13823] do_syscall_64+0xf3/0x230 [ 349.150244][T13823] ? clear_bhb_loop+0x35/0x90 [ 349.154923][T13823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.160815][T13823] RIP: 0033:0x7fe1f4185d19 [ 349.165231][T13823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.184869][T13823] RSP: 002b:00007fe1f4f9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.193292][T13823] RAX: ffffffffffffffda RBX: 00007fe1f4375fa0 RCX: 00007fe1f4185d19 [ 349.201271][T13823] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000005 [ 349.209242][T13823] RBP: 00007fe1f4f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 349.217217][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.225188][T13823] R13: 0000000000000000 R14: 00007fe1f4375fa0 R15: 00007ffc2d751ca8 [ 349.233182][T13823] [ 349.252221][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2468'. [ 349.322785][T13718] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.501616][T13835] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2472'. [ 349.541786][T13837] netlink: 'syz.4.2473': attribute type 29 has an invalid length. [ 349.568304][T13837] netlink: 'syz.4.2473': attribute type 29 has an invalid length. [ 349.612420][T13837] netlink: 'syz.4.2473': attribute type 29 has an invalid length. [ 349.662440][T13837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2473'. [ 349.683856][T13718] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.805681][T13845] rdma_rxe: rxe_newlink: failed to add lo [ 349.847857][T13718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.858167][T13718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.870187][T13718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.913963][T13718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.122694][T13718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.140109][ T5845] Bluetooth: hci2: command tx timeout [ 350.185291][T13718] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.199852][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.207035][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.272212][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.279345][ T7939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.367830][T13718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.387703][T13718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.485296][T13864] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 350.875243][T13718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.007818][T13718] veth0_vlan: entered promiscuous mode [ 351.049496][T13718] veth1_vlan: entered promiscuous mode [ 351.080220][T13718] veth0_macvtap: entered promiscuous mode [ 351.095328][T13718] veth1_macvtap: entered promiscuous mode [ 351.143367][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.167041][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.191059][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.202786][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.212761][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.223473][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.233840][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.245706][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.256890][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.267624][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.277746][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.288531][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.298617][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.309376][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.319333][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.329836][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.341074][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.352715][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.364074][T13718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.373862][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.384386][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.394281][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.404749][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.414818][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.425486][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.435537][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.447100][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.457985][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.468441][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.478385][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.488851][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.498733][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.509215][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.519126][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.529643][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.539643][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.551161][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.563163][T13718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.614067][T13718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.626681][T13718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.647121][T13718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.668835][T13718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.809325][ T7953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.824546][ T7953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.919809][ T8730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.932072][ T8730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.017324][T13914] rdma_rxe: rxe_newlink: failed to add lo [ 352.872544][T13947] netlink: 'syz.5.2511': attribute type 1 has an invalid length. [ 353.014358][T13952] bridge0: entered allmulticast mode [ 353.422802][T13975] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2522'. [ 353.598894][T13981] rdma_rxe: rxe_newlink: failed to add lo [ 355.345301][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2533'. [ 355.685094][T14015] FAULT_INJECTION: forcing a failure. [ 355.685094][T14015] name failslab, interval 1, probability 0, space 0, times 0 [ 355.713309][T14015] CPU: 1 UID: 0 PID: 14015 Comm: syz.0.2538 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 355.724131][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 355.734205][T14015] Call Trace: [ 355.737503][T14015] [ 355.740449][T14015] dump_stack_lvl+0x241/0x360 [ 355.745160][T14015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.750412][T14015] ? __pfx__printk+0x10/0x10 [ 355.755033][T14015] ? __kmalloc_noprof+0xb5/0x4c0 [ 355.759997][T14015] ? __pfx___might_resched+0x10/0x10 [ 355.765309][T14015] ? aa_get_newest_label+0xff/0x6f0 [ 355.770541][T14015] should_fail_ex+0x3b0/0x4e0 [ 355.775255][T14015] should_failslab+0xac/0x100 [ 355.779964][T14015] __kmalloc_noprof+0xdd/0x4c0 [ 355.784755][T14015] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 355.791024][T14015] ? apparmor_capable+0x13b/0x1b0 [ 355.796084][T14015] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 355.802176][T14015] genl_rcv_msg+0x802/0xec0 [ 355.806690][T14015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.811738][T14015] ? __pfx_lock_acquire+0x10/0x10 [ 355.816782][T14015] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 355.822069][T14015] ? __pfx___might_resched+0x10/0x10 [ 355.827359][T14015] netlink_rcv_skb+0x1e3/0x430 [ 355.832126][T14015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.837157][T14015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.842475][T14015] genl_rcv+0x28/0x40 [ 355.846462][T14015] netlink_unicast+0x7f6/0x990 [ 355.851249][T14015] ? __pfx_netlink_unicast+0x10/0x10 [ 355.856592][T14015] ? __virt_addr_valid+0x45f/0x530 [ 355.861710][T14015] ? __phys_addr_symbol+0x2f/0x70 [ 355.866735][T14015] ? __check_object_size+0x47a/0x730 [ 355.872027][T14015] netlink_sendmsg+0x8e4/0xcb0 [ 355.876800][T14015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.882090][T14015] ? aa_sock_msg_perm+0x91/0x160 [ 355.887027][T14015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.892309][T14015] __sock_sendmsg+0x221/0x270 [ 355.896995][T14015] ____sys_sendmsg+0x52a/0x7e0 [ 355.901765][T14015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.907047][T14015] ? __fget_files+0x2a/0x410 [ 355.911643][T14015] ? __fget_files+0x2a/0x410 [ 355.916248][T14015] __sys_sendmsg+0x269/0x350 [ 355.920839][T14015] ? __pfx_lock_release+0x10/0x10 [ 355.925867][T14015] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.930999][T14015] ? __pfx_vfs_write+0x10/0x10 [ 355.935787][T14015] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.942121][T14015] ? do_syscall_64+0x100/0x230 [ 355.946892][T14015] ? do_syscall_64+0xb6/0x230 [ 355.951592][T14015] do_syscall_64+0xf3/0x230 [ 355.956108][T14015] ? clear_bhb_loop+0x35/0x90 [ 355.960801][T14015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.966956][T14015] RIP: 0033:0x7f2e84385d19 [ 355.971380][T14015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.990989][T14015] RSP: 002b:00007f2e851ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.999403][T14015] RAX: ffffffffffffffda RBX: 00007f2e84575fa0 RCX: 00007f2e84385d19 [ 356.007372][T14015] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 356.015337][T14015] RBP: 00007f2e851ef090 R08: 0000000000000000 R09: 0000000000000000 [ 356.023309][T14015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.031376][T14015] R13: 0000000000000000 R14: 00007f2e84575fa0 R15: 00007ffc6a9d93d8 [ 356.039441][T14015] [ 356.170819][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.200420][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.231915][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.281281][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.293583][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.302894][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.360462][T14022] lo speed is unknown, defaulting to 1000 [ 356.695546][T14022] chnl_net:caif_netlink_parms(): no params data found [ 356.797171][T14033] rdma_rxe: rxe_newlink: failed to add lo [ 356.860719][T14022] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.872649][T14022] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.885424][T14022] bridge_slave_0: entered allmulticast mode [ 356.902777][T14022] bridge_slave_0: entered promiscuous mode [ 356.919797][T14022] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.935565][T14022] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.945868][T14022] bridge_slave_1: entered allmulticast mode [ 356.965568][T14022] bridge_slave_1: entered promiscuous mode [ 357.050692][T14022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.066249][T14022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.204878][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2554'. [ 357.220256][T14022] team0: Port device team_slave_0 added [ 357.244531][T14022] team0: Port device team_slave_1 added [ 357.355499][T14022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.371660][T14022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.431498][T14022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.469509][T14022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.488609][T14022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.569954][T14022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.726829][T14022] hsr_slave_0: entered promiscuous mode [ 357.770220][T14022] hsr_slave_1: entered promiscuous mode [ 357.858652][T14022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.872305][T14022] Cannot create hsr debugfs directory [ 358.179546][T14094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2568'. [ 358.254621][T14022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.333931][T14100] sctp: [Deprecated]: syz.4.2570 (pid 14100) Use of int in max_burst socket option deprecated. [ 358.333931][T14100] Use struct sctp_assoc_value instead [ 358.381264][ T5845] Bluetooth: hci2: command tx timeout [ 358.401864][T14022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.424943][T14104] rdma_rxe: rxe_newlink: failed to add lo [ 358.485672][T14022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.593154][T14022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.743087][T14022] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.770286][T14022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.795049][T14022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.807635][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 358.820644][T14022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.967910][T14022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.026614][T14022] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.039887][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.047141][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.098030][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.105306][ T7949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.342798][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2576'. [ 359.380765][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2576'. [ 359.386120][T14123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2579'. [ 359.592572][T14132] netlink: 'syz.3.2583': attribute type 3 has an invalid length. [ 359.669743][T14022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.679478][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2584'. [ 359.800245][T14022] veth0_vlan: entered promiscuous mode [ 359.833989][T14022] veth1_vlan: entered promiscuous mode [ 359.906766][T14145] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2587'. [ 359.917137][T14022] veth0_macvtap: entered promiscuous mode [ 359.992286][T14022] veth1_macvtap: entered promiscuous mode [ 360.083540][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.111896][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.133293][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.156376][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.177505][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.190284][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.200581][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.212249][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.223500][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.236308][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.256594][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.267757][T14157] rdma_rxe: rxe_newlink: failed to add lo [ 360.274575][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.284764][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.301489][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.311728][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.323157][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.333558][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.372183][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.393380][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.421225][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.433477][T14022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.444763][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.465375][ T5845] Bluetooth: hci2: command tx timeout [ 360.471888][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.482257][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.493168][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.503427][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.514392][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.524617][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.535653][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.545831][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.559418][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.569557][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.580294][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.590496][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.601368][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.612695][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.623454][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.633684][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.644491][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.654395][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.667602][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.692621][T14022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.897691][T14022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.907876][T14022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.917332][T14022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.927187][T14022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.158839][ T7949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.180621][ T7949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.202212][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 361.279120][ T7949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.287637][ T7949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.489375][T14191] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2602'. [ 361.794707][T14202] SET target dimension over the limit! [ 361.909537][T14199] rdma_rxe: rxe_newlink: failed to add lo [ 364.051107][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 364.142727][T14228] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2616'. [ 364.312156][T14233] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2618'. [ 364.621549][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.635686][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.656293][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.667738][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.676700][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 364.686198][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.733222][T14251] lo speed is unknown, defaulting to 1000 [ 364.853546][T14261] rdma_rxe: rxe_newlink: failed to add lo [ 365.083201][T14251] chnl_net:caif_netlink_parms(): no params data found [ 365.495861][T14251] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.499572][T14285] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2630'. [ 365.505347][T14251] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.541741][T14251] bridge_slave_0: entered allmulticast mode [ 365.575853][T14251] bridge_slave_0: entered promiscuous mode [ 365.593453][T14251] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.611398][T14251] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.621868][T14251] bridge_slave_1: entered allmulticast mode [ 365.629070][T14251] bridge_slave_1: entered promiscuous mode [ 365.716688][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2632'. [ 365.793600][T14251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.855103][T14251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.035608][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2638'. [ 366.054314][T14251] team0: Port device team_slave_0 added [ 366.200478][T14251] team0: Port device team_slave_1 added [ 366.427527][T14251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.460129][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.487749][T14328] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2646'. [ 366.557116][T14251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.594079][T14251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.622097][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.669833][T14337] rdma_rxe: rxe_newlink: failed to add lo [ 366.691807][T14251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.771387][ T55] Bluetooth: hci2: command tx timeout [ 366.944560][T14251] hsr_slave_0: entered promiscuous mode [ 366.963927][T14251] hsr_slave_1: entered promiscuous mode [ 366.987354][T14251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.014854][T14251] Cannot create hsr debugfs directory [ 367.033044][T14345] netlink: 'syz.5.2652': attribute type 1 has an invalid length. [ 367.162414][T14345] lo: entered allmulticast mode [ 367.584035][T14368] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2660'. [ 367.598123][T14251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.874207][T14251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.021277][T14389] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2668'. [ 368.079150][T14251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.092956][T14392] nbd: must specify at least one socket [ 368.121347][T14389] 0ªX¹¦Dö»: renamed from gretap0 [ 368.127810][T14395] rdma_rxe: rxe_newlink: failed to add lo [ 368.167482][T14389] 0ªX¹¦Dö»: entered allmulticast mode [ 368.358560][T14251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.377177][T14400] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 368.401458][T14400] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 368.583685][T14251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.612166][T14251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.654391][T14251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.694063][T14251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.755667][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'. [ 368.851258][ T55] Bluetooth: hci2: command tx timeout [ 369.005754][T14251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.083548][T14251] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.111950][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.119045][ T7953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.183482][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.190627][ T7939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.290758][T14251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.364910][T14427] wg1: entered promiscuous mode [ 369.380504][T14427] vlan2: entered promiscuous mode [ 369.414923][T14427] wg1: left promiscuous mode [ 369.679382][T14251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.779273][T14251] veth0_vlan: entered promiscuous mode [ 369.833979][T14251] veth1_vlan: entered promiscuous mode [ 369.965381][T14251] veth0_macvtap: entered promiscuous mode [ 370.095398][T14251] veth1_macvtap: entered promiscuous mode [ 370.113450][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.131446][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.161152][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.171737][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.184159][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.194705][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.204835][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.215932][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.226168][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.241065][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.251219][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.271040][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.280917][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.293302][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.311065][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.322850][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.332815][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.343464][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.353412][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.363957][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.374739][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.385454][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.402598][T14251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.414318][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.426054][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.430522][T14449] rdma_rxe: rxe_newlink: failed to add lo [ 370.436171][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.454141][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.464527][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.491120][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.511090][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.544590][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.574773][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.621100][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.639614][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.662784][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.680797][T14456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2693'. [ 370.683030][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.723454][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.734119][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.745262][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.755757][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.766782][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.777280][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.788472][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.828978][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.861548][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.883321][T14251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.932416][ T55] Bluetooth: hci2: command tx timeout [ 370.982787][T14251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.001103][T14251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.009862][T14251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.031088][T14251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.136387][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2696'. [ 371.228296][T14461] bond4: entered promiscuous mode [ 371.403657][T14471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.768132][T14461] gretap3: entered promiscuous mode [ 371.841777][T14461] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 372.010633][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.036171][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.081658][ T6370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.097400][ T6370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.369409][T14491] netlink: 'syz.5.2704': attribute type 9 has an invalid length. [ 372.386412][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2704'. [ 372.397406][T14490] rdma_rxe: rxe_newlink: failed to add lo [ 372.599888][T14497] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2706'. [ 374.432237][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 374.462029][T14512] xt_nfacct: accounting object `syz1' does not exists [ 374.632116][T14519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2717'. [ 375.076471][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.093167][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.104976][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.113292][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.132187][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 375.139594][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.219711][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2727'. [ 375.320032][T14537] lo speed is unknown, defaulting to 1000 [ 375.519499][T14554] rdma_rxe: rxe_newlink: failed to add lo [ 375.543752][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2728'. [ 375.886642][T14537] chnl_net:caif_netlink_parms(): no params data found [ 376.031785][T14573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2732'. [ 376.231474][T14537] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.248919][T14537] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.263352][T14537] bridge_slave_0: entered allmulticast mode [ 376.293476][T14537] bridge_slave_0: entered promiscuous mode [ 376.332290][T14537] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.361136][T14537] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.376128][T14537] bridge_slave_1: entered allmulticast mode [ 376.392784][T14537] bridge_slave_1: entered promiscuous mode [ 376.514860][T14537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.546282][T14537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.646730][T14599] lo speed is unknown, defaulting to 1000 [ 376.723268][T14537] team0: Port device team_slave_0 added [ 376.754795][T14608] @ÿ: renamed from bond_slave_0 [ 376.808769][T14537] team0: Port device team_slave_1 added [ 377.147825][T14622] rdma_rxe: rxe_newlink: failed to add lo [ 377.167146][T14537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.174560][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.210293][T14537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.313909][T14537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.331582][ T55] Bluetooth: hci2: command tx timeout [ 377.356191][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.464547][T14537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.471896][T14629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2748'. [ 377.772039][T14637] FAULT_INJECTION: forcing a failure. [ 377.772039][T14637] name failslab, interval 1, probability 0, space 0, times 0 [ 377.773198][T14537] hsr_slave_0: entered promiscuous mode [ 377.825551][T14637] CPU: 0 UID: 0 PID: 14637 Comm: syz.3.2751 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 377.833253][T14537] hsr_slave_1: entered promiscuous mode [ 377.836346][T14637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 377.852001][T14637] Call Trace: [ 377.855304][T14637] [ 377.858261][T14637] dump_stack_lvl+0x241/0x360 [ 377.862986][T14637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.868235][T14637] ? __pfx__printk+0x10/0x10 [ 377.872872][T14637] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 377.879421][T14637] ? __pfx___might_resched+0x10/0x10 [ 377.884762][T14637] should_fail_ex+0x3b0/0x4e0 [ 377.889507][T14637] should_failslab+0xac/0x100 [ 377.894425][T14637] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 377.900799][T14637] ? alloc_vfsmnt+0xeb/0x4d0 [ 377.905426][T14637] kstrdup+0x39/0xb0 [ 377.909362][T14637] alloc_vfsmnt+0xeb/0x4d0 [ 377.913817][T14637] clone_mnt+0x6b/0xc80 [ 377.918007][T14637] ? do_raw_spin_unlock+0x13c/0x8b0 [ 377.923245][T14637] ? attach_mnt+0x4ed/0x600 [ 377.927796][T14637] copy_tree+0x3f5/0x830 [ 377.932086][T14637] ? copy_mnt_ns+0x176/0x8c0 [ 377.936712][T14637] copy_mnt_ns+0x176/0x8c0 [ 377.941164][T14637] ? rcu_is_watching+0x15/0xb0 [ 377.945966][T14637] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 377.951381][T14637] create_new_namespaces+0xd3/0x7b0 [ 377.956620][T14637] ? bpf_lsm_capable+0x9/0x10 [ 377.961324][T14637] ? security_capable+0x7e/0x2d0 [ 377.966302][T14637] unshare_nsproxy_namespaces+0x124/0x180 [ 377.972061][T14637] ksys_unshare+0x57d/0xa70 [ 377.976626][T14637] ? __pfx_ksys_unshare+0x10/0x10 [ 377.981689][T14637] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 377.988054][T14637] ? do_syscall_64+0x100/0x230 [ 377.992872][T14637] __x64_sys_unshare+0x38/0x40 [ 377.997683][T14637] do_syscall_64+0xf3/0x230 [ 378.002229][T14637] ? clear_bhb_loop+0x35/0x90 [ 378.006942][T14637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.012874][T14637] RIP: 0033:0x7fd12af85d19 [ 378.017324][T14637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.036960][T14637] RSP: 002b:00007fd12be00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 378.045443][T14637] RAX: ffffffffffffffda RBX: 00007fd12b175fa0 RCX: 00007fd12af85d19 [ 378.053449][T14637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 378.061454][T14637] RBP: 00007fd12be00090 R08: 0000000000000000 R09: 0000000000000000 [ 378.069450][T14637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.077463][T14637] R13: 0000000000000000 R14: 00007fd12b175fa0 R15: 00007ffdee895f58 [ 378.085479][T14637] [ 378.095852][T14537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.096061][ T30] INFO: task syz.1.1441:10574 blocked for more than 143 seconds. [ 378.103938][T14537] Cannot create hsr debugfs directory [ 378.127079][ T30] Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 378.208224][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.232280][ T30] task:syz.1.1441 state:D stack:24176 pid:10574 tgid:10571 ppid:5834 flags:0x00004004 [ 378.242918][ T30] Call Trace: [ 378.246382][ T30] [ 378.249418][ T30] __schedule+0x1850/0x4c30 [ 378.254566][ T30] ? __pfx___schedule+0x10/0x10 [ 378.259564][ T30] ? __pfx_lock_release+0x10/0x10 [ 378.265116][ T30] ? schedule+0x90/0x320 [ 378.271130][ T30] schedule+0x14b/0x320 [ 378.275629][ T30] schedule_timeout+0xb0/0x290 [ 378.280511][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 378.286253][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.293110][ T30] ? wait_for_completion+0x2fe/0x620 [ 378.298622][ T30] ? wait_for_completion+0x2fe/0x620 [ 378.304101][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.309722][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 378.316337][ T30] ? wait_for_completion+0x2fe/0x620 [ 378.322179][ T30] wait_for_completion+0x355/0x620 [ 378.327471][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 378.333664][ T30] ? remove_client_context+0xc0/0x1e0 [ 378.339214][ T30] disable_device+0x1c7/0x360 [ 378.344417][ T30] ? __pfx_disable_device+0x10/0x10 [ 378.349703][ T30] __ib_unregister_device+0x2ac/0x3d0 [ 378.355494][ T30] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 378.361737][ T30] ib_unregister_device_and_put+0xb9/0xf0 [ 378.367515][ T30] nldev_dellink+0x2c6/0x310 [ 378.375100][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 378.380350][ T30] ? apparmor_capable+0x13b/0x1b0 [ 378.385788][ T30] ? bpf_lsm_capable+0x9/0x10 [ 378.390510][ T30] ? security_capable+0x7e/0x2d0 [ 378.395980][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 378.401467][ T30] rdma_nl_rcv+0x6dd/0x9e0 [ 378.405951][ T30] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 378.411470][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.416734][ T30] netlink_unicast+0x7f6/0x990 [ 378.423042][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 378.428554][ T30] ? __virt_addr_valid+0x45f/0x530 [ 378.434488][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 378.439584][ T30] ? __check_object_size+0x47a/0x730 [ 378.445625][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 378.450463][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.456406][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 378.461926][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.467266][ T30] __sock_sendmsg+0x221/0x270 [ 378.472543][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 378.479725][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.485556][ T30] ? __fget_files+0x2a/0x410 [ 378.490194][ T30] ? __fget_files+0x2a/0x410 [ 378.495232][ T30] __sys_sendmsg+0x269/0x350 [ 378.499887][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.505616][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.512422][ T30] ? do_syscall_64+0x100/0x230 [ 378.517246][ T30] ? do_syscall_64+0xb6/0x230 [ 378.522568][ T30] do_syscall_64+0xf3/0x230 [ 378.527127][ T30] ? clear_bhb_loop+0x35/0x90 [ 378.533487][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.539441][ T30] RIP: 0033:0x7f5998385d19 [ 378.560238][ T30] RSP: 002b:00007f59961f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.571127][ T30] RAX: ffffffffffffffda RBX: 00007f5998576160 RCX: 00007f5998385d19 [ 378.591099][ T30] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 000000000000000c [ 378.599104][ T30] RBP: 00007f5998401a20 R08: 0000000000000000 R09: 0000000000000000 [ 378.621048][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.629264][ T30] R13: 0000000000000000 R14: 00007f5998576160 R15: 00007ffc5590c038 [ 378.637920][ T30] [ 378.642681][ T30] [ 378.642681][ T30] Showing all locks held in the system: [ 378.650613][ T30] 1 lock held by khungtaskd/30: [ 378.655801][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 378.666298][ T30] 1 lock held by dhcpcd/5499: [ 378.677028][ T30] #0: ffffffff8fcb1f48 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x31a/0x1ac0 [ 378.688567][ T30] 2 locks held by getty/5585: [ 378.697060][ T30] #0: ffff8880314770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 378.707035][ T30] #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 378.718393][ T30] 2 locks held by kworker/u8:14/7949: [ 378.723936][ T30] 4 locks held by kworker/u8:21/8732: [ 378.729349][ T30] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 378.740484][ T30] #1: ffffc90003ed7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 378.751315][ T30] #2: ffffffff8fca5a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 378.760782][ T30] #3: ffff88804d6e86b8 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x3a/0x2f0 [ 378.772379][ T30] 2 locks held by syz.1.1441/10574: [ 378.777616][ T30] #0: ffffffff9a77a238 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32d/0x9e0 [ 378.791705][ T30] #1: ffff88804d6e86b8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x264/0x3d0 [ 378.803413][ T30] 3 locks held by syz-executor/14537: [ 378.808827][ T30] #0: ffffffff8f45b7e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 378.818536][ T30] #1: ffffffff8fcb1f48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xbcb/0x2150 [ 378.827760][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 378.838945][ T30] 1 lock held by syz.3.2751/14637: [ 378.844146][ T30] #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 378.855360][ T30] 3 locks held by syz.5.2753/14640: [ 378.860597][ T30] #0: ffff888042874408 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 378.871023][ T30] #1: ffffffff8fd13130 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x53/0x90 [ 378.882452][ T30] #2: ffff8880264150c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x120/0x6b0 [ 378.895015][ T30] [ 378.897959][ T30] ============================================= [ 378.897959][ T30] [ 378.906493][ T30] NMI backtrace for cpu 0 [ 378.910842][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 378.921373][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 378.931463][ T30] Call Trace: [ 378.934767][ T30] [ 378.937726][ T30] dump_stack_lvl+0x241/0x360 [ 378.942483][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.947719][ T30] ? __pfx__printk+0x10/0x10 [ 378.952354][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 378.957339][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 378.962834][ T30] ? _printk+0xd5/0x120 [ 378.967020][ T30] ? __pfx__printk+0x10/0x10 [ 378.971624][ T30] ? __wake_up_klogd+0xcc/0x110 [ 378.976482][ T30] ? __pfx__printk+0x10/0x10 [ 378.981080][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 378.986105][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.992097][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 378.998091][ T30] watchdog+0xff6/0x1040 [ 379.002342][ T30] ? watchdog+0x1ea/0x1040 [ 379.006767][ T30] ? __pfx_watchdog+0x10/0x10 [ 379.011462][ T30] kthread+0x2f0/0x390 [ 379.015554][ T30] ? __pfx_watchdog+0x10/0x10 [ 379.020239][ T30] ? __pfx_kthread+0x10/0x10 [ 379.024838][ T30] ret_from_fork+0x4b/0x80 [ 379.029262][ T30] ? __pfx_kthread+0x10/0x10 [ 379.033866][ T30] ret_from_fork_asm+0x1a/0x30 [ 379.038668][ T30] [ 379.043267][ T30] Sending NMI from CPU 0 to CPUs 1: [ 379.048533][ C1] NMI backtrace for cpu 1 [ 379.048546][ C1] CPU: 1 UID: 0 PID: 8731 Comm: kworker/u8:20 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 379.048566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 379.048578][ C1] Workqueue: bat_events batadv_nc_worker [ 379.048606][ C1] RIP: 0010:kasan_check_range+0x1b8/0x290 [ 379.048630][ C1] Code: 4d 01 fb 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b <41> 5c 41 5e 41 5f 5d c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 [ 379.048649][ C1] RSP: 0018:ffffc900045978c8 EFLAGS: 00000056 [ 379.048681][ C1] RAX: 0000000000000001 RBX: 000000000000074e RCX: ffffffff817aaeb5 [ 379.048694][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942b4968 [ 379.048706][ C1] RBP: 0000000000000000 R08: ffffffff942b496f R09: 1ffffffff285692d [ 379.048719][ C1] R10: dffffc0000000000 R11: fffffbfff285692e R12: ffff88807f55bc00 [ 379.048733][ C1] R13: ffff88807f55bc00 R14: dffffc0000000001 R15: fffffbfff285692e [ 379.048747][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 379.048762][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.048774][ C1] CR2: 00007fe1f4346d38 CR3: 0000000033750000 CR4: 00000000003526f0 [ 379.048790][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.048801][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.048812][ C1] Call Trace: [ 379.048819][ C1] [ 379.048827][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 379.048851][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 379.048873][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 379.048904][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 379.048921][ C1] ? nmi_handle+0x14f/0x5a0 [ 379.048942][ C1] ? nmi_handle+0x2a/0x5a0 [ 379.048963][ C1] ? kasan_check_range+0x1b8/0x290 [ 379.048984][ C1] ? default_do_nmi+0x63/0x160 [ 379.049006][ C1] ? exc_nmi+0x123/0x1f0 [ 379.049028][ C1] ? end_repeat_nmi+0xf/0x53 [ 379.049051][ C1] ? __lock_acquire+0xf55/0x2100 [ 379.049071][ C1] ? kasan_check_range+0x1b8/0x290 [ 379.049093][ C1] ? kasan_check_range+0x1b8/0x290 [ 379.049115][ C1] ? kasan_check_range+0x1b8/0x290 [ 379.049136][ C1] [ 379.049142][ C1] [ 379.049150][ C1] __lock_acquire+0xf55/0x2100 [ 379.049177][ C1] lock_acquire+0x1ed/0x550 [ 379.049196][ C1] ? batadv_nc_worker+0xcb/0x610 [ 379.049220][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 379.049241][ C1] ? batadv_nc_worker+0xcb/0x610 [ 379.049262][ C1] ? __pfx_lock_release+0x10/0x10 [ 379.049283][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.049307][ C1] batadv_nc_worker+0xec/0x610 [ 379.049327][ C1] ? batadv_nc_worker+0xcb/0x610 [ 379.049348][ C1] ? batadv_nc_worker+0xcb/0x610 [ 379.049369][ C1] ? process_scheduled_works+0x976/0x1840 [ 379.049388][ C1] process_scheduled_works+0xa66/0x1840 [ 379.049433][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.049455][ C1] ? assign_work+0x364/0x3d0 [ 379.049473][ C1] worker_thread+0x870/0xd30 [ 379.049498][ C1] ? __kthread_parkme+0x169/0x1d0 [ 379.049518][ C1] ? __pfx_worker_thread+0x10/0x10 [ 379.049536][ C1] kthread+0x2f0/0x390 [ 379.049556][ C1] ? __pfx_worker_thread+0x10/0x10 [ 379.049573][ C1] ? __pfx_kthread+0x10/0x10 [ 379.049594][ C1] ret_from_fork+0x4b/0x80 [ 379.049611][ C1] ? __pfx_kthread+0x10/0x10 [ 379.049631][ C1] ret_from_fork_asm+0x1a/0x30 [ 379.049658][ C1] [ 379.403143][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 379.410040][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 379.420560][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 379.430644][ T30] Call Trace: [ 379.433945][ T30] [ 379.436930][ T30] dump_stack_lvl+0x241/0x360 [ 379.441642][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.446899][ T30] ? __pfx__printk+0x10/0x10 [ 379.451531][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.457558][ T30] ? vscnprintf+0x5d/0x90 [ 379.461915][ T30] panic+0x349/0x880 [ 379.465836][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 379.472021][ T30] ? __pfx_panic+0x10/0x10 [ 379.476464][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 379.481870][ T30] ? __irq_work_queue_local+0x137/0x410 [ 379.487442][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 379.492848][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 379.499037][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 379.505226][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 379.511424][ T30] watchdog+0x1035/0x1040 [ 379.515791][ T30] ? watchdog+0x1ea/0x1040 [ 379.520235][ T30] ? __pfx_watchdog+0x10/0x10 [ 379.524938][ T30] kthread+0x2f0/0x390 [ 379.529043][ T30] ? __pfx_watchdog+0x10/0x10 [ 379.533752][ T30] ? __pfx_kthread+0x10/0x10 [ 379.538386][ T30] ret_from_fork+0x4b/0x80 [ 379.542833][ T30] ? __pfx_kthread+0x10/0x10 [ 379.547452][ T30] ret_from_fork_asm+0x1a/0x30 [ 379.552251][ T30] [ 379.555643][ T30] Kernel Offset: disabled [ 379.559992][ T30] Rebooting in 86400 seconds..