last executing test programs: 1m48.431541264s ago: executing program 1 (id=105): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x1, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m30.411337479s ago: executing program 1 (id=105): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x1, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m9.619425792s ago: executing program 1 (id=105): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x1, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 48.720231053s ago: executing program 1 (id=105): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x1, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 30.596040883s ago: executing program 1 (id=105): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x1, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14.747370355s ago: executing program 1 (id=105): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x1, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.232318529s ago: executing program 3 (id=756): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x6c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000"], 0xa0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0xe, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x28}, 0x2000}], 0x2, 0x0, 0x0) 2.17601865s ago: executing program 0 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x2b8, 0x9403, 0x3002, 0x0, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x10, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1fffffeff, 0xffffff00, 0xff], 'gre0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="4000330010000000ffffffffffff080211000000080211000000000000000000010001002d1a00000000000000000000000000000000000000000000000000000800a00000000000080027000000e200080026006c09"], 0x74}}, 0x0) 2.08361917s ago: executing program 4 (id=758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.959536526s ago: executing program 0 (id=759): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x905e}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r1, 0x0) shutdown(r1, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x756000) r2 = socket(0x21, 0x2, 0x2) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x110, 0x6, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xd18, 0x0, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x26, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_query, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x536e}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 1.834559984s ago: executing program 3 (id=760): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, r4, 0x1, 0x0, 0x0, {0xf}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d98", 0xe}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) ppoll(&(0x7f0000001240)=[{r5}], 0x1, 0x0, &(0x7f00000012c0), 0x8) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x2c, 0x0, 0x0, 0x201, 0x0, 0x0, {}, [@typed={0xc, 0x19, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x7c, r9, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x4800) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x9b}, @jmp={0x5, 0x0, 0x7, 0x4, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x38, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$WPAN_WANTLQI(r12, 0x0, 0x3, &(0x7f00000001c0)=0x1, 0x4) 1.78789425s ago: executing program 4 (id=761): sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="27dc7fd9657120efc71aee335484e1726c6661c54536bf17090c886d271c0f353ffb2a5490f397d082c23cc61dc8067237ffe44e504477bb4539d85bb92cdf46aaca66aaa5751e596c4c0cfb1155360f152b3cda6ab2c8e1a8a1c106ee92947d3c579a90d397005408562e60c183ae708f08f2b821ac5945cbcb5fde92873fe7ec1bb1af32df19ea86c2d9b5ecb79b5a2e70096a97fcea3d23381b80", 0x9c}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r3}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff9}}], 0x40}}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x224, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa5, 0x3, "aaa26efe0b35f3ef39d88f46ce92199071b6a26fc8bbbb6fb61952e87e668cc8dadcede5db043d11e17efe17931f7452e3d11c35b4d68847c315c99cb2bbc6334a53bbb8bca3d1a3a54f0ef9a0f306b5aebd9047eb5a2abed9a31dbd8f447b33da55a1d38eaf0449e8b4a85c5d1121abbb00e9416af24223ed38c3502df3c2cd16ec5afb075e54f757992e00605beb9ff9d752f2b1b011ce569297ad01aa9a0d53"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "d6a17c85f630ff6f197400c92e28685b3a0f3cef4cad9a98b538fa8f06af8c81cb9661a29adb381fcab9861f65a82a4dd93a76d3b60e5c55dfd9482553787eced26c086d57b182f9c623af68d11964d7a360cc5f2f04bfd612e63524702009f9ded87bfb87e886ae5e0cc6888e656e0bbaa44ed80292be8d8f01c1cfdd535f370c93b76d089a956774f895dec62dfa9678e4f18ee0f9a01f84a61c19b4facc719e752358714d0f387fe876362605bfdf26e13bb4d58466d73579a8e442c52761f0ec08cf88d66dcbcbb3b617726cba744966c7ce90b94e6b0d88f67ebce6aa94ed9b8a196f44465db2ec7e5dece8d898fea9f3"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x800}, 0x8) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001700000048000680440004"], 0x5c}}, 0x0) 1.787448738s ago: executing program 2 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r2, &(0x7f00000022c0)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x2, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, 0x40183, 0x100}, [@IFLA_MTU={0x8, 0x4, 0x3c}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x38}}, 0x0) 1.585724811s ago: executing program 0 (id=763): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000cd0be7dbfd2a16643a5ffe33d05560de9bd3148babf2a71891", @ANYRES16=r1, @ANYBLOB="0107000000000000000005000000"], 0x14}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x10000, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0xfffffffffffffdb7, &(0x7f0000000080)=ANY=[], 0x38}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000711203000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.511091884s ago: executing program 2 (id=764): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r1, 0x0) shutdown(r1, 0x0) listen(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x0) 1.331848015s ago: executing program 4 (id=765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@struct={0xd, 0xa, 0x0, 0x4, 0x1, 0x100, [{0x3, 0x3, 0x6}, {0xe, 0x4, 0x5}, {0xb, 0x1, 0x3}, {0xf, 0x0, 0x7}, {0xa, 0x0, 0x4}, {0x10, 0x0, 0x200}, {0xc, 0x1, 0x8001}, {0x9, 0x4, 0x800}, {0x5, 0x4, 0x31c6}, {0x7, 0x2, 0xffffd9b4}]}, @volatile={0x8, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x61, 0x61, 0x2e]}}, &(0x7f0000000840)=""/4096, 0xc5, 0x1000, 0x1, 0x7, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001900)={0x8, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001940)={0xffffffffffffffff, 0x7, 0x8}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r6, @ANYBLOB="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"], 0x2ac}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001b80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000001420000000000000", @ANYRES32, @ANYBLOB="a984321e217ffff02f1647e438", @ANYRES64=0x0], 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x1f, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x96}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x33, r2, 0x8, &(0x7f0000001880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000018c0)={0x1, 0x1, 0x3, 0x7}, 0x10, r3, r0, 0x5, &(0x7f0000001a00)=[0x1, r4, r7, 0xffffffffffffffff, r8], &(0x7f0000001a40)=[{0x0, 0x4, 0x1, 0x3}, {0x3, 0x2, 0x8, 0xb}, {0x0, 0x3, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x5}, {0x2, 0x1, 0x7, 0x7}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 1.330586332s ago: executing program 3 (id=766): syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@local}]}, @ssrr={0x89, 0xf, 0xce, [@multicast2, @multicast1, @rand_addr]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x18, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) 1.301547653s ago: executing program 0 (id=767): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x207f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$vsock_stream(0x28, 0x5, 0x28) 1.173103941s ago: executing program 2 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @remote}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r9 = openat$cgroup_ro(r8, &(0x7f0000001300)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x101, 0xec, 0xa, 0x8010, r9, 0xffffffc0, '\x00', r6, r9, 0x0, 0x3, 0x2, 0x2, @value=r9, @void, @void, @value}, 0x50) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) shutdown(r10, 0x1) connect$inet(r10, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendto$inet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000004c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8ffc500a9d4889a95a14df1cd0bcb", @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000000c0002800400040004000380"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.008015387s ago: executing program 0 (id=769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x401) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r7, 0x29, 0x10, 0x0, 0x0) sendmmsg$inet6(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r8 = socket$inet(0x2, 0x80001, 0x84) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x6, &(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r10, 0x4, "179da51e"}, 0x0) sendfile(r4, r4, 0x0, 0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r1, 0x5, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}]}, 0x34}}, 0x40) 1.006995313s ago: executing program 3 (id=770): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f000000a440)={0x0, 0x0, &(0x7f000000a400)={&(0x7f0000009d40)=@deltclass={0x24}, 0x24}}, 0x0) recvmmsg(r2, &(0x7f0000009a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/37, 0x25}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000880), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000003ef00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) close(r5) sendmmsg$inet6(r3, &(0x7f0000003880)=[{{&(0x7f0000000340)={0xa, 0x0, 0xffffffff, @remote}, 0x1c, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000015c0)="692f8776ca334653561f3c6c73d513ed765f3804438c896e1b5b1f218ec083ab0d7be2375bd521cd92c1eac3b2a3aa675c52d180f24885cdc8acdae351353d25385af47585cea060496586c9fab80fc4e1133ab02ec1de0be9fac5884988e504c9fd763cb7ad9daf3643e0d3f541c1a8854accea1469bef250dc835b672016509d6bef81bcd692a38cf578c5ae62930713f51782e9938e35997924f8fb2c213b79799f16757ca5227ac2be14a50f6fcf79e4ad19af8532607005cf149c22e3ec88afc57d", 0xc4}], 0x3, &(0x7f0000001740)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x5d55aaf4261647de, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5a61}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdr={{0x48, 0x29, 0x39, {0x87, 0x6, 0x0, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private2]}}}, @dontfrag={{0x14}}], 0xb8}}, {{&(0x7f00000018c0)={0xa, 0x4e22, 0xa3c5, @mcast1, 0x9}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001940)}, {0x0}, {&(0x7f0000001a80)="2c86976306510622de7451b67a087e2ffcad211e50ecb7079c7945e352096b4290f53d47d69c45b9cce9f340865dcc0b0131654223912ca7bb0425ae7a505d447057f6d1da333be7cf8064648131ea84eb1c4a28caf848d8a1293079c084d7eca7448c5d2bc0348bb4c805821127b63264aa2454556dc5d3", 0x78}, {&(0x7f0000001b80)="d96d766f64282558b49e5942fed50c52f79c51db5e08d290eb7c32f30b70c56b54f2664d900c238419622f79b6a134fae55c35aaa2c1c3f485d8933aebe25a6e1bf0069828119c6150e0112ae7d51465aa99a8c49b9714886e5605bde78e978be63eceeaa8019df3e677488f2af7d7d039d4fc96351b059e9072407d786ca1ad4a8ab48dbacad25cfc833d0fc33020a66e9130bbc7cd0ca5f3858feb18", 0x9d}], 0x4}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x2000006, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x7c}, 0x1c, 0x0}}, {{&(0x7f00000020c0)={0xa, 0x4e22, 0x0, @remote, 0x3a1a5c8a}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000002e80)}}], 0x5, 0x20000040) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x7f}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0x10}}}, 0x24}}, 0x0) 919.450004ms ago: executing program 4 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 754.264975ms ago: executing program 4 (id=772): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r3 = accept(r1, &(0x7f00000001c0)=@in={0x2, 0x0, @dev}, &(0x7f0000000080)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x4, 0x3b, 0x1, 0xffffffff, 0x81, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x40, 0x10, 0x20ab4, 0x4}}) socket$inet(0x2, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20981, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0xe80, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x95b2}}]}]}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0xe80, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x95b2}}]}]}}]}, 0x58}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) writev(r9, &(0x7f0000000440)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x73}], 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, 0x0, 0x0) 708.110183ms ago: executing program 3 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60000000020000000455a14700090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000220074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002b0000002e00f67f1400000000ffffffffffffffff00000000000000fd16d77315eb30d67fdf8344f9424b823d"], 0x2c}}, 0x0) 689.135335ms ago: executing program 0 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x28}, @empty, 0xffffffffffffffff, "d863efeccb7c04093644d61e6d07f1b6b89a3854f3d03220496e4b229ba64332", 0xdfbf, 0x1, 0x4, 0x9}, 0x3c) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 488.233818ms ago: executing program 2 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000000000018010000756c6c2500000800002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2c}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@struct={0x6736, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x5, 0x0, 0xff}, {0xa, 0x3, 0xffffffff}, {0xb, 0x3, 0x9}, {0x0, 0x0, 0xf83}, {0x1, 0x5, 0x1}, {0x3, 0x4, 0x6}, {0x9, 0x2, 0x2}]}]}, {0x0, [0x61, 0x4db2150093157c4, 0x30, 0x5f, 0x61, 0x30]}}, &(0x7f0000000a40)=""/4096, 0x80, 0x1000, 0x1, 0x5, 0x0, @void, @value}, 0x28) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) 311.542527ms ago: executing program 3 (id=776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="abbdb265b4c2aaca5666654674bf03ffa2bb1d640f116939fe51754146b910c5d45de799bc2f6eb591aebd7f5036c6e3aa4ccf929f0c59c45aec6d23b03d6943284b9403b317d01659ee7cf50ebab1a8db833088d3416222cf83eb0e4c786f4ed0037469e4caf079a01fee8b85d6461c3f6d0903b23afe186d233525f5c26874e2db4576da67c1acb24efacd779b23f7488b8f803296"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e823e, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000240)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8810) r4 = accept$alg(r1, 0x0, 0x0) close(r1) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x6}}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000ff0700", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000b00", @ANYRES32=r8, @ANYBLOB="0500010005000000"], 0x44}, 0x1, 0x2000000000000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004d0000480000000000069078ac141400ac1e0001830bdfac1414aa00000000440c05030000000600000000860600"/69, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d7200090780000"], 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f0000000140)=0x2958, 0x4) sendmmsg$sock(r10, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) socket$packet(0x11, 0x2, 0x300) 236.161721ms ago: executing program 2 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@newnexthop={0x48, 0x68, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x1, 0x0, 0x21}, [@NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xf801}]}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000000c0)={0x6, @broadcast, 0x4e24, 0x1, 'nq\x00', 0x6, 0x809, 0x66}, 0x2c) 80.052413ms ago: executing program 4 (id=778): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 2 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000002000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x1a0}}, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @short={0x2, 0x2}}, 0x14) kernel console output (not intermixed with test programs): ge0: port 2(bridge_slave_1) entered disabled state [ 142.342044][ T128] bridge_slave_0: left allmulticast mode [ 142.348778][ T128] bridge_slave_0: left promiscuous mode [ 142.354544][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.369647][ T128] bridge_slave_1: left allmulticast mode [ 142.375337][ T128] bridge_slave_1: left promiscuous mode [ 142.382461][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.401574][ T128] bridge_slave_0: left allmulticast mode [ 142.418073][ T128] bridge_slave_0: left promiscuous mode [ 142.423878][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.405126][ T128] team0: Port device bridge1 removed [ 143.654196][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.668737][ T128] bond0 (unregistering): Released all slaves [ 143.845088][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.863032][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.874399][ T128] bond0 (unregistering): Released all slaves [ 143.994406][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.011083][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.023189][ T128] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 144.041312][ T128] bond0 (unregistering): Released all slaves [ 144.055063][ T5965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.205070][ T5965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.244281][ T5965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.406737][ T5965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.067027][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.125324][ T5976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.177319][ T5976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.246045][ T5976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.271840][ T5976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.355288][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.468386][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.475749][ T1832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.544855][ T128] hsr_slave_0: left promiscuous mode [ 145.561576][ T128] hsr_slave_1: left promiscuous mode [ 145.581158][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.589214][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.599427][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.606872][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.634580][ T128] hsr_slave_0: left promiscuous mode [ 145.642189][ T128] hsr_slave_1: left promiscuous mode [ 145.658427][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.665888][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.688764][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.696219][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.723305][ T128] hsr_slave_0: left promiscuous mode [ 145.736456][ T128] hsr_slave_1: left promiscuous mode [ 145.743040][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.751906][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.776117][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.783708][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.872278][ T128] veth1_macvtap: left promiscuous mode [ 145.878199][ T128] veth0_macvtap: left promiscuous mode [ 145.884258][ T128] veth1_vlan: left promiscuous mode [ 145.890433][ T128] veth0_vlan: left promiscuous mode [ 145.896856][ T128] veth1_macvtap: left promiscuous mode [ 145.902490][ T128] veth0_macvtap: left promiscuous mode [ 145.916721][ T128] veth1_macvtap: left promiscuous mode [ 145.922468][ T128] veth0_macvtap: left promiscuous mode [ 145.928556][ T128] veth1_vlan: left promiscuous mode [ 145.933852][ T128] veth0_vlan: left promiscuous mode [ 146.663515][ T128] team0 (unregistering): Port device team_slave_1 removed [ 146.714837][ T128] team0 (unregistering): Port device team_slave_0 removed [ 147.449968][ T128] team0 (unregistering): Port device team_slave_1 removed [ 147.495004][ T128] team0 (unregistering): Port device team_slave_0 removed [ 148.287194][ T128] team0 (unregistering): Port device team_slave_1 removed [ 148.340276][ T128] team0 (unregistering): Port device team_slave_0 removed [ 148.844545][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.852005][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.238529][ T5960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.261719][ T5960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.293447][ T5960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.391917][ T5960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.520150][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.738618][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.813437][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.825736][ T4006] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.832976][ T4006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.902585][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.909805][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.159067][ T5961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.192015][ T5961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.265023][ T5961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.306387][ T5961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.385485][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.502669][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.576980][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.584383][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.635079][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.642276][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.781028][ T5965] veth0_vlan: entered promiscuous mode [ 150.835209][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.910136][ T5965] veth1_vlan: entered promiscuous mode [ 150.963340][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.972177][ T5966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.985036][ T5966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.995769][ T5966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.006337][ T5966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.074172][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.170691][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.177900][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.207572][ T2535] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.214831][ T2535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.251228][ T5976] veth0_vlan: entered promiscuous mode [ 151.303068][ T5965] veth0_macvtap: entered promiscuous mode [ 151.326175][ T5965] veth1_macvtap: entered promiscuous mode [ 151.400738][ T5976] veth1_vlan: entered promiscuous mode [ 151.422068][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.439529][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.452407][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.500693][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.514197][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.529459][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.542878][ T5965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.552194][ T5965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.561021][ T5965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.569836][ T5965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.590142][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.776688][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.796760][ T5976] veth0_macvtap: entered promiscuous mode [ 151.862320][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.878703][ T5976] veth1_macvtap: entered promiscuous mode [ 151.900776][ T5960] veth0_vlan: entered promiscuous mode [ 151.925062][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.928748][ T4006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.932362][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.964631][ T4006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.985835][ T2535] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.993176][ T2535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.040978][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.057275][ T5960] veth1_vlan: entered promiscuous mode [ 152.076184][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.093359][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.103882][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.114807][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.129791][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.171997][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.185533][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.199121][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.209652][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.221166][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.234121][ T5976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.243875][ T5976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.254027][ T5976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.263513][ T5976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.285988][ T4006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.294140][ T4006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.488364][ T5960] veth0_macvtap: entered promiscuous mode [ 152.540560][ T5960] veth1_macvtap: entered promiscuous mode [ 152.644626][ T5961] veth0_vlan: entered promiscuous mode [ 152.721538][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.733924][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.747425][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.759529][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.770125][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.781361][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.793669][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.807637][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.819909][ T5961] veth1_vlan: entered promiscuous mode [ 152.848571][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.911985][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.923106][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.933087][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.943764][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.954594][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.965633][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.981725][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.020519][ T5960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.035683][ T5960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.045043][ T5960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.058208][ T5960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.082948][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.095877][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.108908][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.173076][ T5961] veth0_macvtap: entered promiscuous mode [ 153.214551][ T5961] veth1_macvtap: entered promiscuous mode [ 153.366529][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.383743][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.393728][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.404479][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.415248][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.425882][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.435732][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.447562][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.460901][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.492821][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.503861][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.516152][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.528893][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.539069][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.549850][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.559908][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.572445][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.584490][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.610577][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.617377][ T5961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.622583][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.638992][ T5961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.648959][ T5961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.657694][ T5961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.754276][ T4006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.785580][ T4006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.804775][ T5966] veth0_vlan: entered promiscuous mode [ 153.992730][ T1832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.076776][ T5966] veth1_vlan: entered promiscuous mode [ 154.116357][ T1832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.183790][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.218289][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.272884][ T1832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.319965][ T6168] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 154.354997][ T6168] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.420401][ T1832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.513276][ T4006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.536517][ T4006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.625044][ T5966] veth0_macvtap: entered promiscuous mode [ 154.792846][ T5966] veth1_macvtap: entered promiscuous mode [ 154.943543][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.962617][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.972771][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.996408][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.022996][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.046220][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.070706][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.075123][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.089687][ T6185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.180'. [ 155.101401][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.132539][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.150301][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.173939][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.185747][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.196822][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.213047][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.224104][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.238366][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.250232][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.260906][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.271593][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.284013][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.295398][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.306601][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.318553][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.331725][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.342006][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.352891][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.373207][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.393353][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'. [ 155.458515][ T1832] bridge_slave_1: left allmulticast mode [ 155.464224][ T1832] bridge_slave_1: left promiscuous mode [ 155.486006][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.528956][ T1832] bridge_slave_0: left allmulticast mode [ 155.534653][ T1832] bridge_slave_0: left promiscuous mode [ 155.548140][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.984991][ T1832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.997420][ T1832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.009988][ T1832] bond0 (unregistering): Released all slaves [ 156.057582][ T6199] netlink: 'syz.4.183': attribute type 39 has an invalid length. [ 156.137179][ T6198] gtp0: entered promiscuous mode [ 156.143716][ T6198] gtp0: entered allmulticast mode [ 156.193839][ T5966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.217992][ T5966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.226988][ T5966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.256749][ T5966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.505804][ T6213] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 156.538968][ T6213] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.186'. [ 156.688493][ T1832] hsr_slave_0: left promiscuous mode [ 156.705570][ T1832] hsr_slave_1: left promiscuous mode [ 156.727454][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.754763][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.790942][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.798685][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.855546][ T1832] veth1_macvtap: left promiscuous mode [ 156.867269][ T1832] veth0_macvtap: left promiscuous mode [ 156.873065][ T1832] veth1_vlan: left promiscuous mode [ 156.879593][ T1832] veth0_vlan: left promiscuous mode [ 156.930922][ T6224] netlink: 232 bytes leftover after parsing attributes in process `syz.4.188'. [ 156.945800][ T6224] netlink: 72 bytes leftover after parsing attributes in process `syz.4.188'. [ 157.198462][ T5238] Bluetooth: hci4: command tx timeout [ 157.903723][ T1832] team0 (unregistering): Port device team_slave_1 removed [ 157.953386][ T1832] team0 (unregistering): Port device team_slave_0 removed [ 158.737071][ T6230] gretap0: entered allmulticast mode [ 158.923690][ T6252] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 158.989336][ T6237] netlink: 96 bytes leftover after parsing attributes in process `syz.2.193'. [ 159.194489][ T6264] openvswitch: netlink: ct_state flags 00008300 unsupported [ 159.278242][ T5238] Bluetooth: hci4: command tx timeout [ 159.365600][ T6272] netlink: 'syz.0.198': attribute type 58 has an invalid length. [ 159.407940][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 159.664699][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.687388][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.059935][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.106454][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.203626][ T6177] chnl_net:caif_netlink_parms(): no params data found [ 160.771998][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.812113][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.828665][ T6177] bridge_slave_0: entered allmulticast mode [ 160.849735][ T6177] bridge_slave_0: entered promiscuous mode [ 160.886266][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'. [ 160.968817][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.988433][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.024266][ T6177] bridge_slave_1: entered allmulticast mode [ 161.062913][ T6177] bridge_slave_1: entered promiscuous mode [ 161.273968][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 161.349082][ T6329] vlan2: entered allmulticast mode [ 161.360055][ T5238] Bluetooth: hci4: command tx timeout [ 161.401658][ T6329] gretap0: entered allmulticast mode [ 161.437001][ T6339] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 161.458975][ T6177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.487960][ T6339] netlink: 228 bytes leftover after parsing attributes in process `syz.0.207'. [ 161.513245][ T6177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.755918][ T6177] team0: Port device team_slave_0 added [ 161.791229][ T6350] IPv6: addrconf: prefix option has invalid lifetime [ 161.821235][ T6177] team0: Port device team_slave_1 added [ 162.035247][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.069881][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.104509][ T6177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.158428][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.184010][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.273310][ T6177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.633173][ T6177] hsr_slave_0: entered promiscuous mode [ 162.668526][ T6177] hsr_slave_1: entered promiscuous mode [ 162.675428][ T6177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.696555][ T6177] Cannot create hsr debugfs directory [ 162.860662][ T6397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.218'. [ 162.904862][ T6397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'. [ 162.998298][ T6397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.218'. [ 163.438400][ T5238] Bluetooth: hci4: command tx timeout [ 163.543072][ T6408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.221'. [ 164.263888][ T6437] netlink: 'syz.4.226': attribute type 10 has an invalid length. [ 164.264198][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'. [ 164.348520][ T6437] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 164.556233][ T6445] dvmrp0: entered allmulticast mode [ 164.639279][ T6447] netlink: 'syz.4.229': attribute type 1 has an invalid length. [ 164.682793][ T6447] netlink: 224 bytes leftover after parsing attributes in process `syz.4.229'. [ 165.173986][ T6177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.225420][ T6177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.275595][ T6380] netlink: 96 bytes leftover after parsing attributes in process `syz.2.216'. [ 165.296805][ T6177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.360652][ T6177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.948556][ T6481] sctp: [Deprecated]: syz.2.234 (pid 6481) Use of int in max_burst socket option. [ 165.948556][ T6481] Use struct sctp_assoc_value instead [ 166.143788][ T6177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.252774][ T6177] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.351720][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.358963][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.450696][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.458232][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.744274][ T6508] __nla_validate_parse: 1 callbacks suppressed [ 166.744296][ T6508] netlink: 48 bytes leftover after parsing attributes in process `syz.0.240'. [ 166.824975][ T6508] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.273431][ T6520] netlink: 184 bytes leftover after parsing attributes in process `syz.2.242'. [ 167.459307][ T6177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.477406][ T6538] netlink: 'syz.4.238': attribute type 30 has an invalid length. [ 167.520887][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 167.568268][ T6538] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 168.165507][ T6177] veth0_vlan: entered promiscuous mode [ 168.206947][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 168.220706][ T6177] veth1_vlan: entered promiscuous mode [ 168.524827][ T6177] veth0_macvtap: entered promiscuous mode [ 168.583917][ T6177] veth1_macvtap: entered promiscuous mode [ 168.664995][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.696268][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.749589][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.787993][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.817453][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.845209][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.857244][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.868523][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.870418][ T6589] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.252'. [ 168.880798][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.899066][ T6589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.933992][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.963215][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.999453][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 169.744653][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.790914][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.826504][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.863306][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.879773][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.897850][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.919519][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.937823][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.957791][ T6177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.979444][ T6177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.009814][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.046287][ T6620] netlink: 40 bytes leftover after parsing attributes in process `syz.4.255'. [ 170.081376][ T6621] netlink: 96 bytes leftover after parsing attributes in process `syz.0.245'. [ 170.186570][ T6177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.227972][ T6177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.255396][ T6177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.279018][ T6177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.825294][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.258'. [ 171.013561][ T1832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.071158][ T1832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.254104][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.289078][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.364168][ T6655] Cannot find set identified by id 0 to match [ 171.434481][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 171.662451][ T6667] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 171.669498][ T6667] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 172.182417][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.373489][ T6654] netlink: 'syz.4.263': attribute type 3 has an invalid length. [ 172.415655][ T6654] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.263'. [ 172.431212][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.493473][ T6659] sit0: entered promiscuous mode [ 172.502427][ T6659] netlink: 'syz.4.263': attribute type 1 has an invalid length. [ 172.525525][ T6659] netlink: 1 bytes leftover after parsing attributes in process `syz.4.263'. [ 172.662205][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.959514][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.423486][ T35] bridge_slave_1: left allmulticast mode [ 173.457848][ T35] bridge_slave_1: left promiscuous mode [ 173.486718][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.548351][ T35] bridge_slave_0: left allmulticast mode [ 173.554356][ T35] bridge_slave_0: left promiscuous mode [ 173.585800][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.609265][ T4621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.623878][ T4621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.634733][ T4621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.660101][ T4621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.669293][ T4621] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.677575][ T4621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.013997][ T6721] netlink: 'syz.4.277': attribute type 4 has an invalid length. [ 174.035951][ T6721] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 174.261796][ T6727] netlink: 'syz.4.278': attribute type 3 has an invalid length. [ 174.277392][ T6727] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.278'. [ 174.646898][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.665085][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.681958][ T35] bond0 (unregistering): Released all slaves [ 174.704542][ T6704] bridge0: port 3(gretap0) entered blocking state [ 174.714080][ T6704] bridge0: port 3(gretap0) entered disabled state [ 174.723625][ T6704] gretap0: entered allmulticast mode [ 174.731399][ T6704] gretap0: entered promiscuous mode [ 174.737617][ T6704] bridge0: port 3(gretap0) entered blocking state [ 174.744341][ T6704] bridge0: port 3(gretap0) entered forwarding state [ 174.790757][ T6709] gretap0: left allmulticast mode [ 174.803664][ T6709] gretap0: left promiscuous mode [ 174.810216][ T6709] bridge0: port 3(gretap0) entered disabled state [ 174.838499][ T6677] netlink: 96 bytes leftover after parsing attributes in process `syz.2.270'. [ 175.068684][ T6746] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 175.214839][ T6748] netlink: 248 bytes leftover after parsing attributes in process `syz.2.282'. [ 175.326691][ T6754] delete_channel: no stack [ 175.377139][ T6756] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 175.388444][ T6756] netlink: 113592 bytes leftover after parsing attributes in process `syz.0.285'. [ 175.404987][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 175.435540][ T6752] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 175.453530][ T6752] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 175.465929][ T6752] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 175.641113][ T35] hsr_slave_0: left promiscuous mode [ 175.647533][ T35] hsr_slave_1: left promiscuous mode [ 175.655419][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.663263][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.688917][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.696675][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.758569][ T5238] Bluetooth: hci4: command tx timeout [ 175.792253][ T35] veth1_macvtap: left promiscuous mode [ 175.821146][ T35] veth0_macvtap: left promiscuous mode [ 175.839935][ T35] veth1_vlan: left promiscuous mode [ 175.846718][ T35] veth0_vlan: left promiscuous mode [ 176.935546][ T35] team0 (unregistering): Port device team_slave_1 removed [ 177.025807][ T35] team0 (unregistering): Port device team_slave_0 removed [ 177.664363][ T6777] ip_vti0: entered promiscuous mode [ 177.673885][ T6777] vlan0: entered promiscuous mode [ 177.688928][ T6777] ip_vti0: left promiscuous mode [ 177.839392][ T5238] Bluetooth: hci4: command tx timeout [ 177.896883][ T6792] netlink: 96 bytes leftover after parsing attributes in process `syz.4.290'. [ 177.954619][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 177.986704][ T6796] b: renamed from lo (while UP) [ 178.012846][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 178.037344][ T6796] b: entered allmulticast mode [ 178.432855][ T6812] syz.0.295 uses old SIOCAX25GETINFO [ 178.516272][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.528185][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.554488][ T6806] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 178.688382][ T6826] netlink: 'syz.0.297': attribute type 13 has an invalid length. [ 178.872802][ T6711] chnl_net:caif_netlink_parms(): no params data found [ 179.184009][ T6837] bridge_slave_0: left allmulticast mode [ 179.190362][ T6837] bridge_slave_0: left promiscuous mode [ 179.197643][ T6837] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.242539][ T6837] bridge_slave_1: left allmulticast mode [ 179.257265][ T6837] bridge_slave_1: left promiscuous mode [ 179.310540][ T6837] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.400038][ T6837] bond0: (slave bond_slave_0): Releasing backup interface [ 179.486631][ T6837] bond0: (slave bond_slave_1): Releasing backup interface [ 179.584982][ T6837] team0: Port device team_slave_0 removed [ 179.632887][ T6837] team0: Port device team_slave_1 removed [ 179.652402][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.667039][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.682119][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.698665][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.744398][ T6837] bond0: (slave wlan1): Releasing backup interface [ 179.806698][ T6840] netlink: 'syz.2.300': attribute type 5 has an invalid length. [ 179.918605][ T5238] Bluetooth: hci4: command tx timeout [ 179.933462][ T6841] team0: Port device wg2 added [ 180.022233][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'. [ 180.172204][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 180.213997][ T6854] tipc: Started in network mode [ 180.237653][ T6854] tipc: Node identity a62e3581a115, cluster identity 4711 [ 180.249428][ T6854] tipc: Enabled bearer , priority 0 [ 180.276143][ T6856] netlink: 'syz.4.301': attribute type 9 has an invalid length. [ 180.347396][ T6856] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.301'. [ 180.360415][ T6858] syzkaller0: MTU too low for tipc bearer [ 180.380594][ T6858] tipc: Disabling bearer [ 180.545975][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.584164][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.641656][ T6711] bridge_slave_0: entered allmulticast mode [ 180.674584][ T6711] bridge_slave_0: entered promiscuous mode [ 180.706343][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.743129][ T6881] xt_CT: No such helper "netbios-ns" [ 180.743275][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.761822][ T6711] bridge_slave_1: entered allmulticast mode [ 180.774490][ T6711] bridge_slave_1: entered promiscuous mode [ 180.822830][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 180.866532][ T6711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.912746][ T6711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.937398][ T6888] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 180.954138][ T6888] netlink: 44 bytes leftover after parsing attributes in process `syz.3.307'. [ 181.117629][ T6711] team0: Port device team_slave_0 added [ 181.127533][ T6888] netlink: 47 bytes leftover after parsing attributes in process `syz.3.307'. [ 181.177264][ T6711] team0: Port device team_slave_1 added [ 181.335087][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.350440][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.387243][ T6711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.404474][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.412398][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.509843][ T6711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.738343][ T6912] netlink: 'syz.3.310': attribute type 3 has an invalid length. [ 181.783846][ T6711] hsr_slave_0: entered promiscuous mode [ 181.871016][ T6711] hsr_slave_1: entered promiscuous mode [ 181.938015][ T6711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.945638][ T6711] Cannot create hsr debugfs directory [ 181.998449][ T5238] Bluetooth: hci4: command tx timeout [ 182.356642][ T6936] x_tables: duplicate underflow at hook 2 [ 182.414807][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 183.050613][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 183.111473][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.324'. [ 183.380313][ T6972] sock: sock_set_timeout: `syz.3.326' (pid 6972) tries to set negative timeout [ 183.509723][ T6972] netlink: 'syz.3.326': attribute type 10 has an invalid length. [ 183.557976][ T6972] hsr0: entered promiscuous mode [ 183.591152][ T6972] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 183.647857][ T6972] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 183.689768][ T6972] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 183.747874][ T6972] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 184.123984][ T6978] netlink: 96 bytes leftover after parsing attributes in process `syz.4.311'. [ 184.605715][ T6996] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 185.034971][ T7007] FAULT_INJECTION: forcing a failure. [ 185.034971][ T7007] name failslab, interval 1, probability 0, space 0, times 1 [ 185.067877][ T7007] CPU: 0 UID: 0 PID: 7007 Comm: syz.4.332 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 185.078188][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 185.088387][ T7007] Call Trace: [ 185.091698][ T7007] [ 185.094655][ T7007] dump_stack_lvl+0x241/0x360 [ 185.099409][ T7007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.104659][ T7007] ? __pfx__printk+0x10/0x10 [ 185.109296][ T7007] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 185.114793][ T7007] ? __pfx___might_resched+0x10/0x10 [ 185.120147][ T7007] should_fail_ex+0x3b0/0x4e0 [ 185.124893][ T7007] should_failslab+0xac/0x100 [ 185.129630][ T7007] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 185.135048][ T7007] __kmalloc_cache_noprof+0x6c/0x2c0 [ 185.140361][ T7007] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 185.145596][ T7007] genl_rcv_msg+0xb14/0xec0 [ 185.150111][ T7007] ? mark_lock+0x9a/0x350 [ 185.154470][ T7007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.159549][ T7007] ? __pfx_lock_acquire+0x10/0x10 [ 185.164584][ T7007] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 185.170318][ T7007] ? __pfx___might_resched+0x10/0x10 [ 185.175625][ T7007] netlink_rcv_skb+0x1e3/0x430 [ 185.180409][ T7007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.185448][ T7007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.190757][ T7007] ? __netlink_deliver_tap+0x77e/0x7c0 [ 185.196271][ T7007] genl_rcv+0x28/0x40 [ 185.200274][ T7007] netlink_unicast+0x7f6/0x990 [ 185.205060][ T7007] ? __pfx_netlink_unicast+0x10/0x10 [ 185.210396][ T7007] ? __virt_addr_valid+0x183/0x530 [ 185.215542][ T7007] ? __check_object_size+0x49c/0x900 [ 185.220855][ T7007] ? bpf_lsm_netlink_send+0x9/0x10 [ 185.226077][ T7007] netlink_sendmsg+0x8e4/0xcb0 [ 185.230871][ T7007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.236178][ T7007] ? __import_iovec+0x536/0x820 [ 185.241039][ T7007] ? aa_sock_msg_perm+0x91/0x160 [ 185.245979][ T7007] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 185.251312][ T7007] ? security_socket_sendmsg+0x87/0xb0 [ 185.256793][ T7007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.262093][ T7007] __sock_sendmsg+0x221/0x270 [ 185.266785][ T7007] ____sys_sendmsg+0x525/0x7d0 [ 185.271589][ T7007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.276901][ T7007] __sys_sendmsg+0x2b0/0x3a0 [ 185.281591][ T7007] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.286726][ T7007] ? vfs_write+0x7c4/0xc90 [ 185.291203][ T7007] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.297552][ T7007] ? do_syscall_64+0x100/0x230 [ 185.302330][ T7007] ? do_syscall_64+0xb6/0x230 [ 185.307019][ T7007] do_syscall_64+0xf3/0x230 [ 185.311545][ T7007] ? clear_bhb_loop+0x35/0x90 [ 185.316242][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.322158][ T7007] RIP: 0033:0x7f281e37def9 [ 185.326588][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.346207][ T7007] RSP: 002b:00007f281f129038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.354639][ T7007] RAX: ffffffffffffffda RBX: 00007f281e535f80 RCX: 00007f281e37def9 [ 185.362619][ T7007] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 185.370681][ T7007] RBP: 00007f281f129090 R08: 0000000000000000 R09: 0000000000000000 [ 185.378658][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.386641][ T7007] R13: 0000000000000000 R14: 00007f281e535f80 R15: 00007ffdc548c4c8 [ 185.394656][ T7007] [ 185.578792][ T6711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.653876][ T6711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.690037][ T6711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.727271][ T6711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.355967][ T7043] Bluetooth: MGMT ver 1.23 [ 186.603121][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.840800][ T6711] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.897284][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.904522][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.963171][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.970495][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.031611][ T7075] FAULT_INJECTION: forcing a failure. [ 187.031611][ T7075] name failslab, interval 1, probability 0, space 0, times 0 [ 187.095601][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.0.345 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 187.105912][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 187.116007][ T7075] Call Trace: [ 187.119328][ T7075] [ 187.122292][ T7075] dump_stack_lvl+0x241/0x360 [ 187.127030][ T7075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.132290][ T7075] ? __pfx__printk+0x10/0x10 [ 187.136930][ T7075] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 187.142516][ T7075] ? __pfx___might_resched+0x10/0x10 [ 187.147851][ T7075] should_fail_ex+0x3b0/0x4e0 [ 187.152579][ T7075] should_failslab+0xac/0x100 [ 187.157291][ T7075] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 187.162681][ T7075] __kmalloc_cache_noprof+0x6c/0x2c0 [ 187.167990][ T7075] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 187.173214][ T7075] genl_rcv_msg+0xb14/0xec0 [ 187.177736][ T7075] ? mark_lock+0x9a/0x350 [ 187.182092][ T7075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.187156][ T7075] ? __pfx_lock_acquire+0x10/0x10 [ 187.192209][ T7075] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 187.198097][ T7075] ? __pfx___might_resched+0x10/0x10 [ 187.203400][ T7075] netlink_rcv_skb+0x1e3/0x430 [ 187.208176][ T7075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.213201][ T7075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.218505][ T7075] ? __netlink_deliver_tap+0x77e/0x7c0 [ 187.223986][ T7075] genl_rcv+0x28/0x40 [ 187.227976][ T7075] netlink_unicast+0x7f6/0x990 [ 187.232845][ T7075] ? __pfx_netlink_unicast+0x10/0x10 [ 187.238139][ T7075] ? __virt_addr_valid+0x183/0x530 [ 187.243267][ T7075] ? __check_object_size+0x49c/0x900 [ 187.248566][ T7075] ? bpf_lsm_netlink_send+0x9/0x10 [ 187.253692][ T7075] netlink_sendmsg+0x8e4/0xcb0 [ 187.258492][ T7075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.263796][ T7075] ? __import_iovec+0x536/0x820 [ 187.268704][ T7075] ? aa_sock_msg_perm+0x91/0x160 [ 187.273773][ T7075] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 187.279302][ T7075] ? security_socket_sendmsg+0x87/0xb0 [ 187.284907][ T7075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.290383][ T7075] __sock_sendmsg+0x221/0x270 [ 187.295083][ T7075] ____sys_sendmsg+0x525/0x7d0 [ 187.299885][ T7075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.305218][ T7075] __sys_sendmsg+0x2b0/0x3a0 [ 187.309835][ T7075] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.314965][ T7075] ? vfs_write+0x7c4/0xc90 [ 187.319438][ T7075] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.325804][ T7075] ? do_syscall_64+0x100/0x230 [ 187.330592][ T7075] ? do_syscall_64+0xb6/0x230 [ 187.335293][ T7075] do_syscall_64+0xf3/0x230 [ 187.339813][ T7075] ? clear_bhb_loop+0x35/0x90 [ 187.344499][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.350398][ T7075] RIP: 0033:0x7fc6e4d7def9 [ 187.354822][ T7075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.374616][ T7075] RSP: 002b:00007fc6e5ace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.383044][ T7075] RAX: ffffffffffffffda RBX: 00007fc6e4f35f80 RCX: 00007fc6e4d7def9 [ 187.391023][ T7075] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 187.399174][ T7075] RBP: 00007fc6e5ace090 R08: 0000000000000000 R09: 0000000000000000 [ 187.407153][ T7075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.415136][ T7075] R13: 0000000000000000 R14: 00007fc6e4f35f80 R15: 00007ffc52e90178 [ 187.423134][ T7075] [ 187.428619][ T7069] netlink: 56 bytes leftover after parsing attributes in process `syz.2.344'. [ 188.445398][ T6711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.642435][ T6711] veth0_vlan: entered promiscuous mode [ 188.665229][ T7122] netlink: zone id is out of range [ 188.690150][ T7122] netlink: zone id is out of range [ 188.701235][ T7122] netlink: zone id is out of range [ 188.708063][ T7122] netlink: zone id is out of range [ 188.714055][ T6711] veth1_vlan: entered promiscuous mode [ 188.721282][ T7122] netlink: zone id is out of range [ 188.726952][ T7122] netlink: zone id is out of range [ 188.741450][ T7122] netlink: zone id is out of range [ 188.748790][ T7122] netlink: zone id is out of range [ 188.754129][ T7122] netlink: zone id is out of range [ 188.788518][ T7122] netlink: zone id is out of range [ 188.804654][ T6711] veth0_macvtap: entered promiscuous mode [ 188.845540][ T6711] veth1_macvtap: entered promiscuous mode [ 188.952921][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.987851][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.021633][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.043817][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.064669][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.102161][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.161226][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.209964][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.249997][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.287976][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.325101][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.365437][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.386377][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.438714][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.461836][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.494931][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.576377][ T7147] FAULT_INJECTION: forcing a failure. [ 189.576377][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 189.620799][ T7138] netlink: 'syz.2.356': attribute type 21 has an invalid length. [ 189.638033][ T7138] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 189.644544][ T7147] CPU: 1 UID: 0 PID: 7147 Comm: syz.3.357 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 189.655961][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 189.666056][ T7147] Call Trace: [ 189.669357][ T7147] [ 189.672312][ T7147] dump_stack_lvl+0x241/0x360 [ 189.677042][ T7147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.682297][ T7147] ? __pfx__printk+0x10/0x10 [ 189.686958][ T7147] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 189.692459][ T7147] ? __pfx___might_resched+0x10/0x10 [ 189.697799][ T7147] should_fail_ex+0x3b0/0x4e0 [ 189.702518][ T7147] should_failslab+0xac/0x100 [ 189.707237][ T7147] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 189.712646][ T7147] __kmalloc_cache_noprof+0x6c/0x2c0 [ 189.718175][ T7147] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 189.724263][ T7147] genl_rcv_msg+0xb14/0xec0 [ 189.729866][ T7147] ? mark_lock+0x9a/0x350 [ 189.734272][ T7147] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.739552][ T7147] ? __pfx_lock_acquire+0x10/0x10 [ 189.745189][ T7147] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 189.751069][ T7147] ? __pfx___might_resched+0x10/0x10 [ 189.756421][ T7147] netlink_rcv_skb+0x1e3/0x430 [ 189.761948][ T7147] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.767152][ T7147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.772547][ T7147] ? __netlink_deliver_tap+0x77e/0x7c0 [ 189.778091][ T7147] genl_rcv+0x28/0x40 [ 189.782404][ T7147] netlink_unicast+0x7f6/0x990 [ 189.787238][ T7147] ? __pfx_netlink_unicast+0x10/0x10 [ 189.792751][ T7147] ? __virt_addr_valid+0x183/0x530 [ 189.797923][ T7147] ? __check_object_size+0x49c/0x900 [ 189.803429][ T7147] ? bpf_lsm_netlink_send+0x9/0x10 [ 189.809035][ T7147] netlink_sendmsg+0x8e4/0xcb0 [ 189.813879][ T7147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.820012][ T7147] ? __import_iovec+0x536/0x820 [ 189.825442][ T7147] ? aa_sock_msg_perm+0x91/0x160 [ 189.830534][ T7147] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.835872][ T7147] ? security_socket_sendmsg+0x87/0xb0 [ 189.841389][ T7147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.846732][ T7147] __sock_sendmsg+0x221/0x270 [ 189.851472][ T7147] ____sys_sendmsg+0x525/0x7d0 [ 189.852310][ T6711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.856267][ T7147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.870711][ T7147] __sys_sendmsg+0x2b0/0x3a0 [ 189.875351][ T7147] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.879128][ T6711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.880480][ T7147] ? vfs_write+0x7c4/0xc90 [ 189.880561][ T7147] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.900079][ T7147] ? do_syscall_64+0x100/0x230 [ 189.904911][ T7147] ? do_syscall_64+0xb6/0x230 [ 189.909657][ T7147] do_syscall_64+0xf3/0x230 [ 189.913490][ T6711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.914198][ T7147] ? clear_bhb_loop+0x35/0x90 [ 189.928355][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.936051][ T7147] RIP: 0033:0x7f60cdd7def9 [ 189.937043][ T6711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.940785][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.940812][ T7147] RSP: 002b:00007f60ceb71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.940837][ T7147] RAX: ffffffffffffffda RBX: 00007f60cdf35f80 RCX: 00007f60cdd7def9 [ 189.940854][ T7147] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 189.940868][ T7147] RBP: 00007f60ceb71090 R08: 0000000000000000 R09: 0000000000000000 [ 189.940882][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.940896][ T7147] R13: 0000000000000000 R14: 00007f60cdf35f80 R15: 00007fff544c6898 [ 190.017965][ T7147] [ 190.433069][ T7161] netlink: 'syz.3.359': attribute type 10 has an invalid length. [ 190.510236][ T7161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.569073][ T7161] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 190.615653][ T7170] geneve2: entered promiscuous mode [ 190.649476][ T7170] geneve2: entered allmulticast mode [ 190.687592][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 190.737580][ T7173] netem: incorrect gi model size [ 190.758713][ T7173] netem: change failed [ 190.845804][ T7177] ip6gretap1: entered promiscuous mode [ 190.865144][ T7177] ip6gretap1: entered allmulticast mode [ 191.065792][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.092504][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.178146][ T7189] netlink: 168 bytes leftover after parsing attributes in process `syz.0.365'. [ 191.178981][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.242920][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.758458][ T7243] macsec1: entered promiscuous mode [ 192.763954][ T7243] macsec1: entered allmulticast mode [ 192.776495][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.374'. [ 193.166682][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.340757][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.604517][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.022630][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.073877][ T7266] netlink: 96 bytes leftover after parsing attributes in process `syz.0.372'. [ 194.473142][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 194.498176][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.575961][ T35] bridge_slave_1: left allmulticast mode [ 194.610467][ T35] bridge_slave_1: left promiscuous mode [ 194.638602][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.692197][ T35] bridge_slave_0: left allmulticast mode [ 194.704968][ T35] bridge_slave_0: left promiscuous mode [ 194.729185][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.788148][ T4621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.807976][ T4621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.821477][ T4621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.840992][ T4621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.862665][ T4621] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 194.876092][ T4621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.881812][ T7299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.286169][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.298757][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.311218][ T35] bond0 (unregistering): Released all slaves [ 196.334206][ T7301] pim6reg: entered allmulticast mode [ 196.341133][ T7307] pim6reg: left allmulticast mode [ 196.394072][ T7342] netlink: 'syz.4.390': attribute type 3 has an invalid length. [ 196.411870][ T7342] netlink: 'syz.4.390': attribute type 3 has an invalid length. [ 196.456536][ T7340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.893536][ T7363] netlink: 5 bytes leftover after parsing attributes in process `syz.0.394'. [ 196.937945][ T7363] net_ratelimit: 18 callbacks suppressed [ 196.937967][ T7363] A link change request failed with some changes committed already. Interface b may have been left with an inconsistent configuration, please check. [ 196.957980][ T4621] Bluetooth: hci4: command tx timeout [ 197.142262][ T7367] netlink: 'syz.0.394': attribute type 3 has an invalid length. [ 197.277217][ T35] hsr_slave_0: left promiscuous mode [ 197.348934][ T35] hsr_slave_1: left promiscuous mode [ 197.398772][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.422236][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.433261][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.441636][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.493419][ T35] veth1_macvtap: left promiscuous mode [ 197.513530][ T35] veth0_macvtap: left promiscuous mode [ 197.521546][ T35] veth1_vlan: left promiscuous mode [ 197.528860][ T35] veth0_vlan: left promiscuous mode [ 198.759457][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.805480][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.042339][ T4621] Bluetooth: hci4: command tx timeout [ 199.197205][ T35] team0 (unregistering): Port device team_slave_1 removed [ 199.257115][ T35] team0 (unregistering): Port device team_slave_0 removed [ 199.525208][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 200.551688][ T7404] netlink: 244 bytes leftover after parsing attributes in process `syz.0.405'. [ 201.118180][ T4621] Bluetooth: hci4: command tx timeout [ 201.180644][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 201.748921][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.756111][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.787986][ T7293] bridge_slave_0: entered allmulticast mode [ 201.825241][ T7293] bridge_slave_0: entered promiscuous mode [ 201.860990][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.903036][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.925915][ T7293] bridge_slave_1: entered allmulticast mode [ 201.951137][ T7293] bridge_slave_1: entered promiscuous mode [ 202.465776][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.624680][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.861259][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.413'. [ 202.951322][ T7293] team0: Port device team_slave_0 added [ 202.981082][ T7456] netlink: 'syz.2.415': attribute type 21 has an invalid length. [ 203.008093][ T7456] netlink: 128 bytes leftover after parsing attributes in process `syz.2.415'. [ 203.017132][ T7456] netlink: 'syz.2.415': attribute type 5 has an invalid length. [ 203.042807][ T7456] netlink: 'syz.2.415': attribute type 6 has an invalid length. [ 203.061052][ T7456] netlink: 3 bytes leftover after parsing attributes in process `syz.2.415'. [ 203.082341][ T7293] team0: Port device team_slave_1 added [ 203.197884][ T4621] Bluetooth: hci4: command tx timeout [ 203.203538][ T5237] IPVS: starting estimator thread 0... [ 203.317942][ T7463] IPVS: using max 18 ests per chain, 43200 per kthread [ 203.330558][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.342394][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.408464][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.428733][ T7466] netlink: 'syz.0.417': attribute type 29 has an invalid length. [ 203.448551][ T7465] netlink: 'syz.0.417': attribute type 29 has an invalid length. [ 203.479014][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.516717][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.568999][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.762174][ T7293] hsr_slave_0: entered promiscuous mode [ 203.777218][ T7293] hsr_slave_1: entered promiscuous mode [ 203.801626][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.813099][ T7293] Cannot create hsr debugfs directory [ 204.540636][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 204.728479][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 205.256068][ T7522] nbd: must specify a size in bytes for the device [ 205.310983][ T7521] Bluetooth: MGMT ver 1.23 [ 205.341222][ T7521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 205.364641][ T7521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 205.931712][ T7293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.992660][ T7293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.083753][ T7293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.167124][ T7293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.413116][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 206.481460][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 206.524733][ T7567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.439'. [ 206.844229][ T7570] Bluetooth: MGMT ver 1.23 [ 207.423420][ T7587] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 208.926859][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.941931][ T7585] __nla_validate_parse: 1 callbacks suppressed [ 208.941951][ T7585] netlink: 3 bytes leftover after parsing attributes in process `syz.0.443'. [ 208.958635][ T7585] 0ªX¹¦À: renamed from caif0 [ 209.009885][ T7585] 0ªX¹¦À: entered allmulticast mode [ 209.015157][ T7585] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 209.032459][ T7591] netlink: 140 bytes leftover after parsing attributes in process `syz.3.444'. [ 209.174353][ T7597] netlink: 'syz.4.446': attribute type 9 has an invalid length. [ 209.191940][ T7597] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.446'. [ 209.207047][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.283160][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.290522][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.314298][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.321548][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.435912][ T7600] IPVS: persistence engine module ip_vs_pe_@ not found [ 210.254326][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.456805][ T7293] veth0_vlan: entered promiscuous mode [ 210.521798][ T7293] veth1_vlan: entered promiscuous mode [ 210.561533][ T7649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.457'. [ 210.672650][ T7293] veth0_macvtap: entered promiscuous mode [ 210.718038][ T7293] veth1_macvtap: entered promiscuous mode [ 210.805369][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.853771][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.878000][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.898074][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.927379][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.941524][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.974699][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.011595][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.061945][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.092357][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.138029][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.176584][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.223652][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.252996][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.278793][ T7665] netlink: 'syz.4.461': attribute type 8 has an invalid length. [ 211.295146][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.326700][ T7665] netlink: 'syz.4.461': attribute type 4 has an invalid length. [ 211.346599][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.354722][ T7665] netlink: 224 bytes leftover after parsing attributes in process `syz.4.461'. [ 211.441385][ T7669] netlink: 210620 bytes leftover after parsing attributes in process `syz.2.462'. [ 211.464782][ T7293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.513832][ T7293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.536645][ T7293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.590251][ T7293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.832393][ T7606] netlink: 96 bytes leftover after parsing attributes in process `syz.3.448'. [ 212.272450][ T7692] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 212.339200][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.388477][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.562990][ T7700] FAULT_INJECTION: forcing a failure. [ 212.562990][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 212.584707][ T7700] CPU: 1 UID: 0 PID: 7700 Comm: syz.3.468 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 212.595090][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 212.605253][ T7700] Call Trace: [ 212.608550][ T7700] [ 212.611496][ T7700] dump_stack_lvl+0x241/0x360 [ 212.616210][ T7700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.621451][ T7700] ? __pfx__printk+0x10/0x10 [ 212.626091][ T7700] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 212.631561][ T7700] ? __pfx___might_resched+0x10/0x10 [ 212.636871][ T7700] should_fail_ex+0x3b0/0x4e0 [ 212.641570][ T7700] should_failslab+0xac/0x100 [ 212.646266][ T7700] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 212.651659][ T7700] __kmalloc_cache_noprof+0x6c/0x2c0 [ 212.656968][ T7700] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 212.662225][ T7700] genl_rcv_msg+0xb14/0xec0 [ 212.666875][ T7700] ? mark_lock+0x9a/0x350 [ 212.671353][ T7700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.676518][ T7700] ? __pfx_lock_acquire+0x10/0x10 [ 212.681573][ T7700] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 212.687349][ T7700] ? __pfx___might_resched+0x10/0x10 [ 212.692677][ T7700] netlink_rcv_skb+0x1e3/0x430 [ 212.697476][ T7700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.702566][ T7700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.707908][ T7700] ? __netlink_deliver_tap+0x77e/0x7c0 [ 212.713416][ T7700] genl_rcv+0x28/0x40 [ 212.717438][ T7700] netlink_unicast+0x7f6/0x990 [ 212.722348][ T7700] ? __pfx_netlink_unicast+0x10/0x10 [ 212.727674][ T7700] ? __virt_addr_valid+0x183/0x530 [ 212.732815][ T7700] ? __check_object_size+0x49c/0x900 [ 212.738123][ T7700] ? bpf_lsm_netlink_send+0x9/0x10 [ 212.743264][ T7700] netlink_sendmsg+0x8e4/0xcb0 [ 212.748065][ T7700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.753394][ T7700] ? __import_iovec+0x536/0x820 [ 212.758270][ T7700] ? aa_sock_msg_perm+0x91/0x160 [ 212.763227][ T7700] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 212.768526][ T7700] ? security_socket_sendmsg+0x87/0xb0 [ 212.774017][ T7700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.779328][ T7700] __sock_sendmsg+0x221/0x270 [ 212.784024][ T7700] ____sys_sendmsg+0x525/0x7d0 [ 212.788847][ T7700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.794280][ T7700] __sys_sendmsg+0x2b0/0x3a0 [ 212.798898][ T7700] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.804024][ T7700] ? vfs_write+0x7c4/0xc90 [ 212.808490][ T7700] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.814845][ T7700] ? do_syscall_64+0x100/0x230 [ 212.819631][ T7700] ? do_syscall_64+0xb6/0x230 [ 212.824327][ T7700] do_syscall_64+0xf3/0x230 [ 212.828848][ T7700] ? clear_bhb_loop+0x35/0x90 [ 212.833546][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.839463][ T7700] RIP: 0033:0x7f60cdd7def9 [ 212.843901][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.863536][ T7700] RSP: 002b:00007f60ceb71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.871967][ T7700] RAX: ffffffffffffffda RBX: 00007f60cdf35f80 RCX: 00007f60cdd7def9 [ 212.880044][ T7700] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 212.888025][ T7700] RBP: 00007f60ceb71090 R08: 0000000000000000 R09: 0000000000000000 [ 212.896007][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.903984][ T7700] R13: 0000000000000000 R14: 00007f60cdf35f80 R15: 00007fff544c6898 [ 212.911993][ T7700] [ 212.939224][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.947183][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.333779][ T7708] netlink: 92 bytes leftover after parsing attributes in process `syz.0.473'. [ 213.344197][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 213.794668][ T1832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.978868][ T1832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.096234][ T1832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.311902][ T1832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.504469][ T1832] bridge_slave_1: left allmulticast mode [ 214.511375][ T1832] bridge_slave_1: left promiscuous mode [ 214.517158][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.527480][ T1832] bridge_slave_0: left allmulticast mode [ 214.534346][ T1832] bridge_slave_0: left promiscuous mode [ 214.541921][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.987589][ T7743] ip6t_REJECT: ECHOREPLY is not supported [ 215.020784][ T7744] netlink: 'syz.2.481': attribute type 9 has an invalid length. [ 215.070609][ T7741] netlink: 9156 bytes leftover after parsing attributes in process `syz.0.480'. [ 215.101263][ T7744] netlink: 69136 bytes leftover after parsing attributes in process `syz.2.481'. [ 215.159668][ T7741] netlink: 388 bytes leftover after parsing attributes in process `syz.0.480'. [ 215.188066][ T7744] openvswitch: netlink: Port -524278 exceeds max allowable 65535 [ 215.279026][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.289553][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.307455][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.345707][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.354401][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.368660][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.421754][ T7750] FAULT_INJECTION: forcing a failure. [ 215.421754][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 215.457505][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.0.482 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 215.467813][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.477922][ T7750] Call Trace: [ 215.481234][ T7750] [ 215.484200][ T7750] dump_stack_lvl+0x241/0x360 [ 215.488959][ T7750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.494206][ T7750] ? __pfx__printk+0x10/0x10 [ 215.498850][ T7750] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 215.504351][ T7750] ? __pfx___might_resched+0x10/0x10 [ 215.509683][ T7750] should_fail_ex+0x3b0/0x4e0 [ 215.514406][ T7750] should_failslab+0xac/0x100 [ 215.519135][ T7750] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 215.524552][ T7750] __kmalloc_cache_noprof+0x6c/0x2c0 [ 215.529885][ T7750] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 215.535149][ T7750] genl_rcv_msg+0xb14/0xec0 [ 215.539732][ T7750] ? mark_lock+0x9a/0x350 [ 215.544309][ T7750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.549413][ T7750] ? __pfx_lock_acquire+0x10/0x10 [ 215.554486][ T7750] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 215.560255][ T7750] ? __pfx___might_resched+0x10/0x10 [ 215.565595][ T7750] netlink_rcv_skb+0x1e3/0x430 [ 215.570418][ T7750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.575486][ T7750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.580840][ T7750] ? __netlink_deliver_tap+0x77e/0x7c0 [ 215.586369][ T7750] genl_rcv+0x28/0x40 [ 215.590401][ T7750] netlink_unicast+0x7f6/0x990 [ 215.595225][ T7750] ? __pfx_netlink_unicast+0x10/0x10 [ 215.600647][ T7750] ? __virt_addr_valid+0x183/0x530 [ 215.605796][ T7750] ? __check_object_size+0x49c/0x900 [ 215.611214][ T7750] ? bpf_lsm_netlink_send+0x9/0x10 [ 215.616427][ T7750] netlink_sendmsg+0x8e4/0xcb0 [ 215.621261][ T7750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.626616][ T7750] ? __import_iovec+0x536/0x820 [ 215.631554][ T7750] ? aa_sock_msg_perm+0x91/0x160 [ 215.636531][ T7750] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.642473][ T7750] ? security_socket_sendmsg+0x87/0xb0 [ 215.648070][ T7750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.653683][ T7750] __sock_sendmsg+0x221/0x270 [ 215.658461][ T7750] ____sys_sendmsg+0x525/0x7d0 [ 215.663288][ T7750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.668639][ T7750] __sys_sendmsg+0x2b0/0x3a0 [ 215.673285][ T7750] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.678522][ T7750] ? vfs_write+0x7c4/0xc90 [ 215.683034][ T7750] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.689411][ T7750] ? do_syscall_64+0x100/0x230 [ 215.694232][ T7750] ? do_syscall_64+0xb6/0x230 [ 215.698961][ T7750] do_syscall_64+0xf3/0x230 [ 215.703515][ T7750] ? clear_bhb_loop+0x35/0x90 [ 215.708240][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.714270][ T7750] RIP: 0033:0x7fc6e4d7def9 [ 215.718909][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.738821][ T7750] RSP: 002b:00007fc6e5ace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.747322][ T7750] RAX: ffffffffffffffda RBX: 00007fc6e4f35f80 RCX: 00007fc6e4d7def9 [ 215.755509][ T7750] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 215.763518][ T7750] RBP: 00007fc6e5ace090 R08: 0000000000000000 R09: 0000000000000000 [ 215.771522][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.779529][ T7750] R13: 0000000000000000 R14: 00007fc6e4f35f80 R15: 00007ffc52e90178 [ 215.787554][ T7750] [ 216.398516][ T1832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.424777][ T1832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.456973][ T1832] bond0 (unregistering): Released all slaves [ 216.728253][ T7735] netlink: 96 bytes leftover after parsing attributes in process `syz.3.479'. [ 217.037865][ T5238] Bluetooth: hci3: command 0x0405 tx timeout [ 217.438162][ T4621] Bluetooth: hci4: command tx timeout [ 217.715325][ T1832] hsr_slave_0: left promiscuous mode [ 217.745406][ T1832] hsr_slave_1: left promiscuous mode [ 217.767154][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.803641][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.848050][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.874035][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.950157][ T1832] veth1_macvtap: left promiscuous mode [ 217.955929][ T1832] veth0_macvtap: left promiscuous mode [ 217.962182][ T1832] veth1_vlan: left promiscuous mode [ 217.968416][ T1832] veth0_vlan: left promiscuous mode [ 219.107862][ T1832] team0 (unregistering): Port device team_slave_1 removed [ 219.221050][ T1832] team0 (unregistering): Port device team_slave_0 removed [ 219.518104][ T4621] Bluetooth: hci4: command tx timeout [ 220.335689][ T7809] netlink: 96 bytes leftover after parsing attributes in process `syz.4.493'. [ 220.974039][ T7747] chnl_net:caif_netlink_parms(): no params data found [ 221.501116][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.515435][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.554487][ T7747] bridge_slave_0: entered allmulticast mode [ 221.595957][ T7747] bridge_slave_0: entered promiscuous mode [ 221.598139][ T4621] Bluetooth: hci4: command tx timeout [ 221.793085][ T7849] tipc: Can't bind to reserved service type 1 [ 221.839141][ T7850] netlink: 344 bytes leftover after parsing attributes in process `syz.4.498'. [ 221.850782][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.862508][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.871470][ T7747] bridge_slave_1: entered allmulticast mode [ 221.887568][ T7747] bridge_slave_1: entered promiscuous mode [ 221.942095][ T7848] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 221.958914][ T7849] netlink: 'syz.3.500': attribute type 6 has an invalid length. [ 222.212518][ T7747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.238481][ T7747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.360857][ T7747] team0: Port device team_slave_0 added [ 222.414927][ T7747] team0: Port device team_slave_1 added [ 222.560293][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.567291][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.688726][ T7747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.754428][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.786299][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.907824][ T7747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.912826][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.505'. [ 223.179742][ T7747] hsr_slave_0: entered promiscuous mode [ 223.221095][ T7747] hsr_slave_1: entered promiscuous mode [ 223.263312][ T7747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.292743][ T7747] Cannot create hsr debugfs directory [ 223.417434][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 223.677910][ T4621] Bluetooth: hci4: command tx timeout [ 223.977314][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.511'. [ 224.348208][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'. [ 224.450269][ T7910] bridge_slave_1: left allmulticast mode [ 224.456283][ T7910] bridge_slave_1: left promiscuous mode [ 224.463865][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.509477][ T7910] netlink: 100 bytes leftover after parsing attributes in process `syz.2.513'. [ 224.943894][ T7747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.999101][ T7747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.041761][ T7747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.105309][ T7747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.143944][ T7963] netlink: 'syz.4.521': attribute type 10 has an invalid length. [ 226.300759][ T7944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 226.310693][ T7944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.518'. [ 226.381197][ T7973] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.417028][ T7973] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 226.436653][ T7973] bridge_slave_0: default FDB implementation only supports local addresses [ 226.653706][ T7747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.794458][ T7747] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.038094][ T4621] Bluetooth: hci4: command tx timeout [ 227.099284][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.106487][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.167279][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.174547][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.300567][ T8000] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.310522][ T8000] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.320568][ T8000] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.329392][ T8000] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.371380][ T8005] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 227.511220][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 227.562779][ T8006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.672215][ T7996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.694641][ T7996] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 227.726252][ T7996] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 227.766939][ T7996] bond1: (slave ip6gre1): making interface the new active one [ 227.789066][ T7996] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 228.038082][ T8031] x_tables: duplicate underflow at hook 1 [ 228.555808][ T8056] netlink: 'syz.4.537': attribute type 5 has an invalid length. [ 228.654664][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'. [ 228.689636][ T8058] openvswitch: netlink: Message has 4 unknown bytes. [ 228.796805][ T8064] Cannot find set identified by id 0 to match [ 228.852813][ T7747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.050592][ T7747] veth0_vlan: entered promiscuous mode [ 229.076360][ T7747] veth1_vlan: entered promiscuous mode [ 229.095712][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 229.136093][ T8069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'. [ 229.156320][ T8069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'. [ 229.271234][ T7747] veth0_macvtap: entered promiscuous mode [ 229.301801][ T7747] veth1_macvtap: entered promiscuous mode [ 229.365833][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.404542][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.435030][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.469820][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.498782][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.518162][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.554273][ T7747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.685889][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.712838][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.734554][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.754906][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.765661][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.779836][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.804167][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.821423][ T8090] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 229.829378][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.861853][ T7747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.952035][ T8088] bridge_slave_0: left allmulticast mode [ 229.980303][ T8088] bridge_slave_0: left promiscuous mode [ 229.986160][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.034411][ T8088] bridge_slave_1: left allmulticast mode [ 230.048218][ T8088] bridge_slave_1: left promiscuous mode [ 230.063265][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.108476][ T8088] bond0: (slave bond_slave_0): Releasing backup interface [ 230.180392][ T8088] bond0: (slave bond_slave_1): Releasing backup interface [ 230.270939][ T8088] team0: Port device team_slave_0 removed [ 230.292728][ T8088] team0: Port device team_slave_1 removed [ 230.301778][ T8088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.310371][ T8088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.324197][ T8088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.336667][ T8088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.369673][ T8088] bond0: (slave netdevsim0): Releasing backup interface [ 230.422850][ T8088] bond1: (slave ip6gre1): Releasing backup interface [ 230.467161][ T8090] veth1_to_team: entered promiscuous mode [ 230.486281][ T8090] team0: Port device veth1_to_team added [ 230.512956][ T7747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.531514][ T7747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.557860][ T7747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.566592][ T7747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.908848][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.917224][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.011583][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.052623][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.140481][ T8123] netlink: 32 bytes leftover after parsing attributes in process `syz.4.552'. [ 231.243531][ T8127] IPv4: Oversized IP packet from 172.20.20.24 [ 231.252291][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 231.259515][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 231.797098][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.893435][ T4006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.174867][ T4006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.359115][ T4006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.454942][ T4006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.624255][ T4006] bridge_slave_1: left allmulticast mode [ 232.630315][ T4006] bridge_slave_1: left promiscuous mode [ 232.636122][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.645962][ T4006] bridge_slave_0: left allmulticast mode [ 232.652305][ T4006] bridge_slave_0: left promiscuous mode [ 232.658850][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.797329][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.565'. [ 233.510737][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.528384][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.546279][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.557561][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.579228][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.594222][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.629710][ T4006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.657487][ T4006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.673209][ T4006] bond0 (unregistering): Released all slaves [ 234.596190][ T8216] netlink: 312 bytes leftover after parsing attributes in process `syz.3.577'. [ 234.744621][ T8222] can: request_module (can-proto-3) failed. [ 234.768104][ T4006] hsr_slave_0: left promiscuous mode [ 234.852757][ T4006] hsr_slave_1: left promiscuous mode [ 234.909234][ T8232] sctp: [Deprecated]: syz.0.575 (pid 8232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.909234][ T8232] Use struct sctp_sack_info instead [ 234.941069][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.981446][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.999274][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.006726][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.104856][ T4006] veth1_macvtap: left promiscuous mode [ 235.116541][ T4006] veth0_macvtap: left promiscuous mode [ 235.134035][ T4006] veth1_vlan: left promiscuous mode [ 235.145207][ T4006] veth0_vlan: left promiscuous mode [ 235.683100][ T4621] Bluetooth: hci4: command tx timeout [ 235.853791][ T8250] IPVS: length: 215 != 24 [ 236.113214][ T4006] team0 (unregistering): Port device team_slave_1 removed [ 236.170907][ T4006] team0 (unregistering): Port device team_slave_0 removed [ 237.081022][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 237.236695][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 237.616848][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'. [ 237.758029][ T4621] Bluetooth: hci4: command tx timeout [ 237.907932][ T8307] x_tables: duplicate underflow at hook 1 [ 237.951383][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.988419][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.016065][ T8174] bridge_slave_0: entered allmulticast mode [ 238.044490][ T8174] bridge_slave_0: entered promiscuous mode [ 238.104870][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.147933][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.170391][ T8174] bridge_slave_1: entered allmulticast mode [ 238.197830][ T8174] bridge_slave_1: entered promiscuous mode [ 238.356785][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.391648][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.527020][ T8174] team0: Port device team_slave_0 added [ 238.554357][ T8174] team0: Port device team_slave_1 added [ 238.689719][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.713109][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.759245][ T8174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.774304][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.781934][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.812031][ T8174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.868869][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.599'. [ 239.013999][ T8174] hsr_slave_0: entered promiscuous mode [ 239.034312][ T8174] hsr_slave_1: entered promiscuous mode [ 239.062839][ T8174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.087314][ T8174] Cannot create hsr debugfs directory [ 239.466030][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.605'. [ 239.650896][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 239.663406][ T8376] netlink: 'syz.3.605': attribute type 4 has an invalid length. [ 239.676806][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.606'. [ 239.837999][ T4621] Bluetooth: hci4: command tx timeout [ 240.735184][ T8417] netlink: 596 bytes leftover after parsing attributes in process `syz.2.615'. [ 241.079238][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 241.144261][ T8423] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 241.174272][ T8423] netlink: 224 bytes leftover after parsing attributes in process `syz.4.616'. [ 241.434101][ T8445] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.620'. [ 241.463776][ T8174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.488709][ T8445] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 241.505630][ T8174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.584735][ T8174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.624885][ T8174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.638232][ T8449] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 241.666730][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.621'. [ 241.696744][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 241.918147][ T4621] Bluetooth: hci4: command tx timeout [ 242.021567][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.061574][ T8465] sch_fq: defrate 2 ignored. [ 242.107672][ T8174] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.176494][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.183773][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.288163][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.295422][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.498435][ T8510] netlink: 'syz.0.631': attribute type 10 has an invalid length. [ 242.549142][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.593562][ T8510] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 243.350979][ T8546] netlink: 'syz.4.638': attribute type 6 has an invalid length. [ 243.624759][ T8174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.004525][ T8174] veth0_vlan: entered promiscuous mode [ 244.068560][ T8174] veth1_vlan: entered promiscuous mode [ 244.355138][ T8577] __nla_validate_parse: 1 callbacks suppressed [ 244.355162][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 244.546209][ T8174] veth0_macvtap: entered promiscuous mode [ 244.592827][ T8174] veth1_macvtap: entered promiscuous mode [ 244.615015][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 244.721356][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.765465][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.814365][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.853852][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.885502][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.930507][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.958830][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.986649][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.019275][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.040954][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.065767][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.090974][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.276351][ T8174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.327860][ T8174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.357206][ T8174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.381842][ T8174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.994947][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 246.022623][ T8649] syz.4.657[8649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.022793][ T8649] syz.4.657[8649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.029443][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 246.149354][ T8658] syz.4.657[8658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.149500][ T8658] syz.4.657[8658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.304393][ T4006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.335422][ T4006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.370202][ T8659] netlink: 'syz.0.654': attribute type 3 has an invalid length. [ 246.426102][ T8659] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.654'. [ 246.459260][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.507893][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.824906][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 247.640237][ T8721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.671'. [ 247.791588][ T4006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.010389][ T4006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.154968][ T4006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.300003][ T4006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.508184][ T4006] bridge_slave_1: left allmulticast mode [ 248.514690][ T4006] bridge_slave_1: left promiscuous mode [ 248.528168][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.540119][ T4006] bridge_slave_0: left allmulticast mode [ 248.546034][ T4006] bridge_slave_0: left promiscuous mode [ 248.552291][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.165330][ T4006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.182483][ T4006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.202127][ T4006] bond0 (unregistering): Released all slaves [ 249.222936][ T8744] netem: unknown loss type 0 [ 249.236546][ T8744] netem: change failed [ 249.549175][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.561726][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.572492][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.596531][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.604530][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 249.619611][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.879360][ T8791] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.681'. [ 249.912879][ T8791] openvswitch: netlink: Actions may not be safe on all matching packets [ 250.054944][ T8789] netlink: 'syz.3.680': attribute type 10 has an invalid length. [ 250.113485][ T8789] team0: Port device netdevsim0 added [ 250.307530][ T4006] hsr_slave_0: left promiscuous mode [ 250.324673][ T4006] hsr_slave_1: left promiscuous mode [ 250.348621][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.356088][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.395871][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.413987][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.488485][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.687'. [ 250.503228][ T4006] veth1_macvtap: left promiscuous mode [ 250.529031][ T4006] veth0_macvtap: left promiscuous mode [ 250.548548][ T4006] veth1_vlan: left promiscuous mode [ 250.564434][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 250.583797][ T4006] veth0_vlan: left promiscuous mode [ 250.784388][ T8834] netlink: 11 bytes leftover after parsing attributes in process `syz.0.689'. [ 251.266080][ T4006] team0 (unregistering): Port device team_slave_1 removed [ 251.313480][ T4006] team0 (unregistering): Port device team_slave_0 removed [ 251.681441][ T5238] Bluetooth: hci4: command tx timeout [ 251.790909][ T8820] vcan0: entered allmulticast mode [ 251.808243][ C0] Unknown status report in ack skb [ 251.983628][ T8839] team0: entered promiscuous mode [ 252.136017][ T8837] team0: left promiscuous mode [ 252.389055][ T8856] FAULT_INJECTION: forcing a failure. [ 252.389055][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 252.468639][ T8856] CPU: 0 UID: 0 PID: 8856 Comm: syz.4.695 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 252.478951][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 252.489047][ T8856] Call Trace: [ 252.492357][ T8856] [ 252.495313][ T8856] dump_stack_lvl+0x241/0x360 [ 252.500041][ T8856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.505289][ T8856] ? __pfx__printk+0x10/0x10 [ 252.509929][ T8856] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 252.515428][ T8856] ? __pfx___might_resched+0x10/0x10 [ 252.520768][ T8856] should_fail_ex+0x3b0/0x4e0 [ 252.525496][ T8856] should_failslab+0xac/0x100 [ 252.530232][ T8856] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 252.535641][ T8856] __kmalloc_cache_noprof+0x6c/0x2c0 [ 252.540948][ T8856] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 252.546174][ T8856] genl_rcv_msg+0xb14/0xec0 [ 252.550708][ T8856] ? mark_lock+0x9a/0x350 [ 252.555055][ T8856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.560108][ T8856] ? __pfx_lock_acquire+0x10/0x10 [ 252.565144][ T8856] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 252.570940][ T8856] ? __pfx___might_resched+0x10/0x10 [ 252.576423][ T8856] netlink_rcv_skb+0x1e3/0x430 [ 252.581224][ T8856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.586294][ T8856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.591631][ T8856] ? __netlink_deliver_tap+0x77e/0x7c0 [ 252.597131][ T8856] genl_rcv+0x28/0x40 [ 252.601128][ T8856] netlink_unicast+0x7f6/0x990 [ 252.605920][ T8856] ? __pfx_netlink_unicast+0x10/0x10 [ 252.611234][ T8856] ? __virt_addr_valid+0x183/0x530 [ 252.616367][ T8856] ? __check_object_size+0x49c/0x900 [ 252.621675][ T8856] ? bpf_lsm_netlink_send+0x9/0x10 [ 252.626809][ T8856] netlink_sendmsg+0x8e4/0xcb0 [ 252.631612][ T8856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.636933][ T8856] ? __import_iovec+0x536/0x820 [ 252.641893][ T8856] ? aa_sock_msg_perm+0x91/0x160 [ 252.646845][ T8856] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 252.652163][ T8856] ? security_socket_sendmsg+0x87/0xb0 [ 252.657660][ T8856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.662967][ T8856] __sock_sendmsg+0x221/0x270 [ 252.667660][ T8856] ____sys_sendmsg+0x525/0x7d0 [ 252.672439][ T8856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.677764][ T8856] __sys_sendmsg+0x2b0/0x3a0 [ 252.682367][ T8856] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.687483][ T8856] ? vfs_write+0x7c4/0xc90 [ 252.691981][ T8856] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.698328][ T8856] ? do_syscall_64+0x100/0x230 [ 252.703112][ T8856] ? do_syscall_64+0xb6/0x230 [ 252.707813][ T8856] do_syscall_64+0xf3/0x230 [ 252.712349][ T8856] ? clear_bhb_loop+0x35/0x90 [ 252.717042][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.722949][ T8856] RIP: 0033:0x7f281e37def9 [ 252.727373][ T8856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.746986][ T8856] RSP: 002b:00007f281f129038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.755409][ T8856] RAX: ffffffffffffffda RBX: 00007f281e535f80 RCX: 00007f281e37def9 [ 252.763385][ T8856] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 252.771359][ T8856] RBP: 00007f281f129090 R08: 0000000000000000 R09: 0000000000000000 [ 252.779345][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.787324][ T8856] R13: 0000000000000000 R14: 00007f281e535f80 R15: 00007ffdc548c4c8 [ 252.795315][ T8856] [ 252.904849][ T8772] chnl_net:caif_netlink_parms(): no params data found [ 253.127422][ T8866] netlink: 'syz.2.696': attribute type 29 has an invalid length. [ 253.192720][ T8874] veth0_macvtap: left promiscuous mode [ 253.359711][ T8882] netlink: 6 bytes leftover after parsing attributes in process `syz.3.699'. [ 253.599647][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.624086][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.643988][ T8772] bridge_slave_0: entered allmulticast mode [ 253.665600][ T8772] bridge_slave_0: entered promiscuous mode [ 253.685138][ T8901] netlink: 'syz.2.702': attribute type 4 has an invalid length. [ 253.706633][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.727571][ T8907] xt_TCPMSS: Only works on TCP SYN packets [ 253.747873][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.763636][ T5238] Bluetooth: hci4: command 0x041b tx timeout [ 253.778179][ T8772] bridge_slave_1: entered allmulticast mode [ 253.788186][ T8772] bridge_slave_1: entered promiscuous mode [ 253.793974][ T8909] netlink: 'syz.4.705': attribute type 27 has an invalid length. [ 253.996447][ T8772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.996519][ T8913] FAULT_INJECTION: forcing a failure. [ 253.996519][ T8913] name failslab, interval 1, probability 0, space 0, times 0 [ 254.023730][ T8772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.088730][ T8913] CPU: 1 UID: 0 PID: 8913 Comm: syz.4.707 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 254.099046][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 254.109161][ T8913] Call Trace: [ 254.112477][ T8913] [ 254.115613][ T8913] dump_stack_lvl+0x241/0x360 [ 254.120347][ T8913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.125625][ T8913] ? __pfx__printk+0x10/0x10 [ 254.130271][ T8913] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 254.135779][ T8913] ? __pfx___might_resched+0x10/0x10 [ 254.141119][ T8913] should_fail_ex+0x3b0/0x4e0 [ 254.145846][ T8913] should_failslab+0xac/0x100 [ 254.150573][ T8913] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 254.155997][ T8913] __kmalloc_cache_noprof+0x6c/0x2c0 [ 254.161324][ T8913] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 254.166556][ T8913] genl_rcv_msg+0xb14/0xec0 [ 254.171082][ T8913] ? mark_lock+0x9a/0x350 [ 254.175437][ T8913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.180480][ T8913] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 254.186408][ T8913] ? __pfx_lock_acquire+0x10/0x10 [ 254.191444][ T8913] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 254.197261][ T8913] ? __pfx___might_resched+0x10/0x10 [ 254.202573][ T8913] netlink_rcv_skb+0x1e3/0x430 [ 254.207353][ T8913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.212400][ T8913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.217720][ T8913] ? __netlink_deliver_tap+0x77e/0x7c0 [ 254.223220][ T8913] genl_rcv+0x28/0x40 [ 254.227210][ T8913] netlink_unicast+0x7f6/0x990 [ 254.231999][ T8913] ? __pfx_netlink_unicast+0x10/0x10 [ 254.237311][ T8913] ? __virt_addr_valid+0x183/0x530 [ 254.242434][ T8913] ? __check_object_size+0x49c/0x900 [ 254.247742][ T8913] ? bpf_lsm_netlink_send+0x9/0x10 [ 254.252880][ T8913] netlink_sendmsg+0x8e4/0xcb0 [ 254.257672][ T8913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.262991][ T8913] ? __import_iovec+0x536/0x820 [ 254.267849][ T8913] ? aa_sock_msg_perm+0x91/0x160 [ 254.272815][ T8913] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 254.278134][ T8913] ? security_socket_sendmsg+0x87/0xb0 [ 254.283634][ T8913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.288949][ T8913] __sock_sendmsg+0x221/0x270 [ 254.293666][ T8913] ____sys_sendmsg+0x525/0x7d0 [ 254.298573][ T8913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.303886][ T8913] __sys_sendmsg+0x2b0/0x3a0 [ 254.308483][ T8913] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.313641][ T8913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.319988][ T8913] ? do_syscall_64+0x100/0x230 [ 254.324782][ T8913] ? do_syscall_64+0xb6/0x230 [ 254.329503][ T8913] do_syscall_64+0xf3/0x230 [ 254.334026][ T8913] ? clear_bhb_loop+0x35/0x90 [ 254.338771][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.344679][ T8913] RIP: 0033:0x7f281e37def9 [ 254.349105][ T8913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.368721][ T8913] RSP: 002b:00007f281f129038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.377148][ T8913] RAX: ffffffffffffffda RBX: 00007f281e535f80 RCX: 00007f281e37def9 [ 254.385128][ T8913] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 254.393109][ T8913] RBP: 00007f281f129090 R08: 0000000000000000 R09: 0000000000000000 [ 254.401101][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.409122][ T8913] R13: 0000000000000000 R14: 00007f281e535f80 R15: 00007ffdc548c4c8 [ 254.417133][ T8913] [ 254.590411][ T8925] openvswitch: netlink: Missing key (keys=40, expected=100) [ 254.693733][ T8922] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 254.695870][ T8772] team0: Port device team_slave_0 added [ 254.714403][ T8922] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 254.723277][ T8772] team0: Port device team_slave_1 added [ 254.736980][ T8927] netlink: 232 bytes leftover after parsing attributes in process `syz.4.710'. [ 254.940415][ T8929] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 254.956594][ T8932] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 255.009762][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.056734][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.137611][ T8772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.152646][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.160430][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.206968][ T8772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.234363][ T8944] netlink: 32 bytes leftover after parsing attributes in process `syz.4.713'. [ 255.525390][ T8772] hsr_slave_0: entered promiscuous mode [ 255.591640][ T8772] hsr_slave_1: entered promiscuous mode [ 255.642025][ T8772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.658201][ T8772] Cannot create hsr debugfs directory [ 255.765827][ T8977] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.719'. [ 255.839561][ T5238] Bluetooth: hci4: command 0x041b tx timeout [ 255.861390][ T8985] netlink: 'syz.0.723': attribute type 21 has an invalid length. [ 255.886351][ T8985] netlink: 128 bytes leftover after parsing attributes in process `syz.0.723'. [ 255.914725][ T8985] netlink: 'syz.0.723': attribute type 5 has an invalid length. [ 255.930207][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.004410][ T8985] netlink: 3 bytes leftover after parsing attributes in process `syz.0.723'. [ 256.932240][ T9014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.730'. [ 257.355591][ T9045] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.737'. [ 257.385748][ T9045] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 257.432418][ T9047] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 257.466465][ T9047] x_tables: ip_tables: osf match: only valid for protocol 6 [ 257.917849][ T8990] Bluetooth: hci4: command 0x041b tx timeout [ 258.001153][ T4621] Bluetooth: hci2: command 0x0406 tx timeout [ 258.001222][ T8990] Bluetooth: hci0: command 0x0406 tx timeout [ 258.007254][ T4621] Bluetooth: hci3: command 0x0405 tx timeout [ 258.016004][ T8990] Bluetooth: hci1: command 0x0406 tx timeout [ 258.163294][ T8772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.202770][ T8772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.218589][ T9064] xt_l2tp: v2 doesn't support IP mode [ 258.250397][ T8772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.277435][ T8772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.576042][ T8772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.707367][ T9075] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.720049][ T8772] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.785279][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.792895][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.941055][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.948263][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.866794][ T8772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.001120][ T5238] Bluetooth: hci4: command 0x041b tx timeout [ 260.156784][ T8772] veth0_vlan: entered promiscuous mode [ 260.162347][ T9134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.227553][ T9136] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 260.253204][ T9136] netlink: 112 bytes leftover after parsing attributes in process `syz.3.756'. [ 260.359915][ T8772] veth1_vlan: entered promiscuous mode [ 260.471713][ T8772] veth0_macvtap: entered promiscuous mode [ 260.501293][ T8772] veth1_macvtap: entered promiscuous mode [ 260.525385][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.544181][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.586843][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.628391][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.660985][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.708306][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.732131][ T9151] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 260.767809][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.774500][ T9151] netlink: 224 bytes leftover after parsing attributes in process `syz.3.760'. [ 260.807965][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.858265][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.879719][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.912800][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.960553][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.031840][ T8772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.037960][ T9167] netlink: 44 bytes leftover after parsing attributes in process `syz.4.765'. [ 261.089393][ T8772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.133950][ T8772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.167824][ T8772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.194575][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 261.234295][ T9167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.765'. [ 261.390836][ T9175] team0: entered promiscuous mode [ 261.408968][ T9175] team_slave_0: entered promiscuous mode [ 261.425885][ T9175] team_slave_1: entered promiscuous mode [ 261.457608][ T9174] team0: left promiscuous mode [ 261.468791][ T9174] team_slave_0: left promiscuous mode [ 261.474888][ T9174] team_slave_1: left promiscuous mode [ 261.695989][ T9192] netlink: 116 bytes leftover after parsing attributes in process `syz.3.773'. [ 261.743660][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.792681][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.828711][ T9191] netlink: 'syz.4.772': attribute type 4 has an invalid length. [ 262.054697][ T9208] pimreg: entered allmulticast mode [ 262.066472][ T9209] pimreg: left allmulticast mode [ 262.078610][ T5238] Bluetooth: hci4: command 0x041b tx timeout [ 262.134170][ T1832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.142688][ T1832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.350690][ T9209] ------------[ cut here ]------------ [ 262.357353][ T9209] WARNING: CPU: 1 PID: 9209 at kernel/workqueue.c:2259 __queue_work+0xcd3/0xf50 [ 262.366805][ T9209] Modules linked in: [ 262.371931][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.3.776 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 262.382928][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 262.393296][ T9209] RIP: 0010:__queue_work+0xcd3/0xf50 [ 262.398649][ T9209] Code: ff e8 91 89 36 00 90 0f 0b 90 e9 1e fd ff ff e8 83 89 36 00 eb 13 e8 7c 89 36 00 eb 0c e8 75 89 36 00 eb 05 e8 6e 89 36 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 262.418484][ T9209] RSP: 0018:ffffc90004b8f4a8 EFLAGS: 00010083 [ 262.424622][ T9209] RAX: ffffffff815d0334 RBX: ffff88803066da00 RCX: 0000000000040000 [ 262.432832][ T9209] RDX: ffffc90016ecc000 RSI: 00000000000072b4 RDI: 00000000000072b5 [ 262.442072][ T9209] RBP: 0000000000000000 R08: ffffffff815cf794 R09: 0000000000000000 [ 262.450360][ T9209] R10: ffffc90004b8f580 R11: fffff52000971eb1 R12: ffff888024336800 [ 262.458476][ T9209] R13: ffff8880243369c0 R14: dffffc0000000000 R15: 0000000000000008 [ 262.466502][ T9209] FS: 00007f60ceb506c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 262.476290][ T9209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.482929][ T9209] CR2: 00007fc3757895c0 CR3: 000000007186a000 CR4: 00000000003506f0 [ 262.491045][ T9209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.499080][ T9209] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.507218][ T9209] Call Trace: [ 262.510744][ T9209] [ 262.513728][ T9209] ? __warn+0x163/0x4e0 [ 262.517932][ T9209] ? __queue_work+0xcd3/0xf50 [ 262.522674][ T9209] ? report_bug+0x2b3/0x500 [ 262.527237][ T9209] ? __queue_work+0xcd3/0xf50 [ 262.531974][ T9209] ? handle_bug+0x3e/0x70 [ 262.536351][ T9209] ? exc_invalid_op+0x1a/0x50 [ 262.541074][ T9209] ? asm_exc_invalid_op+0x1a/0x20 [ 262.546414][ T9209] ? __queue_work+0x124/0xf50 [ 262.551575][ T9209] ? __queue_work+0xcc4/0xf50 [ 262.556307][ T9209] ? __queue_work+0xcd3/0xf50 [ 262.561045][ T9209] ? __queue_work+0xcc4/0xf50 [ 262.565768][ T9209] ? lockdep_hardirqs_on+0x99/0x150 [ 262.571035][ T9209] queue_work_on+0x1c2/0x380 [ 262.575680][ T9209] ? __pfx_queue_work_on+0x10/0x10 [ 262.580854][ T9209] ? l2cap_do_send+0x155/0x2c0 [ 262.585692][ T9209] l2cap_chan_send+0x3d6/0x2690 [ 262.590741][ T9209] ? trace_contention_end+0x3c/0x120 [ 262.596078][ T9209] ? __mutex_lock+0x2ef/0xd70 [ 262.600902][ T9209] ? __pfx_l2cap_chan_send+0x10/0x10 [ 262.606249][ T9209] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.611510][ T9209] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 262.616605][ T9209] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 262.622495][ T9209] __sock_sendmsg+0x221/0x270 [ 262.627325][ T9209] ____sys_sendmsg+0x525/0x7d0 [ 262.632157][ T9209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.637499][ T9209] ? __might_fault+0xaa/0x120 [ 262.642249][ T9209] __sys_sendmmsg+0x3b2/0x740 [ 262.646987][ T9209] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.652270][ T9209] ? wake_up_q+0xdc/0x120 [ 262.656655][ T9209] ? futex_wait+0x285/0x360 [ 262.661229][ T9209] ? __pfx_futex_wait+0x10/0x10 [ 262.666226][ T9209] ? __pfx_aa_sk_perm+0x10/0x10 [ 262.671140][ T9209] ? do_sock_setsockopt+0x3e2/0x720 [ 262.676386][ T9209] ? do_futex+0x33b/0x560 [ 262.680790][ T9209] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.687263][ T9209] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.693636][ T9209] ? do_syscall_64+0x100/0x230 [ 262.698460][ T9209] __x64_sys_sendmmsg+0xa0/0xb0 [ 262.703363][ T9209] do_syscall_64+0xf3/0x230 [ 262.707927][ T9209] ? clear_bhb_loop+0x35/0x90 [ 262.712665][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.718632][ T9209] RIP: 0033:0x7f60cdd7def9 [ 262.723089][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.742738][ T9209] RSP: 002b:00007f60ceb50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.751208][ T9209] RAX: ffffffffffffffda RBX: 00007f60cdf36058 RCX: 00007f60cdd7def9 [ 262.759214][ T9209] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000009 [ 262.767221][ T9209] RBP: 00007f60cddf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 262.775228][ T9209] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000 [ 262.783249][ T9209] R13: 0000000000000000 R14: 00007f60cdf36058 R15: 00007fff544c6898 [ 262.791277][ T9209] [ 262.794327][ T9209] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.801634][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.3.776 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 262.811930][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 262.822056][ T9209] Call Trace: [ 262.825353][ T9209] [ 262.828307][ T9209] dump_stack_lvl+0x241/0x360 [ 262.833091][ T9209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.838347][ T9209] ? __pfx__printk+0x10/0x10 [ 262.843003][ T9209] ? vscnprintf+0x5d/0x90 [ 262.847378][ T9209] panic+0x349/0x860 [ 262.852112][ T9209] ? __warn+0x172/0x4e0 [ 262.856309][ T9209] ? __pfx_panic+0x10/0x10 [ 262.860821][ T9209] __warn+0x346/0x4e0 [ 262.864836][ T9209] ? __queue_work+0xcd3/0xf50 [ 262.869566][ T9209] report_bug+0x2b3/0x500 [ 262.873943][ T9209] ? __queue_work+0xcd3/0xf50 [ 262.878763][ T9209] handle_bug+0x3e/0x70 [ 262.882957][ T9209] exc_invalid_op+0x1a/0x50 [ 262.887501][ T9209] asm_exc_invalid_op+0x1a/0x20 [ 262.892402][ T9209] RIP: 0010:__queue_work+0xcd3/0xf50 [ 262.897752][ T9209] Code: ff e8 91 89 36 00 90 0f 0b 90 e9 1e fd ff ff e8 83 89 36 00 eb 13 e8 7c 89 36 00 eb 0c e8 75 89 36 00 eb 05 e8 6e 89 36 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 262.917391][ T9209] RSP: 0018:ffffc90004b8f4a8 EFLAGS: 00010083 [ 262.923513][ T9209] RAX: ffffffff815d0334 RBX: ffff88803066da00 RCX: 0000000000040000 [ 262.931517][ T9209] RDX: ffffc90016ecc000 RSI: 00000000000072b4 RDI: 00000000000072b5 [ 262.939542][ T9209] RBP: 0000000000000000 R08: ffffffff815cf794 R09: 0000000000000000 [ 262.947522][ T9209] R10: ffffc90004b8f580 R11: fffff52000971eb1 R12: ffff888024336800 [ 262.955498][ T9209] R13: ffff8880243369c0 R14: dffffc0000000000 R15: 0000000000000008 [ 262.963491][ T9209] ? __queue_work+0x124/0xf50 [ 262.968201][ T9209] ? __queue_work+0xcc4/0xf50 [ 262.972898][ T9209] ? __queue_work+0xcc4/0xf50 [ 262.977581][ T9209] ? lockdep_hardirqs_on+0x99/0x150 [ 262.982805][ T9209] queue_work_on+0x1c2/0x380 [ 262.987432][ T9209] ? __pfx_queue_work_on+0x10/0x10 [ 262.992558][ T9209] ? l2cap_do_send+0x155/0x2c0 [ 262.997356][ T9209] l2cap_chan_send+0x3d6/0x2690 [ 263.002257][ T9209] ? trace_contention_end+0x3c/0x120 [ 263.007570][ T9209] ? __mutex_lock+0x2ef/0xd70 [ 263.012274][ T9209] ? __pfx_l2cap_chan_send+0x10/0x10 [ 263.017594][ T9209] ? do_raw_spin_unlock+0x13c/0x8b0 [ 263.022832][ T9209] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 263.027985][ T9209] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 263.033552][ T9209] __sock_sendmsg+0x221/0x270 [ 263.038264][ T9209] ____sys_sendmsg+0x525/0x7d0 [ 263.043047][ T9209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.048346][ T9209] ? __might_fault+0xaa/0x120 [ 263.053074][ T9209] __sys_sendmmsg+0x3b2/0x740 [ 263.057781][ T9209] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.063046][ T9209] ? wake_up_q+0xdc/0x120 [ 263.067423][ T9209] ? futex_wait+0x285/0x360 [ 263.071959][ T9209] ? __pfx_futex_wait+0x10/0x10 [ 263.076821][ T9209] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.081684][ T9209] ? do_sock_setsockopt+0x3e2/0x720 [ 263.086881][ T9209] ? do_futex+0x33b/0x560 [ 263.091250][ T9209] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.097245][ T9209] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.103596][ T9209] ? do_syscall_64+0x100/0x230 [ 263.108605][ T9209] __x64_sys_sendmmsg+0xa0/0xb0 [ 263.113497][ T9209] do_syscall_64+0xf3/0x230 [ 263.118040][ T9209] ? clear_bhb_loop+0x35/0x90 [ 263.122734][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.128668][ T9209] RIP: 0033:0x7f60cdd7def9 [ 263.133092][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.152715][ T9209] RSP: 002b:00007f60ceb50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.161154][ T9209] RAX: ffffffffffffffda RBX: 00007f60cdf36058 RCX: 00007f60cdd7def9 [ 263.169164][ T9209] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000009 [ 263.177230][ T9209] RBP: 00007f60cddf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 263.185215][ T9209] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000 [ 263.193222][ T9209] R13: 0000000000000000 R14: 00007f60cdf36058 R15: 00007fff544c6898 [ 263.201220][ T9209] [ 263.204567][ T9209] Kernel Offset: disabled [ 263.208990][ T9209] Rebooting in 86400 seconds..