last executing test programs: 1m35.969487179s ago: executing program 4 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4, 0xa}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) 1m34.431850236s ago: executing program 1 (id=685): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x200, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) listen(r0, 0x80) 1m18.460482915s ago: executing program 4 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4, 0xa}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) 1m17.651470191s ago: executing program 1 (id=685): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x200, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) listen(r0, 0x80) 1m1.722788066s ago: executing program 4 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4, 0xa}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) 1m0.031281811s ago: executing program 1 (id=685): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x200, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) listen(r0, 0x80) 45.216704582s ago: executing program 4 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4, 0xa}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) 43.769064233s ago: executing program 1 (id=685): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x200, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) listen(r0, 0x80) 27.09281826s ago: executing program 4 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4, 0xa}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) 25.555628512s ago: executing program 1 (id=685): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x200, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) listen(r0, 0x80) 9.309862584s ago: executing program 4 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4, 0xa}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) 8.09161265s ago: executing program 1 (id=685): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x200, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) listen(r0, 0x80) 2.667815383s ago: executing program 2 (id=2651): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x138}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bind$unix(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x20000044}, 0x4800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0xf0, 0xf0, 0xffffffff, 0x0, 0x198, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f00000005c0), {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'vlan0\x00', 'geneve0\x00', {0xff}, {}, 0x4, 0x1, 0x6}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0xf, "4be1"}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x17, @multicast1, @private=0xa010101, @icmp_id=0x65, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @broadcast, @gre_key, @port=0x4e21}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x5, 0x1, 0x4, 0x0, 0x2, 0x1], 0x5, 0x3}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x4, @port=0x4e22}}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xff000000, 'vlan0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x5e, 0x1, 0x1}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x2, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast1, @empty, @port=0x4e23, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000240)='contention_end\x00', r5}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r11, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) 2.581222537s ago: executing program 0 (id=2653): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 2.261271811s ago: executing program 3 (id=2654): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002840)=[{}], 0x1, 0x0, 0x0) 2.219410259s ago: executing program 2 (id=2655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) (async) unshare(0x26020480) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="20002dbd8200ffdbdf202c5934a1bb2948000202aaaaaaaaaaaa"], 0x20}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x0, 0x5, 0x0) (rerun: 32) ioctl$PPPOEIOCDFWD(r1, 0x8903, 0xf0ff1f00000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, 0x0, &(0x7f00000004c0)) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async, rerun: 64) r6 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140100001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="02200000000000001c001a80180003801400058008001f000100000008000c0086ffff7f14001400766c616e3000000000000000000000000800280000bc001a8020000a80050008000000010014000700fe8000000000000000000000000000bb40000a8014000700000000000000000000000000000000aa1400070000000000000000000000ffffffffffff14000700ff0100000000000000000000000000010400070054000a80050008000000000005000800b60000001400070000000000000000000000000000000001050008000000000005159ecb8ab90008000000000014000700fc02000000ff00000000000000000000050008001200000000000000"], 0x114}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xc, 0xfffffffffffffffc, 0x400004}) (async) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x3a8, 0x0, 0x3a8, 0x98, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'erspan0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfc}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e26, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3ff}, 0x1c) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) 2.212918046s ago: executing program 0 (id=2656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1, {[@rr={0x7, 0x3, 0x26}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 2.083087852s ago: executing program 0 (id=2657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}}]}, 0x48}}, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x5, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @private, 0x0}, &(0x7f0000000180)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r10, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0xfffffffffffffe22, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4}}]}, 0x68}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x20, 0x0, 0x3, 0x3, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x64, 0x0, 0x9, 0x15, 0x0, @multicast2, @local, {[@end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @dev}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x40, 0x7, 0x0, @private1, @mcast1, 0x40, 0x8, 0x3f, 0x3}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000800)={&(0x7f0000000480)={0x374, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x25}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x4, 0x1f, 0x8, 0xffffffd8}, {0x41, 0x8, 0x80, 0x2}, {0x5, 0x9, 0x80, 0xfffffffc}, {0x101, 0x0, 0x1f, 0x8}, {0x4, 0x3f, 0x7, 0x8}, {0x3, 0x8, 0x6, 0x7}, {0x3ff, 0x40, 0x40, 0x401}]}}}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x800}, 0x880) 2.069756125s ago: executing program 3 (id=2658): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @rose, @remote, @default, @rose, @rose, @remote, @default]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3f, 0x6, [@default, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xbc, 0xdf, &(0x7f0000000240)="2ba14aba9fd100c18b6fad6fa43e62f53c9e53613ecc7f3763fd5612d7f03e087b8d350a7429e7c0ff812ba2b34db92061447884861905d9e295c6fc1399beb4b2670772b7231a5c0eb2c1382f4147cd4bd62e7ec1835616d7a62cd757bb53781b436256f4cb768dff5b49ce07500daed20e88dc045be88b22f2deb793098eabffddc24114178469e85d882e9c9bfbb9487bf2ed2f75d1a163d6571a955af43b12d559ef86169e82d095deeea01c23cc6cfd062cc6ea74d3bb7e67bb", &(0x7f0000000300)=""/223, 0x8, 0x0, 0xe5, 0x7c, &(0x7f0000000400)="330732e53186acb5ce2685cce5e433df4774c613b34e8939169a80943934124cbfe12232f5505f999b7b05bffc110556df20c3642fcead2fded4b1acc8f890c947c8497f5156f3bebbe0cc40fc3bbf564b6e182dd87d92c03c86f5ec164991097856825f14a13e0da4868f9821962c5b35482731c8b6c1efcaaaac6a5e841abee65da73a12590a8996f2257ec00ede19cda9ca99cd556096850830964a0ee6712caf431a30298a7d22df454747a79ba32f27195af00072e674138e4a4040f4f071ec839229f407c48060c0c62f33266ba55004e8df1e0f529dd870ff151fa6b686d34617d4", &(0x7f0000000500)="0254162f9d82d64d41fb950736af06127de563dc425d635d7aa3727958785ac6060c2c4c0cc8324cf9df80cc2b88b6524b803225d5b3d42eab83d848b065bd5b7e73410c8a845f5c18a6040ad65d67f4e7b73323ed519235b6c9440b2ccc9ccd4d95fb7ac0880e303c021befb7041fa2f6ae21169609c2449d3154dd", 0x0, 0x0, 0x1ff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=0xffffffffffffffff, 0x10, 0x0, 0x80000001, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) socket$xdp(0x2c, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000740)={{0x10b, 0x4, 0x7d, 0x33f, 0x2c2, 0x8, 0x207}, "d55707cec75a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x926) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x44, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0x10, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x1, 0x8, 0x8, 0x6, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x7107a1b699f0b7bc}}}, &(0x7f0000001280)='GPL\x00', 0x5, 0xd0, &(0x7f00000012c0)=""/208, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x3, 0x4, 0x1, 0x1}, 0x10, 0x29e00, r1, 0xa, &(0x7f0000001440)=[r2, r2, r2, r2], &(0x7f0000001480)=[{0x4, 0x1, 0x4, 0x4}, {0x2, 0x4, 0xc, 0x8}, {0x0, 0x3, 0xc, 0xc}, {0x4, 0x4, 0xd, 0x3}, {0x2, 0x2, 0x10, 0xc}, {0x0, 0x4, 0x8}, {0x1, 0x3, 0x5, 0x2}, {0x2, 0x3, 0x1, 0x2}, {0x5, 0x1, 0xf, 0x1}, {0x3, 0x1, 0x6, 0xa}], 0x10, 0x7}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000026c0)={r5, 0x0, 0x1, 0x3b, &(0x7f0000001600)='z', &(0x7f0000001640)=""/59, 0x1f, 0x0, 0x39, 0x1000, &(0x7f0000001680)="1911e9e8b7870df38a165b9790b7df9f2546776a1e391d4f53c6af92124b486510e83e50fffa5340cb1b8ca60ab60d73535b0ac6ad794a5fc2", &(0x7f00000016c0)="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", 0x0, 0x0, 0x8}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002900)={'syztnl0\x00', &(0x7f0000002880)={'syztnl2\x00', 0x0, 0x456c60d31f3841c1, 0x2, 0x4, 0x2, 0x44, @mcast2, @local, 0x40, 0x7800, 0x7f, 0x2}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r8, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002a00), r3) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000002b40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0x9c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002c00)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000002d00)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x64, r10, 0x210, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000}, 0x40040) r12 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r12, &(0x7f0000002d40)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24) r13 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r13, &(0x7f0000002d80)={0x18, 0x0, {0x4, @remote, 'bridge_slave_1\x00'}}, 0x1e) syz_genetlink_get_family_id$nl80211(&(0x7f0000002dc0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r14, &(0x7f0000003040)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003000)={&(0x7f0000002e40)={0x194, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x155}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3ff, @local, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x96}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8a}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x76c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x875}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 2.056110746s ago: executing program 2 (id=2659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0x503, 0x0, 0x7000000, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 1.89922775s ago: executing program 3 (id=2660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000000000000000060000020000000a40000000160a07090002007334fcc0797a300000000014000380080002400000000008000140000000000900010073797a4d00000000140000001100d2bf000000000000001000"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000170a01030000000000000000000000000900010073797a3100020000"], 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmmsg(r4, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000001380)={{0x0}, &(0x7f00000000c0), 0x54}, 0x20) sendmmsg$inet(r0, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffffb3}, {&(0x7f0000001940)}], 0x6, 0x0, 0x13}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x200040d4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000013c0)=0x28) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005402000060ec970001"], 0xfdef) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 1.14280597s ago: executing program 2 (id=2661): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000}, 0x0) 1.121837362s ago: executing program 0 (id=2662): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_INET={0x38, 0x2, 0x0, 0x1, {0x25}}]}, @IFLA_PROTO_DOWN={0x5}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x92}], {0x95, 0x0, 0x700}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0xc}, 0x90) 879.033246ms ago: executing program 0 (id=2663): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c4030000", @ANYRES16=r1, @ANYBLOB="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"], 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x16, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000fdffffff00000000010400000b54000101000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000851000000000000085100000feffffff850000007300200018400000fbffffff000000000000000095000000000000008257411960d74cbbf56bfd7d31587cf0b0641f68ec4de3e28c09328c9e2042699aafdfc057923c6bc5143479d349079ca7f8a72a57528c0b84fd99dee09292923237e5cb53cc799f6ed8009855378fcb8999b23871b6327fbc9caedfc3a5354b3759291af6e3c335bb8df02130322f907a4dca55c340a860e6ae57955ff3cef20c3a569617a19d7c7c190bbd99bf2edf696fc8e34b03cfb01c28cb3adb2da547e4"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x59, &(0x7f0000000200)=""/89, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x0, 0x40, 0xdf9e}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x2, 0xfffffffd, 0xc}], 0x10, 0x6}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010005000500070000000000080009000000000006001a000000000008000b00000000000600020000000000bb96ad13cee02169c549f960c8eaaadaf32d242c1d9b762ce2d509e8bb46a825210ba60c94c84971d012ed4f1c9deee2a4ca94e18e1b9a1979e97a6a1ba8545ef38a93dfc781ed73996ab64a6c4256726ce423a33107001dddfc82f75ca7666b5e3ede7153621a6dcfb501195e04c1880d123074aad3525801217f25eac0571d08fcfb1e0d858f"], 0x3c}, 0x1, 0x6c}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000007e87f81dbd198a752b00000008000300", @ANYRES32=r2], 0x2c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_type(r8, &(0x7f0000000140), 0x9) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) socketpair(0x28, 0x1, 0x0, &(0x7f0000000500)) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f00000000c0)=0x8, 0x4) r11 = socket$rxrpc(0x21, 0x2, 0xa) listen(r11, 0x0) bind$inet(r10, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r12, 0x29, 0x6, 0x0, &(0x7f0000000240)) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x100, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x12, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x0) 837.020077ms ago: executing program 3 (id=2664): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@multicast1}, {@dev}, {@loopback}, {}, {}]}]}}}}}}}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000000c0)) ioctl$TUNSETOFFLOAD(r2, 0x4010744d, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 736.884905ms ago: executing program 2 (id=2665): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000180)={0x8, 'dvmrp0\x00', {'geneve1\x00'}, 0x1f}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x300, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r7, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000e7ffff07850000001700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x48}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000aa2001000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800004dfbd78fc3833be09f3e79902b767e36f407fabd6b50022a745415fe14c87a54548623105aa9d2c031c1983579276d24e9257949a4fa3c33b8b3012c4e2070879afffe130d8d5fe3c1ed13b4f08d557fcc54787ba75d7dd455bb0399cdd8c7e5069a746c193889acacbaeed0a6"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x40000003}]}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/220, 0x33, 0xdc, 0x1}, 0x20) close(r0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'geneve1\x00', {0x2, 0x4e20, @empty}}) 443.490619ms ago: executing program 3 (id=2666): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, 0xfffffffffffffffd, 0x4040000) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000280)={&(0x7f00000003c0)=""/129, 0x81, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x402, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xffffffff, 0x0, r2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000e40)=ANY=[@ANYRES8=r2], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4}, 0x24) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 440.031153ms ago: executing program 2 (id=2667): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 111.265008ms ago: executing program 3 (id=2668): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x29, 0x3, 0x5) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x5, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000c0a000000000000000000000300000424000000060a00000000000000000000000020000c00058008000140000000320400058018000000060a0000000000000bc8000000000000000004000580140000001100010000000000000000000000000a"], 0x78}}, 0x20048001) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000180)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vlan0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r4, 0x111, 0x4, 0x0, 0x20001f00) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)) socket$alg(0x26, 0x5, 0x0) 0s ago: executing program 0 (id=2669): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000004400038008000300000000001400020076657468315f746f5f7465616d00000008000100010000000500080001000000140006"], 0x58}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000400)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48}, {0x6, 0x0, 0x0, 0x1f}]}) write$ppp(r2, &(0x7f00000010c0)="1e00", 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x17, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x1, 0x1}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1010}, 0x47) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000002c0)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "ae95c69400311d48aad0bff5434e4daefeebbdfe3198b929fed36aae687d362c2d866ff14a0cbec8b491d56b52b140eda575852ea81921ebff746d451657e65d0811e5987eac486c9c4b75c4ff6aafb611cd7d03cbfbd9e500d9cb12cf3f19ee82e9b469a8cf57f61583f3bac73b19c5a450293e4710c264514b37c7fa25e36383a27a84d5a4c0e18de5a1797c673863cc00dc5cdc32c1258d84c073535e5deff67705562d14d97b87083ee4d46c2ca0fce82cfb9dbd65fac7a0ee3f343365d654fe8ab11cc98ca5c93434e40115965798a90c26c17a88eb3cdca0696b1c499a07bc1bb0be5b081894d9d8a6c33ceef29631b455362d75701de885445f54041d", "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"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) kernel console output (not intermixed with test programs): tributes in process `syz.3.2008'. [ 342.250606][ T2453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.546335][T12299] vlan2: entered promiscuous mode [ 342.557590][T12299] bond0: (slave vlan2): Opening slave failed [ 342.850192][T12233] chnl_net:caif_netlink_parms(): no params data found [ 342.867724][ T2453] bridge_slave_1: left allmulticast mode [ 342.873809][ T2453] bridge_slave_1: left promiscuous mode [ 342.879615][ T2453] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.897246][ T2453] bridge_slave_0: left allmulticast mode [ 342.903370][ T29] audit: type=1107 audit(1719720959.917:47): pid=12307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='e' [ 342.915674][ T2453] bridge_slave_0: left promiscuous mode [ 342.922542][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2017'. [ 342.922884][ T2453] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.649703][ T2453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.657524][ T5110] Bluetooth: hci2: command tx timeout [ 343.672994][ T2453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.686503][ T2453] bond0 (unregistering): Released all slaves [ 343.812521][ T5110] Bluetooth: hci1: command tx timeout [ 343.996030][T12353] sctp: [Deprecated]: syz.2.2022 (pid 12353) Use of int in maxseg socket option. [ 343.996030][T12353] Use struct sctp_assoc_value instead [ 344.098122][T12349] syzkaller1: entered promiscuous mode [ 344.109830][T12349] syzkaller1: entered allmulticast mode [ 344.223663][T12360] team0: Port device team_slave_0 removed [ 344.438193][T12257] chnl_net:caif_netlink_parms(): no params data found [ 344.460363][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.483143][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.499674][T12233] bridge_slave_0: entered allmulticast mode [ 344.548321][T12233] bridge_slave_0: entered promiscuous mode [ 344.633622][T12233] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.651699][T12233] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.659112][T12233] bridge_slave_1: entered allmulticast mode [ 344.717839][T12233] bridge_slave_1: entered promiscuous mode [ 344.827872][ T2453] hsr_slave_0: left promiscuous mode [ 344.868942][ T2453] hsr_slave_1: left promiscuous mode [ 344.911064][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.951759][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.989889][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.012885][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.149070][ T2453] veth1_macvtap: left promiscuous mode [ 345.155606][ T2453] veth0_macvtap: left promiscuous mode [ 345.171193][ T2453] veth1_vlan: left promiscuous mode [ 345.176746][ T2453] veth0_vlan: left promiscuous mode [ 345.245704][ T29] audit: type=1107 audit(1719720962.267:48): pid=12383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='e' [ 345.731992][ T5110] Bluetooth: hci2: command tx timeout [ 345.881612][ T5101] Bluetooth: hci1: command tx timeout [ 345.935057][ T2453] team0 (unregistering): Port device team_slave_1 removed [ 345.992114][ T2453] team0 (unregistering): Port device team_slave_0 removed [ 346.514330][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 346.663746][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.723104][T12417] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (64) [ 346.730648][T12421] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2034'. [ 346.736233][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.751758][T12421] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 346.857406][T12420] vlan2: entered promiscuous mode [ 346.903335][T12420] bond0: (slave vlan2): Opening slave failed [ 346.997269][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 347.008159][T12426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2036'. [ 347.019526][T12257] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.027380][T12257] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.034947][T12257] bridge_slave_0: entered allmulticast mode [ 347.051006][T12257] bridge_slave_0: entered promiscuous mode [ 347.082713][T12257] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.111166][T12257] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.126783][T12257] bridge_slave_1: entered allmulticast mode [ 347.135573][T12257] bridge_slave_1: entered promiscuous mode [ 347.144292][T12429] lo speed is unknown, defaulting to 1000 [ 347.181057][T12233] team0: Port device team_slave_0 added [ 347.284484][T12233] team0: Port device team_slave_1 added [ 347.295217][T12257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.328467][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 347.394629][T12257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.415913][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.432006][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.458889][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.510447][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.525853][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.560844][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.619138][T12257] team0: Port device team_slave_0 added [ 347.631119][T12257] team0: Port device team_slave_1 added [ 347.646384][T12449] FAULT_INJECTION: forcing a failure. [ 347.646384][T12449] name failslab, interval 1, probability 0, space 0, times 0 [ 347.691614][T12449] CPU: 1 PID: 12449 Comm: syz.3.2044 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 347.701913][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 347.712012][T12449] Call Trace: [ 347.715372][T12449] [ 347.718344][T12449] dump_stack_lvl+0x241/0x360 [ 347.723247][T12449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.728493][T12449] ? __pfx__printk+0x10/0x10 [ 347.733138][T12449] ? __pfx___might_resched+0x10/0x10 [ 347.738473][T12449] should_fail_ex+0x3b0/0x4e0 [ 347.743195][T12449] should_failslab+0x9/0x20 [ 347.747744][T12449] __kmalloc_node_noprof+0xdf/0x440 [ 347.752980][T12449] ? kvmalloc_node_noprof+0x72/0x190 [ 347.758304][T12449] kvmalloc_node_noprof+0x72/0x190 [ 347.763463][T12449] bpf_test_run_xdp_live+0x277/0x2110 [ 347.768894][T12449] ? arch_stack_walk+0x16d/0x1b0 [ 347.773896][T12449] ? stack_trace_save+0x118/0x1d0 [ 347.778932][T12449] ? __lock_acquire+0x1346/0x1fd0 [ 347.783997][T12449] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 347.789819][T12449] ? mark_lock+0x9a/0x350 [ 347.794196][T12449] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 347.800135][T12449] ? __might_fault+0xaa/0x120 [ 347.801878][ T5101] Bluetooth: hci2: command tx timeout [ 347.804848][T12449] ? __might_fault+0xc6/0x120 [ 347.814926][T12449] ? _copy_from_user+0xa6/0xe0 [ 347.819740][T12449] ? bpf_test_init+0x15a/0x180 [ 347.824547][T12449] ? xdp_convert_md_to_buff+0x5b/0x330 [ 347.830063][T12449] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 347.835495][T12449] ? __pfx_lock_release+0x10/0x10 [ 347.840573][T12449] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 347.846441][T12449] ? __fget_files+0x29/0x470 [ 347.851102][T12449] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 347.856961][T12449] bpf_prog_test_run+0x33a/0x3b0 [ 347.861956][T12449] __sys_bpf+0x48d/0x810 [ 347.866266][T12449] ? __pfx___sys_bpf+0x10/0x10 [ 347.871082][T12449] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 347.877089][T12449] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.883434][T12449] ? do_syscall_64+0x100/0x230 [ 347.888236][T12449] __x64_sys_bpf+0x7c/0x90 [ 347.892684][T12449] do_syscall_64+0xf3/0x230 [ 347.897231][T12449] ? clear_bhb_loop+0x35/0x90 [ 347.901953][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.907880][T12449] RIP: 0033:0x7f291dd75b99 [ 347.912329][T12449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.931969][T12449] RSP: 002b:00007f291eb3e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.940417][T12449] RAX: ffffffffffffffda RBX: 00007f291df03fa0 RCX: 00007f291dd75b99 [ 347.948418][T12449] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 347.956405][T12449] RBP: 00007f291eb3e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 347.964479][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.972481][T12449] R13: 000000000000000b R14: 00007f291df03fa0 R15: 00007ffdb0dac068 [ 347.980477][T12449] [ 347.991032][ T5101] Bluetooth: hci1: command tx timeout [ 348.063100][T12257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.070132][T12257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.097684][T12257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.112237][T12257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.119242][T12257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.161523][T12257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.166104][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 348.195801][T12462] netlink: 'syz.0.2047': attribute type 58 has an invalid length. [ 348.204581][T12462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2047'. [ 348.215475][T12462] bridge_slave_0: entered allmulticast mode [ 348.388054][T12233] hsr_slave_0: entered promiscuous mode [ 348.403696][T12233] hsr_slave_1: entered promiscuous mode [ 348.422077][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 348.442293][T12468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2051'. [ 348.501163][T12473] lo speed is unknown, defaulting to 1000 [ 348.562598][T12257] hsr_slave_0: entered promiscuous mode [ 348.582122][T12257] hsr_slave_1: entered promiscuous mode [ 348.591388][T12257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.609320][T12257] Cannot create hsr debugfs directory [ 349.281435][T12507] netlink: 'syz.2.2063': attribute type 5 has an invalid length. [ 349.458749][T12515] lo speed is unknown, defaulting to 1000 [ 349.891594][ T5101] Bluetooth: hci2: command tx timeout [ 350.064623][T12233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.080493][T12233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.093817][T12233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.176160][T12524] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2067'. [ 350.192722][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2067'. [ 350.207289][T12233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.351515][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 350.360440][T12526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2068'. [ 350.405824][T12527] lo speed is unknown, defaulting to 1000 [ 350.428693][T12257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.476576][T12257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.490513][T12257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.505295][T12257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.738371][T12233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.807717][T12233] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.882074][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.889380][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.948516][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.955818][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.053159][T12257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.173232][T12536] ɶƣ0G0w: entered promiscuous mode [ 351.199406][T12257] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.253511][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.260773][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.297108][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.304427][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.669285][T12233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.928728][T12257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.066881][T12582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2084'. [ 352.110334][T12257] veth0_vlan: entered promiscuous mode [ 352.223109][T12257] veth1_vlan: entered promiscuous mode [ 352.363392][T12257] veth0_macvtap: entered promiscuous mode [ 352.387094][T12233] veth0_vlan: entered promiscuous mode [ 352.406536][T12257] veth1_macvtap: entered promiscuous mode [ 352.436209][T12233] veth1_vlan: entered promiscuous mode [ 352.488153][T12257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.507790][T12257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.538110][T12257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.559995][T12257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.570779][T12257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.590610][T12257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.612753][T12257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.640415][T12257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.672703][T12257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.693260][T12257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.720140][T12257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.751830][T12257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.774553][T12257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.795634][T12257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.859314][T12257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.876660][T12257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.897438][T12257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.924072][T12257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.964585][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 352.987084][T12606] lo speed is unknown, defaulting to 1000 [ 353.032508][T12233] veth0_macvtap: entered promiscuous mode [ 353.089440][T12233] veth1_macvtap: entered promiscuous mode [ 353.149715][T12608] netlink: 'syz.3.2096': attribute type 309 has an invalid length. [ 353.262285][T12608] __nla_validate_parse: 1 callbacks suppressed [ 353.262310][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 353.288334][T12608] macsec0: entered promiscuous mode [ 353.295256][T12608] macsec1: entered promiscuous mode [ 353.397744][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.434995][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.491945][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2097'. [ 353.508610][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.536142][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.566672][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.590990][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.609204][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.637672][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.652294][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.664473][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.677356][T12233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.703902][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.722015][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.754875][T12622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2100'. [ 353.768601][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.787240][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.797420][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.815137][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.826043][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.836742][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.847377][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.858491][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.893155][T12233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.984446][T12233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.002852][T12233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.014117][T12233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.031491][T12233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.062521][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 354.169556][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2101'. [ 354.179204][T12644] netlink: 'syz.2.2101': attribute type 20 has an invalid length. [ 354.490571][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.490735][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 354.506770][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.509319][T12659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2108'. [ 354.557288][T12660] lo speed is unknown, defaulting to 1000 [ 354.567283][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.584680][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.243372][ T1057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.356657][ T1057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.435909][ T1057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.611334][ T1057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.036646][ T1057] bridge_slave_1: left allmulticast mode [ 356.051599][ T1057] bridge_slave_1: left promiscuous mode [ 356.057453][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.073365][ T1057] bridge_slave_0: left allmulticast mode [ 356.079065][ T1057] bridge_slave_0: left promiscuous mode [ 356.103182][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.232989][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.243616][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.254303][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.265932][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.274813][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.282972][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.621397][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.639328][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.655544][ T1057] bond0 (unregistering): Released all slaves [ 356.708358][T12682] lo speed is unknown, defaulting to 1000 [ 357.228028][ T1057] hsr_slave_0: left promiscuous mode [ 357.278768][ T1057] hsr_slave_1: left promiscuous mode [ 357.308471][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.327354][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.357419][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.370953][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.429897][ T1057] veth1_macvtap: left promiscuous mode [ 357.440396][ T1057] veth0_macvtap: left promiscuous mode [ 357.453519][ T1057] veth1_vlan: left promiscuous mode [ 357.462484][ T1057] veth0_vlan: left promiscuous mode [ 357.850523][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.865011][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.892727][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.909866][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.923074][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 357.930742][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.363778][ T5101] Bluetooth: hci1: command tx timeout [ 358.385549][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 358.438538][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 359.002166][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'. [ 359.028597][T12693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2119'. [ 359.055277][T12694] lo speed is unknown, defaulting to 1000 [ 359.084072][T12682] chnl_net:caif_netlink_parms(): no params data found [ 359.271045][T12702] lo speed is unknown, defaulting to 1000 [ 359.355178][T12717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2122'. [ 359.393526][T12717] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2122'. [ 359.472145][T12711] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2122'. [ 359.484835][T12725] sctp: [Deprecated]: syz.2.2125 (pid 12725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.484835][T12725] Use struct sctp_sack_info instead [ 359.567835][T12711] ipt_REJECT: TCP_RESET invalid for non-tcp [ 359.652433][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.660044][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.691864][T12682] bridge_slave_0: entered allmulticast mode [ 359.699534][T12682] bridge_slave_0: entered promiscuous mode [ 359.745774][T12682] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.785417][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.801407][T12682] bridge_slave_1: entered allmulticast mode [ 359.812222][T12682] bridge_slave_1: entered promiscuous mode [ 359.936813][T12682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.974442][T12682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.046198][ T5101] Bluetooth: hci2: command tx timeout [ 360.086038][T12743] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 360.197851][T12748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2129'. [ 360.236566][T12682] team0: Port device team_slave_0 added [ 360.316837][T12682] team0: Port device team_slave_1 added [ 360.388527][ T1057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.411419][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 360.426183][T12753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2132'. [ 360.441135][ T5101] Bluetooth: hci1: command tx timeout [ 360.484884][T12757] lo speed is unknown, defaulting to 1000 [ 360.485906][T12682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.497925][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.526930][T12682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.647939][ T1057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.687524][T12682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.695041][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.779265][T12682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.917861][ T1057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.058462][ T1057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.135173][T12785] FAULT_INJECTION: forcing a failure. [ 361.135173][T12785] name failslab, interval 1, probability 0, space 0, times 0 [ 361.149985][T12785] CPU: 1 PID: 12785 Comm: syz.3.2141 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 361.160218][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 361.170409][T12785] Call Trace: [ 361.173731][T12785] [ 361.176692][T12785] dump_stack_lvl+0x241/0x360 [ 361.181438][T12785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.186899][T12785] ? __pfx__printk+0x10/0x10 [ 361.191558][T12785] ? ref_tracker_alloc+0x332/0x490 [ 361.196741][T12785] should_fail_ex+0x3b0/0x4e0 [ 361.201481][T12785] ? skb_clone+0x20c/0x390 [ 361.205951][T12785] should_failslab+0x9/0x20 [ 361.210506][T12785] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 361.215940][T12785] skb_clone+0x20c/0x390 [ 361.220243][T12785] __netlink_deliver_tap+0x3cc/0x7c0 [ 361.225606][T12785] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.230957][T12785] netlink_deliver_tap+0x19d/0x1b0 [ 361.236210][T12785] netlink_unicast+0x7be/0x990 [ 361.241035][T12785] ? __pfx_netlink_unicast+0x10/0x10 [ 361.246428][T12785] ? __virt_addr_valid+0x183/0x520 [ 361.251567][T12785] ? __check_object_size+0x49c/0x900 [ 361.256893][T12785] ? bpf_lsm_netlink_send+0x9/0x10 [ 361.262034][T12785] netlink_sendmsg+0x8e4/0xcb0 [ 361.266825][T12785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.272124][T12785] ? __import_iovec+0x536/0x820 [ 361.276985][T12785] ? aa_sock_msg_perm+0x91/0x160 [ 361.281972][T12785] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 361.287370][T12785] ? security_socket_sendmsg+0x87/0xb0 [ 361.292847][T12785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.298175][T12785] __sock_sendmsg+0x221/0x270 [ 361.302923][T12785] ____sys_sendmsg+0x525/0x7d0 [ 361.307734][T12785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.313162][T12785] __sys_sendmsg+0x2b0/0x3a0 [ 361.317789][T12785] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.322916][T12785] ? vfs_write+0x7c4/0xc90 [ 361.327386][T12785] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.333810][T12785] ? do_syscall_64+0x100/0x230 [ 361.338584][T12785] ? do_syscall_64+0xb6/0x230 [ 361.343275][T12785] do_syscall_64+0xf3/0x230 [ 361.347792][T12785] ? clear_bhb_loop+0x35/0x90 [ 361.352509][T12785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.358503][T12785] RIP: 0033:0x7f291dd75b99 [ 361.362936][T12785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.382726][T12785] RSP: 002b:00007f291eb3e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.391330][T12785] RAX: ffffffffffffffda RBX: 00007f291df03fa0 RCX: 00007f291dd75b99 [ 361.399311][T12785] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 361.407385][T12785] RBP: 00007f291eb3e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 361.415363][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.423379][T12785] R13: 000000000000000b R14: 00007f291df03fa0 R15: 00007ffdb0dac068 [ 361.431373][T12785] [ 361.506204][T12682] hsr_slave_0: entered promiscuous mode [ 361.541377][T12682] hsr_slave_1: entered promiscuous mode [ 361.609639][T12795] vlan2: entered promiscuous mode [ 361.647936][T12795] team0: entered promiscuous mode [ 361.657022][T12795] team_slave_0: entered promiscuous mode [ 361.669876][T12795] team_slave_1: entered promiscuous mode [ 361.688262][T12795] vlan2: entered allmulticast mode [ 361.693918][T12795] team0: entered allmulticast mode [ 361.699192][T12795] team_slave_0: entered allmulticast mode [ 361.718069][T12795] team_slave_1: entered allmulticast mode [ 361.745326][T12702] chnl_net:caif_netlink_parms(): no params data found [ 361.859951][T12792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2145'. [ 361.920535][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'. [ 361.995231][T12814] lo speed is unknown, defaulting to 1000 [ 362.039619][T12817] bridge3: entered promiscuous mode [ 362.048298][T12817] bridge3: entered allmulticast mode [ 362.121116][ T5101] Bluetooth: hci2: command tx timeout [ 362.442337][ T1057] bridge_slave_1: left allmulticast mode [ 362.461470][ T1057] bridge_slave_1: left promiscuous mode [ 362.479272][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.514238][ T1057] bridge_slave_0: left allmulticast mode [ 362.520048][ T1057] bridge_slave_0: left promiscuous mode [ 362.521289][ T5101] Bluetooth: hci1: command tx timeout [ 362.551660][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.189042][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.204080][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.217085][ T1057] bond0 (unregistering): Released all slaves [ 363.232070][T12702] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.239770][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.248386][T12702] bridge_slave_0: entered allmulticast mode [ 363.257054][T12702] bridge_slave_0: entered promiscuous mode [ 363.351746][T12702] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.359052][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.368039][T12702] bridge_slave_1: entered allmulticast mode [ 363.393745][T12702] bridge_slave_1: entered promiscuous mode [ 363.689510][T12702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.774735][T12702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.938902][T12702] team0: Port device team_slave_0 added [ 363.989500][T12702] team0: Port device team_slave_1 added [ 364.051853][T12702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.067888][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.097423][T12702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.127966][T12702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.169322][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.201130][ T5101] Bluetooth: hci2: command tx timeout [ 364.234973][T12702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.410147][ T1057] hsr_slave_0: left promiscuous mode [ 364.425815][ T1057] hsr_slave_1: left promiscuous mode [ 364.429671][T12894] __nla_validate_parse: 5 callbacks suppressed [ 364.429693][T12894] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2176'. [ 364.448407][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.456522][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.466322][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.474618][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.521720][ T1057] veth1_macvtap: left promiscuous mode [ 364.532341][ T1057] veth0_macvtap: left promiscuous mode [ 364.544405][ T1057] veth1_vlan: left promiscuous mode [ 364.561406][ T1057] veth0_vlan: left promiscuous mode [ 364.601568][ T5101] Bluetooth: hci1: command tx timeout [ 365.655351][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 365.708409][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 366.266425][T12702] hsr_slave_0: entered promiscuous mode [ 366.281141][ T5101] Bluetooth: hci2: command tx timeout [ 366.295999][T12702] hsr_slave_1: entered promiscuous mode [ 366.348181][T12702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.359867][T12702] Cannot create hsr debugfs directory [ 366.618587][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'. [ 366.752929][T12682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.775361][T12682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.837548][T12955] hsr0: entered promiscuous mode [ 366.856045][T12682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.883372][T12682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.909860][T12959] tipc: Resetting bearer [ 366.926830][T12959] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.935261][T12959] bridge0: entered allmulticast mode [ 367.063802][T12959] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.071054][T12959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.098680][T12959] bridge0: entered promiscuous mode [ 367.429446][T12969] lo speed is unknown, defaulting to 1000 [ 367.635384][T12977] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2207'. [ 367.658890][T12682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.720155][T12682] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.751724][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.758964][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.788387][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.795711][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.988227][T12985] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 368.127886][T12702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.183838][T12702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 368.290492][T12702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 368.325819][T12702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 368.745861][T12682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.820627][T12702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.037992][T12702] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.099007][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.106248][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.156500][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.163840][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.249663][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'. [ 369.413849][T12702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.477741][T13027] netem: change failed [ 369.693803][T12682] veth0_vlan: entered promiscuous mode [ 369.723464][T12682] veth1_vlan: entered promiscuous mode [ 369.819416][T12682] veth0_macvtap: entered promiscuous mode [ 369.847523][T12682] veth1_macvtap: entered promiscuous mode [ 369.917531][T12702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.939899][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.960432][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.973317][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.984735][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.995296][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.014922][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.037144][T12682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.075892][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.089725][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.121981][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.134205][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.157800][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.175072][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.187406][T12682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.235618][T12682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.265992][T12682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.300976][T12682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.320064][T12682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.521014][T12702] veth0_vlan: entered promiscuous mode [ 370.577880][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.589232][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.600036][T12702] veth1_vlan: entered promiscuous mode [ 370.675117][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.699656][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.725076][T12702] veth0_macvtap: entered promiscuous mode [ 370.757507][T12702] veth1_macvtap: entered promiscuous mode [ 370.845561][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.857692][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.868422][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.879618][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.890205][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.902761][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.913427][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.926374][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.939158][T12702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.960136][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.972900][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.983837][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.995212][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.005919][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.020135][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.032489][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.043629][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.056438][T12702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.074393][T12702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.086342][T12702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.096475][T12702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.105677][T12702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.231906][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.239884][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.299295][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.315916][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.708295][T13086] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2232'. [ 371.776017][T13089] netlink: 'syz.2.2233': attribute type 4 has an invalid length. [ 372.037724][ T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.111169][T13090] lo speed is unknown, defaulting to 1000 [ 372.516150][ T65] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.802300][ T65] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.861856][ T65] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.989947][ T65] bridge_slave_1: left allmulticast mode [ 372.995883][ T65] bridge_slave_1: left promiscuous mode [ 373.003388][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.012782][ T65] bridge_slave_0: left allmulticast mode [ 373.018526][ T65] bridge_slave_0: left promiscuous mode [ 373.025480][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.666908][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.680583][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.705925][ T65] bond0 (unregistering): Released all slaves [ 373.869685][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.883683][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.896600][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.917053][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.928109][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 373.936772][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.998473][T13106] lo speed is unknown, defaulting to 1000 [ 374.357986][ T65] hsr_slave_0: left promiscuous mode [ 374.369294][ T65] hsr_slave_1: left promiscuous mode [ 374.376544][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.385170][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.394246][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.403683][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.430581][ T65] veth1_macvtap: left promiscuous mode [ 374.436890][ T65] veth0_macvtap: left promiscuous mode [ 374.444300][ T65] veth1_vlan: left promiscuous mode [ 374.449641][ T65] veth0_vlan: left promiscuous mode [ 375.269940][ T65] team0 (unregistering): Port device team_slave_1 removed [ 375.394736][ T65] team0 (unregistering): Port device team_slave_0 removed [ 375.453885][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.474745][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.489561][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.509819][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.536895][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 375.546335][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.042344][ T5110] Bluetooth: hci1: command tx timeout [ 376.174370][T13106] chnl_net:caif_netlink_parms(): no params data found [ 376.224452][T13126] lo speed is unknown, defaulting to 1000 [ 376.637762][T13106] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.656522][T13106] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.672137][T13106] bridge_slave_0: entered allmulticast mode [ 376.681965][T13106] bridge_slave_0: entered promiscuous mode [ 376.702693][T13106] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.720391][T13106] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.742684][T13106] bridge_slave_1: entered allmulticast mode [ 376.750985][T13106] bridge_slave_1: entered promiscuous mode [ 376.795645][T13142] dummy0: entered promiscuous mode [ 376.804851][T13142] batman_adv: batadv0: Adding interface: macsec1 [ 376.811699][T13142] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.838328][T13142] batman_adv: batadv0: Interface activated: macsec1 [ 376.936743][T13106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.966438][T13106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.116693][T13106] team0: Port device team_slave_0 added [ 377.164862][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.203793][T13106] team0: Port device team_slave_1 added [ 377.312607][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.350625][T13106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.358137][T13106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.387973][T13106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.411400][T13106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.418475][T13106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.452927][T13106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.535874][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.641490][ T5110] Bluetooth: hci2: command tx timeout [ 377.768177][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.899381][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2257'. [ 378.005108][T13106] hsr_slave_0: entered promiscuous mode [ 378.020486][T13106] hsr_slave_1: entered promiscuous mode [ 378.095924][T13126] chnl_net:caif_netlink_parms(): no params data found [ 378.121268][ T5110] Bluetooth: hci1: command tx timeout [ 378.322298][ T65] bridge_slave_1: left allmulticast mode [ 378.328111][ T65] bridge_slave_1: left promiscuous mode [ 378.335897][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.346379][ T65] bridge_slave_0: left allmulticast mode [ 378.352674][ T65] bridge_slave_0: left promiscuous mode [ 378.358571][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.912326][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.934347][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.958653][ T65] bond0 (unregistering): Released all slaves [ 379.213243][T13126] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.232653][T13126] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.241803][T13126] bridge_slave_0: entered allmulticast mode [ 379.259059][T13126] bridge_slave_0: entered promiscuous mode [ 379.437111][T13126] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.456898][T13126] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.464548][T13126] bridge_slave_1: entered allmulticast mode [ 379.480360][T13126] bridge_slave_1: entered promiscuous mode [ 379.519506][T13226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2267'. [ 379.722417][ T5110] Bluetooth: hci2: command tx timeout [ 379.776258][T13126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.792509][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'. [ 379.868646][T13126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.029279][T13257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2275'. [ 380.050296][T13258] xt_hashlimit: max too large, truncated to 1048576 [ 380.132691][T13126] team0: Port device team_slave_0 added [ 380.202282][ T5110] Bluetooth: hci1: command tx timeout [ 380.320213][T13126] team0: Port device team_slave_1 added [ 380.819260][ T65] hsr_slave_0: left promiscuous mode [ 380.873775][ T65] hsr_slave_1: left promiscuous mode [ 380.893409][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.914001][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.931902][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.952424][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.053311][ T65] veth1_macvtap: left promiscuous mode [ 381.067355][ T65] veth0_macvtap: left promiscuous mode [ 381.081736][ T65] veth1_vlan: left promiscuous mode [ 381.091529][ T65] veth0_vlan: left promiscuous mode [ 381.801071][ T5110] Bluetooth: hci2: command tx timeout [ 381.802882][ T65] team0 (unregistering): Port device team_slave_1 removed [ 381.858517][ T65] team0 (unregistering): Port device team_slave_0 removed [ 382.285962][ T5110] Bluetooth: hci1: command tx timeout [ 382.446897][T13126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.454740][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.482173][T13126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.496628][T13126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.504539][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.531307][T13126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.601320][T13300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2287'. [ 382.787224][T13126] hsr_slave_0: entered promiscuous mode [ 382.816633][T13126] hsr_slave_1: entered promiscuous mode [ 382.847485][T13126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.866799][T13126] Cannot create hsr debugfs directory [ 383.114135][T13334] netlink: 'syz.0.2294': attribute type 10 has an invalid length. [ 383.196642][T13106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.261068][T13106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.280353][T13106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.307402][T13106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.469182][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 383.472154][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 383.816899][T13106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.843689][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2301'. [ 383.877828][T13364] netlink: 'syz.2.2301': attribute type 18 has an invalid length. [ 383.891848][ T5110] Bluetooth: hci2: command tx timeout [ 383.918762][T13106] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.006385][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 384.069401][T13367] team1: Mode changed to "broadcast" [ 384.089042][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.096705][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.166724][T13126] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.192871][T13126] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.215934][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.223354][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.252464][T13126] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.287965][T13126] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 384.615453][T13381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2310'. [ 384.675512][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.704525][T13106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.790274][T13126] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.827745][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.835044][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.892329][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.899612][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.417236][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 385.518875][T13106] veth0_vlan: entered promiscuous mode [ 385.560948][T13106] veth1_vlan: entered promiscuous mode [ 385.588122][T13126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.685063][T13106] veth0_macvtap: entered promiscuous mode [ 385.715514][T13106] veth1_macvtap: entered promiscuous mode [ 385.763460][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.781816][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.793385][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.805841][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.817057][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.828651][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.844117][T13106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.910525][T13126] veth0_vlan: entered promiscuous mode [ 385.929947][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.947666][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.970312][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.990507][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.011404][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.041905][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.060141][T13106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.115030][T13126] veth1_vlan: entered promiscuous mode [ 386.145295][T13106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.155950][T13106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.166813][T13106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.177137][T13106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.396004][T13126] veth0_macvtap: entered promiscuous mode [ 386.486866][T13126] veth1_macvtap: entered promiscuous mode [ 386.496916][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.536808][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.580486][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.595451][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.663158][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.700069][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.724347][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.735911][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.747195][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.759773][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.770085][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.782692][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.795506][T13126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.807350][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 386.940490][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.962929][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.975034][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.986494][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.998858][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.014973][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.025660][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.036994][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.057332][T13126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.106977][T13126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.140902][T13126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.149770][T13126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.184660][T13126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.268494][T13493] xt_connbytes: Forcing CT accounting to be enabled [ 387.497507][T13491] lo speed is unknown, defaulting to 1000 [ 387.528002][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.528263][T13493] sock: sock_timestamping_bind_phc: sock not bind to device [ 387.554613][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.641889][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.659693][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.894127][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.107355][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.186659][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.242983][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.418930][ T12] bridge_slave_1: left allmulticast mode [ 389.425076][ T12] bridge_slave_1: left promiscuous mode [ 389.430968][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.443084][ T12] bridge_slave_0: left allmulticast mode [ 389.449116][ T12] bridge_slave_0: left promiscuous mode [ 389.465034][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.231319][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.265779][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.286996][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 390.323131][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 390.347577][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 390.355837][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.356510][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 390.396706][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.409955][ T12] bond0 (unregistering): Released all slaves [ 390.477415][T13530] lo speed is unknown, defaulting to 1000 [ 390.923656][ T12] hsr_slave_0: left promiscuous mode [ 390.929747][ T12] hsr_slave_1: left promiscuous mode [ 390.945698][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.954002][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.962956][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.970405][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.998633][ T12] veth1_macvtap: left promiscuous mode [ 391.005282][ T12] veth0_macvtap: left promiscuous mode [ 391.011621][ T12] veth1_vlan: left promiscuous mode [ 391.017123][ T12] veth0_vlan: left promiscuous mode [ 391.552891][T13546] netlink: 'syz.0.2352': attribute type 10 has an invalid length. [ 391.933080][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.944420][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.953875][T13564] netlink: 'syz.0.2356': attribute type 2 has an invalid length. [ 391.966849][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.972771][T13564] netlink: 'syz.0.2356': attribute type 1 has an invalid length. [ 391.987564][T13564] netlink: 'syz.0.2356': attribute type 1 has an invalid length. [ 391.996191][T13564] netlink: 'syz.0.2356': attribute type 2 has an invalid length. [ 392.005071][T13564] netlink: 'syz.0.2356': attribute type 2 has an invalid length. [ 392.014558][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.026175][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 392.039750][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.169484][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.228676][ T12] team0 (unregistering): Port device team_slave_0 removed [ 392.444958][ T5101] Bluetooth: hci1: command tx timeout [ 392.937216][T13562] lo speed is unknown, defaulting to 1000 [ 392.946834][T13530] chnl_net:caif_netlink_parms(): no params data found [ 393.325405][T13530] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.371008][T13530] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.392407][T13530] bridge_slave_0: entered allmulticast mode [ 393.400484][T13530] bridge_slave_0: entered promiscuous mode [ 393.422883][T13530] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.440362][T13530] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.449385][T13530] bridge_slave_1: entered allmulticast mode [ 393.463397][T13530] bridge_slave_1: entered promiscuous mode [ 393.511052][T13589] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2364'. [ 393.633397][T13530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.688545][T13530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.862057][T13530] team0: Port device team_slave_0 added [ 393.977197][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.075881][T13530] team0: Port device team_slave_1 added [ 394.121718][ T5101] Bluetooth: hci2: command tx timeout [ 394.178431][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.348740][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.379152][T13530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.408418][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.446273][T13530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.531503][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2373'. [ 394.532810][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.540733][ T5101] Bluetooth: hci1: command tx timeout [ 394.625145][T13530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.632333][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.658617][T13530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.767459][T13530] hsr_slave_0: entered promiscuous mode [ 394.771918][T13633] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2376'. [ 394.792791][T13530] hsr_slave_1: entered promiscuous mode [ 394.899268][T13641] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 395.213683][ T12] bridge_slave_1: left allmulticast mode [ 395.219409][ T12] bridge_slave_1: left promiscuous mode [ 395.249461][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.303325][ T12] bridge_slave_0: left allmulticast mode [ 395.309062][ T12] bridge_slave_0: left promiscuous mode [ 395.341630][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.668855][T13670] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2389'. [ 396.029971][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.044058][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.063078][ T12] bond0 (unregistering): Released all slaves [ 396.077471][T13562] chnl_net:caif_netlink_parms(): no params data found [ 396.213098][ T5101] Bluetooth: hci2: command tx timeout [ 396.242206][T13679] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 396.285452][T13682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2392'. [ 396.621095][ T5101] Bluetooth: hci1: command tx timeout [ 396.695116][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 396.857183][T13711] can: request_module (can-proto-5) failed. [ 396.903583][T13711] Cannot find del_set index 4 as target [ 396.991670][T13562] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.019830][T13562] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.054422][T13562] bridge_slave_0: entered allmulticast mode [ 397.114026][T13562] bridge_slave_0: entered promiscuous mode [ 397.162197][T13562] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.187206][T13562] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.196134][T13562] bridge_slave_1: entered allmulticast mode [ 397.245961][T13562] bridge_slave_1: entered promiscuous mode [ 397.440805][ T12] hsr_slave_0: left promiscuous mode [ 397.458778][ T12] hsr_slave_1: left promiscuous mode [ 397.477957][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.490803][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.514476][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.529075][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.583319][ T12] veth1_macvtap: left promiscuous mode [ 397.589226][ T12] veth0_macvtap: left promiscuous mode [ 397.603447][ T12] veth1_vlan: left promiscuous mode [ 397.608972][ T12] veth0_vlan: left promiscuous mode [ 397.763681][T13748] FAULT_INJECTION: forcing a failure. [ 397.763681][T13748] name failslab, interval 1, probability 0, space 0, times 0 [ 397.777677][T13748] CPU: 1 PID: 13748 Comm: syz.3.2411 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 397.787897][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 397.798172][T13748] Call Trace: [ 397.801492][T13748] [ 397.804571][T13748] dump_stack_lvl+0x241/0x360 [ 397.809289][T13748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.814599][T13748] ? __pfx__printk+0x10/0x10 [ 397.819267][T13748] ? __pfx___might_resched+0x10/0x10 [ 397.824659][T13748] ? __lock_acquire+0x1346/0x1fd0 [ 397.829703][T13748] should_fail_ex+0x3b0/0x4e0 [ 397.834409][T13748] ? __d_alloc+0x31/0x700 [ 397.838758][T13748] should_failslab+0x9/0x20 [ 397.843413][T13748] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 397.849163][T13748] __d_alloc+0x31/0x700 [ 397.853345][T13748] d_alloc_parallel+0xdf/0x1600 [ 397.858219][T13748] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 397.864502][T13748] ? __d_lookup+0x85/0x7e0 [ 397.868951][T13748] ? __d_lookup+0x85/0x7e0 [ 397.873394][T13748] ? __pfx_d_alloc_parallel+0x10/0x10 [ 397.878796][T13748] ? __d_lookup+0x727/0x7e0 [ 397.883321][T13748] ? mnt_get_write_access+0x68/0x2b0 [ 397.888733][T13748] path_openat+0x924/0x3280 [ 397.893278][T13748] ? mark_lock+0x9a/0x350 [ 397.897632][T13748] ? __pfx_path_openat+0x10/0x10 [ 397.902611][T13748] do_filp_open+0x235/0x490 [ 397.907134][T13748] ? __pfx_do_filp_open+0x10/0x10 [ 397.912198][T13748] ? _raw_spin_unlock+0x28/0x50 [ 397.917066][T13748] ? alloc_fd+0x5a1/0x640 [ 397.921428][T13748] do_sys_openat2+0x13e/0x1d0 [ 397.926118][T13748] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 397.932122][T13748] ? __pfx_do_sys_openat2+0x10/0x10 [ 397.937377][T13748] ? __fget_files+0x3f6/0x470 [ 397.942094][T13748] __x64_sys_openat+0x247/0x2a0 [ 397.946988][T13748] ? __pfx___x64_sys_openat+0x10/0x10 [ 397.952380][T13748] ? do_syscall_64+0x100/0x230 [ 397.957176][T13748] ? do_syscall_64+0xb6/0x230 [ 397.961936][T13748] do_syscall_64+0xf3/0x230 [ 397.966474][T13748] ? clear_bhb_loop+0x35/0x90 [ 397.971179][T13748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.977104][T13748] RIP: 0033:0x7f291dd75b99 [ 397.981572][T13748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.001223][T13748] RSP: 002b:00007f291eb3e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 398.009675][T13748] RAX: ffffffffffffffda RBX: 00007f291df03fa0 RCX: 00007f291dd75b99 [ 398.017670][T13748] RDX: 00000000000026e1 RSI: 0000000020000240 RDI: ffffffffffffff9c [ 398.025706][T13748] RBP: 00007f291eb3e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 398.033698][T13748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.041690][T13748] R13: 000000000000000b R14: 00007f291df03fa0 R15: 00007ffdb0dac068 [ 398.049699][T13748] [ 398.198706][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2413'. [ 398.283741][ T5101] Bluetooth: hci2: command tx timeout [ 398.286424][T13754] FAULT_INJECTION: forcing a failure. [ 398.286424][T13754] name failslab, interval 1, probability 0, space 0, times 0 [ 398.333946][T13754] CPU: 0 PID: 13754 Comm: syz.2.2414 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 398.344332][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 398.355025][T13754] Call Trace: [ 398.358363][T13754] [ 398.361342][T13754] dump_stack_lvl+0x241/0x360 [ 398.366041][T13754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.372135][T13754] ? __pfx__printk+0x10/0x10 [ 398.376789][T13754] ? __pfx___might_resched+0x10/0x10 [ 398.382142][T13754] should_fail_ex+0x3b0/0x4e0 [ 398.386891][T13754] should_failslab+0x9/0x20 [ 398.391442][T13754] kmalloc_node_trace_noprof+0x74/0x300 [ 398.397054][T13754] ? page_pool_create_percpu+0x77/0x7c0 [ 398.402661][T13754] page_pool_create_percpu+0x77/0x7c0 [ 398.408176][T13754] bpf_test_run_xdp_live+0x2cd/0x2110 [ 398.413583][T13754] ? arch_stack_walk+0x16d/0x1b0 [ 398.418576][T13754] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 398.424482][T13754] ? mark_lock+0x9a/0x350 [ 398.428887][T13754] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 398.434827][T13754] ? __might_fault+0xaa/0x120 [ 398.439558][T13754] ? __might_fault+0xc6/0x120 [ 398.444377][T13754] ? _copy_from_user+0xa6/0xe0 [ 398.449371][T13754] ? bpf_test_init+0x15a/0x180 [ 398.454253][T13754] ? xdp_convert_md_to_buff+0x5b/0x330 [ 398.459788][T13754] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 398.465292][T13754] ? __pfx_lock_release+0x10/0x10 [ 398.470384][T13754] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 398.476226][T13754] ? __fget_files+0x29/0x470 [ 398.480891][T13754] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 398.486843][T13754] bpf_prog_test_run+0x33a/0x3b0 [ 398.491907][T13754] __sys_bpf+0x48d/0x810 [ 398.496206][T13754] ? __pfx___sys_bpf+0x10/0x10 [ 398.501014][T13754] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 398.507033][T13754] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 398.513398][T13754] ? do_syscall_64+0x100/0x230 [ 398.518180][T13754] __x64_sys_bpf+0x7c/0x90 [ 398.522618][T13754] do_syscall_64+0xf3/0x230 [ 398.527150][T13754] ? clear_bhb_loop+0x35/0x90 [ 398.531954][T13754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.537893][T13754] RIP: 0033:0x7ff7ee975b99 [ 398.542368][T13754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.562083][T13754] RSP: 002b:00007ff7ef784048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.570606][T13754] RAX: ffffffffffffffda RBX: 00007ff7eeb03fa0 RCX: 00007ff7ee975b99 [ 398.578693][T13754] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 398.586691][T13754] RBP: 00007ff7ef7840a0 R08: 0000000000000000 R09: 0000000000000000 [ 398.594806][T13754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.603022][T13754] R13: 000000000000000b R14: 00007ff7eeb03fa0 R15: 00007ffcf0af8648 [ 398.611038][T13754] [ 398.692697][ T5101] Bluetooth: hci1: command tx timeout [ 399.041941][ T12] team0 (unregistering): Port device team_slave_1 removed [ 399.098941][ T12] team0 (unregistering): Port device team_slave_0 removed [ 399.682883][T13562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.724051][T13764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2416'. [ 399.744322][T13562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.931111][T13562] team0: Port device team_slave_0 added [ 399.961964][T13777] netlink: 'syz.3.2420': attribute type 5 has an invalid length. [ 399.987843][T13562] team0: Port device team_slave_1 added [ 400.079200][T13777] : entered promiscuous mode [ 400.179432][T13562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.191948][T13562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.250611][T13562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.280078][T13562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.296011][T13562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.340953][T13562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.361317][ T5110] Bluetooth: hci2: command tx timeout [ 400.505963][T13530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.552369][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'. [ 400.564839][T13530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.583596][T13530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.616383][T13562] hsr_slave_0: entered promiscuous mode [ 400.627374][T13562] hsr_slave_1: entered promiscuous mode [ 400.643795][T13562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.661266][T13562] Cannot create hsr debugfs directory [ 400.671110][T13530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 400.692625][T13799] sctp: [Deprecated]: syz.0.2428 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.692625][T13799] Use struct sctp_sack_info instead [ 400.714906][T13797] IPVS: Error connecting to the multicast addr [ 400.732607][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 400.877477][T13804] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2429'. [ 400.908294][T13804] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 400.945211][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 400.972858][T13803] vlan0: entered promiscuous mode [ 400.978058][T13803] team0: entered promiscuous mode [ 400.986035][T13803] team_slave_1: entered promiscuous mode [ 401.148000][T13808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2431'. [ 401.229970][T13813] erspan0: entered promiscuous mode [ 401.253962][T13813] vlan2: entered promiscuous mode [ 401.274118][T13813] erspan0: left promiscuous mode [ 401.383157][T13530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.419276][T13823] netlink: 'syz.3.2435': attribute type 1 has an invalid length. [ 401.494803][T13830] netlink: 'syz.0.2436': attribute type 1 has an invalid length. [ 401.524442][T13830] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2436'. [ 401.557918][T13530] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.568940][ T5110] Bluetooth: hci3: command 0x0406 tx timeout [ 401.618058][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'. [ 401.640994][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.648192][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.694081][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.701347][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.864155][T13838] sctp: [Deprecated]: syz.0.2439 (pid 13838) Use of int in max_burst socket option deprecated. [ 401.864155][T13838] Use struct sctp_assoc_value instead [ 402.107312][T13845] tun0: tun_chr_ioctl cmd 1074812117 [ 402.149924][T13847] geneve2: entered promiscuous mode [ 402.166555][T13847] geneve2: entered allmulticast mode [ 402.227814][T13562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.247574][T13562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.284349][T13562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.306236][T13562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.372495][T13530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.453897][T13856] ɶƣ0GC: entered promiscuous mode [ 402.615183][T13562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.660574][T13562] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.732515][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.739828][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.795572][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.802840][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.895419][T13880] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2446'. [ 402.920372][T13881] netlink: 'syz.0.2445': attribute type 3 has an invalid length. [ 402.962158][T13881] netlink: 151552 bytes leftover after parsing attributes in process `syz.0.2445'. [ 402.976889][T13882] FAULT_INJECTION: forcing a failure. [ 402.976889][T13882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.037516][T13882] CPU: 1 PID: 13882 Comm: syz.2.2446 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 403.047792][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 403.057893][T13882] Call Trace: [ 403.061217][T13882] [ 403.064190][T13882] dump_stack_lvl+0x241/0x360 [ 403.068921][T13882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.074170][T13882] ? __pfx__printk+0x10/0x10 [ 403.079662][T13882] ? __pfx_lock_release+0x10/0x10 [ 403.084834][T13882] ? __lock_acquire+0x1346/0x1fd0 [ 403.089921][T13882] should_fail_ex+0x3b0/0x4e0 [ 403.094932][T13882] _copy_from_user+0x2f/0xe0 [ 403.099578][T13882] kstrtouint_from_user+0xc6/0x190 [ 403.104939][T13882] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 403.110799][T13882] ? __pfx_lock_acquire+0x10/0x10 [ 403.115871][T13882] proc_fail_nth_write+0xaa/0x2d0 [ 403.120926][T13882] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 403.126858][T13882] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 403.132600][T13882] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 403.138276][T13882] vfs_write+0x2a2/0xc90 [ 403.142567][T13882] ? __pfx_vfs_write+0x10/0x10 [ 403.147387][T13882] ? __fget_files+0x29/0x470 [ 403.152138][T13882] ? __fget_files+0x3f6/0x470 [ 403.156930][T13882] ksys_write+0x1a0/0x2c0 [ 403.161588][T13882] ? __pfx_ksys_write+0x10/0x10 [ 403.166770][T13882] ? do_syscall_64+0x100/0x230 [ 403.171559][T13882] ? do_syscall_64+0xb6/0x230 [ 403.176265][T13882] do_syscall_64+0xf3/0x230 [ 403.180905][T13882] ? clear_bhb_loop+0x35/0x90 [ 403.185711][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.191861][T13882] RIP: 0033:0x7ff7ee97471f [ 403.196308][T13882] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 403.216251][T13882] RSP: 002b:00007ff7ef763040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 403.224697][T13882] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff7ee97471f [ 403.232718][T13882] RDX: 0000000000000001 RSI: 00007ff7ef7630b0 RDI: 0000000000000008 [ 403.240723][T13882] RBP: 00007ff7ef7630a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.248737][T13882] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 403.256812][T13882] R13: 000000000000006e R14: 00007ff7eeb04078 R15: 00007ffcf0af8648 [ 403.264829][T13882] [ 403.292389][T13530] veth0_vlan: entered promiscuous mode [ 403.347338][T13530] veth1_vlan: entered promiscuous mode [ 403.501666][T13530] veth0_macvtap: entered promiscuous mode [ 403.542433][T13530] veth1_macvtap: entered promiscuous mode [ 403.614935][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.644748][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.655216][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.667636][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.683710][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.698088][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.713142][T13530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.757109][T13905] vxcan13: entered promiscuous mode [ 403.827543][T13562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.860138][T13911] batadv_slave_1: entered promiscuous mode [ 403.879769][T13910] batadv_slave_1: left promiscuous mode [ 403.906985][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.937292][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.960482][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.000523][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.014518][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.071769][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.084844][T13530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.106934][T13530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.124623][T13530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.138823][T13530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.158572][T13530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.405763][T13562] veth0_vlan: entered promiscuous mode [ 404.483249][ T29] audit: type=1804 audit(1719721021.507:49): pid=13928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2457" name="/root/syzkaller.aszvll/291/cgroup.controllers" dev="sda1" ino=1984 res=1 errno=0 [ 404.564294][T13562] veth1_vlan: entered promiscuous mode [ 404.578920][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.619018][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.726537][T13875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.746796][T13875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.832895][T13562] veth0_macvtap: entered promiscuous mode [ 404.873784][T13562] veth1_macvtap: entered promiscuous mode [ 404.926533][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.938182][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.953824][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.975980][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.001542][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.014876][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.026700][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.039358][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.059050][T13562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.115527][T13947] __nla_validate_parse: 5 callbacks suppressed [ 405.115548][T13947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2466'. [ 405.135151][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2467'. [ 405.153729][T13950] ipvlan0: entered allmulticast mode [ 405.159292][T13950] veth0_vlan: entered allmulticast mode [ 405.205268][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.225570][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.236323][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.249938][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.262270][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.273635][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.284152][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.295421][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.309596][T13562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.325381][T13562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.347393][T13562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.356799][T13562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.372760][T13562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.653821][T13875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.689346][T13875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.795444][T13875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.817360][T13875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.036342][T13984] netlink: 'syz.0.2476': attribute type 30 has an invalid length. [ 406.048355][T13984] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 406.196644][T13994] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2480'. [ 406.497330][T14013] netlink: 'syz.2.2485': attribute type 4 has an invalid length. [ 406.635931][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.149118][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.236672][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.342631][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.447361][ T35] bridge_slave_1: left allmulticast mode [ 407.455602][ T35] bridge_slave_1: left promiscuous mode [ 407.461570][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.472268][ T35] bridge_slave_0: left allmulticast mode [ 407.477955][ T35] bridge_slave_0: left promiscuous mode [ 407.485901][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.124572][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.154687][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.172348][ T35] bond0 (unregistering): Released all slaves [ 408.412937][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.423717][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.435120][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.458077][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.468553][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 408.485864][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.539916][T14027] lo speed is unknown, defaulting to 1000 [ 408.888175][ T35] hsr_slave_0: left promiscuous mode [ 408.894814][ T35] hsr_slave_1: left promiscuous mode [ 408.916892][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.925017][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.936126][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.945137][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.969577][ T35] veth1_macvtap: left promiscuous mode [ 408.975601][ T35] veth0_macvtap: left promiscuous mode [ 408.981343][ T35] veth1_vlan: left promiscuous mode [ 408.986670][ T35] veth0_vlan: left promiscuous mode [ 409.558231][ T35] team0 (unregistering): Port device team_slave_1 removed [ 409.613226][ T35] team0 (unregistering): Port device team_slave_0 removed [ 409.690462][T14034] FAULT_INJECTION: forcing a failure. [ 409.690462][T14034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.727673][T14034] CPU: 1 PID: 14034 Comm: syz.2.2488 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 409.737905][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 409.747976][T14034] Call Trace: [ 409.751271][T14034] [ 409.754221][T14034] dump_stack_lvl+0x241/0x360 [ 409.758913][T14034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.764122][T14034] ? __pfx__printk+0x10/0x10 [ 409.768740][T14034] ? __pfx_lock_release+0x10/0x10 [ 409.773789][T14034] should_fail_ex+0x3b0/0x4e0 [ 409.778487][T14034] _copy_from_user+0x2f/0xe0 [ 409.783544][T14034] copy_msghdr_from_user+0xae/0x680 [ 409.788762][T14034] ? __pfx___might_resched+0x10/0x10 [ 409.794066][T14034] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 409.799890][T14034] ? __might_fault+0xaa/0x120 [ 409.804583][T14034] do_recvmmsg+0x40f/0xae0 [ 409.809021][T14034] ? __pfx_lock_release+0x10/0x10 [ 409.814063][T14034] ? __pfx_do_recvmmsg+0x10/0x10 [ 409.819030][T14034] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 409.824938][T14034] ? ksys_write+0x23e/0x2c0 [ 409.829478][T14034] ? __pfx_lock_release+0x10/0x10 [ 409.834545][T14034] ? vfs_write+0x7c4/0xc90 [ 409.838994][T14034] ? __mutex_unlock_slowpath+0x21d/0x750 [ 409.844675][T14034] ? __fget_files+0x3f6/0x470 [ 409.849388][T14034] __x64_sys_recvmmsg+0x199/0x250 [ 409.854481][T14034] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 409.860077][T14034] ? do_syscall_64+0x100/0x230 [ 409.864860][T14034] ? do_syscall_64+0xb6/0x230 [ 409.869670][T14034] do_syscall_64+0xf3/0x230 [ 409.874189][T14034] ? clear_bhb_loop+0x35/0x90 [ 409.878885][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.884797][T14034] RIP: 0033:0x7ff7ee975b99 [ 409.889242][T14034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.908961][T14034] RSP: 002b:00007ff7ef784048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 409.917588][T14034] RAX: ffffffffffffffda RBX: 00007ff7eeb03fa0 RCX: 00007ff7ee975b99 [ 409.925620][T14034] RDX: 000000000000072a RSI: 0000000020000080 RDI: 0000000000000005 [ 409.933800][T14034] RBP: 00007ff7ef7840a0 R08: 0000000000000000 R09: 0000000000000000 [ 409.941814][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.949885][T14034] R13: 000000000000000b R14: 00007ff7eeb03fa0 R15: 00007ffcf0af8648 [ 409.957905][T14034] [ 409.964427][T14037] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.2490'. [ 410.323819][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 410.345465][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 410.366593][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 410.377586][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 410.386652][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 410.394554][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 410.521739][ T5101] Bluetooth: hci1: command tx timeout [ 410.826174][T14027] chnl_net:caif_netlink_parms(): no params data found [ 410.909109][T14047] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 410.956363][T14045] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 410.979208][T14040] lo speed is unknown, defaulting to 1000 [ 411.226298][T14063] x_tables: duplicate underflow at hook 1 [ 411.297282][T14066] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2495'. [ 411.325726][T14027] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.328387][T14066] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2495'. [ 411.349445][T14027] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.378697][T14027] bridge_slave_0: entered allmulticast mode [ 411.413129][T14027] bridge_slave_0: entered promiscuous mode [ 411.442326][T14027] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.449712][T14027] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.486381][T14027] bridge_slave_1: entered allmulticast mode [ 411.503677][T14027] bridge_slave_1: entered promiscuous mode [ 411.610205][T14027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.667156][T14027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.680269][T14075] sctp: [Deprecated]: syz.3.2499 (pid 14075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.680269][T14075] Use struct sctp_sack_info instead [ 411.816982][T14027] team0: Port device team_slave_0 added [ 411.845520][T14027] team0: Port device team_slave_1 added [ 411.865477][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2499'. [ 411.885068][T14075] ipvlan0: entered allmulticast mode [ 411.906337][T14075] veth0_vlan: entered allmulticast mode [ 412.082711][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.219104][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.265174][T14027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.280491][T14027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.323338][T14027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.348443][T14027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.361741][T14027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.431668][T14027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.517868][ T29] audit: type=1804 audit(1719721029.537:50): pid=14117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2509" name="/root/syzkaller.aszvll/310/cgroup.controllers" dev="sda1" ino=1981 res=1 errno=0 [ 412.549523][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.567844][ T5101] Bluetooth: hci2: command tx timeout [ 412.601982][ T5101] Bluetooth: hci1: command tx timeout [ 412.609410][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 412.625251][T14121] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 412.681999][T14124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2513'. [ 412.698778][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.912925][T14135] FAULT_INJECTION: forcing a failure. [ 412.912925][T14135] name failslab, interval 1, probability 0, space 0, times 0 [ 412.933980][T14135] CPU: 1 PID: 14135 Comm: syz.2.2515 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 412.944199][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 412.954433][T14135] Call Trace: [ 412.957744][T14135] [ 412.960695][T14135] dump_stack_lvl+0x241/0x360 [ 412.965423][T14135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.970745][T14135] ? __pfx__printk+0x10/0x10 [ 412.975408][T14135] ? ref_tracker_alloc+0x332/0x490 [ 412.980588][T14135] should_fail_ex+0x3b0/0x4e0 [ 412.985319][T14135] ? skb_clone+0x20c/0x390 [ 412.989789][T14135] should_failslab+0x9/0x20 [ 412.994317][T14135] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 412.999734][T14135] skb_clone+0x20c/0x390 [ 413.004018][T14135] __netlink_deliver_tap+0x3cc/0x7c0 [ 413.009429][T14135] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.014667][T14135] netlink_deliver_tap+0x19d/0x1b0 [ 413.019797][T14135] netlink_unicast+0x7be/0x990 [ 413.024621][T14135] ? __pfx_netlink_unicast+0x10/0x10 [ 413.030018][T14135] ? __virt_addr_valid+0x183/0x520 [ 413.035193][T14135] ? __check_object_size+0x49c/0x900 [ 413.040514][T14135] ? bpf_lsm_netlink_send+0x9/0x10 [ 413.045673][T14135] netlink_sendmsg+0x8e4/0xcb0 [ 413.050468][T14135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.055808][T14135] ? __import_iovec+0x536/0x820 [ 413.060789][T14135] ? aa_sock_msg_perm+0x91/0x160 [ 413.065772][T14135] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 413.071116][T14135] ? security_socket_sendmsg+0x87/0xb0 [ 413.076629][T14135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.081936][T14135] __sock_sendmsg+0x221/0x270 [ 413.086657][T14135] ____sys_sendmsg+0x525/0x7d0 [ 413.091466][T14135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.096822][T14135] __sys_sendmsg+0x2b0/0x3a0 [ 413.101449][T14135] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.106601][T14135] ? vfs_write+0x7c4/0xc90 [ 413.111102][T14135] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 413.117467][T14135] ? do_syscall_64+0x100/0x230 [ 413.122254][T14135] ? do_syscall_64+0xb6/0x230 [ 413.126943][T14135] do_syscall_64+0xf3/0x230 [ 413.131476][T14135] ? clear_bhb_loop+0x35/0x90 [ 413.136187][T14135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.142094][T14135] RIP: 0033:0x7ff7ee975b99 [ 413.146534][T14135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.166177][T14135] RSP: 002b:00007ff7ef784048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.174759][T14135] RAX: ffffffffffffffda RBX: 00007ff7eeb03fa0 RCX: 00007ff7ee975b99 [ 413.182806][T14135] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 413.190800][T14135] RBP: 00007ff7ef7840a0 R08: 0000000000000000 R09: 0000000000000000 [ 413.199248][T14135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.207234][T14135] R13: 000000000000000b R14: 00007ff7eeb03fa0 R15: 00007ffcf0af8648 [ 413.215243][T14135] [ 413.249085][T14027] hsr_slave_0: entered promiscuous mode [ 413.275288][T14027] hsr_slave_1: entered promiscuous mode [ 413.386576][T14143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2517'. [ 413.465096][T14149] netlink: 'syz.3.2518': attribute type 2 has an invalid length. [ 413.488827][T14040] chnl_net:caif_netlink_parms(): no params data found [ 413.499486][T14149] netlink: 'syz.3.2518': attribute type 2 has an invalid length. [ 413.665125][ T35] bridge_slave_1: left allmulticast mode [ 413.674509][ T35] bridge_slave_1: left promiscuous mode [ 413.680433][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.693284][ T35] bridge_slave_0: left allmulticast mode [ 413.699281][ T35] bridge_slave_0: left promiscuous mode [ 413.705451][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.712445][T14157] ip6t_REJECT: ECHOREPLY is not supported [ 414.250442][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.267402][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.282758][ T35] bond0 (unregistering): Released all slaves [ 414.326867][T14156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 414.341771][T14156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.600875][ T5101] Bluetooth: hci2: command tx timeout [ 414.681673][ T5101] Bluetooth: hci1: command tx timeout [ 414.707591][T14040] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.754943][T14040] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.763200][T14040] bridge_slave_0: entered allmulticast mode [ 414.771451][T14040] bridge_slave_0: entered promiscuous mode [ 414.824793][T14040] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.834444][T14040] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.844035][T14040] bridge_slave_1: entered allmulticast mode [ 414.853606][T14040] bridge_slave_1: entered promiscuous mode [ 415.062158][T14196] vxcan0: entered promiscuous mode [ 415.068108][T14196] vlan2: entered promiscuous mode [ 415.104438][T14196] vxcan0: left promiscuous mode [ 415.210395][T14040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.296817][T14040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.468130][T14213] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 415.567563][T14040] team0: Port device team_slave_0 added [ 415.611910][ T35] hsr_slave_0: left promiscuous mode [ 415.618376][ T35] hsr_slave_1: left promiscuous mode [ 415.625157][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.639585][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.648304][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.656140][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.695511][ T35] veth1_macvtap: left promiscuous mode [ 415.704316][ T35] veth0_macvtap: left promiscuous mode [ 415.710153][ T35] veth1_vlan: left promiscuous mode [ 415.715929][ T35] veth0_vlan: left promiscuous mode [ 416.681043][ T5101] Bluetooth: hci2: command tx timeout [ 416.765093][ T5101] Bluetooth: hci1: command tx timeout [ 417.412972][ T35] team0 (unregistering): Port device team_slave_1 removed [ 417.475309][ T35] team0 (unregistering): Port device team_slave_0 removed [ 418.027874][T14040] team0: Port device team_slave_1 added [ 418.090609][T14040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.131377][T14040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.204262][T14040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.245736][T14040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.279767][T14040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.339990][T14040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.522181][T14040] hsr_slave_0: entered promiscuous mode [ 418.537981][T14040] hsr_slave_1: entered promiscuous mode [ 418.581926][T14040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.593848][T14040] Cannot create hsr debugfs directory [ 418.761148][ T5101] Bluetooth: hci2: command tx timeout [ 418.866787][T14301] netlink: 'syz.3.2559': attribute type 12 has an invalid length. [ 418.874967][T14301] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2559'. [ 418.958312][T14304] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2560'. [ 419.066568][T14027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.144569][T14027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.170540][T14027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.199631][T14027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.407600][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2564'. [ 419.632809][T14027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.773024][T14027] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.793924][T14040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.818986][T14040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.843627][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.850968][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.902315][T14040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.940286][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.947565][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.977485][T14040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 420.416205][T14040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.502914][T14040] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.556832][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.564111][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.620162][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.627489][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.714390][T14374] bond0: (slave vlan0): Opening slave failed [ 420.839419][T14040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.923530][T14027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.324465][T14040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.505565][T14040] veth0_vlan: entered promiscuous mode [ 421.511247][T14413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2588'. [ 421.617739][T14040] veth1_vlan: entered promiscuous mode [ 421.919069][T14040] veth0_macvtap: entered promiscuous mode [ 421.953046][T14027] veth0_vlan: entered promiscuous mode [ 421.966158][T14040] veth1_macvtap: entered promiscuous mode [ 422.040380][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.075823][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.102607][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.114056][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.141546][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.153339][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.167096][T14040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.198524][T14027] veth1_vlan: entered promiscuous mode [ 422.220513][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.248761][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.259496][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.271714][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.284066][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.301424][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.323418][T14040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.382313][T14040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.393664][T14040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.404477][T14040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.416079][T14040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.547414][T14027] veth0_macvtap: entered promiscuous mode [ 422.584807][T14027] veth1_macvtap: entered promiscuous mode [ 422.675568][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.695213][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.706029][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.719063][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.729618][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.742136][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.753216][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.784153][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.797033][T14027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.838357][T13871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.840503][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.860513][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.873299][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.880726][T13871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.885517][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.913709][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.951377][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2602'. [ 422.966856][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.991700][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.013250][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.043630][T14027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.120426][T14027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.135679][T14027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.156160][T14027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.181421][T14027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.261064][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.269733][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.719391][T13877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.730462][T13877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.787876][T14500] netlink: 'syz.2.2609': attribute type 8 has an invalid length. [ 423.818904][T13877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.861162][T13877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.288014][T14519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2615'. [ 424.293327][T14516] siw: device registration error -23 [ 424.435558][T13877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.608463][T14527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2616'. [ 424.638774][T13877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.820624][T13877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.040224][T13877] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.138623][T13877] bridge_slave_1: left allmulticast mode [ 425.144880][T13877] bridge_slave_1: left promiscuous mode [ 425.150918][T13877] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.160122][T13877] bridge_slave_0: left allmulticast mode [ 425.167166][T13877] bridge_slave_0: left promiscuous mode [ 425.173420][T13877] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.803771][T13877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.826348][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.838844][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.847910][T13877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.848019][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.869355][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.878735][T13877] bond0 (unregistering): Released all slaves [ 425.886547][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 425.899516][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.990195][T14537] lo speed is unknown, defaulting to 1000 [ 426.512259][T13877] hsr_slave_0: left promiscuous mode [ 426.518825][T13877] hsr_slave_1: left promiscuous mode [ 426.527539][T13877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.535576][T13877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.544616][T13877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.552907][T13877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.580055][T13877] veth1_macvtap: left promiscuous mode [ 426.587160][T13877] veth0_macvtap: left promiscuous mode [ 426.593248][T13877] veth1_vlan: left promiscuous mode [ 426.598568][T13877] veth0_vlan: left promiscuous mode [ 427.250275][T13877] team0 (unregistering): Port device team_slave_1 removed [ 427.546119][T13877] team0 (unregistering): Port device team_slave_0 removed [ 427.936739][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.950258][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.963460][ T53] Bluetooth: hci1: command tx timeout [ 427.969807][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.011542][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.030182][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 428.038244][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.500222][T14537] chnl_net:caif_netlink_parms(): no params data found [ 428.685981][T14577] lo speed is unknown, defaulting to 1000 [ 428.809817][T14537] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.845627][T14537] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.854795][T14537] bridge_slave_0: entered allmulticast mode [ 428.863192][T14537] bridge_slave_0: entered promiscuous mode [ 428.911606][T14537] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.918974][T14537] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.943137][T14537] bridge_slave_1: entered allmulticast mode [ 428.962310][T14537] bridge_slave_1: entered promiscuous mode [ 429.194217][T14537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.214942][T14537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.285343][T14612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2633'. [ 429.291712][T14609] netlink: 'syz.2.2631': attribute type 1 has an invalid length. [ 429.323117][T14615] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2631'. [ 429.439960][T14537] team0: Port device team_slave_0 added [ 429.477201][T14537] team0: Port device team_slave_1 added [ 429.553473][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2636'. [ 429.792579][T14537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.810079][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.844545][T14640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2638'. [ 429.856731][T14537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.949481][ T1057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.996673][T14537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.042099][ T5110] Bluetooth: hci1: command tx timeout [ 430.050563][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.121905][ T5110] Bluetooth: hci2: command tx timeout [ 430.161019][T14537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.327466][ T1057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.543875][ T1057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.741751][T14677] netlink: 'syz.2.2648': attribute type 11 has an invalid length. [ 430.766391][ T1057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.801690][T14537] hsr_slave_0: entered promiscuous mode [ 430.817458][T14537] hsr_slave_1: entered promiscuous mode [ 430.892683][T14577] chnl_net:caif_netlink_parms(): no params data found [ 431.461462][T14577] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.468691][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.501606][T14577] bridge_slave_0: entered allmulticast mode [ 431.518004][T14577] bridge_slave_0: entered promiscuous mode [ 431.530546][T14577] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.538959][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.547559][T14577] bridge_slave_1: entered allmulticast mode [ 431.573483][T14577] bridge_slave_1: entered promiscuous mode [ 431.615070][ T1057] bridge_slave_1: left allmulticast mode [ 431.621870][ T1057] bridge_slave_1: left promiscuous mode [ 431.627853][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.656989][ T1057] bridge_slave_0: left allmulticast mode [ 431.670837][ T1057] bridge_slave_0: left promiscuous mode [ 431.677978][T14729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2660'. [ 431.687817][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.003769][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'. [ 432.121616][ T5110] Bluetooth: hci1: command tx timeout [ 432.201568][ T5110] Bluetooth: hci2: command tx timeout [ 432.255141][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.268808][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.280558][ T1057] bond0 (unregistering): Released all slaves [ 432.379537][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'. [ 432.438469][T14577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.520418][T14577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.556884][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'. [ 432.566369][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2662'. [ 432.721030][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2663'. [ 432.805712][T14577] team0: Port device team_slave_0 added [ 432.835965][T14744] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 432.875152][T14744] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 432.888328][T14577] team0: Port device team_slave_1 added [ 433.186574][ T1057] hsr_slave_0: left promiscuous mode [ 433.204970][ T1057] hsr_slave_1: left promiscuous mode [ 433.214897][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.225187][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.243085][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.261204][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.335746][ T1057] veth1_macvtap: left promiscuous mode [ 433.349209][ T1057] veth0_macvtap: left promiscuous mode [ 433.362626][ T1057] veth1_vlan: left promiscuous mode [ 433.386885][ T1057] veth0_vlan: left promiscuous mode [ 434.198449][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 434.208658][ T5110] Bluetooth: hci1: command tx timeout [ 434.270794][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 434.283318][ T5110] Bluetooth: hci2: command tx timeout [ 434.321787][ T11] ================================================================== [ 434.329928][ T11] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 434.338125][ T11] Read of size 8 at addr ffff8880236758b8 by task kworker/u8:0/11 [ 434.346002][ T11] [ 434.348351][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 434.358527][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 434.368608][ T11] Workqueue: l2tp l2tp_tunnel_del_work [ 434.374099][ T11] Call Trace: [ 434.377406][ T11] [ 434.380369][ T11] dump_stack_lvl+0x241/0x360 [ 434.385107][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.390324][ T11] ? __pfx__printk+0x10/0x10 [ 434.395033][ T11] ? _printk+0xd5/0x120 [ 434.399235][ T11] ? __virt_addr_valid+0x183/0x520 [ 434.404387][ T11] ? __virt_addr_valid+0x183/0x520 [ 434.409517][ T11] print_report+0x169/0x550 [ 434.414045][ T11] ? __virt_addr_valid+0x183/0x520 [ 434.419185][ T11] ? __virt_addr_valid+0x183/0x520 [ 434.424447][ T11] ? __virt_addr_valid+0x44e/0x520 [ 434.429775][ T11] ? __phys_addr+0xba/0x170 [ 434.434441][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 434.439770][ T11] kasan_report+0x143/0x180 [ 434.444319][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 434.449737][ T11] l2tp_tunnel_del_work+0xe5/0x330 [ 434.454880][ T11] ? process_scheduled_works+0x945/0x1830 [ 434.460656][ T11] process_scheduled_works+0xa2c/0x1830 [ 434.466243][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 434.472255][ T11] ? assign_work+0x364/0x3d0 [ 434.476885][ T11] worker_thread+0x86d/0xd50 [ 434.481612][ T11] ? __kthread_parkme+0x169/0x1d0 [ 434.486699][ T11] ? __pfx_worker_thread+0x10/0x10 [ 434.491831][ T11] kthread+0x2f0/0x390 [ 434.495933][ T11] ? __pfx_worker_thread+0x10/0x10 [ 434.501078][ T11] ? __pfx_kthread+0x10/0x10 [ 434.505716][ T11] ret_from_fork+0x4b/0x80 [ 434.510151][ T11] ? __pfx_kthread+0x10/0x10 [ 434.514775][ T11] ret_from_fork_asm+0x1a/0x30 [ 434.519599][ T11] [ 434.522729][ T11] [ 434.525075][ T11] Allocated by task 14769: [ 434.529677][ T11] kasan_save_track+0x3f/0x80 [ 434.534467][ T11] __kasan_kmalloc+0x98/0xb0 [ 434.539109][ T11] __kmalloc_noprof+0x1f9/0x400 [ 434.543979][ T11] l2tp_session_create+0x3b/0xc20 [ 434.549031][ T11] pppol2tp_connect+0xca3/0x17a0 [ 434.553989][ T11] __sys_connect+0x2df/0x310 [ 434.558605][ T11] __x64_sys_connect+0x7a/0x90 [ 434.563397][ T11] do_syscall_64+0xf3/0x230 [ 434.567936][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.573962][ T11] [ 434.576302][ T11] Freed by task 0: [ 434.580118][ T11] kasan_save_track+0x3f/0x80 [ 434.584818][ T11] kasan_save_free_info+0x40/0x50 [ 434.589878][ T11] poison_slab_object+0xe0/0x150 [ 434.594838][ T11] __kasan_slab_free+0x37/0x60 [ 434.599784][ T11] kfree+0x149/0x360 [ 434.603701][ T11] __sk_destruct+0x58/0x5f0 [ 434.608230][ T11] rcu_core+0xafd/0x1830 [ 434.612506][ T11] handle_softirqs+0x2c4/0x970 [ 434.617311][ T11] __irq_exit_rcu+0xf4/0x1c0 [ 434.621931][ T11] irq_exit_rcu+0x9/0x30 [ 434.626212][ T11] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 434.631955][ T11] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 434.637961][ T11] [ 434.640279][ T11] Last potentially related work creation: [ 434.645997][ T11] kasan_save_stack+0x3f/0x60 [ 434.650688][ T11] __kasan_record_aux_stack+0xac/0xc0 [ 434.656094][ T11] call_rcu+0x167/0xa70 [ 434.660287][ T11] pppol2tp_release+0x24b/0x350 [ 434.665151][ T11] sock_close+0xbc/0x240 [ 434.669396][ T11] __fput+0x406/0x8b0 [ 434.673399][ T11] task_work_run+0x24f/0x310 [ 434.678027][ T11] syscall_exit_to_user_mode+0x168/0x370 [ 434.683702][ T11] do_syscall_64+0x100/0x230 [ 434.688312][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.694228][ T11] [ 434.696569][ T11] The buggy address belongs to the object at ffff888023675800 [ 434.696569][ T11] which belongs to the cache kmalloc-1k of size 1024 [ 434.710740][ T11] The buggy address is located 184 bytes inside of [ 434.710740][ T11] freed 1024-byte region [ffff888023675800, ffff888023675c00) [ 434.724667][ T11] [ 434.727001][ T11] The buggy address belongs to the physical page: [ 434.733532][ T11] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23670 [ 434.742338][ T11] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 434.750873][ T11] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 434.758454][ T11] page_type: 0xffffefff(slab) [ 434.763150][ T11] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 434.771761][ T11] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 434.780569][ T11] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 434.789243][ T11] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 434.797936][ T11] head: 00fff00000000003 ffffea00008d9c01 ffffffffffffffff 0000000000000000 [ 434.806624][ T11] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 434.815310][ T11] page dumped because: kasan: bad access detected [ 434.821875][ T11] page_owner tracks the page as allocated [ 434.827685][ T11] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5105, tgid 5105 (syz-executor), ts 66778596225, free_ts 66774086043 [ 434.849143][ T11] post_alloc_hook+0x1f3/0x230 [ 434.853933][ T11] get_page_from_freelist+0x2e4c/0x2f10 [ 434.859512][ T11] __alloc_pages_noprof+0x256/0x6c0 [ 434.864729][ T11] alloc_slab_page+0x5f/0x120 [ 434.869526][ T11] allocate_slab+0x5a/0x2f0 [ 434.874049][ T11] ___slab_alloc+0xcd1/0x14b0 [ 434.878749][ T11] __slab_alloc+0x58/0xa0 [ 434.883096][ T11] kmalloc_trace_noprof+0x1d5/0x2c0 [ 434.888325][ T11] afs_alloc_call+0x7c/0x370 [ 434.892968][ T11] afs_charge_preallocation+0xe4/0x2c0 [ 434.898464][ T11] afs_open_socket+0x459/0x610 [ 434.903259][ T11] afs_net_init+0x7b9/0x9a0 [ 434.907788][ T11] ops_init+0x359/0x610 [ 434.911961][ T11] setup_net+0x515/0xca0 [ 434.916231][ T11] copy_net_ns+0x4e2/0x7b0 [ 434.920713][ T11] create_new_namespaces+0x425/0x7b0 [ 434.926051][ T11] page last free pid 5097 tgid 5097 stack trace: [ 434.932397][ T11] free_unref_page+0xd22/0xea0 [ 434.937215][ T11] __put_partials+0xeb/0x130 [ 434.941848][ T11] put_cpu_partial+0x17c/0x250 [ 434.946666][ T11] __slab_free+0x2ea/0x3d0 [ 434.951124][ T11] qlist_free_all+0x9e/0x140 [ 434.956008][ T11] kasan_quarantine_reduce+0x14f/0x170 [ 434.961504][ T11] __kasan_slab_alloc+0x23/0x80 [ 434.966399][ T11] kmalloc_trace_noprof+0x132/0x2c0 [ 434.971664][ T11] ref_tracker_alloc+0x14b/0x490 [ 434.976643][ T11] netdev_queue_update_kobjects+0x186/0x5f0 [ 434.982720][ T11] netdev_register_kobject+0x265/0x320 [ 434.988226][ T11] register_netdevice+0x12c5/0x1b00 [ 434.993449][ T11] bond_newlink+0x3b/0x90 [ 434.997807][ T11] rtnl_newlink+0x1591/0x20a0 [ 435.002523][ T11] rtnetlink_rcv_msg+0x89b/0x1180 [ 435.007828][ T11] netlink_rcv_skb+0x1e3/0x430 [ 435.012609][ T11] [ 435.014952][ T11] Memory state around the buggy address: [ 435.020698][ T11] ffff888023675780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 435.028782][ T11] ffff888023675800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.036965][ T11] >ffff888023675880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.045074][ T11] ^ [ 435.050976][ T11] ffff888023675900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.059055][ T11] ffff888023675980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.067123][ T11] ================================================================== [ 435.075359][ T11] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 435.082766][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 435.092965][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 435.103065][ T11] Workqueue: l2tp l2tp_tunnel_del_work [ 435.108568][ T11] Call Trace: [ 435.112219][ T11] [ 435.115176][ T11] dump_stack_lvl+0x241/0x360 [ 435.119902][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.125151][ T11] ? __pfx__printk+0x10/0x10 [ 435.129876][ T11] ? vscnprintf+0x5d/0x90 [ 435.134417][ T11] panic+0x349/0x860 [ 435.138362][ T11] ? check_panic_on_warn+0x21/0xb0 [ 435.143616][ T11] ? __pfx_panic+0x10/0x10 [ 435.148356][ T11] ? mark_lock+0x9a/0x350 [ 435.152808][ T11] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 435.158747][ T11] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 435.165032][ T11] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 435.171431][ T11] ? print_report+0x502/0x550 [ 435.176156][ T11] check_panic_on_warn+0x86/0xb0 [ 435.181175][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 435.186760][ T11] end_report+0x77/0x160 [ 435.191039][ T11] kasan_report+0x154/0x180 [ 435.195593][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 435.200932][ T11] l2tp_tunnel_del_work+0xe5/0x330 [ 435.206164][ T11] ? process_scheduled_works+0x945/0x1830 [ 435.212173][ T11] process_scheduled_works+0xa2c/0x1830 [ 435.217813][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 435.223997][ T11] ? assign_work+0x364/0x3d0 [ 435.228687][ T11] worker_thread+0x86d/0xd50 [ 435.233307][ T11] ? __kthread_parkme+0x169/0x1d0 [ 435.238363][ T11] ? __pfx_worker_thread+0x10/0x10 [ 435.243491][ T11] kthread+0x2f0/0x390 [ 435.247591][ T11] ? __pfx_worker_thread+0x10/0x10 [ 435.252723][ T11] ? __pfx_kthread+0x10/0x10 [ 435.257343][ T11] ret_from_fork+0x4b/0x80 [ 435.261783][ T11] ? __pfx_kthread+0x10/0x10 [ 435.266427][ T11] ret_from_fork_asm+0x1a/0x30 [ 435.271224][ T11] [ 435.274669][ T11] Kernel Offset: disabled [ 435.279002][ T11] Rebooting in 86400 seconds..