last executing test programs: 1m11.782330147s ago: executing program 0 (id=202): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf, 0xffff}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m9.001387823s ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xe40, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 59.36810221s ago: executing program 0 (id=202): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf, 0xffff}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 56.768137971s ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xe40, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 45.965344594s ago: executing program 0 (id=202): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf, 0xffff}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 44.190918709s ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xe40, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 34.036307362s ago: executing program 0 (id=202): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf, 0xffff}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.059315092s ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xe40, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20.290738024s ago: executing program 0 (id=202): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf, 0xffff}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.686602111s ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xe40, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.609061849s ago: executing program 0 (id=202): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf, 0xffff}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.678405177s ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xe40, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.071750387s ago: executing program 1 (id=1624): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, 0x0, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r6], 0x54}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', 0x0, r1, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x2, &(0x7f00000003c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x8001}], &(0x7f0000000400)='syzkaller\x00', 0x6, 0xc9, &(0x7f0000000440)=""/201, 0x40f00, 0x70, '\x00', r6, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x2, 0x72f, 0x2854}, 0x10, 0xffffffffffffffff, r0, 0x7, &(0x7f0000000640)=[r0, r8], &(0x7f0000000680)=[{0x0, 0x1, 0xd, 0x5}, {0x5, 0x3, 0x5, 0x9}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x1, 0xe, 0x7}, {0x4, 0x2, 0xf}, {0x2, 0x3, 0xe, 0x7}, {0x0, 0x1, 0x8, 0x7}], 0x10, 0x9, @void, @value}, 0x94) openat$cgroup_ro(r1, &(0x7f00000007c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', r4, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0x8, 0x7, 0x2}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000200)=[r1, r3, r2], &(0x7f0000000240)=[{0x5, 0x3, 0xe, 0xa}, {0x3, 0x2, 0x4, 0xa}, {0x5, 0x4, 0xb, 0x8}, {0x0, 0x3, 0xa, 0x9}, {0x2, 0x2, 0xd, 0x6}, {0x2, 0x2, 0x6, 0xc}, {0x3, 0x3, 0xb, 0x9}, {0x3, 0x3, 0x8, 0x1}, {0x1, 0x5, 0xe, 0x7}, {0x4, 0x4, 0x6}], 0x10, 0x5, @void, @value}, 0x94) close(r2) splice(r0, 0x0, r3, 0x0, 0x600, 0x0) 3.703332595s ago: executing program 1 (id=1627): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000000000000000000000050016003c00000008000b000000000052a881108df54cff87c59fe6c20a7ea2d1fc2edbf5e832922cdba861a77297a7132127d20208d6f895661a683d778ae5e3bbd108"], 0x2c}}, 0x48850) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=@newtfilter={0x474, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0xe7a8, 0x3, 0x8, {0x9, 0x0, 0x9, 0x80, 0x0, 0x8}, {0xb, 0x2, 0x5, 0x8000, 0x8001, 0x100}, 0x7, 0x53c9, 0xc5c}}, @TCA_POLICE_RATE={0x404, 0x2, [0x554, 0x32, 0x8, 0x5, 0x100000, 0xb, 0xc67, 0x9, 0x810, 0x4, 0x80, 0x6, 0x1, 0x1, 0x3ff, 0x3, 0x1db, 0x0, 0xfffffffd, 0x7fffffff, 0x0, 0x1, 0x1, 0x2, 0x6, 0x8001, 0x1, 0x3, 0x5, 0x3, 0x76d, 0x14, 0x9, 0xc2e9, 0x504, 0x3a4, 0xe4, 0x3, 0x9, 0x3, 0x2, 0x2, 0x1, 0x6, 0x91c, 0x40, 0xac8e, 0x6, 0x200, 0x1ff, 0x1, 0x7, 0x96, 0x0, 0x1ff, 0x1, 0x2, 0x5, 0x3a41, 0x400, 0x4, 0x3, 0x4, 0x2, 0x9, 0x3, 0x1, 0xfffffffc, 0xa6, 0x10000, 0x0, 0x7ff, 0x64, 0x18, 0xfffffffc, 0x7fffffff, 0xffff, 0x55, 0xc, 0x4, 0x1, 0x8, 0xf0, 0x4, 0x8, 0x1, 0x356, 0x1, 0xf, 0x400, 0xffffffff, 0x30, 0x2, 0x8, 0x0, 0xa, 0x1, 0x9, 0x2, 0x6, 0x0, 0x7f, 0xd13, 0x9, 0x3, 0x5, 0x20002, 0x91e8, 0x6, 0xff, 0x2, 0x7f, 0x2657, 0x7fffffff, 0x400, 0x80000001, 0x4a50, 0x10000, 0x0, 0xb9, 0x7, 0x757a, 0x2, 0x401, 0x7, 0x4b, 0x1, 0x8, 0xfffffffa, 0x4, 0xf, 0x8, 0x1, 0x2, 0x7e13, 0x61deff5f, 0x8, 0x57, 0x80000000, 0x7, 0x7ff, 0x10001, 0x7, 0x8c, 0xa, 0x8, 0x1, 0x7, 0x7, 0x5, 0x6, 0x0, 0x131, 0x7fffffff, 0xffff0001, 0x7f, 0x4, 0x7, 0x0, 0x130c000, 0x20, 0x1, 0x80000000, 0x40, 0x8, 0x0, 0x48, 0x1f4, 0xa7, 0x3, 0x1, 0x6, 0x8000, 0x2, 0x9, 0xfa2c, 0x3, 0xfff, 0x9, 0x4, 0x10, 0x9a8b, 0x0, 0x10000, 0x4, 0x7f5bec15, 0xda4, 0x5, 0xc0, 0x400, 0x1, 0x96, 0x3, 0x2, 0x4, 0x0, 0x2, 0x8, 0x2, 0x1, 0xb5, 0x5, 0x628, 0x0, 0xac5, 0x10000, 0x1, 0x6, 0x1000, 0x5, 0x1, 0x8, 0x8800, 0x7095, 0x3, 0x2, 0x2, 0x3, 0x8000, 0x46, 0xffffac82, 0x9, 0x2, 0x66, 0x81, 0x48, 0xf, 0x9, 0x200, 0xb, 0x3, 0x3, 0x2, 0x9, 0x7fff, 0x3, 0x4, 0x0, 0xfffffff9, 0x3, 0x5, 0x0, 0x3, 0x5, 0xbc0, 0x10, 0x6, 0x8, 0x5, 0x7, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x4]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x48d0) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, 0x0, 0x0) writev(r6, &(0x7f0000000d00), 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xc8}}, 0x0) 2.744883383s ago: executing program 1 (id=1632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000005c0)={0x0, 0xfffffffffffffe45, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000400)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000480)="553354ed6ddae2561ec582e412d02c1e0ffd3bdfdf23ef7398945a260f8e7464a354baf667847b7cb46fbe5b7f05a1b442f5b0e97489e6f24812cf512ef4a38b9dddc1b9a97f94eaa7f9c8c1b9f0fcf85db1d094610262df82a3ec09e194a694f3e51189c173e61460c5d70567d12788079d7f68e738a6a50eab6cc95ce647b5ce1a41571af6550a51bd3df9040ef16f96", 0x91}, {&(0x7f0000000840)="cba66ba2ba7cf8b6d7ad166172e316cd5b00d50cdf03dc97531fd1401ff5eebffd1803759801239b316277b547fedabc3162190331e1936bf520615389eba1078d37f54d841bb350b59c9e304c0c63a2160281b8fae6bedf2c5cd454ab2ce0398e75cffb13d636a4d5ec69d8652076a0b93475b278e2ece33354c832130c41ecdc7a4d054f00bfae04251f5626945151808529d71e", 0x95}, {&(0x7f0000000900)="d71dc4d5bfc43e3495d344f4f3de06b9ca08f57e982b1dfb3b0153ac155cc6d5ddd2a9b854038a3bb1ffee543dab9f7128b2afa45e771989c85d6a9577ad3805a50d70d27b8957c9b89041bebbc5504e9d0f2fc16d7a82c0e393c30c4a05b3005717d390eebf30faf26e21107294a2cd93c314da05b5ab2b3e2e4285814f5dc0193c5869441eab8f9e531a62183212b935d68f", 0x93}, {&(0x7f00000009c0)="752815993c76de3294439d265f805bd8789945d3a14a993775e80d3432cd5565ad3283721d124bc09ee8c1a0fb5f0efb385b47c787ad9f53abb96c5b193eb66174f3f22922dfd9e588a59f06f98eb5a871e4fd12f9523dee05fa5393f66a12a6760dd8b575ace5266ec21104afd5d845830e1cb425ebd3aca65a5cc2b1a6fbcc4f51c5d91e7192b7a112754219dea3351cde307bd065ec1d", 0x98}, {&(0x7f0000000a80)="7a63ffeca9f1f81594560c19c08fb14255d1bea19956f9adb8d0022ad2d34894197114263580be4e330df62e7920d0533fc472b61d64f649ca860b1f1957e2f4faa3716db079d9798658c80a3b565cbe8fbb728cd54a0c2da00dc4286d583e54c0d14c4e56a86d0384677b27f0377a8b5c5f97e299005d61bb3f4a224afbf129e4db2e9b9c3093909adef208d7307af6fea4c9e6c1fb79d9ef14d78f43767696d8026d4224c9945c1dd367b07ceaffd93e9b3833a421720bf59ebbe1fc81b90717bb418c8f64a34717162a34d059fa1ab5e77f55b3ae0445cd02fac79877245eb035fbe23ce799109e6d1fd1918cd3b731165cd2dc06dd", 0xf7}, {&(0x7f0000000b80)="3248c85b76ffdf1b7fff19d6d612a52e4847d901f715bfad770c2d96cd736399a60cd96e93d661acf853f3ead77fd690efe47666ab6559ee31d8656a1592922701d53433ead949bd5d9dd3189ff89c769c67e5ef34b59eb3f874f8eb2ad868db9573a9ad7f0f6d341ae9a65f136a983585726173fd4bc5934cd5a52060fd45422340783ed589bb1ecc11645ae3f124c88950d64b5308fd75c9edcb972201b1ab5187aba4c43d0bd9aa7f92ec39a71c759626ec0390b2ef41468ceeb467e77780ec99c23620d56882b5d0a9cd370b486c7dee7540", 0xd4}, {&(0x7f00000005c0)="9716190529aa77e961b061a9b8672f4d823de502e6327662e04dba668138c55a0f43f71b972f60974b0c737d4bf92ed070ccbe46cff807e974ad17d06dfb7cf96dd02771fed3e80bf86b374dd3558a0b29bf1d833b6e82e80f7fcc7b9c80988537843dd601078c", 0x67}, {&(0x7f0000000740)="9c8ad0c26d17ffe9fe28b62feeb104bab87647a92cf3276092bab2491ac80262b92ba6e6af199e9fa165f001bf2e74f455035befd4e12cd6b3409f0ccb3b9b5f5745a90816bddab98256646e940b3b719d614991144e2dd4ea755aa3ae772fe7a2a8b8", 0x63}, {&(0x7f0000001100)="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", 0x1000}], 0x9, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x398}, 0x20048000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r6, 0x89b0, &(0x7f00000010c0)="99803939e155fce925f4b101173a") sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf2504000000200003"], 0xc0}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0xba01}, 0x800) r11 = socket$igmp6(0xa, 0x3, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r12}, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r14, 0x1, 0x0, 0x0, {0x5}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) setsockopt$inet6_int(r11, 0x29, 0x3, &(0x7f0000000080)=0x2, 0x4) socket$kcm(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 2.225119202s ago: executing program 3 (id=1637): r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000080)) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f00000010c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x4, 0x0, 0x0, 0x12, 0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r8 = socket$kcm(0x10, 0xf, 0x0) r9 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x107, 0x18, 0x0, 0x20000000) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.718004084s ago: executing program 3 (id=1641): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000090002"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x22, 0x4ba12, 0x200000b}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001004010000000000000000000000000a24000000120a05000000000000000000000003100004800c0002400000000000000001140000001100010000000000000000000000000a00"], 0x4c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 1.716227805s ago: executing program 1 (id=1642): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000005c0)={0x0, 0xfffffffffffffe45, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000400)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000480)="553354ed6ddae2561ec582e412d02c1e0ffd3bdfdf23ef7398945a260f8e7464a354baf667847b7cb46fbe5b7f05a1b442f5b0e97489e6f24812cf512ef4a38b9dddc1b9a97f94eaa7f9c8c1b9f0fcf85db1d094610262df82a3ec09e194a694f3e51189c173e61460c5d70567d12788079d7f68e738a6a50eab6cc95ce647b5ce1a41571af6550a51bd3df9040ef16f96", 0x91}, {&(0x7f0000000840)="cba66ba2ba7cf8b6d7ad166172e316cd5b00d50cdf03dc97531fd1401ff5eebffd1803759801239b316277b547fedabc3162190331e1936bf520615389eba1078d37f54d841bb350b59c9e304c0c63a2160281b8fae6bedf2c5cd454ab2ce0398e75cffb13d636a4d5ec69d8652076a0b93475b278e2ece33354c832130c41ecdc7a4d054f00bfae04251f5626945151808529d71e", 0x95}, {&(0x7f0000000900)="d71dc4d5bfc43e3495d344f4f3de06b9ca08f57e982b1dfb3b0153ac155cc6d5ddd2a9b854038a3bb1ffee543dab9f7128b2afa45e771989c85d6a9577ad3805a50d70d27b8957c9b89041bebbc5504e9d0f2fc16d7a82c0e393c30c4a05b3005717d390eebf30faf26e21107294a2cd93c314da05b5ab2b3e2e4285814f5dc0193c5869441eab8f9e531a62183212b935d68f", 0x93}, {&(0x7f00000009c0)="752815993c76de3294439d265f805bd8789945d3a14a993775e80d3432cd5565ad3283721d124bc09ee8c1a0fb5f0efb385b47c787ad9f53abb96c5b193eb66174f3f22922dfd9e588a59f06f98eb5a871e4fd12f9523dee05fa5393f66a12a6760dd8b575ace5266ec21104afd5d845830e1cb425ebd3aca65a5cc2b1a6fbcc4f51c5d91e7192b7a112754219dea3351cde307bd065ec1d", 0x98}, {&(0x7f0000000a80)="7a63ffeca9f1f81594560c19c08fb14255d1bea19956f9adb8d0022ad2d34894197114263580be4e330df62e7920d0533fc472b61d64f649ca860b1f1957e2f4faa3716db079d9798658c80a3b565cbe8fbb728cd54a0c2da00dc4286d583e54c0d14c4e56a86d0384677b27f0377a8b5c5f97e299005d61bb3f4a224afbf129e4db2e9b9c3093909adef208d7307af6fea4c9e6c1fb79d9ef14d78f43767696d8026d4224c9945c1dd367b07ceaffd93e9b3833a421720bf59ebbe1fc81b90717bb418c8f64a34717162a34d059fa1ab5e77f55b3ae0445cd02fac79877245eb035fbe23ce799109e6d1fd1918cd3b731165cd2dc06dd", 0xf7}, {&(0x7f0000000b80)="3248c85b76ffdf1b7fff19d6d612a52e4847d901f715bfad770c2d96cd736399a60cd96e93d661acf853f3ead77fd690efe47666ab6559ee31d8656a1592922701d53433ead949bd5d9dd3189ff89c769c67e5ef34b59eb3f874f8eb2ad868db9573a9ad7f0f6d341ae9a65f136a983585726173fd4bc5934cd5a52060fd45422340783ed589bb1ecc11645ae3f124c88950d64b5308fd75c9edcb972201b1ab5187aba4c43d0bd9aa7f92ec39a71c759626ec0390b2ef41468ceeb467e77780ec99c23620d56882b5d0a9cd370b486c7dee7540", 0xd4}, {&(0x7f00000005c0)="9716190529aa77e961b061a9b8672f4d823de502e6327662e04dba668138c55a0f43f71b972f60974b0c737d4bf92ed070ccbe46cff807e974ad17d06dfb7cf96dd02771fed3e80bf86b374dd3558a0b29bf1d833b6e82e80f7fcc7b9c80988537843dd601078c", 0x67}, {&(0x7f0000000740)="9c8ad0c26d17ffe9fe28b62feeb104bab87647a92cf3276092bab2491ac80262b92ba6e6af199e9fa165f001bf2e74f455035befd4e12cd6b3409f0ccb3b9b5f5745a90816bddab98256646e940b3b719d614991144e2dd4ea755aa3ae772fe7a2a8b8", 0x63}, {&(0x7f0000001100)="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", 0x1000}], 0x9, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x398}, 0x20048000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r6, 0x89b0, &(0x7f00000010c0)="99803939e155fce925f4b101173a") sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf2504000000200003"], 0xc0}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0xba01}, 0x800) r11 = socket$igmp6(0xa, 0x3, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r12}, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r14, 0x1, 0x0, 0x0, {0x5}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) setsockopt$inet6_int(r11, 0x29, 0x3, &(0x7f0000000080)=0x2, 0x4) socket$kcm(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 1.607711399s ago: executing program 3 (id=1643): socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x4800}, 0x88d0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x62}, {@rand_addr=0x64010102, 0x4e1f, 0x2, 0xd1, 0x12d5f, 0x3}}, 0x44) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x16, &(0x7f0000001200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000001f00)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x800000}, [@tmpl={0x44, 0x8, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@mcast2}]}]}, 0xfc}}, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000000200), &(0x7f00000002c0)=0x4) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f00000008c0)=0x18) 1.478515326s ago: executing program 2 (id=1645): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x67, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffff210000000180c200000086dd6012000800313a00fe8000000000000000000000000000bbfe80000000000000"], 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.292622754s ago: executing program 2 (id=1646): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004000000090000000000000000f62ea5b07a360ee2e9db7d259e4ae214", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) epoll_create1(0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x1}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)}, 0x200488d5) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010005000000000000002a000000184001801400020073797a5f74756e000000000000000000", @ANYRES8=r3, @ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.186316685s ago: executing program 1 (id=1647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd33, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r2, r3, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) 1.055493667s ago: executing program 3 (id=1648): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80000) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0300000002000000050000f8ffffffffffffff000000000000000000eb1f4e38ed84444fbaa2bd1a68464a2b8cf7d7d114eb08a342f865372285c9b83aa9df0c637631c9c5f46e07b9a5d63c783b36538361be6dfbe5184d53bbfb518b016600f95d4c219e953d55d01bce10f86048e29858b1160a50c23d48a4c32280c789d32d0725e1a3b96c45db3adb57387c"], 0x50) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f091030000003477", "4ee9f0420448f5ac45a8b1af8a3d7b75", "0697b948", "c191885fdda84d32"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="07280b01844f576d1eda1dc0c04343c65895644789733334cd057c33607966a82b0446dcf825c685be42cb4a7379e1b1953dd6a413af539dbef634b6f4dab74fe33bf9ff785ed031ce8e090f8d7e1ef2262d65fabf5fb6cc191d209ea1d5000000fb35fb2786d0a07826570e74235932f4d7f02578fa4896596926aad0b8ca52d6dedab905517df1ea088fbf8ca23d13cb0e88256b1902d43306805cbe1856332673d40fe12e1e7c07e06aacbfcd03c7c0a8833e722417d37013d44759469bd467d75da53b7b87013df6d762de5dbc665a16fd071448633ed5e174a97ad3d6b2a84225d24e5c119442d929b0a444edca", 0xffffffec, 0x20004091, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="03fd00b38eb8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x1c, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 1.031267388s ago: executing program 1 (id=1649): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x4, 0x6e, 0x8, @vifc_lcl_addr=@loopback, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000009c0)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd24, 0x25dfdbfd, {0x80, 0x10, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x5, 0x900}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_bridge\x00'}}, 0x1e) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000001580)={0x42, 0xd}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1, 0x3}, 0x10) bind$tipc(r6, 0x0, 0x0) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f00000005c0)="c2c10b270d21c75ca6ebfb5b23be", 0xe}], 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r10, @ANYBLOB="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"/619], 0x3c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) 971.979363ms ago: executing program 2 (id=1650): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x2000000, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0) 767.622673ms ago: executing program 2 (id=1651): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000300000000000000000000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007200000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 751.567603ms ago: executing program 2 (id=1652): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e000000160000000000000026000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1, 0x0, 0x8c}, 0x18) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r3}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='hrtimer_start\x00', r2, 0x0, 0xb7}, 0x18) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)) 649.283798ms ago: executing program 2 (id=1653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0360000000500000180012800e00010069703665727370616e000000fffc028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="080028008f7e02"], 0x95}}, 0x10000800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000000400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 115.772236ms ago: executing program 3 (id=1654): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088474820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x300, r2}, 0x14) 0s ago: executing program 3 (id=1655): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x4, 0x0, @rand_addr=0x3, @multicast1}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405ff54982afc8a44665e029a7702a5cf1a0000000000007110b00000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): miscuous mode [ 286.283692][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.394733][ T9495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.428641][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.440766][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.447944][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.450342][T11314] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.467136][T11314] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.468676][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.479849][T11314] bridge_slave_1: entered allmulticast mode [ 286.489161][T11314] bridge_slave_1: entered promiscuous mode [ 286.489360][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.503236][ T5863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.517587][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.584733][ T9495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.626295][T11314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.691472][ T9495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.721195][T11314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.741354][T11352] lo speed is unknown, defaulting to 1000 [ 286.830029][ T9495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.890369][T11314] team0: Port device team_slave_0 added [ 286.924369][T11314] team0: Port device team_slave_1 added [ 287.019138][T11314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.034387][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.068125][T11314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.077949][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 287.105051][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1287'. [ 287.121241][T11314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.140864][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.169669][T11314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.235394][T11381] netlink: 'syz.2.1289': attribute type 10 has an invalid length. [ 287.269350][T11314] hsr_slave_0: entered promiscuous mode [ 287.292147][T11314] hsr_slave_1: entered promiscuous mode [ 287.299253][T11384] netlink: 'syz.2.1289': attribute type 10 has an invalid length. [ 287.319402][T11314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.329681][T11314] Cannot create hsr debugfs directory [ 287.333696][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 287.371180][T11387] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 287.456221][ T9495] bridge_slave_1: left allmulticast mode [ 287.462040][ T9495] bridge_slave_1: left promiscuous mode [ 287.482781][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.490385][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 287.535392][ T9495] bridge_slave_0: left allmulticast mode [ 287.541106][ T9495] bridge_slave_0: left promiscuous mode [ 287.547994][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.579902][T11394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1293'. [ 288.142381][ T9495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.155751][ T9495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.167806][ T9495] bond0 (unregistering): Released all slaves [ 288.266694][T11352] chnl_net:caif_netlink_parms(): no params data found [ 288.290705][ T5863] Bluetooth: hci1: command tx timeout [ 288.363680][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 288.523867][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 288.536459][T11410] netlink: 'syz.2.1299': attribute type 3 has an invalid length. [ 288.547198][T11410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1299'. [ 288.603870][ T5863] Bluetooth: hci4: command tx timeout [ 288.763466][T11420] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1300'. [ 288.859413][T11420] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'. [ 288.892426][ T9495] hsr_slave_0: left promiscuous mode [ 288.898834][ T9495] hsr_slave_1: left promiscuous mode [ 288.910693][ T9495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.930470][ T9495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.939134][ T9495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.953985][ T9495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.996109][ T9495] veth1_macvtap: left promiscuous mode [ 289.001700][ T9495] veth0_macvtap: left promiscuous mode [ 289.013393][ T9495] veth1_vlan: left promiscuous mode [ 289.021337][ T9495] veth0_vlan: left promiscuous mode [ 289.072098][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 289.133296][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'. [ 289.420227][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 289.520835][ T9495] team0 (unregistering): Port device team_slave_1 removed [ 289.563755][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 289.571720][ T9495] team0 (unregistering): Port device team_slave_0 removed [ 290.051754][T11422] IPVS: Error connecting to the multicast addr [ 290.088695][T11352] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.103750][T11352] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.114007][T11352] bridge_slave_0: entered allmulticast mode [ 290.125826][T11352] bridge_slave_0: entered promiscuous mode [ 290.133491][T11352] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.140795][T11352] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.148710][T11352] bridge_slave_1: entered allmulticast mode [ 290.163415][T11352] bridge_slave_1: entered promiscuous mode [ 290.341817][T11352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.367215][ T5863] Bluetooth: hci1: command tx timeout [ 290.402217][T11352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.444125][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.572584][T11352] team0: Port device team_slave_0 added [ 290.583151][T11352] team0: Port device team_slave_1 added [ 290.603780][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.674355][T11352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.684981][ T5863] Bluetooth: hci4: command tx timeout [ 290.692416][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.742700][T11352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.766512][T11352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.790917][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.824977][T11352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.958274][T11352] hsr_slave_0: entered promiscuous mode [ 290.972051][T11352] hsr_slave_1: entered promiscuous mode [ 290.978759][T11352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.993549][T11352] Cannot create hsr debugfs directory [ 291.019147][T11314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.037724][T11314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.060594][T11314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 291.154162][T11314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 291.299176][T11477] veth0_to_bridge: entered promiscuous mode [ 291.366368][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 291.483680][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 291.533921][T11490] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 291.575893][T11314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.613432][T11314] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.630273][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.637478][ T9496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.645092][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 291.682196][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.689416][ T9496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.937833][T11352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.965747][T11352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.992152][T11352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.013040][T11352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 292.067978][T11314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.123186][T11476] veth0_to_bridge: left promiscuous mode [ 292.197423][T11352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.241634][T11314] veth0_vlan: entered promiscuous mode [ 292.264375][T11352] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.280994][T11314] veth1_vlan: entered promiscuous mode [ 292.298778][ T9498] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.306015][ T9498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.322919][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.330141][ T9498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.393703][T11314] veth0_macvtap: entered promiscuous mode [ 292.406146][T11314] veth1_macvtap: entered promiscuous mode [ 292.443789][ T5861] Bluetooth: hci1: command tx timeout [ 292.453086][T11314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.486531][T11314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.509436][T11521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1331'. [ 292.520758][T11314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.533747][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.543781][T11314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.555686][T11314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.564606][T11314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.673672][ T9495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.681614][ T9495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.683726][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.731033][ T9497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.751072][ T9497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.765118][ T5861] Bluetooth: hci4: command tx timeout [ 292.777741][T11352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.869174][T11529] tipc: Enabling of bearer rejected, already enabled [ 293.090336][T11538] netlink: 'syz.1.1335': attribute type 21 has an invalid length. [ 293.115331][T11538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1335'. [ 293.196348][T11352] veth0_vlan: entered promiscuous mode [ 293.213185][T11352] veth1_vlan: entered promiscuous mode [ 293.275867][T11352] veth0_macvtap: entered promiscuous mode [ 293.336746][T11352] veth1_macvtap: entered promiscuous mode [ 293.380534][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.401266][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.418550][T11352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.462445][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.486648][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.503014][T11352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.522918][T11552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1340'. [ 293.529775][T11352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.547873][T11352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.561736][T11352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.570583][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 293.581829][T11352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.723870][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 293.741815][ T9498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.753689][ T9498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.781841][ T9497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.798965][ T9497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.814803][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 294.151460][T11576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1350'. [ 294.228946][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.613762][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 294.763920][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 294.845584][ T5861] Bluetooth: hci4: command 0x0419 tx timeout [ 295.653756][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.803900][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.251827][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.272661][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.286875][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.307020][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.332154][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.343135][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.512392][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.584013][T11589] lo speed is unknown, defaulting to 1000 [ 296.680973][T11596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1356'. [ 296.690190][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.820086][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.843856][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.982949][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.151812][ T35] bridge_slave_1: left allmulticast mode [ 297.158583][ T35] bridge_slave_1: left promiscuous mode [ 297.165573][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.176853][ T35] bridge_slave_0: left allmulticast mode [ 297.182536][ T35] bridge_slave_0: left promiscuous mode [ 297.188753][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.530798][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.542302][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.552715][ T35] bond0 (unregistering): Released all slaves [ 297.570021][T11589] chnl_net:caif_netlink_parms(): no params data found [ 297.646807][T11589] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.655799][T11589] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.663076][T11589] bridge_slave_0: entered allmulticast mode [ 297.673908][T11589] bridge_slave_0: entered promiscuous mode [ 297.702276][T11589] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.709868][T11589] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.717436][T11589] bridge_slave_1: entered allmulticast mode [ 297.724503][T11589] bridge_slave_1: entered promiscuous mode [ 297.733758][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 297.791287][T11589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.803375][T11589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.831529][T11589] team0: Port device team_slave_0 added [ 297.856351][T11589] team0: Port device team_slave_1 added [ 297.883866][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 297.941822][ T35] hsr_slave_0: left promiscuous mode [ 297.950302][ T35] hsr_slave_1: left promiscuous mode [ 297.956552][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.971824][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.980914][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.988435][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.008970][ T35] veth1_macvtap: left promiscuous mode [ 298.014768][ T35] veth0_macvtap: left promiscuous mode [ 298.020414][ T35] veth1_vlan: left promiscuous mode [ 298.025810][ T35] veth0_vlan: left promiscuous mode [ 298.448027][ T5861] Bluetooth: hci1: command tx timeout [ 298.476522][ T35] team0 (unregistering): Port device team_slave_1 removed [ 298.565787][ T35] team0 (unregistering): Port device team_slave_0 removed [ 298.742651][T11621] Bluetooth: MGMT ver 1.23 [ 298.763672][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 298.923949][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 299.094858][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.109745][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.129427][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.137527][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.156287][ T5863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 299.164002][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.522392][T11589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.529712][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.558256][T11589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.604273][T11589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.611275][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.669677][T11589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.803684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 299.811686][T11633] lo speed is unknown, defaulting to 1000 [ 299.866966][T11589] hsr_slave_0: entered promiscuous mode [ 299.875930][T11589] hsr_slave_1: entered promiscuous mode [ 299.907164][T11589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.914184][T11646] netlink: 'syz.2.1365': attribute type 3 has an invalid length. [ 299.915254][T11589] Cannot create hsr debugfs directory [ 299.963786][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 299.974108][T11646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1365'. [ 300.076152][T11650] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 300.103911][T11650] syzkaller0: linktype set to 6 [ 300.141139][T11650] netlink: 'syz.1.1363': attribute type 21 has an invalid length. [ 300.165475][T11650] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.173903][T11650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.181658][T11650] IPv6: NLM_F_CREATE should be set when creating new route [ 300.189097][T11650] IPv6: NLM_F_CREATE should be set when creating new route [ 300.196380][T11650] IPv6: NLM_F_CREATE should be set when creating new route [ 300.374373][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.384255][T11662] netlink: 'syz.1.1368': attribute type 10 has an invalid length. [ 300.416329][T11662] netlink: 'syz.1.1368': attribute type 10 has an invalid length. [ 300.437539][T11662] netdevsim netdevsim1 »»»»»»: entered allmulticast mode [ 300.451467][T11662] bond0: (slave »»»»»»): Enslaving as an active interface with an up link [ 300.469657][T11662] netlink: 'syz.1.1368': attribute type 1 has an invalid length. [ 300.490280][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.524070][ T5863] Bluetooth: hci1: command tx timeout [ 300.608686][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.759554][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.771738][T11672] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 300.790819][T11672] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1371'. [ 300.829011][T11677] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 300.832128][T11672] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1371'. [ 300.853675][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.869638][T11633] chnl_net:caif_netlink_parms(): no params data found [ 300.898305][T11677] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 300.962851][T11677] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 301.003857][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 301.176297][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.198419][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.224096][T11633] bridge_slave_0: entered allmulticast mode [ 301.243953][ T5863] Bluetooth: hci4: command tx timeout [ 301.255623][T11633] bridge_slave_0: entered promiscuous mode [ 301.310397][ T35] bridge_slave_1: left allmulticast mode [ 301.316213][ T35] bridge_slave_1: left promiscuous mode [ 301.322001][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.360708][ T35] bridge_slave_0: left allmulticast mode [ 301.366749][ T35] bridge_slave_0: left promiscuous mode [ 301.372498][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.398503][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 301.883707][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 302.043988][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 302.052693][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1376'. [ 302.073023][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.088346][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.099145][ T35] bond0 (unregistering): Released all slaves [ 302.106315][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 302.118688][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.133931][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.141290][T11633] bridge_slave_1: entered allmulticast mode [ 302.148972][T11633] bridge_slave_1: entered promiscuous mode [ 302.209367][T11688] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 302.230308][T11688] batman_adv: batadv0: Adding interface: ip6gretap1 [ 302.237310][T11688] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.264516][T11688] batman_adv: batadv0: Interface activated: ip6gretap1 [ 302.275632][T11689] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 302.282743][T11689] batman_adv: batadv0: Removing interface: ip6gretap1 [ 302.348239][T11633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.424728][T11633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.451293][T11589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.510372][T11589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.520920][T11589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.540219][T11704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1378'. [ 302.558241][T11704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1378'. [ 302.603802][ T5863] Bluetooth: hci1: command tx timeout [ 302.676750][T11633] team0: Port device team_slave_0 added [ 302.694900][T11633] team0: Port device team_slave_1 added [ 302.707026][T11589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.885754][T11723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1384'. [ 302.904471][T11633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.912167][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.938424][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 302.946896][T11633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.981653][ T35] hsr_slave_0: left promiscuous mode [ 302.988012][ T35] hsr_slave_1: left promiscuous mode [ 302.994799][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.002261][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.025211][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.032689][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.056753][ T35] veth1_macvtap: left promiscuous mode [ 303.062318][ T35] veth0_macvtap: left promiscuous mode [ 303.068302][ T35] veth1_vlan: left promiscuous mode [ 303.073714][ T35] veth0_vlan: left promiscuous mode [ 303.083930][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.333888][ T5863] Bluetooth: hci4: command tx timeout [ 303.599505][ T35] team0 (unregistering): Port device team_slave_1 removed [ 303.685261][T11739] can: request_module (can-proto-0) failed. [ 303.691716][ T35] team0 (unregistering): Port device team_slave_0 removed [ 303.701350][T11738] can: request_module (can-proto-0) failed. [ 303.963734][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.131331][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.212190][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 304.265253][T11633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.272481][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.300847][T11633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.334564][T11730] syzkaller1: entered allmulticast mode [ 304.494288][T11633] hsr_slave_0: entered promiscuous mode [ 304.501025][T11633] hsr_slave_1: entered promiscuous mode [ 304.522258][T11633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.543265][T11633] Cannot create hsr debugfs directory [ 304.637311][T11589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.668482][T11757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1391'. [ 304.684691][ T5863] Bluetooth: hci1: command tx timeout [ 304.698887][T11589] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.764958][ T9498] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.772160][ T9498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.782956][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.790320][ T9498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.836870][T11764] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 305.003787][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 305.163882][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 305.276109][T11789] __nla_validate_parse: 2 callbacks suppressed [ 305.276131][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 305.311224][T11789] ip6t_rpfilter: unknown options [ 305.355186][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'. [ 305.375365][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 305.402527][T11589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.419543][ T5861] Bluetooth: hci4: command tx timeout [ 305.573314][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 305.579435][T11589] veth0_vlan: entered promiscuous mode [ 305.623401][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 305.627473][T11589] veth1_vlan: entered promiscuous mode [ 305.673230][T11633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.690369][T11633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.719178][T11589] veth0_macvtap: entered promiscuous mode [ 305.727964][T11633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.752405][T11633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.764215][T11589] veth1_macvtap: entered promiscuous mode [ 305.767420][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 305.779710][T11589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.787994][T11807] FAULT_INJECTION: forcing a failure. [ 305.787994][T11807] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 305.790060][T11589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.807560][T11807] CPU: 1 UID: 0 PID: 11807 Comm: syz.2.1406 Not tainted 6.12.0-syzkaller-10684-gebf7f7d61681 #0 [ 305.811922][T11589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.819539][T11807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 305.819554][T11807] Call Trace: [ 305.819562][T11807] [ 305.819569][T11807] dump_stack_lvl+0x241/0x360 [ 305.819597][T11807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.819614][T11807] ? __pfx__printk+0x10/0x10 [ 305.819638][T11807] ? validate_chain+0x11e/0x5920 [ 305.819664][T11807] ? validate_chain+0x11e/0x5920 [ 305.819689][T11807] should_fail_ex+0x3b0/0x4e0 [ 305.819720][T11807] prepare_alloc_pages+0x1da/0x5b0 [ 305.828459][T11589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.838424][T11807] __alloc_pages_noprof+0x16f/0x710 [ 305.838455][T11807] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 305.838492][T11807] ? __pfx_lock_acquire+0x10/0x10 [ 305.841771][T11589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.844680][T11807] alloc_pages_mpol_noprof+0x3e8/0x680 [ 305.844711][T11807] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 305.844748][T11807] vma_alloc_folio_noprof+0x12e/0x230 [ 305.849417][T11589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.854581][T11807] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 305.854615][T11807] folio_prealloc+0x2e/0x170 [ 305.854634][T11807] handle_pte_fault+0x2518/0x68a0 [ 305.953453][T11807] ? __pfx_handle_pte_fault+0x10/0x10 [ 305.958848][T11807] ? __lock_acquire+0x1397/0x2100 [ 305.964410][T11807] ? reacquire_held_locks+0x3eb/0x690 [ 305.969854][T11807] ? lock_vma_under_rcu+0x34b/0x790 [ 305.975089][T11807] ? __pfx_reacquire_held_locks+0x10/0x10 [ 305.980956][T11807] handle_mm_fault+0x1106/0x1bb0 [ 305.986566][T11807] ? __pfx_handle_mm_fault+0x10/0x10 [ 305.992213][T11807] ? lock_vma_under_rcu+0x602/0x790 [ 305.997422][T11807] ? lock_vma_under_rcu+0x1dd/0x790 [ 306.002642][T11807] ? exc_page_fault+0x113/0x8c0 [ 306.007529][T11807] exc_page_fault+0x459/0x8c0 [ 306.012232][T11807] asm_exc_page_fault+0x26/0x30 [ 306.017089][T11807] RIP: 0033:0x7ffa39a4a81b [ 306.021536][T11807] Code: 00 00 00 48 8d 3d e5 44 19 00 48 89 c1 31 c0 e8 1b 47 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 19 45 19 00 48 89 34 24 48 8b 14 24 48 8b [ 306.041253][T11807] RSP: 002b:00007ffa3aa4efd0 EFLAGS: 00010202 [ 306.047347][T11807] RAX: 0000000000000000 RBX: 00007ffa39d45fa0 RCX: 0000000000000000 [ 306.055340][T11807] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000200001c0 [ 306.063344][T11807] RBP: 00007ffa3aa500a0 R08: 0000000000000000 R09: 0000000000000000 [ 306.071494][T11807] R10: 00000000200001c0 R11: 0000000000000000 R12: 0000000000000001 [ 306.079641][T11807] R13: 0000000000000000 R14: 00007ffa39d45fa0 R15: 00007ffed43fdc18 [ 306.087633][T11807] [ 306.091480][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 306.148744][T11807] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 306.182931][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 306.195152][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 306.203835][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 306.299304][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.308641][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.370969][T11633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.411412][T11633] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.419252][ T6370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.440503][ T6370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.451108][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.458317][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.574813][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.581971][ T9495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.652924][T11633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.691767][T11633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.002494][T11836] sctp: [Deprecated]: syz.3.1414 (pid 11836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.002494][T11836] Use struct sctp_sack_info instead [ 307.030794][T11633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.163813][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.244326][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.430686][T11857] netlink: 'syz.2.1418': attribute type 3 has an invalid length. [ 307.432558][T11633] veth0_vlan: entered promiscuous mode [ 307.445084][T11857] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1418'. [ 307.484732][ T5861] Bluetooth: hci4: command 0x0419 tx timeout [ 307.492544][T11633] veth1_vlan: entered promiscuous mode [ 307.786077][ T6370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.810129][T11633] veth0_macvtap: entered promiscuous mode [ 307.841430][T11633] veth1_macvtap: entered promiscuous mode [ 307.859441][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.870061][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.881040][T11633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.893201][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.908814][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.920261][T11633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.932141][T11633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.941143][T11633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.949949][T11633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.958835][T11633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.018154][ T9498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.031711][ T9498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.052480][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.060527][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.182711][ T6370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.203909][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.283932][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.544230][ T6370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.593059][ T6370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.664229][ T6370] bridge_slave_1: left allmulticast mode [ 308.669909][ T6370] bridge_slave_1: left promiscuous mode [ 308.676026][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.685944][ T6370] bridge_slave_0: left allmulticast mode [ 308.691625][ T6370] bridge_slave_0: left promiscuous mode [ 308.697391][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.011931][ T6370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.022684][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.033065][ T6370] bond0 (unregistering): Released all slaves [ 309.243770][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 309.323767][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 309.529940][ T6370] hsr_slave_0: left promiscuous mode [ 309.539373][ T6370] hsr_slave_1: left promiscuous mode [ 309.547707][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.559366][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.570670][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.582165][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.617789][ T6370] veth1_macvtap: left promiscuous mode [ 309.623377][ T6370] veth0_macvtap: left promiscuous mode [ 309.631456][ T6370] veth1_vlan: left promiscuous mode [ 309.637038][ T6370] veth0_vlan: left promiscuous mode [ 309.641799][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.652696][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.662551][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.673095][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.683064][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 309.690689][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.099423][ T6370] team0 (unregistering): Port device team_slave_1 removed [ 310.147283][ T6370] team0 (unregistering): Port device team_slave_0 removed [ 310.297149][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.363820][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.586027][T11875] lo speed is unknown, defaulting to 1000 [ 310.792205][T11875] chnl_net:caif_netlink_parms(): no params data found [ 310.849166][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.856596][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.863863][T11875] bridge_slave_0: entered allmulticast mode [ 310.870455][T11875] bridge_slave_0: entered promiscuous mode [ 310.880153][T11875] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.890508][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.898463][T11875] bridge_slave_1: entered allmulticast mode [ 310.905831][T11875] bridge_slave_1: entered promiscuous mode [ 310.930976][T11875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.942835][T11875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.970976][T11875] team0: Port device team_slave_0 added [ 310.978725][T11875] team0: Port device team_slave_1 added [ 311.067888][T11889] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 311.080926][T11889] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 311.116106][T11875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.117694][T11885] netlink: 'syz.3.1426': attribute type 11 has an invalid length. [ 311.123096][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.159104][T11885] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1426'. [ 311.172148][T11875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.185458][T11875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.192647][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.287885][T11875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.323724][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 311.403795][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 311.416814][ T6370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.452026][T11885] sch_fq: defrate 511 ignored. [ 311.466848][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.480372][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.505709][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.534027][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.542570][ T5861] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 311.561566][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.723803][ T5863] Bluetooth: hci1: command tx timeout [ 311.838369][T11917] netlink: 'syz.1.1433': attribute type 3 has an invalid length. [ 311.846611][ T6370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.857401][T11917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1433'. [ 311.994144][ T6370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.121714][ T6370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.161955][T11875] hsr_slave_0: entered promiscuous mode [ 312.184377][T11875] hsr_slave_1: entered promiscuous mode [ 312.191768][T11875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.214993][T11875] Cannot create hsr debugfs directory [ 312.220859][T11902] lo speed is unknown, defaulting to 1000 [ 312.364267][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.541946][T11936] netlink: 'syz.2.1436': attribute type 10 has an invalid length. [ 312.600781][T11937] netlink: 'syz.2.1436': attribute type 10 has an invalid length. [ 312.612185][T11936] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 312.690704][ T6370] bridge_slave_1: left allmulticast mode [ 312.703627][ T6370] bridge_slave_1: left promiscuous mode [ 312.709527][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.734233][ T6370] bridge_slave_0: left allmulticast mode [ 312.740497][ T6370] bridge_slave_0: left promiscuous mode [ 312.753803][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.346608][ T6370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.375438][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.398634][ T6370] bond0 (unregistering): Released all slaves [ 313.404924][ C1] net_ratelimit: 1 callbacks suppressed [ 313.404960][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 313.483742][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 313.634918][T11951] netlink: 'syz.1.1441': attribute type 4 has an invalid length. [ 313.644104][ T5863] Bluetooth: hci4: command tx timeout [ 313.803828][ T5863] Bluetooth: hci1: command tx timeout [ 313.855288][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'. [ 314.050571][T11902] chnl_net:caif_netlink_parms(): no params data found [ 314.110151][T11966] nbd: must specify at least one socket [ 314.188373][ T6370] hsr_slave_0: left promiscuous mode [ 314.194590][ T6370] hsr_slave_1: left promiscuous mode [ 314.201906][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.211709][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.218512][T11972] netlink: 'syz.2.1445': attribute type 3 has an invalid length. [ 314.228972][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.233467][T11972] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1445'. [ 314.243821][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.287471][ T6370] veth1_macvtap: left promiscuous mode [ 314.293079][ T6370] veth0_macvtap: left promiscuous mode [ 314.314250][ T6370] veth1_vlan: left promiscuous mode [ 314.333812][ T6370] veth0_vlan: left promiscuous mode [ 314.443861][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 315.019536][ T6370] team0 (unregistering): Port device team_slave_1 removed [ 315.071729][ T6370] team0 (unregistering): Port device team_slave_0 removed [ 315.485686][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 315.723964][ T5863] Bluetooth: hci4: command tx timeout [ 315.805523][T11875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.825806][T11875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.837490][T11875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.892139][T11875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.908505][ T5863] Bluetooth: hci1: command tx timeout [ 316.055025][T11902] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.074378][T11902] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.081669][T11902] bridge_slave_0: entered allmulticast mode [ 316.117739][T11902] bridge_slave_0: entered promiscuous mode [ 316.128039][T11902] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.135994][T11902] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.143243][T11902] bridge_slave_1: entered allmulticast mode [ 316.150576][T11902] bridge_slave_1: entered promiscuous mode [ 316.352850][T12011] can: request_module (can-proto-0) failed. [ 316.377980][T11902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.418267][T11902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.491344][T11902] team0: Port device team_slave_0 added [ 316.517839][T11902] team0: Port device team_slave_1 added [ 316.533764][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 316.578853][T11875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.588314][T11902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.596561][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.624863][T11902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.638273][T11902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.645386][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.674225][T11902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.697291][T11875] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.730865][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.738018][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.758706][T11902] hsr_slave_0: entered promiscuous mode [ 316.766162][T11902] hsr_slave_1: entered promiscuous mode [ 316.772181][T11902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.780386][T11902] Cannot create hsr debugfs directory [ 316.788382][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.795544][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.229617][T12038] netlink: 'syz.1.1458': attribute type 3 has an invalid length. [ 317.238761][T12038] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1458'. [ 317.270905][T11875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.395322][T11875] veth0_vlan: entered promiscuous mode [ 317.421839][T11875] veth1_vlan: entered promiscuous mode [ 317.488979][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.495650][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.550816][T11875] veth0_macvtap: entered promiscuous mode [ 317.563708][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 317.608297][T11875] veth1_macvtap: entered promiscuous mode [ 317.622869][T11902] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.667019][T11902] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.719255][T11902] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.736727][T11902] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.782824][T11875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.814909][ T5863] Bluetooth: hci4: command tx timeout [ 317.823211][T11875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.848256][T11875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.857854][T11875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.867348][T11875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.876331][T11875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.980925][ T5863] Bluetooth: hci1: command tx timeout [ 318.052285][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.061183][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.179262][T11902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.206151][ T9498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.221278][ T9498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.282742][T11902] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.331331][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.338569][ T9495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.357658][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.364952][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.433322][T12075] siw: device registration error -23 [ 318.482937][T12080] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1469'. [ 318.603782][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 318.752549][T12092] FAULT_INJECTION: forcing a failure. [ 318.752549][T12092] name failslab, interval 1, probability 0, space 0, times 0 [ 318.793757][T12092] CPU: 1 UID: 0 PID: 12092 Comm: syz.2.1473 Not tainted 6.12.0-syzkaller-10684-gebf7f7d61681 #0 [ 318.804246][T12092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.814351][T12092] Call Trace: [ 318.817666][T12092] [ 318.820613][T12092] dump_stack_lvl+0x241/0x360 [ 318.825302][T12092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.830501][T12092] ? __pfx__printk+0x10/0x10 [ 318.835107][T12092] should_fail_ex+0x3b0/0x4e0 [ 318.839792][T12092] should_failslab+0xac/0x100 [ 318.844476][T12092] ? skb_clone+0x20c/0x390 [ 318.848909][T12092] kmem_cache_alloc_noprof+0x70/0x380 [ 318.854312][T12092] skb_clone+0x20c/0x390 [ 318.858573][T12092] __netlink_deliver_tap+0x3cc/0x7f0 [ 318.863876][T12092] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.869073][T12092] netlink_deliver_tap+0x19d/0x1b0 [ 318.874185][T12092] netlink_unicast+0x7c4/0x990 [ 318.879044][T12092] ? __pfx_netlink_unicast+0x10/0x10 [ 318.884329][T12092] ? __virt_addr_valid+0x183/0x530 [ 318.889447][T12092] ? __check_object_size+0x48e/0x900 [ 318.894759][T12092] netlink_sendmsg+0x8e4/0xcb0 [ 318.899557][T12092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.904861][T12092] ? aa_sock_msg_perm+0x91/0x160 [ 318.909811][T12092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.915095][T12092] __sock_sendmsg+0x221/0x270 [ 318.919775][T12092] ____sys_sendmsg+0x52a/0x7e0 [ 318.924548][T12092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.929831][T12092] ? __fget_files+0x2a/0x410 [ 318.934432][T12092] ? __sys_sendmmsg+0x392/0x720 [ 318.939279][T12092] ? __might_fault+0xaa/0x120 [ 318.943962][T12092] __sys_sendmmsg+0x36a/0x720 [ 318.948644][T12092] ? __pfx___sys_sendmmsg+0x10/0x10 [ 318.953871][T12092] ? __pfx_lock_release+0x10/0x10 [ 318.958895][T12092] ? kstrtouint_from_user+0x128/0x190 [ 318.964302][T12092] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 318.970237][T12092] ? ksys_write+0x22a/0x2b0 [ 318.974773][T12092] ? __pfx_lock_release+0x10/0x10 [ 318.979818][T12092] ? vfs_write+0x730/0xd30 [ 318.984285][T12092] ? __mutex_unlock_slowpath+0x21e/0x790 [ 318.989955][T12092] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.995944][T12092] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.002274][T12092] ? do_syscall_64+0x100/0x230 [ 319.007038][T12092] __x64_sys_sendmmsg+0xa0/0xb0 [ 319.011900][T12092] do_syscall_64+0xf3/0x230 [ 319.016457][T12092] ? clear_bhb_loop+0x35/0x90 [ 319.021155][T12092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.027084][T12092] RIP: 0033:0x7ffa39b7ff19 [ 319.031501][T12092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.051108][T12092] RSP: 002b:00007ffa3aa50058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 319.059528][T12092] RAX: ffffffffffffffda RBX: 00007ffa39d45fa0 RCX: 00007ffa39b7ff19 [ 319.067499][T12092] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 319.075494][T12092] RBP: 00007ffa3aa500a0 R08: 0000000000000000 R09: 0000000000000000 [ 319.083502][T12092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.091505][T12092] R13: 0000000000000000 R14: 00007ffa39d45fa0 R15: 00007ffed43fdc18 [ 319.099500][T12092] [ 319.138802][T11902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.243269][T12097] lo speed is unknown, defaulting to 1000 [ 319.268289][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1476'. [ 319.346493][T12103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1476'. [ 319.383820][T12103] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1476'. [ 319.404316][T12103] netlink: 'syz.1.1476': attribute type 6 has an invalid length. [ 319.412599][T12103] netlink: 'syz.1.1476': attribute type 5 has an invalid length. [ 319.461516][T12113] netlink: 'syz.2.1478': attribute type 10 has an invalid length. [ 319.470248][T12103] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1476'. [ 319.535795][T12115] netlink: 'syz.2.1478': attribute type 10 has an invalid length. [ 319.581723][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.625208][T12113] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 319.643703][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 319.681419][T11902] veth0_vlan: entered promiscuous mode [ 319.741839][T11902] veth1_vlan: entered promiscuous mode [ 319.828245][T11902] veth0_macvtap: entered promiscuous mode [ 319.838023][T11902] veth1_macvtap: entered promiscuous mode [ 319.857643][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.874220][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.884243][ T5863] Bluetooth: hci4: command tx timeout [ 319.891039][T11902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.905792][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.917579][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.932086][T11902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.944386][T11902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.953228][T11902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.962622][T11902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.971754][T11902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.035220][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.053736][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.082610][ T6370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.092423][ T6370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.479517][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.661374][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.683789][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 320.720050][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.793096][ T35] bridge_slave_1: left allmulticast mode [ 320.799194][ T35] bridge_slave_1: left promiscuous mode [ 320.805069][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.814237][ T35] bridge_slave_0: left allmulticast mode [ 320.819939][ T35] bridge_slave_0: left promiscuous mode [ 320.825941][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.148929][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.159636][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.176078][ T35] bond0 (unregistering): Released all slaves [ 321.608567][ T35] hsr_slave_0: left promiscuous mode [ 321.643838][ T35] hsr_slave_1: left promiscuous mode [ 321.656031][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.664160][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.672085][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.680043][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.705469][ T35] veth1_macvtap: left promiscuous mode [ 321.711169][ T35] veth0_macvtap: left promiscuous mode [ 321.717070][ T35] veth1_vlan: left promiscuous mode [ 321.722493][ T35] veth0_vlan: left promiscuous mode [ 321.723741][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 321.771219][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.787245][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.796772][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.807191][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.816223][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.825624][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.229829][ T35] team0 (unregistering): Port device team_slave_1 removed [ 322.276139][ T35] team0 (unregistering): Port device team_slave_0 removed [ 322.748079][T12125] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 322.763722][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 322.819342][T12126] lo speed is unknown, defaulting to 1000 [ 323.171817][T12126] chnl_net:caif_netlink_parms(): no params data found [ 323.323233][T12126] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.332812][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.340323][T12126] bridge_slave_0: entered allmulticast mode [ 323.348323][T12126] bridge_slave_0: entered promiscuous mode [ 323.356127][T12126] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.363262][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.371643][T12126] bridge_slave_1: entered allmulticast mode [ 323.378736][T12126] bridge_slave_1: entered promiscuous mode [ 323.394058][T12142] netlink: 'syz.2.1483': attribute type 3 has an invalid length. [ 323.401855][T12142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1483'. [ 323.449848][T12149] netlink: 'syz.3.1484': attribute type 3 has an invalid length. [ 323.498054][T12149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1484'. [ 323.521518][T12126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.662418][ T29] audit: type=1107 audit(1733293296.488:10): pid=12156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!' [ 323.711888][ T29] audit: type=1107 audit(1733293296.488:11): pid=12156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ê?' [ 323.747338][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.797946][T12126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.807293][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 323.883883][ T5861] Bluetooth: hci1: command tx timeout [ 323.915937][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.926491][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.949044][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.975653][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.988247][ T5863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 323.990402][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 324.004725][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.045586][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.066321][T12175] FAULT_INJECTION: forcing a failure. [ 324.066321][T12175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.079643][T12175] CPU: 0 UID: 0 PID: 12175 Comm: syz.2.1488 Not tainted 6.12.0-syzkaller-10684-gebf7f7d61681 #0 [ 324.090085][T12175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 324.100154][T12175] Call Trace: [ 324.103437][T12175] [ 324.106372][T12175] dump_stack_lvl+0x241/0x360 [ 324.111063][T12175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.116267][T12175] ? __pfx__printk+0x10/0x10 [ 324.120866][T12175] ? __pfx_lock_release+0x10/0x10 [ 324.125896][T12175] should_fail_ex+0x3b0/0x4e0 [ 324.130581][T12175] _copy_from_user+0x2f/0xc0 [ 324.135173][T12175] copy_msghdr_from_user+0xae/0x680 [ 324.140380][T12175] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 324.146205][T12175] ? __fget_files+0x2a/0x410 [ 324.150833][T12175] ? __fget_files+0x2a/0x410 [ 324.155451][T12175] __sys_sendmsg+0x209/0x350 [ 324.160071][T12175] ? __pfx_lock_release+0x10/0x10 [ 324.165102][T12175] ? __pfx___sys_sendmsg+0x10/0x10 [ 324.170229][T12175] ? __pfx_vfs_write+0x10/0x10 [ 324.175011][T12175] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 324.181338][T12175] ? do_syscall_64+0x100/0x230 [ 324.186101][T12175] ? do_syscall_64+0xb6/0x230 [ 324.190779][T12175] do_syscall_64+0xf3/0x230 [ 324.195281][T12175] ? clear_bhb_loop+0x35/0x90 [ 324.199966][T12175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.205859][T12175] RIP: 0033:0x7ffa39b7ff19 [ 324.210280][T12175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.229901][T12175] RSP: 002b:00007ffa3aa2f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.238329][T12175] RAX: ffffffffffffffda RBX: 00007ffa39d46080 RCX: 00007ffa39b7ff19 [ 324.246305][T12175] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000006 [ 324.254275][T12175] RBP: 00007ffa3aa2f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 324.262293][T12175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.270281][T12175] R13: 0000000000000001 R14: 00007ffa39d46080 R15: 00007ffed43fdc18 [ 324.278300][T12175] [ 324.292340][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'. [ 324.304446][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1487'. [ 324.320392][T12126] team0: Port device team_slave_0 added [ 324.330687][T12126] team0: Port device team_slave_1 added [ 324.340488][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'. [ 324.398263][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.453431][T12165] lo speed is unknown, defaulting to 1000 [ 324.476131][T12180] dvmrp5: entered allmulticast mode [ 324.493950][T12182] dvmrp5: left allmulticast mode [ 324.570680][T12180] netlink: 'syz.1.1490': attribute type 1 has an invalid length. [ 324.645790][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.681520][T12126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.689492][T12187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1492'. [ 324.689494][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.689523][T12126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.810872][T12188] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.819560][T12188] bond4: (slave bond5): making interface the new active one [ 324.828530][T12188] bond4: (slave bond5): Enslaving as an active interface with an up link [ 324.843724][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 324.863978][T12190] netlink: 'syz.1.1490': attribute type 4 has an invalid length. [ 324.900024][T12126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.912523][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.941541][T12126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.984302][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 324.998063][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 325.070741][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 325.113939][T12126] hsr_slave_0: entered promiscuous mode [ 325.135994][T12126] hsr_slave_1: entered promiscuous mode [ 325.162206][T12205] FAULT_INJECTION: forcing a failure. [ 325.162206][T12205] name failslab, interval 1, probability 0, space 0, times 0 [ 325.162537][T12126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.200027][T12205] CPU: 0 UID: 0 PID: 12205 Comm: syz.1.1496 Not tainted 6.12.0-syzkaller-10684-gebf7f7d61681 #0 [ 325.204722][T12126] Cannot create hsr debugfs directory [ 325.210490][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.225949][T12205] Call Trace: [ 325.229251][T12205] [ 325.232211][T12205] dump_stack_lvl+0x241/0x360 [ 325.236934][T12205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.242173][T12205] ? __pfx__printk+0x10/0x10 [ 325.246819][T12205] ? __kmalloc_noprof+0xb5/0x4c0 [ 325.251803][T12205] ? __pfx___might_resched+0x10/0x10 [ 325.257144][T12205] should_fail_ex+0x3b0/0x4e0 [ 325.261867][T12205] should_failslab+0xac/0x100 [ 325.266593][T12205] __kmalloc_noprof+0xdd/0x4c0 [ 325.271398][T12205] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 325.277688][T12205] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 325.283800][T12205] ? __pfx_ethnl_default_start+0x10/0x10 [ 325.289474][T12205] genl_rcv_msg+0x802/0xec0 [ 325.294011][T12205] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.299067][T12205] ? __pfx_lock_acquire+0x10/0x10 [ 325.304092][T12205] ? __pfx_ethnl_default_doit+0x10/0x10 [ 325.309651][T12205] ? __pfx___might_resched+0x10/0x10 [ 325.314949][T12205] netlink_rcv_skb+0x1e3/0x430 [ 325.319722][T12205] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.324757][T12205] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.330066][T12205] genl_rcv+0x28/0x40 [ 325.334053][T12205] netlink_unicast+0x7f6/0x990 [ 325.338829][T12205] ? __pfx_netlink_unicast+0x10/0x10 [ 325.344210][T12205] ? __virt_addr_valid+0x183/0x530 [ 325.349328][T12205] ? __check_object_size+0x48e/0x900 [ 325.354618][T12205] netlink_sendmsg+0x8e4/0xcb0 [ 325.359393][T12205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.364766][T12205] ? aa_sock_msg_perm+0x91/0x160 [ 325.369717][T12205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.375028][T12205] __sock_sendmsg+0x221/0x270 [ 325.379715][T12205] ____sys_sendmsg+0x52a/0x7e0 [ 325.384500][T12205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.389811][T12205] ? __fget_files+0x2a/0x410 [ 325.394431][T12205] ? __fget_files+0x2a/0x410 [ 325.399042][T12205] __sys_sendmsg+0x269/0x350 [ 325.403667][T12205] ? __pfx_lock_release+0x10/0x10 [ 325.408717][T12205] ? __pfx___sys_sendmsg+0x10/0x10 [ 325.413955][T12205] ? __pfx_vfs_write+0x10/0x10 [ 325.418777][T12205] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.425139][T12205] ? do_syscall_64+0x100/0x230 [ 325.429949][T12205] ? do_syscall_64+0xb6/0x230 [ 325.434649][T12205] do_syscall_64+0xf3/0x230 [ 325.439244][T12205] ? clear_bhb_loop+0x35/0x90 [ 325.444030][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.449963][T12205] RIP: 0033:0x7f1e0917ff19 [ 325.454402][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.474193][T12205] RSP: 002b:00007f1e09f0c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.482617][T12205] RAX: ffffffffffffffda RBX: 00007f1e09345fa0 RCX: 00007f1e0917ff19 [ 325.490597][T12205] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 325.498578][T12205] RBP: 00007f1e09f0c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 325.506555][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.514529][T12205] R13: 0000000000000000 R14: 00007f1e09345fa0 R15: 00007ffe30646298 [ 325.522512][T12205] [ 325.546096][ T35] bridge_slave_1: left allmulticast mode [ 325.551818][ T35] bridge_slave_1: left promiscuous mode [ 325.585914][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.596062][ T35] bridge_slave_0: left allmulticast mode [ 325.601847][ T35] bridge_slave_0: left promiscuous mode [ 325.629242][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.671300][T12217] netlink: 'syz.1.1499': attribute type 2 has an invalid length. [ 325.679488][T12217] netlink: 'syz.1.1499': attribute type 4 has an invalid length. [ 325.883713][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.964743][ T5863] Bluetooth: hci1: command tx timeout [ 326.043849][ T5863] Bluetooth: hci4: command tx timeout [ 326.117656][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.130525][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.140942][ T35] bond0 (unregistering): Released all slaves [ 326.590451][T12165] chnl_net:caif_netlink_parms(): no params data found [ 326.642387][T12239] netlink: 'syz.1.1504': attribute type 10 has an invalid length. [ 326.659744][T12239] bond0: (slave »»»»»»): Releasing backup interface [ 326.670177][T12239] netdevsim netdevsim1 »»»»»»: left allmulticast mode [ 326.688835][T12239] netlink: 'syz.1.1504': attribute type 10 has an invalid length. [ 326.722718][T12239] netdevsim netdevsim1 »»»»»»: entered allmulticast mode [ 326.738101][T12239] bond0: (slave »»»»»»): Enslaving as an active interface with an up link [ 326.923706][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.968776][ T35] hsr_slave_0: left promiscuous mode [ 326.981641][ T35] hsr_slave_1: left promiscuous mode [ 327.032268][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.048141][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.054958][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 327.107194][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.115337][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.179161][ T35] veth1_macvtap: left promiscuous mode [ 327.184830][ T35] veth0_macvtap: left promiscuous mode [ 327.190450][ T35] veth1_vlan: left promiscuous mode [ 327.195891][ T35] veth0_vlan: left promiscuous mode [ 327.964034][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 328.049931][ T5863] Bluetooth: hci1: command tx timeout [ 328.094387][ T35] team0 (unregistering): Port device team_slave_1 removed [ 328.124692][ T5863] Bluetooth: hci4: command tx timeout [ 328.168172][ T35] team0 (unregistering): Port device team_slave_0 removed [ 328.809844][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.836733][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.857540][T12282] netlink: 'syz.1.1516': attribute type 3 has an invalid length. [ 328.867576][T12165] bridge_slave_0: entered allmulticast mode [ 328.868263][T12282] __nla_validate_parse: 7 callbacks suppressed [ 328.868279][T12282] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1516'. [ 328.881172][T12165] bridge_slave_0: entered promiscuous mode [ 328.916065][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.924805][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.932037][T12165] bridge_slave_1: entered allmulticast mode [ 328.939495][T12165] bridge_slave_1: entered promiscuous mode [ 329.003718][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 329.107059][T12165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.139290][T12165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.310466][T12165] team0: Port device team_slave_0 added [ 329.329183][T12165] team0: Port device team_slave_1 added [ 329.414579][T12165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.421592][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.453024][T12306] netlink: 'syz.1.1522': attribute type 10 has an invalid length. [ 329.467138][T12165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.487043][T12306] bond0: (slave »»»»»»): Releasing backup interface [ 329.496792][T12306] netdevsim netdevsim1 »»»»»»: left allmulticast mode [ 329.504979][T12165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.505032][T12309] netlink: 'syz.1.1522': attribute type 10 has an invalid length. [ 329.523749][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.551200][T12165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.567178][T12126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.583984][T12126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.598769][T12309] netdevsim netdevsim1 »»»»»»: entered allmulticast mode [ 329.607369][T12309] bond0: (slave »»»»»»): Enslaving as an active interface with an up link [ 329.619913][T12126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.654790][T12126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.721889][T12165] hsr_slave_0: entered promiscuous mode [ 329.759276][T12165] hsr_slave_1: entered promiscuous mode [ 329.766251][T12165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.774223][T12165] Cannot create hsr debugfs directory [ 329.829730][T12314] ip6t_rpfilter: unknown options [ 330.043726][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 330.117367][T12126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.134898][ T5863] Bluetooth: hci1: command tx timeout [ 330.144259][T12126] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.196479][ T9498] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.203714][ T9498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.211621][ T5863] Bluetooth: hci4: command tx timeout [ 330.252815][ T9497] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.260028][ T9497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.494790][T12165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.522072][T12165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.543849][T12165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.558217][T12331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1531'. [ 330.562308][T12165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.721725][T12126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.758490][T12165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.825011][T12165] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.846563][T12338] netlink: 'syz.3.1532': attribute type 3 has an invalid length. [ 330.863857][T12338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1532'. [ 330.881983][T12126] veth0_vlan: entered promiscuous mode [ 330.917093][T12338] bridge0: port 1(vlan3) entered blocking state [ 330.938583][T12338] bridge0: port 1(vlan3) entered disabled state [ 330.948738][T12338] vlan3: entered allmulticast mode [ 330.963033][T12338] vlan3: left allmulticast mode [ 331.018705][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.025968][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.040917][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.048111][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.083782][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.112367][T12126] veth1_vlan: entered promiscuous mode [ 331.246677][T12126] veth0_macvtap: entered promiscuous mode [ 331.266890][T12126] veth1_macvtap: entered promiscuous mode [ 331.312935][T12126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.337850][T12355] xt_CT: No such helper "netbios-ns" [ 331.390298][T12126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.446764][T12126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.473681][T12126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.499749][T12126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.517415][T12126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.535780][T12364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1539'. [ 331.642798][T12165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.722321][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.730546][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.800387][T12379] netlink: 'syz.3.1543': attribute type 10 has an invalid length. [ 331.818555][T12379] netlink: 'syz.3.1543': attribute type 10 has an invalid length. [ 331.828097][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.841049][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.123782][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 332.169063][T12165] veth0_vlan: entered promiscuous mode [ 332.191264][T12165] veth1_vlan: entered promiscuous mode [ 332.261763][T12165] veth0_macvtap: entered promiscuous mode [ 332.284178][ T5861] Bluetooth: hci4: command tx timeout [ 332.300980][T12165] veth1_macvtap: entered promiscuous mode [ 332.326782][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.343145][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.362856][T12165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.402397][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.429532][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.454627][T12165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.482808][T12165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.500448][T12165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.512548][T12165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.528830][T12165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.651563][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.666995][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.711675][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.725820][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.163780][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 333.253885][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.203819][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 334.224439][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.271268][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.321329][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.363861][ T5861] Bluetooth: hci4: command 0x0405 tx timeout [ 334.453387][ T35] bridge_slave_1: left allmulticast mode [ 334.459590][ T35] bridge_slave_1: left promiscuous mode [ 334.466007][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.474712][ T35] bridge_slave_0: left allmulticast mode [ 334.480477][ T35] bridge_slave_0: left promiscuous mode [ 334.486564][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.884796][T12423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'. [ 334.907988][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'. [ 335.043225][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.061235][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.074066][ T35] bond0 (unregistering): Released all slaves [ 335.111072][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.122132][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.132326][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.171001][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.189875][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.197826][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.240181][T12430] lo speed is unknown, defaulting to 1000 [ 335.246097][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 335.450106][ T35] hsr_slave_0: left promiscuous mode [ 335.458186][ T35] hsr_slave_1: left promiscuous mode [ 335.466998][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.481681][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.489767][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.497322][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.515976][ T35] veth1_macvtap: left promiscuous mode [ 335.521529][ T35] veth0_macvtap: left promiscuous mode [ 335.527346][ T35] veth1_vlan: left promiscuous mode [ 335.532713][ T35] veth0_vlan: left promiscuous mode [ 335.947199][ T35] team0 (unregistering): Port device team_slave_1 removed [ 335.997201][ T35] team0 (unregistering): Port device team_slave_0 removed [ 336.288391][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.485222][T12430] chnl_net:caif_netlink_parms(): no params data found [ 336.567361][T12430] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.574922][T12430] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.582167][T12430] bridge_slave_0: entered allmulticast mode [ 336.589594][T12430] bridge_slave_0: entered promiscuous mode [ 336.597195][T12430] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.605494][T12430] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.613058][T12430] bridge_slave_1: entered allmulticast mode [ 336.627357][T12430] bridge_slave_1: entered promiscuous mode [ 336.657713][T12430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.668597][T12430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.807013][T12446] netlink: 'syz.1.1562': attribute type 10 has an invalid length. [ 336.839474][T12430] team0: Port device team_slave_0 added [ 336.897174][T12448] netlink: 'syz.1.1562': attribute type 10 has an invalid length. [ 336.925748][T12446] bond0: (slave »»»»»»): Releasing backup interface [ 336.934300][T12446] netdevsim netdevsim1 »»»»»»: left allmulticast mode [ 336.955115][T12430] team0: Port device team_slave_1 added [ 336.968865][T12448] netdevsim netdevsim1 »»»»»»: entered allmulticast mode [ 336.986214][T12448] bond0: (slave »»»»»»): Enslaving as an active interface with an up link [ 337.078909][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.091069][T12430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.098630][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.108128][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.134796][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.142033][T12430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.155486][T12430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.162473][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.189043][T12430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.199730][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.207444][ T5863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.216179][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.243790][ T5861] Bluetooth: hci1: command tx timeout [ 337.323712][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 337.416029][ T6370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.451967][T12430] hsr_slave_0: entered promiscuous mode [ 337.462201][T12430] hsr_slave_1: entered promiscuous mode [ 337.473913][T12462] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1567'. [ 337.483082][T12430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.503668][T12430] Cannot create hsr debugfs directory [ 337.545114][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 337.606589][ T6370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.622303][T12453] lo speed is unknown, defaulting to 1000 [ 337.722138][ T6370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.887682][ T6370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.942007][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1570'. [ 337.953938][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1570'. [ 338.251853][ T6370] bridge_slave_1: left allmulticast mode [ 338.257826][ T6370] bridge_slave_1: left promiscuous mode [ 338.264356][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.273279][ T6370] bridge_slave_0: left allmulticast mode [ 338.279405][ T6370] bridge_slave_0: left promiscuous mode [ 338.285873][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.365728][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 338.664678][ T6370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.676200][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.688437][ T6370] bond0 (unregistering): Released all slaves [ 338.750895][T12453] chnl_net:caif_netlink_parms(): no params data found [ 338.932679][T12453] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.949325][T12453] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.967412][T12453] bridge_slave_0: entered allmulticast mode [ 338.983850][T12453] bridge_slave_0: entered promiscuous mode [ 339.021265][T12453] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.038655][T12453] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.073976][T12453] bridge_slave_1: entered allmulticast mode [ 339.081039][T12453] bridge_slave_1: entered promiscuous mode [ 339.114669][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 339.226783][T12453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.244564][ T5861] Bluetooth: hci4: command tx timeout [ 339.326343][ T5861] Bluetooth: hci1: command tx timeout [ 339.403784][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 339.465701][T12453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.562271][ T6370] hsr_slave_0: left promiscuous mode [ 339.577290][ T6370] hsr_slave_1: left promiscuous mode [ 339.585308][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.592809][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.605022][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.612584][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.650183][ T6370] veth1_macvtap: left promiscuous mode [ 339.660248][ T6370] veth0_macvtap: left promiscuous mode [ 339.667614][ T6370] veth1_vlan: left promiscuous mode [ 339.673258][ T6370] veth0_vlan: left promiscuous mode [ 340.234335][ T6370] team0 (unregistering): Port device team_slave_1 removed [ 340.311651][ T6370] team0 (unregistering): Port device team_slave_0 removed [ 340.443756][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 340.780541][T12519] tipc: New replicast peer: 255.255.255.255 [ 340.788814][T12519] tipc: Enabled bearer , priority 10 [ 340.827706][T12453] team0: Port device team_slave_0 added [ 340.836078][T12453] team0: Port device team_slave_1 added [ 340.843190][T12430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.865365][T12430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.949660][T12430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.958665][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 340.965565][T12530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1585'. [ 340.989920][T12453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.997381][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.024261][T12453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.035967][T12430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.057572][T12453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.064870][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.118812][T12453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.192570][T12453] hsr_slave_0: entered promiscuous mode [ 341.204130][T12453] hsr_slave_1: entered promiscuous mode [ 341.216202][T12453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.224047][T12453] Cannot create hsr debugfs directory [ 341.323801][ T5863] Bluetooth: hci4: command tx timeout [ 341.403934][ T5863] Bluetooth: hci1: command tx timeout [ 341.484686][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 341.494798][T12430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.528345][T12430] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.547092][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.554316][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.599809][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.607025][ T9495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.832336][T12453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 341.852294][T12453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 341.864849][T12453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 341.881348][T12453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 341.912400][T12430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.986927][T12430] veth0_vlan: entered promiscuous mode [ 342.004664][T12430] veth1_vlan: entered promiscuous mode [ 342.033341][T12453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.062013][T12430] veth0_macvtap: entered promiscuous mode [ 342.073092][T12453] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.082688][T12430] veth1_macvtap: entered promiscuous mode [ 342.101330][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.108464][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.128037][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.135302][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.153085][T12430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.171060][T12430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.187153][T12430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.197160][T12430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.206563][T12430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.216015][T12430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.353014][ T9495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.383848][ T9495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.407549][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.419733][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.437740][T12563] FAULT_INJECTION: forcing a failure. [ 342.437740][T12563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.451410][T12563] CPU: 0 UID: 0 PID: 12563 Comm: syz.3.1596 Not tainted 6.12.0-syzkaller-10684-gebf7f7d61681 #0 [ 342.461871][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.471973][T12563] Call Trace: [ 342.475289][T12563] [ 342.478248][T12563] dump_stack_lvl+0x241/0x360 [ 342.482971][T12563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.488211][T12563] ? __pfx__printk+0x10/0x10 [ 342.492824][T12563] ? __pfx_lock_release+0x10/0x10 [ 342.497863][T12563] ? __lock_acquire+0x1397/0x2100 [ 342.502898][T12563] should_fail_ex+0x3b0/0x4e0 [ 342.507585][T12563] _copy_from_user+0x2f/0xc0 [ 342.512185][T12563] kstrtouint_from_user+0xc6/0x190 [ 342.517298][T12563] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 342.523023][T12563] ? __pfx_lock_acquire+0x10/0x10 [ 342.523849][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 342.528050][T12563] proc_fail_nth_write+0xaa/0x2d0 [ 342.540018][T12563] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 342.545940][T12563] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 342.551598][T12563] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 342.557238][T12563] vfs_write+0x2a3/0xd30 [ 342.561514][T12563] ? __pfx_vfs_write+0x10/0x10 [ 342.566306][T12563] ? __fget_files+0x2a/0x410 [ 342.570960][T12563] ? __fget_files+0x395/0x410 [ 342.575700][T12563] ? __fget_files+0x2a/0x410 [ 342.580309][T12563] ksys_write+0x18f/0x2b0 [ 342.584645][T12563] ? __pfx_ksys_write+0x10/0x10 [ 342.589505][T12563] ? do_syscall_64+0x100/0x230 [ 342.594286][T12563] ? do_syscall_64+0xb6/0x230 [ 342.598963][T12563] do_syscall_64+0xf3/0x230 [ 342.603462][T12563] ? clear_bhb_loop+0x35/0x90 [ 342.608144][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.614039][T12563] RIP: 0033:0x7fd52ab7e9cf [ 342.618454][T12563] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 342.638065][T12563] RSP: 002b:00007fd52ba39050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 342.646484][T12563] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd52ab7e9cf [ 342.654460][T12563] RDX: 0000000000000001 RSI: 00007fd52ba390b0 RDI: 0000000000000004 [ 342.662430][T12563] RBP: 00007fd52ba390a0 R08: 0000000000000000 R09: 0000000000000000 [ 342.670400][T12563] R10: 0000000000040000 R11: 0000000000000293 R12: 0000000000000001 [ 342.678367][T12563] R13: 0000000000000000 R14: 00007fd52ad45fa0 R15: 00007ffd5ae7a348 [ 342.686374][T12563] [ 342.866897][T12453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.929513][T12574] netlink: 'syz.2.1598': attribute type 3 has an invalid length. [ 342.944850][T12574] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1598'. [ 343.349500][T12453] veth0_vlan: entered promiscuous mode [ 343.380949][T12453] veth1_vlan: entered promiscuous mode [ 343.404691][ T5863] Bluetooth: hci4: command 0x040f tx timeout [ 343.427592][T12453] veth0_macvtap: entered promiscuous mode [ 343.447013][T12453] veth1_macvtap: entered promiscuous mode [ 343.472531][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.492086][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.509238][T12453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.519945][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.538515][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.550884][T12453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.563639][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.580149][T12453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.593402][ T29] audit: type=1107 audit(1733293316.428:12): pid=12599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!' [ 343.614889][T12453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.623652][ T29] audit: type=1107 audit(1733293316.428:13): pid=12599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ê?' [ 343.653842][T12453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.662613][T12453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.684556][T12603] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1606'. [ 343.719175][T12603] pim6reg1: entered promiscuous mode [ 343.730605][T12603] pim6reg1: entered allmulticast mode [ 343.742826][T12603] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1606'. [ 344.121082][ T6370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.251357][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.269891][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.299604][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.312811][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.603834][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 345.216273][ T6370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.292288][ T6370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.349931][ T6370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.437168][ T6370] bridge_slave_1: left allmulticast mode [ 345.442840][ T6370] bridge_slave_1: left promiscuous mode [ 345.449019][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.459047][ T6370] bridge_slave_0: left allmulticast mode [ 345.465216][ T6370] bridge_slave_0: left promiscuous mode [ 345.470900][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.643661][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 345.889050][T12623] FAULT_INJECTION: forcing a failure. [ 345.889050][T12623] name failslab, interval 1, probability 0, space 0, times 0 [ 345.933773][T12623] CPU: 0 UID: 0 PID: 12623 Comm: syz.1.1609 Not tainted 6.12.0-syzkaller-10684-gebf7f7d61681 #0 [ 345.944260][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 345.954344][T12623] Call Trace: [ 345.957669][T12623] [ 345.960627][T12623] dump_stack_lvl+0x241/0x360 [ 345.965341][T12623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.970580][T12623] ? __pfx__printk+0x10/0x10 [ 345.975210][T12623] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 345.981232][T12623] ? __pfx___might_resched+0x10/0x10 [ 345.986566][T12623] should_fail_ex+0x3b0/0x4e0 [ 345.991282][T12623] should_failslab+0xac/0x100 [ 345.996004][T12623] kmem_cache_alloc_node_noprof+0x77/0x380 [ 346.001858][T12623] ? __alloc_skb+0x1c3/0x440 [ 346.006487][T12623] __alloc_skb+0x1c3/0x440 [ 346.010946][T12623] ? __pfx___alloc_skb+0x10/0x10 [ 346.015934][T12623] ? netlink_autobind+0xd6/0x2f0 [ 346.020906][T12623] ? netlink_autobind+0x2b0/0x2f0 [ 346.025974][T12623] netlink_sendmsg+0x638/0xcb0 [ 346.030773][T12623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.036073][T12623] ? aa_sock_msg_perm+0x91/0x160 [ 346.041026][T12623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.046330][T12623] __sock_sendmsg+0x221/0x270 [ 346.051124][T12623] ____sys_sendmsg+0x52a/0x7e0 [ 346.055917][T12623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.061209][T12623] ? __fget_files+0x2a/0x410 [ 346.065810][T12623] ? __fget_files+0x2a/0x410 [ 346.070408][T12623] __sys_sendmsg+0x269/0x350 [ 346.074999][T12623] ? __pfx_lock_release+0x10/0x10 [ 346.080056][T12623] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.085194][T12623] ? __pfx_vfs_write+0x10/0x10 [ 346.089992][T12623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 346.096321][T12623] ? do_syscall_64+0x100/0x230 [ 346.101091][T12623] ? do_syscall_64+0xb6/0x230 [ 346.105780][T12623] do_syscall_64+0xf3/0x230 [ 346.110280][T12623] ? clear_bhb_loop+0x35/0x90 [ 346.114961][T12623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.120854][T12623] RIP: 0033:0x7f1e0917ff19 [ 346.125273][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.144901][T12623] RSP: 002b:00007f1e09eeb058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.153326][T12623] RAX: ffffffffffffffda RBX: 00007f1e09346080 RCX: 00007f1e0917ff19 [ 346.161300][T12623] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000006 [ 346.169702][T12623] RBP: 00007f1e09eeb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 346.177677][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.185642][T12623] R13: 0000000000000001 R14: 00007f1e09346080 R15: 00007ffe30646298 [ 346.193625][T12623] [ 346.235437][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'. [ 346.293542][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 346.340228][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.351975][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.360864][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.374260][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.382448][ T5863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.383540][ T6370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.394057][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.410980][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.423411][ T6370] bond0 (unregistering): Released all slaves [ 346.464152][T12626] lo speed is unknown, defaulting to 1000 [ 346.683685][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.721827][T12626] chnl_net:caif_netlink_parms(): no params data found [ 346.797272][ T6370] hsr_slave_0: left promiscuous mode [ 346.803278][ T6370] hsr_slave_1: left promiscuous mode [ 346.810951][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.826584][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.835184][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.842828][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.863265][ T6370] veth1_macvtap: left promiscuous mode [ 346.869209][ T6370] veth0_macvtap: left promiscuous mode [ 346.874936][ T6370] veth1_vlan: left promiscuous mode [ 346.880192][ T6370] veth0_vlan: left promiscuous mode [ 347.301717][ T6370] team0 (unregistering): Port device team_slave_1 removed [ 347.346837][ T6370] team0 (unregistering): Port device team_slave_0 removed [ 347.723655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 347.936810][T12626] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.965175][T12626] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.974207][T12644] netlink: 'syz.2.1613': attribute type 3 has an invalid length. [ 347.982103][T12644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1613'. [ 348.014621][T12626] bridge_slave_0: entered allmulticast mode [ 348.027511][T12626] bridge_slave_0: entered promiscuous mode [ 348.075913][T12626] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.119708][T12626] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.129662][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.149461][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.158159][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.182695][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.191416][ T5861] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.195676][T12626] bridge_slave_1: entered allmulticast mode [ 348.217727][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.244858][T12626] bridge_slave_1: entered promiscuous mode [ 348.377495][T12626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.392695][T12646] lo speed is unknown, defaulting to 1000 [ 348.438703][T12626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.454259][ T5861] Bluetooth: hci1: command tx timeout [ 348.581058][T12626] team0: Port device team_slave_0 added [ 348.603023][T12626] team0: Port device team_slave_1 added [ 348.652056][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 348.667637][T12626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.675886][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 348.685061][T12626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.685098][T12626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.690099][T12626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.733941][T12626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.748781][T12667] netlink: 'syz.1.1619': attribute type 14 has an invalid length. [ 348.767897][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.799255][T12626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.869498][ T6370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.940666][T12678] FAULT_INJECTION: forcing a failure. [ 348.940666][T12678] name failslab, interval 1, probability 0, space 0, times 0 [ 348.960550][T12678] CPU: 0 UID: 0 PID: 12678 Comm: syz.1.1621 Not tainted 6.12.0-syzkaller-10684-gebf7f7d61681 #0 [ 348.971087][T12678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 348.981177][T12678] Call Trace: [ 348.984467][T12678] [ 348.987400][T12678] dump_stack_lvl+0x241/0x360 [ 348.992097][T12678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.997309][T12678] ? __pfx__printk+0x10/0x10 [ 349.001916][T12678] ? __kmalloc_noprof+0xb5/0x4c0 [ 349.006883][T12678] ? __pfx___might_resched+0x10/0x10 [ 349.012196][T12678] should_fail_ex+0x3b0/0x4e0 [ 349.016888][T12678] should_failslab+0xac/0x100 [ 349.021572][T12678] __kmalloc_noprof+0xdd/0x4c0 [ 349.026353][T12678] ? ethnl_default_doit+0x201/0xd80 [ 349.031557][T12678] ethnl_default_doit+0x201/0xd80 [ 349.036610][T12678] ? __nla_parse+0x40/0x60 [ 349.041046][T12678] ? __pfx_ethnl_default_doit+0x10/0x10 [ 349.046620][T12678] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 349.052980][T12678] genl_rcv_msg+0xb14/0xec0 [ 349.057532][T12678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.062596][T12678] ? __pfx_lock_acquire+0x10/0x10 [ 349.067628][T12678] ? __pfx_ethnl_default_doit+0x10/0x10 [ 349.073175][T12678] ? __pfx___might_resched+0x10/0x10 [ 349.078471][T12678] netlink_rcv_skb+0x1e3/0x430 [ 349.083232][T12678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.088280][T12678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.093614][T12678] genl_rcv+0x28/0x40 [ 349.097627][T12678] netlink_unicast+0x7f6/0x990 [ 349.102411][T12678] ? __pfx_netlink_unicast+0x10/0x10 [ 349.107702][T12678] ? __virt_addr_valid+0x183/0x530 [ 349.112815][T12678] ? __check_object_size+0x48e/0x900 [ 349.118106][T12678] netlink_sendmsg+0x8e4/0xcb0 [ 349.122880][T12678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.128176][T12678] ? aa_sock_msg_perm+0x91/0x160 [ 349.133159][T12678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.138460][T12678] __sock_sendmsg+0x221/0x270 [ 349.143150][T12678] ____sys_sendmsg+0x52a/0x7e0 [ 349.147957][T12678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.153440][T12678] ? __fget_files+0x2a/0x410 [ 349.158048][T12678] ? __fget_files+0x2a/0x410 [ 349.162652][T12678] __sys_sendmsg+0x269/0x350 [ 349.167263][T12678] ? __pfx_lock_release+0x10/0x10 [ 349.172311][T12678] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.177471][T12678] ? __pfx_vfs_write+0x10/0x10 [ 349.182272][T12678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.188608][T12678] ? do_syscall_64+0x100/0x230 [ 349.193375][T12678] ? do_syscall_64+0xb6/0x230 [ 349.198090][T12678] do_syscall_64+0xf3/0x230 [ 349.202592][T12678] ? clear_bhb_loop+0x35/0x90 [ 349.207275][T12678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.213175][T12678] RIP: 0033:0x7f1e0917ff19 [ 349.217592][T12678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.237290][T12678] RSP: 002b:00007f1e09f0c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.245714][T12678] RAX: ffffffffffffffda RBX: 00007f1e09345fa0 RCX: 00007f1e0917ff19 [ 349.253692][T12678] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 349.261684][T12678] RBP: 00007f1e09f0c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.269654][T12678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.277623][T12678] R13: 0000000000000000 R14: 00007f1e09345fa0 R15: 00007ffe30646298 [ 349.285629][T12678] [ 349.323448][ T6370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.428006][T12682] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 349.445137][T12682] macvlan2: entered allmulticast mode [ 349.450568][T12682] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 349.462735][T12682] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 349.470408][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 349.538356][ T6370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.563452][T12626] hsr_slave_0: entered promiscuous mode [ 349.594999][T12626] hsr_slave_1: entered promiscuous mode [ 349.628920][T12626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.654900][T12626] Cannot create hsr debugfs directory [ 349.673322][T12694] syz.2.1626[12694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.673441][T12694] syz.2.1626[12694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.687293][T12692] FAULT_INJECTION: forcing a failure. [ 349.687293][T12692] name failslab, interval 1, probability 0, space 0, times 0 [ 349.721482][T12694] syz.2.1626[12694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.722266][T12692] CPU: 1 UID: 0 PID: 12692 Comm: syz.3.1625 Not tainted 6.12.0-syzkaller-10684-gebf7f7d61681 #0 [ 349.744212][T12692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.754290][T12692] Call Trace: [ 349.757566][T12692] [ 349.760518][T12692] dump_stack_lvl+0x241/0x360 [ 349.765218][T12692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.770537][T12692] ? __pfx__printk+0x10/0x10 [ 349.775156][T12692] ? kmem_cache_alloc_noprof+0x48/0x380 [ 349.780709][T12692] ? __pfx___might_resched+0x10/0x10 [ 349.786014][T12692] should_fail_ex+0x3b0/0x4e0 [ 349.790707][T12692] should_failslab+0xac/0x100 [ 349.795388][T12692] ? __kernfs_new_node+0xd8/0x870 [ 349.800415][T12692] kmem_cache_alloc_noprof+0x70/0x380 [ 349.805924][T12692] __kernfs_new_node+0xd8/0x870 [ 349.810833][T12692] ? __pfx___kernfs_new_node+0x10/0x10 [ 349.816339][T12692] ? __pfx_lock_acquire+0x10/0x10 [ 349.821479][T12692] ? sysfs_do_create_link_sd+0x77/0x110 [ 349.827030][T12692] ? __pfx_lock_release+0x10/0x10 [ 349.832056][T12692] ? do_raw_spin_lock+0x14f/0x370 [ 349.837152][T12692] kernfs_new_node+0x137/0x240 [ 349.841933][T12692] kernfs_create_link+0xa5/0x1f0 [ 349.846957][T12692] sysfs_do_create_link_sd+0x85/0x110 [ 349.852329][T12692] device_add_class_symlinks+0x1c5/0x250 [ 349.857983][T12692] device_add+0x553/0xbf0 [ 349.862402][T12692] ? device_initialize+0x266/0x460 [ 349.867606][T12692] netdev_register_kobject+0x17e/0x310 [ 349.873078][T12692] register_netdevice+0x12c5/0x1b00 [ 349.878383][T12692] ? __pfx_register_netdevice+0x10/0x10 [ 349.883924][T12692] ? dev_addr_mod+0xbd/0x330 [ 349.888517][T12692] ? __asan_memset+0x23/0x50 [ 349.893109][T12692] ip6gre_newlink_common+0x44a/0x670 [ 349.898403][T12692] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 349.904237][T12692] ? ip6gre_tunnel_find+0x55c/0x600 [ 349.909480][T12692] ip6gre_newlink+0x1e1/0x300 [ 349.914168][T12692] ? __pfx_ip6gre_newlink+0x10/0x10 [ 349.919375][T12692] rtnl_newlink_create+0x2df/0xa30 [ 349.924493][T12692] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 349.930174][T12692] ? ns_capable+0x8a/0xf0 [ 349.934526][T12692] rtnl_newlink+0x17dd/0x24f0 [ 349.939232][T12692] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.944274][T12692] ? __netlink_deliver_tap+0x56b/0x7f0 [ 349.949735][T12692] ? __pfx_validate_chain+0x10/0x10 [ 349.954962][T12692] ? __sock_sendmsg+0x221/0x270 [ 349.959832][T12692] ? ____sys_sendmsg+0x52a/0x7e0 [ 349.964856][T12692] ? __sys_sendmsg+0x269/0x350 [ 349.969619][T12692] ? do_syscall_64+0xf3/0x230 [ 349.974289][T12692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.980371][T12692] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 349.986351][T12692] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.992688][T12692] ? mark_lock+0x9a/0x360 [ 349.997105][T12692] ? __lock_acquire+0x1397/0x2100 [ 350.002181][T12692] ? __pfx_lock_release+0x10/0x10 [ 350.007233][T12692] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.012452][T12692] rtnetlink_rcv_msg+0x791/0xcf0 [ 350.017391][T12692] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 350.022940][T12692] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.028407][T12692] ? ref_tracker_free+0x643/0x7e0 [ 350.033442][T12692] netlink_rcv_skb+0x1e3/0x430 [ 350.038209][T12692] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.043668][T12692] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.049156][T12692] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.054387][T12692] netlink_unicast+0x7f6/0x990 [ 350.059183][T12692] ? __pfx_netlink_unicast+0x10/0x10 [ 350.064492][T12692] ? __virt_addr_valid+0x183/0x530 [ 350.069611][T12692] ? __check_object_size+0x48e/0x900 [ 350.074908][T12692] netlink_sendmsg+0x8e4/0xcb0 [ 350.079683][T12692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.085055][T12692] ? aa_sock_msg_perm+0x91/0x160 [ 350.089999][T12692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.095305][T12692] __sock_sendmsg+0x221/0x270 [ 350.100010][T12692] ____sys_sendmsg+0x52a/0x7e0 [ 350.104801][T12692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.110147][T12692] ? __fget_files+0x2a/0x410 [ 350.114873][T12692] ? __fget_files+0x2a/0x410 [ 350.119495][T12692] __sys_sendmsg+0x269/0x350 [ 350.124099][T12692] ? __pfx_lock_release+0x10/0x10 [ 350.129133][T12692] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.134262][T12692] ? __pfx_vfs_write+0x10/0x10 [ 350.139045][T12692] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.145383][T12692] ? do_syscall_64+0x100/0x230 [ 350.150237][T12692] ? do_syscall_64+0xb6/0x230 [ 350.154939][T12692] do_syscall_64+0xf3/0x230 [ 350.159468][T12692] ? clear_bhb_loop+0x35/0x90 [ 350.164173][T12692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.170089][T12692] RIP: 0033:0x7fd52ab7ff19 [ 350.174552][T12692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.194183][T12692] RSP: 002b:00007fd52ba39058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.202650][T12692] RAX: ffffffffffffffda RBX: 00007fd52ad45fa0 RCX: 00007fd52ab7ff19 [ 350.210656][T12692] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 350.218659][T12692] RBP: 00007fd52ba390a0 R08: 0000000000000000 R09: 0000000000000000 [ 350.226660][T12692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.234749][T12692] R13: 0000000000000000 R14: 00007fd52ad45fa0 R15: 00007ffd5ae7a348 [ 350.242771][T12692] [ 350.246573][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 350.283714][ T5863] Bluetooth: hci4: command tx timeout [ 350.341839][ T6370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.369735][T12705] netlink: 'syz.2.1628': attribute type 3 has an invalid length. [ 350.381508][T12705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1628'. [ 350.430037][T12698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1627'. [ 350.524430][ T5863] Bluetooth: hci1: command tx timeout [ 350.790687][T12646] chnl_net:caif_netlink_parms(): no params data found [ 350.847043][ T6370] bridge_slave_1: left allmulticast mode [ 350.852675][T12727] netlink: 'syz.1.1632': attribute type 3 has an invalid length. [ 350.853048][ T6370] bridge_slave_1: left promiscuous mode [ 350.883899][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.885587][T12727] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1632'. [ 350.916313][ T6370] bridge_slave_0: left allmulticast mode [ 350.922208][ T6370] bridge_slave_0: left promiscuous mode [ 350.935009][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.123157][T12729] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1634'. [ 351.331422][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 351.573345][ T6370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.588114][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.598600][ T6370] bond0 (unregistering): Released all slaves [ 351.907783][T12768] netlink: 'syz.1.1642': attribute type 3 has an invalid length. [ 351.920714][T12768] __nla_validate_parse: 1 callbacks suppressed [ 351.920736][T12768] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1642'. [ 352.016157][T12646] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.025313][T12646] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.032593][T12646] bridge_slave_0: entered allmulticast mode [ 352.040852][T12646] bridge_slave_0: entered promiscuous mode [ 352.059324][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 352.148270][T12646] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.177249][T12646] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.192639][T12646] bridge_slave_1: entered allmulticast mode [ 352.201846][T12646] bridge_slave_1: entered promiscuous mode [ 352.268325][T12646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.283374][T12646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.310006][T12785] netlink: 'syz.2.1646': attribute type 10 has an invalid length. [ 352.360548][T12788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1646'. [ 352.363741][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 352.370400][ T5863] Bluetooth: hci4: command 0x041b tx timeout [ 352.504046][T12791] pimreg: entered allmulticast mode [ 352.562287][T12646] team0: Port device team_slave_0 added [ 352.573314][T12646] team0: Port device team_slave_1 added [ 352.603901][ T5863] Bluetooth: hci1: command tx timeout [ 352.620161][ T6370] hsr_slave_0: left promiscuous mode [ 352.627610][ T6370] hsr_slave_1: left promiscuous mode [ 352.636354][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.646997][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.661438][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.671625][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.725294][ T6370] veth1_macvtap: left promiscuous mode [ 352.730890][ T6370] veth0_macvtap: left promiscuous mode [ 352.736905][ T6370] veth1_vlan: left promiscuous mode [ 352.742230][ T6370] veth0_vlan: left promiscuous mode [ 352.886648][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 353.278391][ T6370] team0 (unregistering): Port device team_slave_1 removed [ 353.336799][ T6370] team0 (unregistering): Port device team_slave_0 removed [ 353.405122][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.885933][T12799] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN PTI [ 353.898568][T12799] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 353.906979][T12799] CPU: 1 UID: 0 PID: 12799 Comm: syz.1.1649 Not tainted 6.12.0-syzkaller-10684-gebf7f7d61681 #0 [ 353.917451][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.927512][T12799] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 353.933433][T12799] Code: 20 08 00 00 e8 0e 9a 22 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 7e b3 65 f8 48 8b 03 48 89 5c 24 [ 353.953044][T12799] RSP: 0018:ffffc90003e2e960 EFLAGS: 00010207 [ 353.959114][T12799] RAX: 000000000000004b RBX: 000000000000025f RCX: 0000000000002000 [ 353.967081][T12799] RDX: 0000000000001000 RSI: ffffffff8c615880 RDI: ffffffff8c615840 [ 353.975158][T12799] RBP: ffffc90003e2ea70 R08: 0000000000000920 R09: 00000000ffffffff [ 353.983128][T12799] R10: dffffc0000000000 R11: fffffbfff203c697 R12: dffffc0000000000 [ 353.991187][T12799] R13: 1ffff920007c5d3c R14: ffff88806c200127 R15: 1ffff920007c5d38 [ 353.999156][T12799] FS: 00007f1e09eca6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 354.008170][T12799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.014836][T12799] CR2: 000000110c27248f CR3: 000000003118a000 CR4: 00000000003526f0 [ 354.022833][T12799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.030814][T12799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.038786][T12799] Call Trace: [ 354.042060][T12799] [ 354.044986][T12799] ? __die_body+0x5f/0xb0 [ 354.049318][T12799] ? die_addr+0xb0/0xe0 [ 354.053467][T12799] ? exc_general_protection+0x3dd/0x5d0 [ 354.059018][T12799] ? asm_exc_general_protection+0x26/0x30 [ 354.064741][T12799] ? dev_prep_valid_name+0x3e3/0xa40 [ 354.070027][T12799] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 354.075663][T12799] register_netdevice+0x542/0x1b00 [ 354.080876][T12799] ? rcu_is_watching+0x15/0xb0 [ 354.085668][T12799] ? trace_kmalloc+0x1f/0xd0 [ 354.090272][T12799] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 354.095733][T12799] ? validate_linkmsg+0x828/0xa40 [ 354.100754][T12799] ? sized_strscpy+0x8d/0x220 [ 354.105433][T12799] ? __pfx_validate_linkmsg+0x10/0x10 [ 354.110799][T12799] ? __pfx_register_netdevice+0x10/0x10 [ 354.116343][T12799] ? rtnl_create_link+0x91c/0xc20 [ 354.121361][T12799] vxcan_newlink+0x314/0x5c0 [ 354.125946][T12799] ? rtnl_newlink_create+0x210/0xa30 [ 354.131237][T12799] ? __pfx_vxcan_newlink+0x10/0x10 [ 354.136376][T12799] ? __pfx_validate_linkmsg+0x10/0x10 [ 354.141753][T12799] ? alloc_netdev_mqs+0xcd0/0x1080 [ 354.146863][T12799] ? rtnl_create_link+0x91c/0xc20 [ 354.151901][T12799] ? __pfx_vxcan_newlink+0x10/0x10 [ 354.157012][T12799] rtnl_newlink_create+0x2df/0xa30 [ 354.162124][T12799] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 354.167758][T12799] ? ns_capable+0x8a/0xf0 [ 354.172087][T12799] rtnl_newlink+0x17dd/0x24f0 [ 354.176763][T12799] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.181782][T12799] ? __pfx_validate_chain+0x10/0x10 [ 354.187002][T12799] ? __pfx_lock_release+0x10/0x10 [ 354.192027][T12799] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.197049][T12799] rtnetlink_rcv_msg+0x791/0xcf0 [ 354.201982][T12799] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 354.207098][T12799] ? __lock_acquire+0x1397/0x2100 [ 354.212114][T12799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.217575][T12799] netlink_rcv_skb+0x1e3/0x430 [ 354.222332][T12799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.227809][T12799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.233113][T12799] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.238322][T12799] netlink_unicast+0x7f6/0x990 [ 354.243132][T12799] ? __pfx_netlink_unicast+0x10/0x10 [ 354.248416][T12799] ? __virt_addr_valid+0x183/0x530 [ 354.253545][T12799] ? __check_object_size+0x48e/0x900 [ 354.258856][T12799] netlink_sendmsg+0x8e4/0xcb0 [ 354.263631][T12799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.268915][T12799] ? aa_sock_msg_perm+0x91/0x160 [ 354.273881][T12799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.279202][T12799] __sock_sendmsg+0x221/0x270 [ 354.283904][T12799] ____sys_sendmsg+0x52a/0x7e0 [ 354.288674][T12799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.293962][T12799] ? __fget_files+0x2a/0x410 [ 354.298552][T12799] ? __fget_files+0x2a/0x410 [ 354.303140][T12799] __sys_sendmsg+0x269/0x350 [ 354.307726][T12799] ? __pfx_futex_wake+0x10/0x10 [ 354.312568][T12799] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.317687][T12799] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.324035][T12799] ? do_syscall_64+0x100/0x230 [ 354.328881][T12799] ? do_syscall_64+0xb6/0x230 [ 354.333562][T12799] do_syscall_64+0xf3/0x230 [ 354.338064][T12799] ? clear_bhb_loop+0x35/0x90 [ 354.342738][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.348630][T12799] RIP: 0033:0x7f1e0917ff19 [ 354.353038][T12799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.372637][T12799] RSP: 002b:00007f1e09eca058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.381055][T12799] RAX: ffffffffffffffda RBX: 00007f1e09346160 RCX: 00007f1e0917ff19 [ 354.389020][T12799] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 354.396982][T12799] RBP: 00007f1e091f3986 R08: 0000000000000000 R09: 0000000000000000 [ 354.404961][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.413020][T12799] R13: 0000000000000000 R14: 00007f1e09346160 R15: 00007ffe30646298 [ 354.420992][T12799] [ 354.424002][T12799] Modules linked in: [ 354.428522][T12799] ---[ end trace 0000000000000000 ]--- [ 354.434409][T12799] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 354.440317][T12799] Code: 20 08 00 00 e8 0e 9a 22 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 7e b3 65 f8 48 8b 03 48 89 5c 24 [ 354.460062][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 354.463793][ T5863] Bluetooth: hci4: command 0x041b tx timeout [ 354.467743][T12799] RSP: 0018:ffffc90003e2e960 EFLAGS: 00010207 [ 354.479605][T12799] RAX: 000000000000004b RBX: 000000000000025f RCX: 0000000000002000 [ 354.487907][T12799] RDX: 0000000000001000 RSI: ffffffff8c615880 RDI: ffffffff8c615840 [ 354.495969][T12799] RBP: ffffc90003e2ea70 R08: 0000000000000920 R09: 00000000ffffffff [ 354.504012][T12799] R10: dffffc0000000000 R11: fffffbfff203c697 R12: dffffc0000000000 [ 354.511991][T12799] R13: 1ffff920007c5d3c R14: ffff88806c200127 R15: 1ffff920007c5d38 [ 354.520290][T12799] FS: 00007f1e09eca6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 354.529494][T12799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.536709][T12799] CR2: 000000110c27248f CR3: 000000003118a000 CR4: 00000000003526f0 [ 354.544938][T12799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.552930][T12799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.561004][T12799] Kernel panic - not syncing: Fatal exception [ 354.567388][T12799] Kernel Offset: disabled [ 354.571709][T12799] Rebooting in 86400 seconds..