last executing test programs: 48.016850353s ago: executing program 0 (id=544): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1feffff010901040000000000000000030000000900010073797a31000000000900010073797a300000000008000340000000090c0004800800014000000000040002000000028000000100010000000000034000000ec21800020000000280000001001a000100"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x21, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x3ffffe}, 0xc, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf251800000000000300", @ANYRES32=0x0, @ANYBLOB], 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x4840) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 40.202651785s ago: executing program 0 (id=544): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1feffff010901040000000000000000030000000900010073797a31000000000900010073797a300000000008000340000000090c0004800800014000000000040002000000028000000100010000000000034000000ec21800020000000280000001001a000100"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x21, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x3ffffe}, 0xc, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf251800000000000300", @ANYRES32=0x0, @ANYBLOB], 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x4840) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 31.631331752s ago: executing program 0 (id=544): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1feffff010901040000000000000000030000000900010073797a31000000000900010073797a300000000008000340000000090c0004800800014000000000040002000000028000000100010000000000034000000ec21800020000000280000001001a000100"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x21, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x3ffffe}, 0xc, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf251800000000000300", @ANYRES32=0x0, @ANYBLOB], 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x4840) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 22.244329035s ago: executing program 0 (id=544): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1feffff010901040000000000000000030000000900010073797a31000000000900010073797a300000000008000340000000090c0004800800014000000000040002000000028000000100010000000000034000000ec21800020000000280000001001a000100"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x21, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x3ffffe}, 0xc, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf251800000000000300", @ANYRES32=0x0, @ANYBLOB], 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x4840) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 12.664287725s ago: executing program 0 (id=544): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1feffff010901040000000000000000030000000900010073797a31000000000900010073797a300000000008000340000000090c0004800800014000000000040002000000028000000100010000000000034000000ec21800020000000280000001001a000100"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x21, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x3ffffe}, 0xc, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf251800000000000300", @ANYRES32=0x0, @ANYBLOB], 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x4840) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 4.303271867s ago: executing program 0 (id=544): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1feffff010901040000000000000000030000000900010073797a31000000000900010073797a300000000008000340000000090c0004800800014000000000040002000000028000000100010000000000034000000ec21800020000000280000001001a000100"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x21, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x3ffffe}, 0xc, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf251800000000000300", @ANYRES32=0x0, @ANYBLOB], 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x4840) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 3.421377296s ago: executing program 3 (id=1232): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000000)=0x59, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000022, 0x0) 3.011619562s ago: executing program 2 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x40040) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r5, @ANYBLOB="0100000000010000000003000000c80001800e0001006574683a766c616e30000000340002800800040008000000080001001a000000080001000b00000008000300a1030000080004000b000000080001001b00000024000280080002009a020000080002000100000008000200800e0000080001001d0000000d00010069623a76657468310000000038000400200001000a004e2200000000fe8000000000000000000000000000aa00ffffff1400020002004e21ac1414310000000000000000080003000f0000000c0001006574683a6e1d9d381ef57fa87230006f4fe1ebffe1d173ce481a5339c074b9415be127658e6d6c4c14ecd50508c42d549e5791149cf65f9234dc01"], 0xdc}}, 0x0) 2.861343863s ago: executing program 2 (id=1237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000480000850000008200000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.844438814s ago: executing program 2 (id=1238): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x14, 0xb3, 0x82, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000040), &(0x7f0000000100), 0x2}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) 2.73758376s ago: executing program 2 (id=1241): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xb1}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x96}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x57f8, 0x0, 0xfffffffc, 0x0, 0x54}, 0x9c) 2.482564728s ago: executing program 3 (id=1243): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0xc, &(0x7f0000000100)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0xc, &(0x7f0000000100)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 2.482248892s ago: executing program 4 (id=1244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async, rerun: 64) nanosleep(0x0, 0x0) (rerun: 64) 2.394024852s ago: executing program 3 (id=1246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x92, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001040)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x65fc8b7f3ddcd2ac}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc804}, 0x40040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x1, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x61, 0x30, 0x0, 0x30]}}, &(0x7f0000000140)=""/58, 0x2b, 0x3a, 0x0, 0x8, 0x0, @void, @value}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xc0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xac, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x622, 0xaa004f5122a5c575}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xc0}}, 0x0) 2.049868219s ago: executing program 1 (id=1248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x31, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x4, 0x1, ':,{\x00'}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x108, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5187}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x976}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000001}, 0x40100) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x1dc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8001}}}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8811}, 0x440408c0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="2e000300010003", 0x7) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x30000, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @loopback}}, {0x3e, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xd}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) 2.037849961s ago: executing program 4 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000480000850000008200000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.887799821s ago: executing program 4 (id=1250): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xa106}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xa106}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) (async) 1.831658009s ago: executing program 2 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x34, 0x0, &(0x7f0000000700)) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x38}}, 0x80) 1.786208515s ago: executing program 2 (id=1252): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000240)="8ec537450b57a7fc8b62de46a97fd1c54386ccfa82f97a0785fa3cb1a52d9356067e81a60738cb6913b3595b0b1cc6b08fa8d8cb620b9f0cdfe44f49b2da") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) sendmmsg(r5, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) socket$inet6(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002", @ANYRESOCT=r2, @ANYRES64=r6], 0x44}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000f14010000000000000000000d0045006f70615f766e6998e7908ecf"], 0x20}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xfffffffd, 0x4) 1.492937573s ago: executing program 3 (id=1253): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x5, 0x5, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x40854}, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) 1.467432514s ago: executing program 3 (id=1254): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5}}, @common=@inet=@ecn={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$kcm(0x2, 0x2, 0x0) (async) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) unshare(0x480) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001140)={0x0, "5dc1a0bba8c32c7490cbbc12fb88035c"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a80)={r5, 0x9, 0x0, [0x4, 0x101, 0x80, 0x9, 0x9], [0x9, 0x5, 0x928, 0x6, 0x8, 0x2, 0xfffffffffffffbff, 0x4, 0x5, 0xfffffffffffffffd, 0x5, 0x1b, 0x6, 0x2, 0xfffffffffffffff9, 0x0, 0x9, 0x3, 0x6, 0x84d8, 0x7e3, 0xffffffff, 0x8000, 0x8, 0x4, 0x9, 0xf8ba, 0x1fa5, 0x1000, 0x1, 0x8, 0x9, 0x1000000000, 0x4, 0x6, 0x1, 0x1, 0x7, 0x7, 0xfffffffffffffffe, 0x0, 0x9, 0x80000001, 0x2, 0x8, 0xff, 0x9, 0x9, 0x9, 0xfffffffffffffff2, 0x9, 0x0, 0x3, 0x638, 0x3, 0x7fff, 0x5, 0xfffffffffffffffc, 0x80000000, 0x1, 0x3, 0x78, 0xc, 0x3, 0x1000, 0x9, 0x3, 0x8, 0x5, 0x4, 0x46ad, 0x6, 0x7963b12e, 0x3, 0x4, 0xfffffffffffffeff, 0x6, 0x7, 0x100000001, 0x101, 0x5, 0x10001, 0x4, 0x6e73, 0x9, 0x3ff, 0x2, 0x1ff, 0x1f, 0x800, 0x9, 0xffffffffffffffff, 0x4, 0xd0, 0x0, 0x16d0, 0x7fffffffffffffff, 0xf0e4, 0x7, 0x81, 0x8, 0x6, 0x4, 0x6, 0x9, 0xa, 0x7f, 0x8, 0x3, 0x8, 0x8, 0x9, 0x3, 0x1, 0x1, 0x3, 0x80000000, 0x6, 0x9aa, 0x80000001, 0xffffffffffffffff]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100ffffffff00000000170000021c000692d20003003c7eb85c4d4013c9f5cbe73d21fc21b05e004000"], 0x30}}, 0x4000000) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x23c, r8, 0x200, 0x542, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcaf0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x23c, r8, 0x200, 0x542, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcaf0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x810) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000000000), 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r10}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r10}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000ec0)={0x4, 0x3, 0x1, 0x80000000, 0x5}, 0x14) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0f00000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704f4ffefffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0ff0800000053fe023af1000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c000180090001007856726d000000001c00028005000300020000000800014000000002080002400000000314"], 0x84}}, 0x0) 1.416930956s ago: executing program 4 (id=1255): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x100000000000000}}}, 0x57f8, 0x0, 0xfffffffc, 0x0, 0x54}, 0x9c) 1.354540531s ago: executing program 1 (id=1256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001439) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x2050a0c) (async) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x2000000b) (async) read(r3, 0x0, 0x0) close(r3) r4 = socket(0x40000000002, 0x3, 0x2) readv(r4, &(0x7f0000002300)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000040)=0xfffffffa, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x1d, r5, 0x2, {0x0, 0xff, 0x1}, 0xfd}, 0x18, &(0x7f0000000300)={&(0x7f0000000280)="77bb1360340e538d21db02672e00d209f3bb6030fd22bb2ebe4da69b607aac72324cd8ea7babeaa2624aea195821b6668ddd6ee73453ec5fcee787ad42d9a443c0f8e6bd607ff7cb87b5d882421d6ef695f1f58a82684d9dca59e52c0c6f7f9fea1b3774fe1ef89034292657228cd1b560fd4472527409", 0x77}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040845) (async) close(r2) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c9892f", 0xe}], 0x1) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.201144027s ago: executing program 1 (id=1257): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 1.105437084s ago: executing program 1 (id=1258): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000002c03f92c0000000000000000000000000000000000000000000000000000000000000000000069d9bf8d8d908fa8f9c9fc0000000000000000000000000000000800000000000000000009000000000000000000000000000008"], 0xb8}}, 0x0) 966.224791ms ago: executing program 1 (id=1259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f0000000100)=@tcp6=r1, 0x2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) 493.38102ms ago: executing program 4 (id=1260): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x4c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8924, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xe, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, 0x0, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000540)={'veth1_macvtap\x00', 0xc26d}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x700, 0x0, 0x4000000, {{0x12, 0x4, 0x0, 0x0, 0x48, 0xffbf, 0x0, 0x1, 0x2f, 0x0, @empty, @private, {[@lsrr={0x83, 0x27, 0xf8, [@private=0xa010102, @broadcast, @broadcast, @remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xf9, 0x3, 0x6, [{@loopback, 0x6}]}]}}}}}) (async) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) sendmsg$nl_generic(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x1f, 0x2, 0x70bd26, 0x25dfdbfd, {0xd}, [@generic, @typed={0x8, 0x119, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xd4, 0x0, 0x0, @pid=r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 132.20712ms ago: executing program 3 (id=1261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x9}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/236, 0x46, 0xec, 0x6, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x8}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x40c000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x8d, 0x40000009ffffa}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x57f8, 0x0, 0xfffffffc, 0x0, 0x54}, 0x9c) 2.508472ms ago: executing program 4 (id=1262): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff"], 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="4f2e444313737ee797d69ec8cf9a2bce", 0x10) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[], 0x38}, 0x2}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x63) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 1 (id=1263): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYBLOB="68000000cb9e5c9d882ddb3aad11027cefb081cc405d0963db88936d357c90fa2ea2161e0c5c75bdd0c30cda394c5a6397c3128748695e2d31c282120bc2608a4ab18b1caa31faeba84252cfbb43f35ff9ebc6c2eb1d18c6266e3feda695ad21b844a382dabe58266747bfa5a0ea9df31eb997d9ca90e206d3710d0a9a7e0d0c8808952791d5ece15ab4ff2b640f965db85b3cbe98145f13be8c9e62843495290a78ed58bb3b2b336613e44740272dc941925cfc0023094ed2ed95a4d094d50086c4ac4d2f90b2c6", @ANYRES16=r3, @ANYBLOB="040027bd7000ffdbdf25200000000c000600020000000100000034002d800500010008000000050001000b000000080002000000000005000100090000000800020001000000050004000100000014002d8005000400000000000800030008000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c890) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000000000000200002bcd9b91940157c475c5e000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000075015dbccb6a21e200000000"], 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet(0x2, 0x4000000805, 0x0) (async) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0x1}, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, r11, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000700)={"3cca57f3036d0e4d4d6bd879d248c6df", r10, r11, {0x8, 0x3}, {0xb, 0x1000}, 0x800, [0x8, 0x7, 0x0, 0x7fffffffffffffff, 0x80000000, 0x6, 0xc, 0x0, 0x80, 0x0, 0x10000, 0x0, 0x9, 0x8001, 0x4, 0xffffffff80000000]}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000140)="d3d850055e10d9850d44da85b000bf1f", 0x10) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r12, 0x8983, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing, @dstopts={0x6c}]}}}}}}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) kernel console output (not intermixed with test programs): age leads to an empty skb [ 68.204340][ T6186] netlink: 'syz.4.68': attribute type 1 has an invalid length. [ 68.248381][ T6186] netlink: 'syz.4.68': attribute type 2 has an invalid length. [ 68.460375][ T6195] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 68.634698][ T6204] hsr_slave_0 (unregistering): left promiscuous mode [ 68.680052][ T6208] 0ªX¹¦À: renamed from caif0 [ 68.713463][ T6208] 0ªX¹¦À: entered allmulticast mode [ 68.742571][ T6208] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 68.798020][ T6209] 1ªX¹¦À: renamed from 60ªX¹¦À [ 68.886507][ T6209] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 68.994586][ T6220] Cannot find del_set index 4 as target [ 69.275309][ T5152] Bluetooth: hci2: command 0x0401 tx timeout [ 69.531137][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.769789][ T6264] nbd: device at index 3 is going down [ 69.808738][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.825962][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.882610][ T6269] pim6reg: entered allmulticast mode [ 70.085412][ T6280] netlink: 'syz.4.98': attribute type 7 has an invalid length. [ 70.292917][ T5890] IPVS: starting estimator thread 0... [ 70.407124][ T6293] IPVS: using max 21 ests per chain, 50400 per kthread [ 70.780062][ T6339] dvmrp8: entered allmulticast mode [ 70.790078][ T6339] dvmrp8: left allmulticast mode [ 70.948850][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.956057][ T6353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.187294][ T6370] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 71.200148][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.213723][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.221658][ T6376] sctp: [Deprecated]: syz.1.113 (pid 6376) Use of int in maxseg socket option. [ 71.221658][ T6376] Use struct sctp_assoc_value instead [ 71.222163][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.248137][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.300374][ T6375] netlink: 'syz.4.114': attribute type 10 has an invalid length. [ 71.315558][ T6375] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 71.325628][ T6375] team0: Failed to send options change via netlink (err -105) [ 71.333309][ T6375] team0: Port device netdevsim0 added [ 71.341503][ T6379] netlink: 'syz.4.114': attribute type 10 has an invalid length. [ 71.356058][ T6379] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 71.370415][ T6379] team0: Failed to send options change via netlink (err -105) [ 71.378304][ T6379] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 71.389811][ T6379] team0: Port device netdevsim0 removed [ 71.400047][ T6379] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 71.502723][ T6383] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 71.521996][ T6383] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 71.539432][ T6386] __nla_validate_parse: 25 callbacks suppressed [ 71.539448][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.117'. [ 71.570988][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.580469][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.686087][ T6394] IPv6: sit1: Disabled Multicast RS [ 71.719381][ T6394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.120'. [ 71.994581][ T6414] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.057944][ T6416] bridge_slave_0: entered promiscuous mode [ 72.063823][ T6416] bridge_slave_0: entered allmulticast mode [ 72.121673][ T6421] syz_tun: entered promiscuous mode [ 72.144829][ T6421] batadv_slave_0: entered promiscuous mode [ 72.201472][ T6426] syz.4.130 uses obsolete (PF_INET,SOCK_PACKET) [ 72.563455][ T6448] netlink: 'syz.3.136': attribute type 49 has an invalid length. [ 72.715524][ T6456] dvmrp5: entered allmulticast mode [ 72.731901][ T6457] dvmrp5: left allmulticast mode [ 72.984432][ T6470] vxcan2: entered allmulticast mode [ 73.119376][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 73.151096][ T6482] dccp_invalid_packet: P.Data Offset(0) too small [ 73.363542][ T6496] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.384315][ T6497] ip6gretap0: entered promiscuous mode [ 73.401339][ T6496] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.419450][ T6497] batadv_slave_0: entered promiscuous mode [ 73.447125][ T6497] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 73.469488][ T6497] Cannot create hsr debugfs directory [ 73.614935][ T6518] GUP no longer grows the stack in syz.3.160 (6518): 20006000-2000a000 (20005000) [ 73.624679][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.3.160 Not tainted 6.12.0-rc5-syzkaller-01203-g720d33143276 #0 [ 73.635305][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.645395][ T6518] Call Trace: [ 73.648679][ T6518] [ 73.651608][ T6518] dump_stack_lvl+0x241/0x360 [ 73.656302][ T6518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.661499][ T6518] ? __pfx__printk+0x10/0x10 [ 73.666088][ T6518] ? find_vma+0xf9/0x170 [ 73.670340][ T6518] ? vma_is_secretmem+0xd/0x50 [ 73.675105][ T6518] ? check_vma_flags+0x52b/0x5a0 [ 73.680042][ T6518] __get_user_pages+0x4385/0x49e0 [ 73.685068][ T6518] ? __kernel_text_address+0xd/0x40 [ 73.690278][ T6518] ? mark_lock+0x9a/0x360 [ 73.694635][ T6518] ? __pfx___get_user_pages+0x10/0x10 [ 73.700037][ T6518] ? __pfx_lock_acquire+0x10/0x10 [ 73.705079][ T6518] __gup_longterm_locked+0x3ba/0x17d0 [ 73.710464][ T6518] pin_user_pages+0x137/0x1f0 [ 73.715144][ T6518] ? __pfx_pin_user_pages+0x10/0x10 [ 73.720340][ T6518] ? __kmalloc_node_noprof+0x247/0x440 [ 73.725805][ T6518] xdp_umem_create+0x978/0xf30 [ 73.730581][ T6518] xsk_setsockopt+0x732/0x950 [ 73.735258][ T6518] ? __pfx_xsk_setsockopt+0x10/0x10 [ 73.740462][ T6518] ? __pfx_lock_acquire+0x10/0x10 [ 73.745493][ T6518] ? __fget_files+0x29/0x470 [ 73.750078][ T6518] ? aa_sock_opt_perm+0x79/0x120 [ 73.755019][ T6518] ? __pfx_xsk_setsockopt+0x10/0x10 [ 73.760211][ T6518] do_sock_setsockopt+0x3af/0x720 [ 73.765236][ T6518] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 73.770780][ T6518] ? __fget_files+0x29/0x470 [ 73.775370][ T6518] ? __fget_files+0x3f3/0x470 [ 73.780041][ T6518] ? __fget_files+0x29/0x470 [ 73.784632][ T6518] __sys_setsockopt+0x1a2/0x250 [ 73.789486][ T6518] __x64_sys_setsockopt+0xb5/0xd0 [ 73.794509][ T6518] do_syscall_64+0xf3/0x230 [ 73.799009][ T6518] ? clear_bhb_loop+0x35/0x90 [ 73.803684][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.809595][ T6518] RIP: 0033:0x7f117017e719 [ 73.814029][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.833632][ T6518] RSP: 002b:00007f1171029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 73.842043][ T6518] RAX: ffffffffffffffda RBX: 00007f1170335f80 RCX: 00007f117017e719 [ 73.850008][ T6518] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 73.858061][ T6518] RBP: 00007f11701f139e R08: 0000000000000020 R09: 0000000000000000 [ 73.866023][ T6518] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000 [ 73.873990][ T6518] R13: 0000000000000000 R14: 00007f1170335f80 R15: 00007ffcb344cb28 [ 73.881967][ T6518] [ 73.947412][ T6522] rdma_op ffff88805fb971f0 conn xmit_rdma 0000000000000000 [ 73.965732][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 74.297230][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 75.154969][ T6603] netlink: 'syz.2.183': attribute type 5 has an invalid length. [ 75.178286][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 75.689935][ T6641] siw: device registration error -23 [ 75.710440][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.195'. [ 75.815234][ T6656] xt_addrtype: ipv6 does not support BROADCAST matching [ 75.834459][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 75.847238][ T6656] netlink: 388 bytes leftover after parsing attributes in process `syz.3.198'. [ 75.886269][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'. [ 75.914248][ T6652] ax25_connect(): syz.4.197 uses autobind, please contact jreuter@yaina.de [ 75.924163][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 76.240119][ T6673] netlink: 'syz.4.203': attribute type 1 has an invalid length. [ 76.264077][ T6673] netlink: 'syz.4.203': attribute type 2 has an invalid length. [ 76.411980][ T6675] netlink: 'syz.4.204': attribute type 7 has an invalid length. [ 76.698215][ T969] cfg80211: failed to load regulatory.db [ 76.961153][ T6690] macvtap1: entered promiscuous mode [ 76.973161][ T6690] vlan0: entered promiscuous mode [ 77.146682][ T6711] syzkaller0: entered promiscuous mode [ 77.159763][ T6711] syzkaller0: entered allmulticast mode [ 78.077589][ T6749] __nla_validate_parse: 3 callbacks suppressed [ 78.077609][ T6749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.219'. [ 79.169450][ T6769] trusted_key: syz.3.222 sent an empty control message without MSG_MORE. [ 79.234445][ T6769] sctp: [Deprecated]: syz.3.222 (pid 6769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.234445][ T6769] Use struct sctp_sack_info instead [ 79.304058][ T6776] ipt_REJECT: ECHOREPLY no longer supported. [ 79.307431][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 79.389726][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.229'. [ 79.939420][ T6816] warning: `syz.3.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.142159][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 80.186158][ T6828] IPv6: Can't replace route, no match found [ 80.204263][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.243'. [ 80.336181][ T6851] netlink: 'syz.4.247': attribute type 33 has an invalid length. [ 80.511642][ T6862] bridge_slave_0: left allmulticast mode [ 80.518329][ T6862] bridge_slave_0: left promiscuous mode [ 80.524168][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.549357][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 80.575920][ T6862] bridge_slave_1: left allmulticast mode [ 80.586540][ T6862] bridge_slave_1: left promiscuous mode [ 80.608404][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.630443][ T6862] bond0: (slave bond_slave_0): Releasing backup interface [ 80.640892][ T6862] bond0: (slave bond_slave_1): Releasing backup interface [ 80.663627][ T6862] team0: Port device team_slave_0 removed [ 80.692605][ T6862] team0: Port device team_slave_1 removed [ 80.705749][ T6874] wg2: entered promiscuous mode [ 80.718132][ T6874] team0: Port device wg2 added [ 80.723458][ T6879] tipc: Started in network mode [ 80.734362][ T6879] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 80.754565][ T6879] tipc: Enabled bearer , priority 10 [ 80.827038][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.250'. [ 81.530484][ T6921] Illegal XDP return value 1450526644 on prog (id 71) dev N/A, expect packet loss! [ 81.742162][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 81.768393][ T6702] tipc: Node number set to 15444650 [ 81.969771][ T6951] Cannot find del_set index 286 as target [ 81.987820][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.269'. [ 83.646353][ T6996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.283'. [ 83.737906][ T7002] hsr0: entered promiscuous mode [ 83.746549][ T7001] hsr0: left promiscuous mode [ 83.827425][ T7004] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 83.848168][ T7003] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 84.018421][ T7026] x_tables: ip6_tables: HL.0 target: invalid size 8 (kernel) != (user) 0 [ 84.194238][ T7024] netlink: 'syz.1.293': attribute type 10 has an invalid length. [ 84.275481][ T7024] team0: Device ipvlan1 failed to register rx_handler [ 84.317614][ T7027] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.326608][ T7027] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.335623][ T7027] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.344795][ T7027] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.356305][ T7027] vxlan0: entered promiscuous mode [ 84.361691][ T7027] vxlan0: entered allmulticast mode [ 84.380663][ T7027] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.389831][ T7027] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.398826][ T7027] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.408022][ T7027] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.500449][ T7052] netlink: 72 bytes leftover after parsing attributes in process `syz.0.296'. [ 84.541139][ T7052] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 84.621154][ T7052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.688877][ T7055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.739954][ T7055] bond1: (slave batadv1): making interface the new active one [ 84.782609][ T7073] netlink: 2227 bytes leftover after parsing attributes in process `syz.2.303'. [ 84.808570][ T7055] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 85.079570][ T7088] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 85.191625][ T7097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.240475][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 85.309690][ T7113] netlink: 88 bytes leftover after parsing attributes in process `syz.4.315'. [ 86.157379][ T7160] netlink: 'syz.4.329': attribute type 12 has an invalid length. [ 86.167156][ T7160] netlink: 120 bytes leftover after parsing attributes in process `syz.4.329'. [ 86.206323][ T7162] netlink: 'syz.4.329': attribute type 12 has an invalid length. [ 86.226379][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 86.233275][ T7162] netlink: 120 bytes leftover after parsing attributes in process `syz.4.329'. [ 86.541334][ T7196] netlink: 68 bytes leftover after parsing attributes in process `syz.1.337'. [ 87.252074][ T7224] netlink: 'syz.1.344': attribute type 3 has an invalid length. [ 87.335308][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 87.361446][ T7234] tipc: Enabled bearer , priority 10 [ 87.799860][ T7259] netlink: 'syz.1.353': attribute type 4 has an invalid length. [ 87.894774][ T7262] Bluetooth: MGMT ver 1.23 [ 88.778929][ T7303] netlink: 'syz.4.363': attribute type 12 has an invalid length. [ 88.845289][ T7308] pimreg: entered allmulticast mode [ 88.860096][ T7308] pimreg: left allmulticast mode [ 88.871041][ T7299] netlink: 'syz.1.364': attribute type 1 has an invalid length. [ 88.897316][ T7299] __nla_validate_parse: 6 callbacks suppressed [ 88.897332][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 88.951480][ T7317] netlink: 'syz.4.368': attribute type 5 has an invalid length. [ 89.228968][ T7335] ip6gre1: entered promiscuous mode [ 89.234418][ T7335] ip6gre1: entered allmulticast mode [ 89.276498][ T7336] netlink: 68 bytes leftover after parsing attributes in process `syz.4.374'. [ 89.901956][ T7367] netlink: 136 bytes leftover after parsing attributes in process `syz.3.383'. [ 89.967476][ T5152] Bluetooth: hci0: command 0x0401 tx timeout [ 89.973626][ T5847] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 90.046269][ T7379] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 90.057258][ T7379] netlink: 'syz.4.388': attribute type 2 has an invalid length. [ 90.068695][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 90.125053][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.388'. [ 90.211477][ T7390] tipc: Started in network mode [ 90.216402][ T7390] tipc: Node identity fec0000000000000400000000000002d, cluster identity 4711 [ 90.225955][ T7390] tipc: Enabling of bearer rejected, failed to enable media [ 90.576354][ T7429] netlink: 460 bytes leftover after parsing attributes in process `syz.3.401'. [ 90.621607][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 90.638739][ T7429] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 90.667198][ T7429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.401'. [ 90.671948][ T7431] --map-set only usable from mangle table [ 90.698780][ T7431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.403'. [ 90.751098][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 91.439841][ T6705] IPVS: starting estimator thread 0... [ 91.544217][ T7492] IPVS: using max 20 ests per chain, 48000 per kthread [ 91.700202][ T7504] netlink: 'syz.3.424': attribute type 11 has an invalid length. [ 93.582378][ T7572] bridge1: entered promiscuous mode [ 93.587991][ T7572] bridge1: entered allmulticast mode [ 93.593676][ T7572] team0: Device bridge1 is of different type [ 94.225698][ T7604] __nla_validate_parse: 10 callbacks suppressed [ 94.225718][ T7604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.446'. [ 94.277722][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 94.394602][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 94.452971][ T7625] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 94.535469][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 94.578134][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 94.617525][ T7631] netlink: 56 bytes leftover after parsing attributes in process `syz.4.455'. [ 94.930939][ T7665] tipc: Started in network mode [ 94.935946][ T7665] tipc: Node identity fec0000000000000400000000000002d, cluster identity 4711 [ 94.945362][ T7665] tipc: Enabling of bearer rejected, failed to enable media [ 94.984623][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 95.159128][ T7680] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.467'. [ 95.159622][ T7675] vlan2: entered promiscuous mode [ 95.174700][ T7675] team0: Device vlan2 is of different type [ 95.185716][ T7680] openvswitch: netlink: ufid size 26 bytes exceeds the range (1, 16) [ 95.206971][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 95.226804][ T7680] openvswitch: netlink: Message has 76 unknown bytes. [ 95.255893][ T7681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.606178][ T7715] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 96.001634][ T7737] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53675 - 0 [ 96.011715][ T7737] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53675 - 0 [ 96.021548][ T7737] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53675 - 0 [ 96.030856][ T7737] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53675 - 0 [ 96.040122][ T7737] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 53922 - 0 [ 96.049323][ T7737] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 53922 - 0 [ 96.058451][ T7737] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 53922 - 0 [ 96.067720][ T7737] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 53922 - 0 [ 96.076879][ T7737] geneve2: entered promiscuous mode [ 96.082720][ T7737] geneve2: entered allmulticast mode [ 96.212307][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 96.593620][ T7781] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 96.759341][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 96.763081][ T7791] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20001 [ 96.836836][ T7791] raw_sendmsg: syz.0.497 forgot to set AF_INET. Fix it! [ 96.913150][ T7800] netem: change failed [ 96.960895][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.081320][ T7810] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 50099 - 0 [ 97.095378][ T7810] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 50099 - 0 [ 97.098853][ T7814] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 97.107381][ T7810] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 50099 - 0 [ 97.122023][ T7810] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 50099 - 0 [ 97.131165][ T7810] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 57354 - 0 [ 97.140530][ T7810] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 57354 - 0 [ 97.157025][ T7810] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 57354 - 0 [ 97.165930][ T7810] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 57354 - 0 [ 97.179875][ T7810] geneve2: entered promiscuous mode [ 97.196343][ T7810] geneve2: entered allmulticast mode [ 97.745408][ T7853] ip6gretap2: entered promiscuous mode [ 97.762496][ T7853] ip6gretap2: entered allmulticast mode [ 98.123834][ T7875] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 98.419431][ T7881] netlink: 'syz.3.527': attribute type 10 has an invalid length. [ 98.430034][ T7881] bridge0: port 3(syz_tun) entered blocking state [ 98.436595][ T7881] bridge0: port 3(syz_tun) entered disabled state [ 98.447225][ T7881] syz_tun: entered allmulticast mode [ 98.454251][ T7881] syz_tun: entered promiscuous mode [ 98.463701][ T7881] bridge0: port 3(syz_tun) entered blocking state [ 98.470380][ T7881] bridge0: port 3(syz_tun) entered forwarding state [ 98.751563][ T7908] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 98.761584][ T7900] bridge0: entered promiscuous mode [ 98.780662][ T7900] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 98.828421][ T7901] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 99.312774][ T1104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.529192][ T1104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.553151][ T7934] debugfs: Directory 'netdev:nicvf0' with parent 'phy9' already present! [ 99.596845][ T1104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.635755][ T7943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.662753][ T7945] bridge1: entered allmulticast mode [ 99.783141][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.795585][ T1104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.798326][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.823564][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.832990][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.843104][ T5152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.844662][ T7949] __nla_validate_parse: 8 callbacks suppressed [ 99.844677][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 99.867575][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.946306][ T7949] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 99.980120][ T7949] netlink: 224 bytes leftover after parsing attributes in process `syz.1.549'. [ 100.318022][ T1104] bond0 (unregistering): Released all slaves [ 100.409006][ T1104] bond1 (unregistering): (slave batadv1): Releasing active interface [ 100.421507][ T1104] bond1 (unregistering): Released all slaves [ 100.653419][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.555'. [ 100.762147][ T7979] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 100.789727][ T7985] ip6t_rpfilter: unknown options [ 100.876206][ T7988] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 100.939663][ T1104] hsr_slave_1: left promiscuous mode [ 100.988344][ T1104] veth1_macvtap: left promiscuous mode [ 100.996816][ T1104] veth0_macvtap: left promiscuous mode [ 101.008869][ T1104] veth1_vlan: left promiscuous mode [ 101.014528][ T1104] veth0_vlan: left promiscuous mode [ 101.173404][ T1104] pim6reg (unregistering): left allmulticast mode [ 101.787341][ T7950] chnl_net:caif_netlink_parms(): no params data found [ 101.978703][ T5152] Bluetooth: hci1: command tx timeout [ 102.066864][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.101360][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.111316][ T7950] bridge_slave_0: entered allmulticast mode [ 102.123853][ T7950] bridge_slave_0: entered promiscuous mode [ 102.150250][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.163618][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.175264][ T7950] bridge_slave_1: entered allmulticast mode [ 102.188332][ T7950] bridge_slave_1: entered promiscuous mode [ 102.256635][ T7950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.271372][ T7950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.357684][ T8021] netlink: 288 bytes leftover after parsing attributes in process `syz.3.568'. [ 102.381697][ T7950] team0: Port device team_slave_0 added [ 102.389553][ T7950] team0: Port device team_slave_1 added [ 102.424472][ T1104] IPVS: stop unused estimator thread 0... [ 102.425685][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 102.431966][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.456787][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.495809][ T7950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.557330][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.570826][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.607091][ T7950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.663218][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 102.777042][ T8043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'. [ 102.952525][ T7950] hsr_slave_0: entered promiscuous mode [ 102.963153][ T7950] hsr_slave_1: entered promiscuous mode [ 102.970036][ T7950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.982156][ T7950] Cannot create hsr debugfs directory [ 103.641302][ T7950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.734305][ T7950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.780003][ T7950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.809223][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 103.833929][ T7950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.992453][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.053494][ T5152] Bluetooth: hci1: command tx timeout [ 104.101158][ T7950] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.115681][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.122880][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.159392][ T7950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.170061][ T7950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.267424][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.274576][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.356194][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.3.588'. [ 104.436602][ T8104] netlink: 'syz.2.586': attribute type 30 has an invalid length. [ 104.553220][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.589'. [ 104.566790][ T8111] vlan2: entered promiscuous mode [ 104.587022][ T8111] bridge0: entered promiscuous mode [ 104.615423][ T7950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.822477][ T7950] veth0_vlan: entered promiscuous mode [ 104.852634][ T7950] veth1_vlan: entered promiscuous mode [ 104.862254][ T8118] netlink: 'syz.2.592': attribute type 10 has an invalid length. [ 104.986133][ T7950] veth0_macvtap: entered promiscuous mode [ 105.012096][ T7950] veth1_macvtap: entered promiscuous mode [ 105.027281][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.038058][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.048132][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.058648][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.069981][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.080470][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.091176][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.101063][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.111575][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.122818][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.139612][ T8126] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 105.241259][ T7950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.250484][ T7950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.259687][ T7950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.268727][ T7950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.372414][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.376748][ T8135] bridge0: port 3(gretap0) entered blocking state [ 105.381056][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.394760][ T8135] bridge0: port 3(gretap0) entered disabled state [ 105.406009][ T8135] gretap0: entered allmulticast mode [ 105.415241][ T8135] gretap0: entered promiscuous mode [ 105.422174][ T8135] bridge0: port 3(gretap0) entered blocking state [ 105.429174][ T8135] bridge0: port 3(gretap0) entered forwarding state [ 105.444326][ T8137] gretap0: left allmulticast mode [ 105.450687][ T8137] gretap0: left promiscuous mode [ 105.456386][ T8137] bridge0: port 3(gretap0) entered disabled state [ 105.560965][ T6863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.571131][ T6863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.737516][ T8147] xt_ipcomp: unknown flags 12 [ 105.933685][ T8154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.606'. [ 105.944411][ T8154] netlink: 'syz.4.606': attribute type 1 has an invalid length. [ 106.021984][ T8164] batadv_slave_1: entered promiscuous mode [ 106.038210][ T8163] batadv_slave_1: left promiscuous mode [ 106.194167][ T8180] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 106.465548][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.617'. [ 106.621216][ T8209] rdma_op ffff88807a62c1f0 conn xmit_rdma 0000000000000000 [ 106.697052][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'. [ 106.836568][ T8213] tap0: tun_chr_ioctl cmd 1074025681 [ 106.927913][ T29] audit: type=1107 audit(1730981014.873:2): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='§' [ 106.980897][ T8222] netlink: 44 bytes leftover after parsing attributes in process `syz.2.625'. [ 106.993373][ T8222] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 107.021812][ T8222] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 107.284946][ T8235] nbd: socks must be embedded in a SOCK_ITEM attr [ 107.495303][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 107.654782][ T8243] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 107.672802][ T8243] netlink: 56 bytes leftover after parsing attributes in process `syz.1.632'. [ 107.718264][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 107.737848][ T8243] bridge_slave_1: left allmulticast mode [ 107.743534][ T8243] bridge_slave_1: left promiscuous mode [ 107.787289][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.854663][ T8243] bridge_slave_0: left allmulticast mode [ 107.880304][ T8243] bridge_slave_0: left promiscuous mode [ 107.886078][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.148050][ T6863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.458899][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.475429][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.477271][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.484523][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.500851][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.508455][ T5152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.516759][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.782235][ T8278] netlink: 'syz.3.642': attribute type 11 has an invalid length. [ 108.914058][ T6863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.955503][ T8279] netlink: 136 bytes leftover after parsing attributes in process `syz.3.642'. [ 108.987487][ T8262] chnl_net:caif_netlink_parms(): no params data found [ 109.103152][ T6863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.228686][ T6863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.349380][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.356514][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.394233][ T8262] bridge_slave_0: entered allmulticast mode [ 109.420005][ T8262] bridge_slave_0: entered promiscuous mode [ 109.438984][ T8262] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.454892][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.470940][ T8262] bridge_slave_1: entered allmulticast mode [ 109.499354][ T8262] bridge_slave_1: entered promiscuous mode [ 109.515617][ T8306] netlink: 47 bytes leftover after parsing attributes in process `syz.2.649'. [ 109.663602][ T8262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.665291][ T8304] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.725032][ T8262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.877282][ T8262] team0: Port device team_slave_0 added [ 109.889465][ T6863] bridge_slave_1: left allmulticast mode [ 109.895145][ T6863] bridge_slave_1: left promiscuous mode [ 109.919042][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.942762][ T6863] bridge_slave_0: left allmulticast mode [ 109.949123][ T6863] bridge_slave_0: left promiscuous mode [ 109.955981][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.429365][ T6863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.444566][ T6863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.462516][ T6863] bond0 (unregistering): Released all slaves [ 110.474142][ T8262] team0: Port device team_slave_1 added [ 110.483536][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 110.529851][ T5152] Bluetooth: hci1: command tx timeout [ 110.865367][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.891989][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.935889][ T8262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.959104][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.969744][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.043534][ T8262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.103222][ T8382] xt_TPROXY: Can be used only with -p tcp or -p udp [ 111.182582][ T8262] hsr_slave_0: entered promiscuous mode [ 111.189715][ T8262] hsr_slave_1: entered promiscuous mode [ 111.196102][ T8262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.212341][ T8262] Cannot create hsr debugfs directory [ 111.229873][ T6863] hsr_slave_0: left promiscuous mode [ 111.235799][ T6863] hsr_slave_1: left promiscuous mode [ 111.242254][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.250447][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.263538][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.271791][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.289510][ T6863] veth1_macvtap: left promiscuous mode [ 111.295129][ T6863] veth0_macvtap: left promiscuous mode [ 111.301018][ T6863] veth1_vlan: left promiscuous mode [ 111.306380][ T6863] veth0_vlan: left promiscuous mode [ 111.713437][ T6863] team0 (unregistering): Port device team_slave_1 removed [ 111.750903][ T6863] team0 (unregistering): Port device team_slave_0 removed [ 112.613556][ T5847] Bluetooth: hci1: command tx timeout [ 112.999402][ T8417] __nla_validate_parse: 1 callbacks suppressed [ 112.999422][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 113.083122][ T8417] xt_CT: No such helper "snmp" [ 113.162741][ T8262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.185093][ T8262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.198532][ T8262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.213406][ T8262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.307899][ T8421] vlan3: entered promiscuous mode [ 113.312986][ T8421] vlan3: entered allmulticast mode [ 113.366748][ T8262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.391520][ T8262] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.425247][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.432449][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.461850][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.469051][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.683483][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 113.700965][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 113.727245][ T8437] netlink: 44 bytes leftover after parsing attributes in process `syz.3.680'. [ 113.899545][ T8442] bridge0: port 4(ipvlan1) entered blocking state [ 113.909863][ T8442] bridge0: port 4(ipvlan1) entered disabled state [ 113.916576][ T8442] ipvlan1: entered allmulticast mode [ 113.924750][ T8442] bridge0: entered allmulticast mode [ 113.933809][ T8442] ipvlan1: left allmulticast mode [ 113.944068][ T8442] bridge0: left allmulticast mode [ 113.985995][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 114.285404][ T8453] team0 (unregistering): Port device team_slave_0 removed [ 114.325878][ T8453] team0 (unregistering): Port device team_slave_1 removed [ 114.397610][ T8437] bridge0: port 4(ipvlan1) entered blocking state [ 114.411648][ T8437] bridge0: port 4(ipvlan1) entered disabled state [ 114.424037][ T8437] ipvlan1: entered allmulticast mode [ 114.429605][ T8437] bridge0: entered allmulticast mode [ 114.466320][ T8437] ipvlan1: left allmulticast mode [ 114.475149][ T8437] bridge0: left allmulticast mode [ 114.600733][ T8262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.672315][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.680'. [ 114.709648][ T5847] Bluetooth: hci1: command tx timeout [ 114.803504][ T8262] veth0_vlan: entered promiscuous mode [ 114.832867][ T8475] IPVS: set_ctl: invalid protocol: 60 172.30.0.3:20000 [ 114.885264][ T8262] veth1_vlan: entered promiscuous mode [ 115.104736][ T8482] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 115.224721][ T8262] veth0_macvtap: entered promiscuous mode [ 115.266241][ T8262] veth1_macvtap: entered promiscuous mode [ 115.346084][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.401160][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.444663][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.455910][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.473869][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.519370][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.563102][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.595079][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.615497][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.636283][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.654371][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 115.673280][ T8262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.685178][ T8262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.695273][ T8262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.705117][ T8262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.864462][ T6863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.882785][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 115.896158][ T6863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.912258][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 115.950323][ T6863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.971086][ T6863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.103150][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.702'. [ 116.138369][ T8526] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 116.228186][ T8526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.277290][ T8531] bond3: (slave bridge1): making interface the new active one [ 116.285803][ T8531] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 116.319611][ T8526] vlan3: entered promiscuous mode [ 116.325040][ T8526] bond3: entered promiscuous mode [ 116.332928][ T8526] bridge1: entered promiscuous mode [ 116.337872][ T8562] netlink: 'syz.4.706': attribute type 8 has an invalid length. [ 116.338829][ T8526] vlan3: entered allmulticast mode [ 116.352845][ T8526] bond3: entered allmulticast mode [ 116.358806][ T8526] bridge1: entered allmulticast mode [ 116.827234][ T1104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.876704][ T8589] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 117.084207][ T8599] netlink: 'syz.2.718': attribute type 4 has an invalid length. [ 117.145581][ T8602] IPVS: set_ctl: invalid protocol: 135 172.20.20.13:20004 [ 117.190966][ T1104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.310780][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.321121][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.329843][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.347106][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.356272][ T5152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.371017][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.389622][ T1104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.464737][ T8614] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 117.500403][ T1104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.531238][ T8619] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20003 [ 117.831720][ T1104] bridge_slave_1: left allmulticast mode [ 117.843477][ T1104] bridge_slave_1: left promiscuous mode [ 117.853643][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.883944][ T1104] bridge_slave_0: left allmulticast mode [ 117.890132][ T1104] bridge_slave_0: left promiscuous mode [ 117.896042][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.268920][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.281334][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.292828][ T1104] bond0 (unregistering): Released all slaves [ 118.305548][ T8651] tipc: Enabled bearer , priority 18 [ 118.342336][ T8611] chnl_net:caif_netlink_parms(): no params data found [ 118.442201][ T8669] ax25_connect(): syz.4.735 uses autobind, please contact jreuter@yaina.de [ 118.551277][ T8611] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.592245][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.602776][ T8611] bridge_slave_0: entered allmulticast mode [ 118.617511][ T8611] bridge_slave_0: entered promiscuous mode [ 118.659639][ T8611] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.672649][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.690716][ T8611] bridge_slave_1: entered allmulticast mode [ 118.699170][ T8611] bridge_slave_1: entered promiscuous mode [ 118.812077][ T1104] hsr_slave_0: left promiscuous mode [ 118.831120][ T1104] hsr_slave_1: left promiscuous mode [ 118.844579][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.863724][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.879986][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.897104][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.967387][ T1104] veth1_macvtap: left promiscuous mode [ 118.973012][ T1104] veth0_macvtap: left promiscuous mode [ 118.988305][ T1104] veth1_vlan: left promiscuous mode [ 119.004185][ T1104] veth0_vlan: left promiscuous mode [ 119.103071][ T8549] IPVS: starting estimator thread 0... [ 119.118264][ T8702] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 119.217048][ T8703] IPVS: using max 20 ests per chain, 48000 per kthread [ 119.407867][ T5152] Bluetooth: hci1: command tx timeout [ 119.545438][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 119.586166][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 119.934376][ T8611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.946109][ T8611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.969703][ T8704] __nla_validate_parse: 6 callbacks suppressed [ 119.969720][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.743'. [ 119.991002][ T8704] gretap1: entered promiscuous mode [ 120.114225][ T8611] team0: Port device team_slave_0 added [ 120.125784][ T8611] team0: Port device team_slave_1 added [ 120.279361][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.290473][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.317548][ T8611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.360004][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.377768][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.428053][ T8611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.526546][ T8734] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.751'. [ 120.617441][ T8743] xt_policy: output policy not valid in PREROUTING and INPUT [ 120.680528][ T8611] hsr_slave_0: entered promiscuous mode [ 120.690764][ T8611] hsr_slave_1: entered promiscuous mode [ 120.712597][ T8611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.724801][ T8611] Cannot create hsr debugfs directory [ 120.796172][ T8750] netlink: 312 bytes leftover after parsing attributes in process `syz.3.757'. [ 120.973363][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 121.026290][ T8750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.066881][ T8768] bond0: (slave bond_slave_0): Releasing backup interface [ 121.084183][ T8768] bond0: (slave bond_slave_1): Releasing backup interface [ 121.155148][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.164755][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.180892][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.192522][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.250094][ T8554] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 121.250114][ T8554] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.283362][ T8775] x_tables: duplicate underflow at hook 1 [ 121.459660][ T8611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.471150][ T8611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.481578][ T8611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.490019][ T5152] Bluetooth: hci1: command tx timeout [ 121.517584][ T8611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.697476][ T5890] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.705048][ T8611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.738024][ T8611] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.752371][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.759590][ T6863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.827712][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.834864][ T6863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.138873][ T8815] netlink: 'syz.4.774': attribute type 32 has an invalid length. [ 122.146665][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 122.168147][ T8815] (unnamed net_device) (uninitialized): Setting coupled_control to on (1) [ 122.233678][ T8611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.307565][ T8611] veth0_vlan: entered promiscuous mode [ 122.321618][ T8849] netlink: 'syz.2.782': attribute type 17 has an invalid length. [ 122.329677][ T8849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.782'. [ 122.344784][ T8849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.369488][ T8852] netlink: 72 bytes leftover after parsing attributes in process `syz.4.784'. [ 122.402642][ T8849] netlink: 'syz.2.782': attribute type 17 has an invalid length. [ 122.411644][ T8849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.782'. [ 122.433400][ T8849] netlink: 'syz.2.782': attribute type 17 has an invalid length. [ 122.460169][ T8849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.782'. [ 122.476329][ T8611] veth1_vlan: entered promiscuous mode [ 122.498728][ T8611] veth0_macvtap: entered promiscuous mode [ 122.507733][ T8611] veth1_macvtap: entered promiscuous mode [ 122.522662][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.533335][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.544631][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.559342][ T8849] netlink: 'syz.2.782': attribute type 17 has an invalid length. [ 122.567590][ T8849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.782'. [ 122.577702][ T8849] netlink: 'syz.2.782': attribute type 17 has an invalid length. [ 122.585709][ T8849] netlink: 'syz.2.782': attribute type 17 has an invalid length. [ 122.593811][ T8849] netlink: 'syz.2.782': attribute type 17 has an invalid length. [ 122.605735][ T8849] netlink: 'syz.2.782': attribute type 17 has an invalid length. [ 122.613975][ T8849] netlink: 'syz.2.782': attribute type 17 has an invalid length. [ 122.656567][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.677213][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.680288][ T8875] syz.2.790[8875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.697248][ T8875] syz.2.790[8875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.713329][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.716583][ T8875] syz.2.790[8875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.763175][ T8611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.827092][ T8611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.840860][ T8611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.856158][ T8611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.931823][ T8885] pim6reg1: entered promiscuous mode [ 122.938351][ T8885] pim6reg1: entered allmulticast mode [ 123.021651][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.029634][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.071109][ T6863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.079680][ T6863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.418686][ T8921] dvmrp0: entered allmulticast mode [ 123.491576][ T8929] bond1: entered promiscuous mode [ 123.496690][ T8929] bond1: entered allmulticast mode [ 123.503584][ T8929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.635820][ T8929] bond1 (unregistering): Released all slaves [ 123.647987][ T8932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.655228][ T8932] IPv6: NLM_F_CREATE should be set when creating new route [ 123.662538][ T8932] IPv6: NLM_F_CREATE should be set when creating new route [ 124.474240][ T8999] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 124.676608][ T6331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.047602][ T9044] __nla_validate_parse: 50 callbacks suppressed [ 125.047622][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 125.159894][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.170723][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.186748][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.206277][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.215848][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 125.224544][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.435247][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 125.477071][ T9069] bridge0: port 1(gretap0) entered blocking state [ 125.487217][ T9069] bridge0: port 1(gretap0) entered disabled state [ 125.503003][ T9069] gretap0: entered allmulticast mode [ 125.536184][ T9069] gretap0: entered promiscuous mode [ 125.561293][ T9069] bridge0: port 1(gretap0) entered blocking state [ 125.568482][ T9069] bridge0: port 1(gretap0) entered forwarding state [ 125.593579][ T9077] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 125.680666][ T9073] gretap0: left allmulticast mode [ 125.685754][ T9073] gretap0: left promiscuous mode [ 125.696211][ T9073] bridge0: port 1(gretap0) entered disabled state [ 125.703087][ T9077] syz.3.847 (9077) used greatest stack depth: 16600 bytes left [ 125.769049][ T9054] chnl_net:caif_netlink_parms(): no params data found [ 125.915244][ T6331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.940196][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 126.013579][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.031585][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.040372][ T9054] bridge_slave_0: entered allmulticast mode [ 126.047870][ T9054] bridge_slave_0: entered promiscuous mode [ 126.055812][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.063819][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.071291][ T9054] bridge_slave_1: entered allmulticast mode [ 126.078544][ T9054] bridge_slave_1: entered promiscuous mode [ 126.106538][ T9090] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 126.155054][ T6331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.232320][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.271949][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.345504][ T6331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.415918][ T9124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.859'. [ 126.425885][ T9054] team0: Port device team_slave_0 added [ 126.440795][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 126.452750][ T9054] team0: Port device team_slave_1 added [ 126.465891][ T9124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.859'. [ 126.475490][ T9124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.859'. [ 126.546074][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.567025][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.606691][ T9054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.637268][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.644575][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.702304][ T9054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.735958][ T6331] bridge_slave_1: left allmulticast mode [ 126.742190][ T6331] bridge_slave_1: left promiscuous mode [ 126.748050][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.758129][ T6331] bridge_slave_0: left allmulticast mode [ 126.763807][ T6331] bridge_slave_0: left promiscuous mode [ 126.770148][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.327336][ T5847] Bluetooth: hci1: command tx timeout [ 127.372269][ T6331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.405460][ T6331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.426163][ T6331] bond0 (unregistering): Released all slaves [ 127.448082][ T9144] pim6reg1: entered allmulticast mode [ 127.536786][ T9156] validate_nla: 30 callbacks suppressed [ 127.536806][ T9156] netlink: 'syz.3.867': attribute type 10 has an invalid length. [ 127.634453][ T29] audit: type=1107 audit(1730981035.583:3): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 127.725841][ T9054] hsr_slave_0: entered promiscuous mode [ 127.833165][ T9054] hsr_slave_1: entered promiscuous mode [ 127.841757][ T9054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.849981][ T9054] Cannot create hsr debugfs directory [ 127.926166][ T6331] hsr_slave_0: left promiscuous mode [ 127.943600][ T6331] hsr_slave_1: left promiscuous mode [ 127.950978][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.961514][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.974180][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.982440][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.020541][ T6331] veth1_macvtap: left promiscuous mode [ 128.026258][ T6331] veth0_macvtap: left promiscuous mode [ 128.035526][ T6331] veth1_vlan: left promiscuous mode [ 128.044210][ T6331] veth0_vlan: left promiscuous mode [ 128.153991][ T9175] netlink: 232 bytes leftover after parsing attributes in process `syz.1.872'. [ 128.466545][ T6331] team0 (unregistering): Port device team_slave_1 removed [ 128.505438][ T6331] team0 (unregistering): Port device team_slave_0 removed [ 128.930478][ T9162] netlink: 'syz.3.870': attribute type 10 has an invalid length. [ 128.938659][ T9176] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 128.997705][ T9187] syzkaller0: entered allmulticast mode [ 129.071218][ T9184] syzkaller0 (unregistering): left allmulticast mode [ 129.407344][ T5847] Bluetooth: hci1: command tx timeout [ 129.792178][ T9222] netlink: 100 bytes leftover after parsing attributes in process `syz.3.887'. [ 129.806032][ T9054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.820531][ T9054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.830227][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 129.852216][ T9225] bridge0: port 3(macvlan2) entered blocking state [ 129.863442][ T9225] bridge0: port 3(macvlan2) entered disabled state [ 129.880506][ T9225] macvlan2: entered allmulticast mode [ 129.892212][ T9225] bridge0: entered allmulticast mode [ 129.909548][ T9225] macvlan2: left allmulticast mode [ 129.915093][ T9225] bridge0: left allmulticast mode [ 129.970705][ T9054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.981732][ T9054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.092708][ T9230] netlink: 84 bytes leftover after parsing attributes in process `syz.2.891'. [ 130.109112][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 130.124841][ T9240] 8021q: VLANs not supported on lo [ 130.140711][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 130.214618][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.273901][ T9054] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.298436][ T9248] macsec1: entered promiscuous mode [ 130.310298][ T9248] macvlan1: entered promiscuous mode [ 130.315900][ T9248] macsec1: entered allmulticast mode [ 130.323465][ T9248] macvlan1: entered allmulticast mode [ 130.336138][ T9248] veth1_vlan: entered allmulticast mode [ 130.350845][ T9248] macvlan1: left allmulticast mode [ 130.357194][ T9248] veth1_vlan: left allmulticast mode [ 130.363435][ T9248] macvlan1: left promiscuous mode [ 130.418311][ T9250] IPv6: Can't replace route, no match found [ 130.442726][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.449967][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.500192][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.507362][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.869569][ T9054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.935575][ T9054] veth0_vlan: entered promiscuous mode [ 130.954063][ T9054] veth1_vlan: entered promiscuous mode [ 130.974848][ T9241] dccp_close: ABORT with 329 bytes unread [ 131.000572][ T9054] veth0_macvtap: entered promiscuous mode [ 131.020355][ T9054] veth1_macvtap: entered promiscuous mode [ 131.044803][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.055738][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.074563][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.094446][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.111741][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.127516][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.149450][ T9054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.163258][ T9054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.181680][ T9054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.191142][ T9054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.281112][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.290610][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.312039][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.322876][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.432857][ T9308] netlink: 5 bytes leftover after parsing attributes in process `syz.1.909'. [ 131.442885][ T9308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.520475][ T9315] Bluetooth: MGMT ver 1.23 [ 131.611300][ T9317] netlink: 468 bytes leftover after parsing attributes in process `syz.3.912'. [ 131.767768][ T9326] netlink: 6 bytes leftover after parsing attributes in process `syz.3.916'. [ 131.782378][ T9326] bridge: RTM_NEWNEIGH with invalid ether address [ 131.807788][ T9329] netlink: 'syz.4.915': attribute type 5 has an invalid length. [ 132.081074][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 132.102362][ T9337] netlink: 160 bytes leftover after parsing attributes in process `syz.1.920'. [ 132.205370][ T9353] FAULT_INJECTION: forcing a failure. [ 132.205370][ T9353] name failslab, interval 1, probability 0, space 0, times 0 [ 132.229812][ T9353] CPU: 1 UID: 0 PID: 9353 Comm: syz.2.925 Not tainted 6.12.0-rc5-syzkaller-01203-g720d33143276 #0 [ 132.240456][ T9353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.250539][ T9353] Call Trace: [ 132.253828][ T9353] [ 132.256764][ T9353] dump_stack_lvl+0x241/0x360 [ 132.261462][ T9353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.266656][ T9353] ? __pfx__printk+0x10/0x10 [ 132.271258][ T9353] ? __build_skb_around+0x245/0x3d0 [ 132.276466][ T9353] should_fail_ex+0x3b0/0x4e0 [ 132.281143][ T9353] ? _sctp_make_chunk+0x161/0x460 [ 132.286164][ T9353] should_failslab+0xac/0x100 [ 132.290846][ T9353] ? _sctp_make_chunk+0x161/0x460 [ 132.295907][ T9353] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 132.301283][ T9353] _sctp_make_chunk+0x161/0x460 [ 132.306135][ T9353] sctp_make_heartbeat+0x9a/0x8c0 [ 132.311158][ T9353] ? validate_chain+0x11e/0x5920 [ 132.316093][ T9353] ? validate_chain+0x11e/0x5920 [ 132.321052][ T9353] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 132.326689][ T9353] ? sctp_transport_hold+0x1f4/0x2e0 [ 132.331974][ T9353] sctp_sf_do_prm_requestheartbeat+0x2d/0x280 [ 132.338042][ T9353] ? __pfx_sctp_pname+0x10/0x10 [ 132.342897][ T9353] sctp_do_sm+0x1f1/0x60c0 [ 132.347313][ T9353] ? sctp_transport_put+0xd7/0x160 [ 132.352421][ T9353] ? sctp_hash_cmp+0x170/0x1b0 [ 132.357188][ T9353] ? rhltable_lookup+0x6e0/0x7b0 [ 132.362126][ T9353] ? __pfx_sctp_do_sm+0x10/0x10 [ 132.366979][ T9353] ? __pfx_sctp_hash_key+0x10/0x10 [ 132.372104][ T9353] ? __pfx_sctp_hash_obj+0x10/0x10 [ 132.377245][ T9353] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 132.383046][ T9353] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 132.388938][ T9353] ? sctp_v6_addr_to_user+0x21b/0x480 [ 132.394308][ T9353] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 132.400287][ T9353] sctp_apply_peer_addr_params+0xd5/0x1670 [ 132.406183][ T9353] ? lockdep_hardirqs_on+0x99/0x150 [ 132.411387][ T9353] sctp_setsockopt_peer_addr_params+0x613/0x960 [ 132.417635][ T9353] sctp_setsockopt+0x6f1/0x11c0 [ 132.422485][ T9353] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 132.428392][ T9353] do_sock_setsockopt+0x3af/0x720 [ 132.433419][ T9353] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 132.438966][ T9353] ? __fget_files+0x29/0x470 [ 132.443555][ T9353] ? __fget_files+0x3f3/0x470 [ 132.448226][ T9353] ? __fget_files+0x29/0x470 [ 132.452818][ T9353] __sys_setsockopt+0x1a2/0x250 [ 132.457766][ T9353] __x64_sys_setsockopt+0xb5/0xd0 [ 132.462792][ T9353] do_syscall_64+0xf3/0x230 [ 132.467296][ T9353] ? clear_bhb_loop+0x35/0x90 [ 132.471976][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.477885][ T9353] RIP: 0033:0x7fd31f17e719 [ 132.482297][ T9353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.501922][ T9353] RSP: 002b:00007fd31fef1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.510352][ T9353] RAX: ffffffffffffffda RBX: 00007fd31f336058 RCX: 00007fd31f17e719 [ 132.518318][ T9353] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 132.526284][ T9353] RBP: 00007fd31fef1090 R08: 000000000000009c R09: 0000000000000000 [ 132.534252][ T9353] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000001 [ 132.542218][ T9353] R13: 0000000000000001 R14: 00007fd31f336058 R15: 00007ffd89e48c18 [ 132.550200][ T9353] [ 132.577828][ T9355] netlink: 80 bytes leftover after parsing attributes in process `syz.3.923'. [ 132.651841][ T9358] netlink: 52 bytes leftover after parsing attributes in process `syz.4.928'. [ 133.010135][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.222762][ T6320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.281272][ T9380] siw: device registration error -23 [ 134.198369][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.224634][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.245607][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.253778][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.265871][ T5152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.275147][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.327675][ T9422] FAULT_INJECTION: forcing a failure. [ 134.327675][ T9422] name failslab, interval 1, probability 0, space 0, times 0 [ 134.345851][ T9422] CPU: 0 UID: 0 PID: 9422 Comm: syz.1.944 Not tainted 6.12.0-rc5-syzkaller-01203-g720d33143276 #0 [ 134.356493][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.366569][ T9422] Call Trace: [ 134.369876][ T9422] [ 134.372822][ T9422] dump_stack_lvl+0x241/0x360 [ 134.377537][ T9422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.382757][ T9422] ? __pfx__printk+0x10/0x10 [ 134.387376][ T9422] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 134.393386][ T9422] ? __pfx___might_resched+0x10/0x10 [ 134.398702][ T9422] should_fail_ex+0x3b0/0x4e0 [ 134.403402][ T9422] should_failslab+0xac/0x100 [ 134.408121][ T9422] ? __alloc_skb+0x1c3/0x440 [ 134.412733][ T9422] kmem_cache_alloc_node_noprof+0x71/0x320 [ 134.418585][ T9422] __alloc_skb+0x1c3/0x440 [ 134.423023][ T9422] ? __pfx___alloc_skb+0x10/0x10 [ 134.427978][ T9422] sctp_packet_transmit+0x30c/0x2cc0 [ 134.433291][ T9422] ? __pfx_lock_acquire+0x10/0x10 [ 134.438341][ T9422] ? __pfx_lock_release+0x10/0x10 [ 134.443406][ T9422] ? sctp_outq_flush+0x1122/0x3e20 [ 134.448542][ T9422] sctp_outq_flush+0x142a/0x3e20 [ 134.453488][ T9422] ? sctp_outq_flush+0x1122/0x3e20 [ 134.458670][ T9422] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 134.464320][ T9422] ? __pfx_sctp_outq_flush+0x10/0x10 [ 134.469628][ T9422] ? sctp_outq_tail+0x67a/0x930 [ 134.474473][ T9422] ? sctp_do_8_2_transport_strike+0x41b/0x810 [ 134.480541][ T9422] ? sctp_outq_uncork+0x4f/0xb0 [ 134.485412][ T9422] sctp_do_sm+0x59cc/0x60c0 [ 134.489940][ T9422] ? sctp_transport_put+0xd7/0x160 [ 134.495066][ T9422] ? rhltable_lookup+0x6e0/0x7b0 [ 134.500019][ T9422] ? __pfx_sctp_do_sm+0x10/0x10 [ 134.504884][ T9422] ? __pfx_sctp_hash_key+0x10/0x10 [ 134.509989][ T9422] ? __pfx_sctp_hash_obj+0x10/0x10 [ 134.515116][ T9422] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 134.520948][ T9422] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 134.526945][ T9422] ? sctp_v6_addr_to_user+0x21b/0x480 [ 134.532323][ T9422] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 134.538310][ T9422] sctp_apply_peer_addr_params+0xd5/0x1670 [ 134.544134][ T9422] ? lockdep_hardirqs_on+0x99/0x150 [ 134.549349][ T9422] sctp_setsockopt_peer_addr_params+0x613/0x960 [ 134.555612][ T9422] sctp_setsockopt+0x6f1/0x11c0 [ 134.560461][ T9422] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 134.566345][ T9422] do_sock_setsockopt+0x3af/0x720 [ 134.571367][ T9422] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 134.576912][ T9422] ? __fget_files+0x29/0x470 [ 134.581514][ T9422] ? __fget_files+0x3f3/0x470 [ 134.586180][ T9422] ? __fget_files+0x29/0x470 [ 134.590767][ T9422] __sys_setsockopt+0x1a2/0x250 [ 134.595616][ T9422] __x64_sys_setsockopt+0xb5/0xd0 [ 134.600637][ T9422] do_syscall_64+0xf3/0x230 [ 134.605135][ T9422] ? clear_bhb_loop+0x35/0x90 [ 134.609846][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.615771][ T9422] RIP: 0033:0x7f9e2b17e719 [ 134.620452][ T9422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.640082][ T9422] RSP: 002b:00007f9e2bf03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 134.648518][ T9422] RAX: ffffffffffffffda RBX: 00007f9e2b336058 RCX: 00007f9e2b17e719 [ 134.656484][ T9422] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 134.664451][ T9422] RBP: 00007f9e2bf03090 R08: 000000000000009c R09: 0000000000000000 [ 134.672416][ T9422] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000001 [ 134.680393][ T9422] R13: 0000000000000001 R14: 00007f9e2b336058 R15: 00007fff3e8de178 [ 134.688403][ T9422] [ 134.871148][ T9440] netlink: 'syz.2.950': attribute type 3 has an invalid length. [ 134.995066][ T9412] chnl_net:caif_netlink_parms(): no params data found [ 135.133654][ T6320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.145307][ T9459] xt_l2tp: invalid flags combination: 0 [ 135.338409][ T6320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.366329][ T9468] vlan2: entered promiscuous mode [ 135.373243][ T9468] vlan2: entered allmulticast mode [ 135.379324][ T9468] team0: Device vlan2 is of different type [ 135.439815][ T6320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.547338][ T9485] __nla_validate_parse: 7 callbacks suppressed [ 135.547356][ T9485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.963'. [ 135.573980][ T9412] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.582517][ T9412] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.598298][ T9412] bridge_slave_0: entered allmulticast mode [ 135.612220][ T9412] bridge_slave_0: entered promiscuous mode [ 135.622400][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 135.638961][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 135.662237][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.673193][ T9412] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.682126][ T9412] bridge_slave_1: entered allmulticast mode [ 135.691487][ T9412] bridge_slave_1: entered promiscuous mode [ 135.756506][ T9412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.783271][ T9412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.864655][ T9412] team0: Port device team_slave_0 added [ 135.883569][ T9412] team0: Port device team_slave_1 added [ 135.902706][ T9503] netlink: 27 bytes leftover after parsing attributes in process `syz.1.969'. [ 135.940334][ T6320] bridge_slave_1: left allmulticast mode [ 135.946271][ T6320] bridge_slave_1: left promiscuous mode [ 135.955159][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.966668][ T6320] bridge_slave_0: left allmulticast mode [ 135.973619][ T6320] bridge_slave_0: left promiscuous mode [ 135.979817][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.154686][ T9509] syz.4.970 uses old SIOCAX25GETINFO [ 136.334208][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.345651][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.358143][ T6320] bond0 (unregistering): Released all slaves [ 136.367305][ T5847] Bluetooth: hci1: command tx timeout [ 136.377586][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.386393][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.413343][ T9412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.573914][ T9518] netlink: 'syz.3.973': attribute type 11 has an invalid length. [ 136.588433][ T9518] netlink: 'syz.3.973': attribute type 11 has an invalid length. [ 136.596406][ T9518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.973'. [ 136.612822][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.626490][ T9522] xt_l2tp: missing protocol rule (udp|l2tpip) [ 136.629302][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.674100][ T9412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.845306][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 136.915701][ T9412] hsr_slave_0: entered promiscuous mode [ 136.939531][ T9412] hsr_slave_1: entered promiscuous mode [ 136.946660][ T9412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.956731][ T9412] Cannot create hsr debugfs directory [ 136.991531][ T6320] hsr_slave_0: left promiscuous mode [ 136.998370][ T6320] hsr_slave_1: left promiscuous mode [ 137.004657][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.016709][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.030319][ T9550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.981'. [ 137.041529][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.050391][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.060875][ T9551] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 137.083520][ T6320] veth1_macvtap: left promiscuous mode [ 137.090003][ T6320] veth0_macvtap: left promiscuous mode [ 137.095652][ T6320] veth1_vlan: left promiscuous mode [ 137.101106][ T6320] veth0_vlan: left promiscuous mode [ 137.480271][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 137.519564][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 137.875850][ T9542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 137.904110][ T9544] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 137.923658][ T9543] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 138.052792][ T9555] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 138.465272][ T5847] Bluetooth: hci1: command tx timeout [ 138.669905][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 139.152718][ T9585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 139.271693][ T9412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.291187][ T9412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.304581][ T9412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.321783][ T9412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.445467][ T9412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.486593][ T9412] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.509278][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.516423][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.540895][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.548091][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.845006][ T9412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.899723][ T9412] veth0_vlan: entered promiscuous mode [ 139.950759][ T9412] veth1_vlan: entered promiscuous mode [ 139.992397][ T9619] netlink: 'syz.4.1006': attribute type 10 has an invalid length. [ 140.017311][ T9619] bond0: (slave netdevsim0): Releasing backup interface [ 140.040127][ T9619] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 140.063742][ T9619] team0: Failed to send options change via netlink (err -105) [ 140.072733][ T9619] team0: Port device netdevsim0 added [ 140.081587][ T9620] netlink: 'syz.4.1006': attribute type 10 has an invalid length. [ 140.095697][ T9620] team0: Failed to send options change via netlink (err -105) [ 140.104281][ T9620] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 140.113970][ T9620] team0: Port device netdevsim0 removed [ 140.121651][ T9620] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 140.133421][ T9622] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 140.167405][ T9412] veth0_macvtap: entered promiscuous mode [ 140.194133][ T9412] veth1_macvtap: entered promiscuous mode [ 140.284069][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.298366][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.312299][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.331918][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.342880][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.355668][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.368204][ T9412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.381088][ T9412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.397432][ T9412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.406251][ T9412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.438720][ T9633] netlink: zone id is out of range [ 140.444331][ T9633] netlink: zone id is out of range [ 140.525610][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.537275][ T5847] Bluetooth: hci1: command tx timeout [ 140.555481][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.569866][ T9637] xt_TCPMSS: Only works on TCP SYN packets [ 140.602009][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.611614][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.740625][ T9641] team0: Port device wg2 removed [ 140.750562][ T9643] __nla_validate_parse: 4 callbacks suppressed [ 140.750579][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 140.769685][ T9641] bond0: (slave netdevsim0): Releasing backup interface [ 140.802113][ T9641] bond0: (slave macvlan3): Releasing backup interface [ 140.812656][ T9641] bridge0: left promiscuous mode [ 140.915779][ T9642] team0: Port device wg2 added [ 140.936434][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1015'. [ 141.077896][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 141.108717][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 141.127168][ T9656] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1019'. [ 141.206551][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 141.389571][ T9685] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1027'. [ 141.514645][ T9693] FAULT_INJECTION: forcing a failure. [ 141.514645][ T9693] name failslab, interval 1, probability 0, space 0, times 0 [ 141.528114][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.3.1029 Not tainted 6.12.0-rc5-syzkaller-01203-g720d33143276 #0 [ 141.538829][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.548916][ T9693] Call Trace: [ 141.552262][ T9693] [ 141.555207][ T9693] dump_stack_lvl+0x241/0x360 [ 141.559914][ T9693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.565129][ T9693] ? __pfx__printk+0x10/0x10 [ 141.569731][ T9693] ? do_syscall_64+0xf3/0x230 [ 141.574437][ T9693] ? validate_chain+0x11e/0x5920 [ 141.579394][ T9693] should_fail_ex+0x3b0/0x4e0 [ 141.584087][ T9693] ? skb_clone+0x20c/0x390 [ 141.588526][ T9693] should_failslab+0xac/0x100 [ 141.593221][ T9693] ? skb_clone+0x20c/0x390 [ 141.597641][ T9693] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 141.603108][ T9693] skb_clone+0x20c/0x390 [ 141.607373][ T9693] sctp_ulpevent_make_rcvmsg+0x2c1/0xa00 [ 141.613046][ T9693] sctp_ulpq_tail_data+0xc1/0x10e0 [ 141.618326][ T9693] ? sctp_eat_data+0xd0b/0x1840 [ 141.623235][ T9693] ? __pfx_sctp_ulpq_tail_data+0x10/0x10 [ 141.628989][ T9693] ? sctp_sf_eat_data_6_2+0x833/0xb10 [ 141.634381][ T9693] ? __pfx_sctp_ulpq_tail_data+0x10/0x10 [ 141.640017][ T9693] sctp_do_sm+0x1bd0/0x60c0 [ 141.644532][ T9693] ? __pfx_sctp_do_sm+0x10/0x10 [ 141.649393][ T9693] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.655450][ T9693] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 141.662041][ T9693] ? read_tsc+0x9/0x20 [ 141.666117][ T9693] ? timekeeping_get_ns+0x2c0/0x420 [ 141.671333][ T9693] sctp_assoc_bh_rcv+0x3f1/0x640 [ 141.676311][ T9693] sctp_backlog_rcv+0x177/0x3f0 [ 141.681162][ T9693] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 141.686529][ T9693] __release_sock+0x243/0x350 [ 141.691228][ T9693] release_sock+0x61/0x1f0 [ 141.695667][ T9693] sctp_setsockopt+0xb91/0x11c0 [ 141.700523][ T9693] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 141.706428][ T9693] do_sock_setsockopt+0x3af/0x720 [ 141.711467][ T9693] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 141.717017][ T9693] ? __fget_files+0x29/0x470 [ 141.721612][ T9693] ? __fget_files+0x3f3/0x470 [ 141.726288][ T9693] ? __fget_files+0x29/0x470 [ 141.730885][ T9693] __sys_setsockopt+0x1a2/0x250 [ 141.735741][ T9693] __x64_sys_setsockopt+0xb5/0xd0 [ 141.740777][ T9693] do_syscall_64+0xf3/0x230 [ 141.745278][ T9693] ? clear_bhb_loop+0x35/0x90 [ 141.750052][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.755955][ T9693] RIP: 0033:0x7f117017e719 [ 141.760369][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.779980][ T9693] RSP: 002b:00007f1171029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 141.788398][ T9693] RAX: ffffffffffffffda RBX: 00007f1170335f80 RCX: 00007f117017e719 [ 141.796371][ T9693] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 141.804352][ T9693] RBP: 00007f1171029090 R08: 000000000000009c R09: 0000000000000000 [ 141.812327][ T9693] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000002 [ 141.820297][ T9693] R13: 0000000000000000 R14: 00007f1170335f80 R15: 00007ffcb344cb28 [ 141.828278][ T9693] [ 142.412633][ T9727] netlink: 'syz.1.1039': attribute type 33 has an invalid length. [ 142.427260][ T9727] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1039'. [ 142.445834][ T9732] netlink: 'syz.1.1039': attribute type 33 has an invalid length. [ 142.468623][ T9732] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1039'. [ 142.540050][ T9740] FAULT_INJECTION: forcing a failure. [ 142.540050][ T9740] name failslab, interval 1, probability 0, space 0, times 0 [ 142.560514][ T9740] CPU: 1 UID: 0 PID: 9740 Comm: syz.1.1042 Not tainted 6.12.0-rc5-syzkaller-01203-g720d33143276 #0 [ 142.571250][ T9740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.581340][ T9740] Call Trace: [ 142.584644][ T9740] [ 142.587599][ T9740] dump_stack_lvl+0x241/0x360 [ 142.592316][ T9740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.597546][ T9740] ? __pfx__printk+0x10/0x10 [ 142.602188][ T9740] should_fail_ex+0x3b0/0x4e0 [ 142.606901][ T9740] should_failslab+0xac/0x100 [ 142.611608][ T9740] ? __alloc_skb+0x1c3/0x440 [ 142.616238][ T9740] kmem_cache_alloc_node_noprof+0x71/0x320 [ 142.622091][ T9740] ? __asan_memcpy+0x40/0x70 [ 142.626729][ T9740] __alloc_skb+0x1c3/0x440 [ 142.631160][ T9740] ? __pfx___alloc_skb+0x10/0x10 [ 142.636103][ T9740] ? sctp_tsnmap_num_gabs+0x37f/0x400 [ 142.641480][ T9740] _sctp_make_chunk+0x58/0x460 [ 142.646244][ T9740] sctp_make_sack+0x17a/0xdf0 [ 142.650935][ T9740] ? __pfx_sctp_make_sack+0x10/0x10 [ 142.656140][ T9740] ? sctp_sf_eat_data_6_2+0x87a/0xb10 [ 142.661528][ T9740] sctp_do_sm+0x2da8/0x60c0 [ 142.666054][ T9740] ? __pfx_sctp_do_sm+0x10/0x10 [ 142.671082][ T9740] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.677091][ T9740] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 142.683690][ T9740] ? read_tsc+0x9/0x20 [ 142.687762][ T9740] ? timekeeping_get_ns+0x2c0/0x420 [ 142.692969][ T9740] sctp_assoc_bh_rcv+0x3f1/0x640 [ 142.697924][ T9740] sctp_backlog_rcv+0x177/0x3f0 [ 142.702864][ T9740] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 142.708237][ T9740] __release_sock+0x243/0x350 [ 142.712921][ T9740] release_sock+0x61/0x1f0 [ 142.717345][ T9740] sctp_setsockopt+0xb91/0x11c0 [ 142.722212][ T9740] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 142.728104][ T9740] do_sock_setsockopt+0x3af/0x720 [ 142.733138][ T9740] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 142.738680][ T9740] ? __fget_files+0x29/0x470 [ 142.743270][ T9740] ? __fget_files+0x3f3/0x470 [ 142.747946][ T9740] ? __fget_files+0x29/0x470 [ 142.752547][ T9740] __sys_setsockopt+0x1a2/0x250 [ 142.757409][ T9740] __x64_sys_setsockopt+0xb5/0xd0 [ 142.762432][ T9740] do_syscall_64+0xf3/0x230 [ 142.766938][ T9740] ? clear_bhb_loop+0x35/0x90 [ 142.771619][ T9740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.777518][ T9740] RIP: 0033:0x7f9e2b17e719 [ 142.781932][ T9740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.801533][ T9740] RSP: 002b:00007f9e2bf24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.809951][ T9740] RAX: ffffffffffffffda RBX: 00007f9e2b335f80 RCX: 00007f9e2b17e719 [ 142.817929][ T9740] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 142.825898][ T9740] RBP: 00007f9e2bf24090 R08: 000000000000009c R09: 0000000000000000 [ 142.833867][ T9740] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000002 [ 142.841835][ T9740] R13: 0000000000000000 R14: 00007f9e2b335f80 R15: 00007fff3e8de178 [ 142.849825][ T9740] [ 143.003927][ T9742] ebtables: ebtables: counters copy to user failed while replacing table [ 143.043065][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.499609][ T9753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.628662][ T9757] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 143.806707][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.817466][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.825407][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.834161][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.842401][ T5152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.861120][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.221154][ T9768] chnl_net:caif_netlink_parms(): no params data found [ 144.227901][ T9787] FAULT_INJECTION: forcing a failure. [ 144.227901][ T9787] name failslab, interval 1, probability 0, space 0, times 0 [ 144.227967][ T9787] CPU: 1 UID: 0 PID: 9787 Comm: syz.1.1054 Not tainted 6.12.0-rc5-syzkaller-01203-g720d33143276 #0 [ 144.227989][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.228001][ T9787] Call Trace: [ 144.228009][ T9787] [ 144.228017][ T9787] dump_stack_lvl+0x241/0x360 [ 144.228042][ T9787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.228066][ T9787] ? __pfx__printk+0x10/0x10 [ 144.228104][ T9787] should_fail_ex+0x3b0/0x4e0 [ 144.228128][ T9787] should_failslab+0xac/0x100 [ 144.228151][ T9787] ? __alloc_skb+0x1c3/0x440 [ 144.228173][ T9787] kmem_cache_alloc_node_noprof+0x71/0x320 [ 144.228197][ T9787] ? __asan_memcpy+0x40/0x70 [ 144.228224][ T9787] __alloc_skb+0x1c3/0x440 [ 144.310950][ T9787] ? __pfx___alloc_skb+0x10/0x10 [ 144.315893][ T9787] ? sctp_tsnmap_num_gabs+0x37f/0x400 [ 144.321267][ T9787] _sctp_make_chunk+0x58/0x460 [ 144.326029][ T9787] sctp_make_sack+0x17a/0xdf0 [ 144.330721][ T9787] ? __pfx_sctp_make_sack+0x10/0x10 [ 144.335931][ T9787] ? sctp_sf_eat_data_6_2+0x87a/0xb10 [ 144.341307][ T9787] sctp_do_sm+0x2da8/0x60c0 [ 144.345828][ T9787] ? __pfx_sctp_do_sm+0x10/0x10 [ 144.350694][ T9787] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.356711][ T9787] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 144.363307][ T9787] ? read_tsc+0x9/0x20 [ 144.367389][ T9787] ? timekeeping_get_ns+0x2c0/0x420 [ 144.372636][ T9787] sctp_assoc_bh_rcv+0x3f1/0x640 [ 144.377596][ T9787] sctp_backlog_rcv+0x177/0x3f0 [ 144.382474][ T9787] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 144.387847][ T9787] __release_sock+0x243/0x350 [ 144.392530][ T9787] release_sock+0x61/0x1f0 [ 144.396948][ T9787] sctp_setsockopt+0xb91/0x11c0 [ 144.401803][ T9787] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 144.407872][ T9787] do_sock_setsockopt+0x3af/0x720 [ 144.412914][ T9787] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 144.418461][ T9787] ? __fget_files+0x29/0x470 [ 144.423052][ T9787] ? __fget_files+0x3f3/0x470 [ 144.427727][ T9787] ? __fget_files+0x29/0x470 [ 144.432324][ T9787] __sys_setsockopt+0x1a2/0x250 [ 144.437178][ T9787] __x64_sys_setsockopt+0xb5/0xd0 [ 144.442211][ T9787] do_syscall_64+0xf3/0x230 [ 144.446713][ T9787] ? clear_bhb_loop+0x35/0x90 [ 144.451394][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.457292][ T9787] RIP: 0033:0x7f9e2b17e719 [ 144.461716][ T9787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.481357][ T9787] RSP: 002b:00007f9e2bf24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 144.489788][ T9787] RAX: ffffffffffffffda RBX: 00007f9e2b335f80 RCX: 00007f9e2b17e719 [ 144.497769][ T9787] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 144.505742][ T9787] RBP: 00007f9e2bf24090 R08: 000000000000009c R09: 0000000000000000 [ 144.513718][ T9787] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000002 [ 144.521695][ T9787] R13: 0000000000000000 R14: 00007f9e2b335f80 R15: 00007fff3e8de178 [ 144.529685][ T9787] [ 144.615886][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.623419][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.630699][ T9768] bridge_slave_0: entered allmulticast mode [ 144.637893][ T9768] bridge_slave_0: entered promiscuous mode [ 144.647935][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.655045][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.663133][ T9768] bridge_slave_1: entered allmulticast mode [ 144.670254][ T9768] bridge_slave_1: entered promiscuous mode [ 144.718371][ T9768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.730580][ T9768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.773268][ T9768] team0: Port device team_slave_0 added [ 144.783523][ T9795] syz_tun: left allmulticast mode [ 144.806154][ T9795] syz_tun: left promiscuous mode [ 144.832796][ T9795] bridge0: port 3(syz_tun) entered disabled state [ 144.922006][ T9795] bridge_slave_0: left allmulticast mode [ 144.926712][ T9803] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1056'. [ 144.978249][ T9795] bridge_slave_0: left promiscuous mode [ 145.027666][ T9795] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.060896][ T9795] bridge_slave_1: left allmulticast mode [ 145.084548][ T9795] bridge_slave_1: left promiscuous mode [ 145.093899][ T9795] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.105481][ T9795] bond0: (slave bond_slave_0): Releasing backup interface [ 145.120391][ T9795] bond0: (slave bond_slave_1): Releasing backup interface [ 145.138262][ T9795] team0: Port device team_slave_0 removed [ 145.149092][ T9795] team0: Port device team_slave_1 removed [ 145.163260][ T9795] bond3: (slave bridge1): Releasing active interface [ 145.172822][ T9795] bridge1: left promiscuous mode [ 145.180725][ T9795] bridge1: left allmulticast mode [ 145.192792][ T9768] team0: Port device team_slave_1 added [ 145.271428][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.416009][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.434581][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.469617][ T9768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.504509][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.540690][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.562776][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.630415][ T9768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.689205][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.856781][ T9768] hsr_slave_0: entered promiscuous mode [ 145.864231][ T9768] hsr_slave_1: entered promiscuous mode [ 145.871939][ T9768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.880553][ T9768] Cannot create hsr debugfs directory [ 145.973308][ T5152] Bluetooth: hci1: command tx timeout [ 146.214877][ T9860] __nla_validate_parse: 1 callbacks suppressed [ 146.214896][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1074'. [ 146.272583][ T62] bridge_slave_1: left allmulticast mode [ 146.278676][ T62] bridge_slave_1: left promiscuous mode [ 146.292676][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.332469][ T62] bridge_slave_0: left allmulticast mode [ 146.338809][ T62] bridge_slave_0: left promiscuous mode [ 146.344955][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.364471][ T9865] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1074'. [ 146.663704][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.676092][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.688056][ T62] bond0 (unregistering): Released all slaves [ 146.723844][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 147.338313][ T9899] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 147.348510][ T9900] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 147.377350][ T62] hsr_slave_0: left promiscuous mode [ 147.441807][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 147.464337][ T62] hsr_slave_1: left promiscuous mode [ 147.475488][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.485387][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.500657][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.508901][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.541776][ T62] veth1_macvtap: left promiscuous mode [ 147.551273][ T62] veth0_macvtap: left promiscuous mode [ 147.560031][ T62] veth1_vlan: left promiscuous mode [ 147.565431][ T62] veth0_vlan: left promiscuous mode [ 148.033009][ T62] team0 (unregistering): Port device team_slave_1 removed [ 148.051434][ T5152] Bluetooth: hci1: command tx timeout [ 148.086143][ T62] team0 (unregistering): Port device team_slave_0 removed [ 148.502345][ T9917] bridge5: entered promiscuous mode [ 148.535938][ T9917] bridge5: entered allmulticast mode [ 148.548378][ T9917] team0: Port device bridge5 added [ 148.596783][ T9919] netlink: 'syz.2.1089': attribute type 8 has an invalid length. [ 148.616275][ T9922] nbd: device at index 1 is going down [ 148.899829][ T9768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.933953][ T9768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.944368][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 148.963855][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 149.008381][ T9768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.029512][ T9768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.344600][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 149.382794][ T9954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1099'. [ 149.406499][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 149.419192][ T9768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.428874][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 149.460355][ T9768] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.512179][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.519362][ T6331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.557435][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.564611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.652990][ T9768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.950669][ T9768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.038511][ T9768] veth0_vlan: entered promiscuous mode [ 150.066828][ T9768] veth1_vlan: entered promiscuous mode [ 150.133539][ T9768] veth0_macvtap: entered promiscuous mode [ 150.140033][ T5152] Bluetooth: hci1: command tx timeout [ 150.164897][ T9768] veth1_macvtap: entered promiscuous mode [ 150.242998][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.280330][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.310719][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.330505][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.345489][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.359298][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.370119][T10002] netlink: 'syz.3.1115': attribute type 5 has an invalid length. [ 150.395925][ T9768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.408274][ T9768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.417563][ T9768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.442433][ T9768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.524753][T10009] x_tables: duplicate underflow at hook 3 [ 150.595802][ T6331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.629334][ T6331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.683215][ T6863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.694915][ T6863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.916856][T10022] team1: Mode "" not found [ 151.042162][T10031] netlink: 'syz.2.1126': attribute type 29 has an invalid length. [ 151.351936][T10061] __nla_validate_parse: 37 callbacks suppressed [ 151.351955][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 151.822335][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1140'. [ 151.909559][T10079] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1140'. [ 151.952149][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1141'. [ 151.999729][T10090] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 152.008418][T10091] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 152.176570][ T6863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.035047][T10106] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 153.187168][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 153.271231][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.281331][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.298305][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.311849][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.323410][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.332677][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.351303][ T6863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.473579][ T6863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.583404][ T6863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.819180][T10122] chnl_net:caif_netlink_parms(): no params data found [ 153.837129][ T6863] bridge_slave_1: left allmulticast mode [ 153.842826][ T6863] bridge_slave_1: left promiscuous mode [ 153.855287][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.865032][ T6863] bridge_slave_0: left allmulticast mode [ 153.876247][ T6863] bridge_slave_0: left promiscuous mode [ 153.885850][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.455282][ T6863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.474687][ T6863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.485380][T10165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1159'. [ 154.495433][T10165] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1159'. [ 154.506655][T10165] netlink: 'syz.3.1159': attribute type 6 has an invalid length. [ 154.508587][ T6863] bond0 (unregistering): Released all slaves [ 154.518276][T10165] netlink: 'syz.3.1159': attribute type 5 has an invalid length. [ 154.531973][T10165] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1159'. [ 154.631145][T10172] bridge0: entered allmulticast mode [ 154.639629][T10172] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 154.731332][T10178] netlink: 'syz.3.1163': attribute type 1 has an invalid length. [ 154.747897][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'. [ 154.824151][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.831341][T10172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.857690][T10187] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.866316][T10187] bond4: (slave bond5): making interface the new active one [ 154.875906][T10187] bond4: (slave bond5): Enslaving as an active interface with an up link [ 154.885331][T10190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1165'. [ 154.936077][T10187] bond4 (unregistering): (slave bond5): Releasing backup interface [ 155.000187][T10187] bond4 (unregistering): Released all slaves [ 155.095898][T10122] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.103631][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.111097][T10122] bridge_slave_0: entered allmulticast mode [ 155.118966][T10122] bridge_slave_0: entered promiscuous mode [ 155.134683][T10122] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.143544][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.150946][T10122] bridge_slave_1: entered allmulticast mode [ 155.158367][T10122] bridge_slave_1: entered promiscuous mode [ 155.164760][T10201] netlink: 'syz.2.1168': attribute type 10 has an invalid length. [ 155.184937][T10201] team0: Device veth1_macvtap is of different type [ 155.312773][ T6863] hsr_slave_0: left promiscuous mode [ 155.319545][ T6863] hsr_slave_1: left promiscuous mode [ 155.325591][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.337097][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.345677][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.353651][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.373464][ T6863] veth1_macvtap: left promiscuous mode [ 155.379197][ T6863] veth0_macvtap: left promiscuous mode [ 155.384822][ T6863] veth1_vlan: left promiscuous mode [ 155.390739][ T6863] veth0_vlan: left promiscuous mode [ 155.409857][ T5152] Bluetooth: hci1: command tx timeout [ 155.595645][T10213] netlink: 'syz.1.1172': attribute type 9 has an invalid length. [ 155.603842][T10213] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1172'. [ 155.861942][ T6863] team0 (unregistering): Port device team_slave_1 removed [ 155.905638][ T6863] team0 (unregistering): Port device team_slave_0 removed [ 156.284898][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.297342][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.315966][T10208] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 156.434938][T10122] team0: Port device team_slave_0 added [ 156.460439][T10122] team0: Port device team_slave_1 added [ 156.578081][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.585065][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.638184][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.699280][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.726618][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.754612][ T8549] IPVS: starting estimator thread 0... [ 156.807098][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.871910][T10236] IPVS: using max 18 ests per chain, 43200 per kthread [ 156.956731][T10122] hsr_slave_0: entered promiscuous mode [ 156.981485][T10122] hsr_slave_1: entered promiscuous mode [ 157.006050][T10122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.029933][T10122] Cannot create hsr debugfs directory [ 157.490544][ T5152] Bluetooth: hci1: command 0x041b tx timeout [ 157.818503][T10287] veth0_vlan: entered allmulticast mode [ 158.001903][T10293] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 158.015180][T10122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.040005][T10122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.076374][T10122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.102548][T10122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.244338][T10122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.280083][T10122] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.295098][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.302275][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.340375][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.347571][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.364715][T10311] sch_tbf: burst 31596 is lower than device lo mtu (65550) ! [ 158.474769][T10317] __nla_validate_parse: 2 callbacks suppressed [ 158.474788][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1202'. [ 158.572770][T10322] syzkaller0: tun_chr_ioctl cmd 35108 [ 158.728349][T10122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.806737][T10122] veth0_vlan: entered promiscuous mode [ 158.837620][T10122] veth1_vlan: entered promiscuous mode [ 158.893657][T10122] veth0_macvtap: entered promiscuous mode [ 158.923011][T10122] veth1_macvtap: entered promiscuous mode [ 158.957976][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.983241][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.012381][T10122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.036231][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.053877][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.067578][T10122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.088454][T10122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.105415][T10122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.126105][T10122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.144363][T10122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.226273][ T6331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.244944][ T6331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.301298][T10352] netlink: 'syz.2.1212': attribute type 3 has an invalid length. [ 159.318425][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.340152][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.553706][T10367] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (14) [ 159.567153][ T5152] Bluetooth: hci1: command 0x041b tx timeout [ 159.733235][T10378] pim6reg: entered allmulticast mode [ 159.744946][T10378] pim6reg: left allmulticast mode [ 159.800924][T10381] vxcan2: entered allmulticast mode [ 160.005935][T10388] bridge0: Device is already in use. [ 160.020854][T10388] bridge0: Device is already in use. [ 160.026667][T10388] bridge0: Device is already in use. [ 160.040313][T10388] bridge0: Device is already in use. [ 160.046028][T10388] bridge0: Device is already in use. [ 160.248655][T10398] tap0: tun_chr_ioctl cmd 1074025677 [ 160.254663][T10398] tap0: linktype set to 776 [ 160.785081][ T6331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.390940][T10414] : renamed from bond0 (while UP) [ 161.494331][T10420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'. [ 161.503847][T10420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'. [ 161.570783][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.580539][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.588981][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.601173][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.609621][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.618435][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.796102][ T6331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.807136][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 161.813813][T10376] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 161.820239][ T5847] Bluetooth: hci0: command 0x0401 tx timeout [ 161.894115][T10422] chnl_net:caif_netlink_parms(): no params data found [ 161.990980][ T6331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.035767][T10440] bridge0: port 3(ipvlan2) entered blocking state [ 162.051565][T10440] bridge0: port 3(ipvlan2) entered disabled state [ 162.060712][T10440] ipvlan2: entered allmulticast mode [ 162.068135][T10440] ipvlan2: left allmulticast mode [ 162.125707][ T6331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.170476][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.181805][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.200053][T10422] bridge_slave_0: entered allmulticast mode [ 162.200450][T10448] xt_bpf: check failed: parse error [ 162.214054][T10422] bridge_slave_0: entered promiscuous mode [ 162.232653][T10422] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.249816][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.263174][T10422] bridge_slave_1: entered allmulticast mode [ 162.274807][T10422] bridge_slave_1: entered promiscuous mode [ 162.382702][T10422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.420718][T10422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.539695][ T6331] bridge_slave_1: left allmulticast mode [ 162.550315][ T6331] bridge_slave_1: left promiscuous mode [ 162.565682][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1246'. [ 162.570396][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.616448][ T6331] bridge_slave_0: left allmulticast mode [ 162.626000][ T6331] bridge_slave_0: left promiscuous mode [ 162.636555][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.827205][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1248'. [ 163.098190][ T6331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.113838][ T6331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.126028][ T6331] bond0 (unregistering): Released all slaves [ 163.145816][T10459] netlink: 'syz.3.1246': attribute type 3 has an invalid length. [ 163.155135][T10459] netlink: 'syz.3.1246': attribute type 3 has an invalid length. [ 163.214722][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 163.225977][T10467] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1248'. [ 163.254860][T10467] tipc: Invalid UDP bearer configuration [ 163.254903][T10467] tipc: Enabling of bearer rejected, failed to enable media [ 163.286412][T10478] netlink: 'syz.2.1252': attribute type 8 has an invalid length. [ 163.324453][T10422] team0: Port device team_slave_0 added [ 163.415474][T10422] team0: Port device team_slave_1 added [ 163.503615][T10422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.511281][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.540119][T10422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.574893][ T6331] hsr_slave_0: left promiscuous mode [ 163.582612][ T6331] hsr_slave_1: left promiscuous mode [ 163.592083][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.605565][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.615779][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.624709][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.647115][ T5847] Bluetooth: hci1: command tx timeout [ 163.668928][ T6331] veth1_macvtap: left promiscuous mode [ 163.678454][ T6331] veth0_macvtap: left promiscuous mode [ 163.684141][ T6331] veth1_vlan: left promiscuous mode [ 163.694178][ T6331] veth0_vlan: left promiscuous mode [ 163.887182][ T5847] Bluetooth: hci0: command 0x0401 tx timeout [ 164.156013][ T6331] team0 (unregistering): Port device team_slave_1 removed [ 164.198393][ T6331] team0 (unregistering): Port device team_slave_0 removed [ 164.622908][T10422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.633628][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.663263][T10422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.688410][T10504] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 164.778344][T10515] [ 164.788917][T10515] ============================================ [ 164.795134][T10515] WARNING: possible recursive locking detected [ 164.801260][T10515] 6.12.0-rc5-syzkaller-01203-g720d33143276 #0 Not tainted [ 164.808343][T10515] -------------------------------------------- [ 164.814464][T10515] syz.4.1262/10515 is trying to acquire lock: [ 164.820515][T10515] ffff888060a11200 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 164.829370][T10515] [ 164.829370][T10515] but task is already holding lock: [ 164.836812][T10515] ffff888060a11200 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 164.845676][T10515] [ 164.845676][T10515] other info that might help us debug this: [ 164.853735][T10515] Possible unsafe locking scenario: [ 164.853735][T10515] [ 164.861162][T10515] CPU0 [ 164.864421][T10515] ---- [ 164.867682][T10515] lock(&trie->lock); [ 164.871757][T10515] lock(&trie->lock); [ 164.875803][T10515] [ 164.875803][T10515] *** DEADLOCK *** [ 164.875803][T10515] [ 164.883924][T10515] May be due to missing lock nesting notation [ 164.883924][T10515] [ 164.892225][T10515] 3 locks held by syz.4.1262/10515: [ 164.897399][T10515] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 164.907292][T10515] #1: ffff888060a11200 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 164.916688][T10515] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 164.926058][T10515] [ 164.926058][T10515] stack backtrace: [ 164.931922][T10515] CPU: 1 UID: 0 PID: 10515 Comm: syz.4.1262 Not tainted 6.12.0-rc5-syzkaller-01203-g720d33143276 #0 [ 164.942671][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.952791][T10515] Call Trace: [ 164.956052][T10515] [ 164.958964][T10515] dump_stack_lvl+0x241/0x360 [ 164.963623][T10515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.968799][T10515] ? __pfx__printk+0x10/0x10 [ 164.973378][T10515] ? lockdep_unlock+0x16a/0x300 [ 164.978210][T10515] print_deadlock_bug+0x483/0x620 [ 164.983213][T10515] validate_chain+0x15e2/0x5920 [ 164.988044][T10515] ? __pfx_validate_chain+0x10/0x10 [ 164.993226][T10515] ? __pfx_validate_chain+0x10/0x10 [ 164.998401][T10515] ? __pfx_validate_chain+0x10/0x10 [ 165.003594][T10515] ? 0xffffffffa0000954 [ 165.007736][T10515] ? is_bpf_text_address+0x285/0x2a0 [ 165.013001][T10515] ? is_bpf_text_address+0x26/0x2a0 [ 165.018199][T10515] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 165.024356][T10515] ? kernel_text_address+0xa7/0xe0 [ 165.029467][T10515] ? __pfx_validate_chain+0x10/0x10 [ 165.034661][T10515] ? __pfx_validate_chain+0x10/0x10 [ 165.039844][T10515] ? mark_lock+0x9a/0x360 [ 165.044157][T10515] __lock_acquire+0x1384/0x2050 [ 165.049002][T10515] lock_acquire+0x1ed/0x550 [ 165.053495][T10515] ? trie_delete_elem+0x96/0x6a0 [ 165.058419][T10515] ? __pfx_lock_acquire+0x10/0x10 [ 165.063428][T10515] ? __lock_acquire+0x1384/0x2050 [ 165.068441][T10515] _raw_spin_lock_irqsave+0xd5/0x120 [ 165.073715][T10515] ? trie_delete_elem+0x96/0x6a0 [ 165.078637][T10515] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 165.084538][T10515] ? __pfx_lock_acquire+0x10/0x10 [ 165.089561][T10515] trie_delete_elem+0x96/0x6a0 [ 165.094314][T10515] ? __pfx___cant_migrate+0x10/0x10 [ 165.099528][T10515] ? bpf_trace_run4+0x244/0x590 [ 165.104367][T10515] bpf_prog_8c8ab8634bca3061+0x43/0x4d [ 165.109808][T10515] bpf_trace_run4+0x334/0x590 [ 165.114471][T10515] ? __pfx_bpf_trace_run4+0x10/0x10 [ 165.119681][T10515] ? percpu_ref_get_many+0x19/0x140 [ 165.124871][T10515] ? __memcg_kmem_charge_page+0xdb/0x1d0 [ 165.130499][T10515] __alloc_pages_noprof+0x6dc/0x710 [ 165.135692][T10515] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 165.141402][T10515] ? bpf_map_get_memcg+0x4e/0x5c0 [ 165.146424][T10515] ? do_raw_spin_lock+0x14f/0x370 [ 165.151451][T10515] ? __pfx_lock_release+0x10/0x10 [ 165.156465][T10515] ___kmalloc_large_node+0x8b/0x1d0 [ 165.161650][T10515] __kmalloc_large_node_noprof+0x1a/0x80 [ 165.167263][T10515] __kmalloc_node_noprof+0x2d2/0x440 [ 165.172536][T10515] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 165.177804][T10515] bpf_map_kmalloc_node+0xd3/0x1c0 [ 165.182916][T10515] trie_update_elem+0x1cd/0xc00 [ 165.187764][T10515] ? __pfx___might_resched+0x10/0x10 [ 165.193037][T10515] bpf_map_update_value+0x4d3/0x540 [ 165.198212][T10515] map_update_elem+0x51a/0x6f0 [ 165.203394][T10515] __sys_bpf+0x76f/0x810 [ 165.207623][T10515] ? __pfx___sys_bpf+0x10/0x10 [ 165.212365][T10515] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 165.218330][T10515] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.224639][T10515] ? do_syscall_64+0x100/0x230 [ 165.229380][T10515] __x64_sys_bpf+0x7c/0x90 [ 165.233776][T10515] do_syscall_64+0xf3/0x230 [ 165.238280][T10515] ? clear_bhb_loop+0x35/0x90 [ 165.242936][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.248815][T10515] RIP: 0033:0x7f7c32b7e719 [ 165.253214][T10515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.272805][T10515] RSP: 002b:00007f7c338cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.281197][T10515] RAX: ffffffffffffffda RBX: 00007f7c32d36058 RCX: 00007f7c32b7e719 [ 165.289149][T10515] RDX: 0000000000000020 RSI: 0000000020000740 RDI: 0000000000000002 [ 165.297105][T10515] RBP: 00007f7c32bf139e R08: 0000000000000000 R09: 0000000000000000 [ 165.305054][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.313000][T10515] R13: 0000000000000000 R14: 00007f7c32d36058 R15: 00007ffcba14af68 [ 165.320952][T10515]