last executing test programs: 1m11.066785444s ago: executing program 0 (id=78): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}, {&(0x7f0000000200)="b05deb728e75fb2989c7084c0a84bfe05bc0123283a314eb2e005dc125ef329407ad035814e750e6e39810af9c9da9ed4f21edceea4e31fc32465d8203c56e3c87df809e83af9fcde4fd21c22e7274540bb268eae919a24afb9e50dc7978a83e54c65ce2f05af6aa3e2434db78f954d83ad724db9f14bbca2b03553eedb70989a9ad84a3ed53b5e61027b777baab4aacc47a91a39211363419e3c33bdae9ddb451d0d6cc3d725d042df15d41aea50e946c87df70bde6141af6aee3167fae7758a0f8d5e6b5897ca6a0c21e2ca79ab90fd37f0f7a9881fa031f4ebf41963301ae", 0xe0}, {&(0x7f0000000000)="d64b4b29fbe10c49b150fad6329918c18474e89efd9b8324c0161bd96b76452cc3470b6650eb5ede5055c969e54fff0762589afa4dd16cc69578b3391ff20024909ae86c4a5ea38e757e0aed744b9b7b7f79138592f76f88ce12e11fe2564d43e25c8acad20ac4092e8a081cea9f9d612fbcb8f7fa190c304ef84abf761ec7a915d1341b308f4c284749dab940c9a0c08b7af5a015fae340def4d2a671ae5089fab880b4c7fb42", 0xa7}, {&(0x7f0000000140)="4d765d6aa0dc930b888a4f69b5ef7a4c7bf963a2fc094a4102d1bd1502ce79c4cd840bc80159876c5e8987f793924834ce08856c9553f6a488b8aaa707a7d6064dd7fe6b12c1b264219b173c176767885089d9108972ba2c38ed8d6b1cb31e7620feb8634cfb", 0x66}], 0x4, &(0x7f00000001c0)=[@dstopts_2292={{0x30, 0x29, 0x32, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x30}}], 0x1, 0x4c0c0) 57.457658089s ago: executing program 0 (id=78): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}, {&(0x7f0000000200)="b05deb728e75fb2989c7084c0a84bfe05bc0123283a314eb2e005dc125ef329407ad035814e750e6e39810af9c9da9ed4f21edceea4e31fc32465d8203c56e3c87df809e83af9fcde4fd21c22e7274540bb268eae919a24afb9e50dc7978a83e54c65ce2f05af6aa3e2434db78f954d83ad724db9f14bbca2b03553eedb70989a9ad84a3ed53b5e61027b777baab4aacc47a91a39211363419e3c33bdae9ddb451d0d6cc3d725d042df15d41aea50e946c87df70bde6141af6aee3167fae7758a0f8d5e6b5897ca6a0c21e2ca79ab90fd37f0f7a9881fa031f4ebf41963301ae", 0xe0}, {&(0x7f0000000000)="d64b4b29fbe10c49b150fad6329918c18474e89efd9b8324c0161bd96b76452cc3470b6650eb5ede5055c969e54fff0762589afa4dd16cc69578b3391ff20024909ae86c4a5ea38e757e0aed744b9b7b7f79138592f76f88ce12e11fe2564d43e25c8acad20ac4092e8a081cea9f9d612fbcb8f7fa190c304ef84abf761ec7a915d1341b308f4c284749dab940c9a0c08b7af5a015fae340def4d2a671ae5089fab880b4c7fb42", 0xa7}, {&(0x7f0000000140)="4d765d6aa0dc930b888a4f69b5ef7a4c7bf963a2fc094a4102d1bd1502ce79c4cd840bc80159876c5e8987f793924834ce08856c9553f6a488b8aaa707a7d6064dd7fe6b12c1b264219b173c176767885089d9108972ba2c38ed8d6b1cb31e7620feb8634cfb", 0x66}], 0x4, &(0x7f00000001c0)=[@dstopts_2292={{0x30, 0x29, 0x32, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x30}}], 0x1, 0x4c0c0) 44.596200563s ago: executing program 0 (id=78): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}, {&(0x7f0000000200)="b05deb728e75fb2989c7084c0a84bfe05bc0123283a314eb2e005dc125ef329407ad035814e750e6e39810af9c9da9ed4f21edceea4e31fc32465d8203c56e3c87df809e83af9fcde4fd21c22e7274540bb268eae919a24afb9e50dc7978a83e54c65ce2f05af6aa3e2434db78f954d83ad724db9f14bbca2b03553eedb70989a9ad84a3ed53b5e61027b777baab4aacc47a91a39211363419e3c33bdae9ddb451d0d6cc3d725d042df15d41aea50e946c87df70bde6141af6aee3167fae7758a0f8d5e6b5897ca6a0c21e2ca79ab90fd37f0f7a9881fa031f4ebf41963301ae", 0xe0}, {&(0x7f0000000000)="d64b4b29fbe10c49b150fad6329918c18474e89efd9b8324c0161bd96b76452cc3470b6650eb5ede5055c969e54fff0762589afa4dd16cc69578b3391ff20024909ae86c4a5ea38e757e0aed744b9b7b7f79138592f76f88ce12e11fe2564d43e25c8acad20ac4092e8a081cea9f9d612fbcb8f7fa190c304ef84abf761ec7a915d1341b308f4c284749dab940c9a0c08b7af5a015fae340def4d2a671ae5089fab880b4c7fb42", 0xa7}, {&(0x7f0000000140)="4d765d6aa0dc930b888a4f69b5ef7a4c7bf963a2fc094a4102d1bd1502ce79c4cd840bc80159876c5e8987f793924834ce08856c9553f6a488b8aaa707a7d6064dd7fe6b12c1b264219b173c176767885089d9108972ba2c38ed8d6b1cb31e7620feb8634cfb", 0x66}], 0x4, &(0x7f00000001c0)=[@dstopts_2292={{0x30, 0x29, 0x32, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x30}}], 0x1, 0x4c0c0) 32.868314687s ago: executing program 0 (id=78): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}, {&(0x7f0000000200)="b05deb728e75fb2989c7084c0a84bfe05bc0123283a314eb2e005dc125ef329407ad035814e750e6e39810af9c9da9ed4f21edceea4e31fc32465d8203c56e3c87df809e83af9fcde4fd21c22e7274540bb268eae919a24afb9e50dc7978a83e54c65ce2f05af6aa3e2434db78f954d83ad724db9f14bbca2b03553eedb70989a9ad84a3ed53b5e61027b777baab4aacc47a91a39211363419e3c33bdae9ddb451d0d6cc3d725d042df15d41aea50e946c87df70bde6141af6aee3167fae7758a0f8d5e6b5897ca6a0c21e2ca79ab90fd37f0f7a9881fa031f4ebf41963301ae", 0xe0}, {&(0x7f0000000000)="d64b4b29fbe10c49b150fad6329918c18474e89efd9b8324c0161bd96b76452cc3470b6650eb5ede5055c969e54fff0762589afa4dd16cc69578b3391ff20024909ae86c4a5ea38e757e0aed744b9b7b7f79138592f76f88ce12e11fe2564d43e25c8acad20ac4092e8a081cea9f9d612fbcb8f7fa190c304ef84abf761ec7a915d1341b308f4c284749dab940c9a0c08b7af5a015fae340def4d2a671ae5089fab880b4c7fb42", 0xa7}, {&(0x7f0000000140)="4d765d6aa0dc930b888a4f69b5ef7a4c7bf963a2fc094a4102d1bd1502ce79c4cd840bc80159876c5e8987f793924834ce08856c9553f6a488b8aaa707a7d6064dd7fe6b12c1b264219b173c176767885089d9108972ba2c38ed8d6b1cb31e7620feb8634cfb", 0x66}], 0x4, &(0x7f00000001c0)=[@dstopts_2292={{0x30, 0x29, 0x32, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x30}}], 0x1, 0x4c0c0) 21.984295318s ago: executing program 0 (id=78): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}, {&(0x7f0000000200)="b05deb728e75fb2989c7084c0a84bfe05bc0123283a314eb2e005dc125ef329407ad035814e750e6e39810af9c9da9ed4f21edceea4e31fc32465d8203c56e3c87df809e83af9fcde4fd21c22e7274540bb268eae919a24afb9e50dc7978a83e54c65ce2f05af6aa3e2434db78f954d83ad724db9f14bbca2b03553eedb70989a9ad84a3ed53b5e61027b777baab4aacc47a91a39211363419e3c33bdae9ddb451d0d6cc3d725d042df15d41aea50e946c87df70bde6141af6aee3167fae7758a0f8d5e6b5897ca6a0c21e2ca79ab90fd37f0f7a9881fa031f4ebf41963301ae", 0xe0}, {&(0x7f0000000000)="d64b4b29fbe10c49b150fad6329918c18474e89efd9b8324c0161bd96b76452cc3470b6650eb5ede5055c969e54fff0762589afa4dd16cc69578b3391ff20024909ae86c4a5ea38e757e0aed744b9b7b7f79138592f76f88ce12e11fe2564d43e25c8acad20ac4092e8a081cea9f9d612fbcb8f7fa190c304ef84abf761ec7a915d1341b308f4c284749dab940c9a0c08b7af5a015fae340def4d2a671ae5089fab880b4c7fb42", 0xa7}, {&(0x7f0000000140)="4d765d6aa0dc930b888a4f69b5ef7a4c7bf963a2fc094a4102d1bd1502ce79c4cd840bc80159876c5e8987f793924834ce08856c9553f6a488b8aaa707a7d6064dd7fe6b12c1b264219b173c176767885089d9108972ba2c38ed8d6b1cb31e7620feb8634cfb", 0x66}], 0x4, &(0x7f00000001c0)=[@dstopts_2292={{0x30, 0x29, 0x32, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x30}}], 0x1, 0x4c0c0) 8.739652689s ago: executing program 0 (id=78): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}, {&(0x7f0000000200)="b05deb728e75fb2989c7084c0a84bfe05bc0123283a314eb2e005dc125ef329407ad035814e750e6e39810af9c9da9ed4f21edceea4e31fc32465d8203c56e3c87df809e83af9fcde4fd21c22e7274540bb268eae919a24afb9e50dc7978a83e54c65ce2f05af6aa3e2434db78f954d83ad724db9f14bbca2b03553eedb70989a9ad84a3ed53b5e61027b777baab4aacc47a91a39211363419e3c33bdae9ddb451d0d6cc3d725d042df15d41aea50e946c87df70bde6141af6aee3167fae7758a0f8d5e6b5897ca6a0c21e2ca79ab90fd37f0f7a9881fa031f4ebf41963301ae", 0xe0}, {&(0x7f0000000000)="d64b4b29fbe10c49b150fad6329918c18474e89efd9b8324c0161bd96b76452cc3470b6650eb5ede5055c969e54fff0762589afa4dd16cc69578b3391ff20024909ae86c4a5ea38e757e0aed744b9b7b7f79138592f76f88ce12e11fe2564d43e25c8acad20ac4092e8a081cea9f9d612fbcb8f7fa190c304ef84abf761ec7a915d1341b308f4c284749dab940c9a0c08b7af5a015fae340def4d2a671ae5089fab880b4c7fb42", 0xa7}, {&(0x7f0000000140)="4d765d6aa0dc930b888a4f69b5ef7a4c7bf963a2fc094a4102d1bd1502ce79c4cd840bc80159876c5e8987f793924834ce08856c9553f6a488b8aaa707a7d6064dd7fe6b12c1b264219b173c176767885089d9108972ba2c38ed8d6b1cb31e7620feb8634cfb", 0x66}], 0x4, &(0x7f00000001c0)=[@dstopts_2292={{0x30, 0x29, 0x32, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x30}}], 0x1, 0x4c0c0) 3.109781437s ago: executing program 3 (id=664): syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffefff}]}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a169d340be8befc1b238aa26e24"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001640)=""/4099, 0x1003}], 0x1, 0x0, 0x0, 0x81}, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x32600) close(r2) 2.138745807s ago: executing program 3 (id=677): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x47, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x17f, 0x0, 0x0, 0x300}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8cce9e220288b34c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1.990749273s ago: executing program 3 (id=680): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x2000000000}}, {{@in6=@mcast1}, 0x0, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x488a5}, 0x24040084) 1.75711273s ago: executing program 2 (id=683): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x0, {{0x1c, 0x4, 0x1, 0x9, 0x70, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x7b, 0x1, 0x1, [{@remote, 0x600}, {@broadcast, 0x8}]}, @cipso={0x86, 0x2a, 0xfffffffffffffffc, [{0x0, 0xe, "cc61725f28f0ee0d0cde5b3c"}, {0x4437ff572782c593, 0x11, "df253408916f4e93ea2afa2b49d3e2"}, {0xbb2547d804e89a67, 0x5, 'wsX'}]}, @timestamp_addr={0x44, 0x1c, 0xe0, 0x1, 0x3, [{@multicast1, 0x7fffffff}, {@empty, 0x45}, {@empty, 0x200}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltclass={0x78, 0x29, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x3, 0x2}, {0x9, 0xa}, {0xd, 0xb}}, [@tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x2, 0x5, 0x20}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x479df15d, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x3, 0x9}}]}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004044}, 0x81) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newspdinfo={0x4c, 0x24, 0x500, 0x70bd2d, 0x25dfdbfc, 0xde0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40854}, 0x800) (async, rerun: 64) r4 = socket$inet6(0xa, 0x800, 0xb) (rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x810) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000540)) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r5) (rerun: 64) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r7, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xb5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000700)=0x4, 0x4) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000780)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) readv(r0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/1, 0x1}, {&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f00000008c0)=""/31, 0x1f}], 0x3) (async) r10 = socket$inet6(0xa, 0x404, 0x9b) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r5) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r11, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfc}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8800) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000a80)={0xffffffffffffffff, r9}) (async) sendto$inet6(r10, &(0x7f0000000ac0)="465904c8baa354878d42722af1b83d10e2770f239853c151f2c886ca82828665c403feee653bc8b8b36f7fc7c22097815fb5f95970d94f0899b0706d5bf8cdfa6b65c8802cda4c30dc8ada230e0d47b9ceb4d8ca1f9dda2dc13b609632660994f79ad417554896e31238a1a09d527a6319e676f3847c2d1693d899dcd311c8", 0x7f, 0x0, &(0x7f0000000b40)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd0ba}, 0x1c) (async) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000b80)=""/52, 0x34}, {&(0x7f0000000bc0)=""/13, 0xd}, {&(0x7f0000000c00)=""/44, 0x2c}, {&(0x7f0000000c40)=""/233, 0xe9}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/165, 0xa5}], 0x6, &(0x7f0000001e80)=""/26, 0x1a}}], 0x1, 0x0, &(0x7f0000001f40)={r12, r13+10000000}) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000001f80)={0x0, 0x1cc9, 0x9}, 0x8) (async, rerun: 64) write$cgroup_devices(r3, &(0x7f0000001fc0)={'c', ' *:* ', 'w\x00'}, 0x8) (async, rerun: 64) sendmsg$NFT_BATCH(r9, &(0x7f0000002240)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x120, 0x14, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xab, 0x8, "900a95c18d037bf27d1a38f6e81018e5b5e2d3cf390675965aa07cabf4769550a0afe97f1daba742575c6185f48b402054f9f09ff1659252688a982386a0b102e64445ce67d170843d08b853cb725c748343157ac1896f2d94e14553a55b58faeb8decbe386756511265a09579e0998cc41c51a80f11f69ca9187d3829e2f921c37238ea71f3abdb1b6a079cb4b2506ca3a33d88e58f16f0e505d8252d95aef281ac05e518585f"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1b0}}, 0x8000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000002280), r5) socket$nl_generic(0x10, 0x3, 0x10) 1.706453901s ago: executing program 3 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) 1.612231169s ago: executing program 1 (id=685): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0xc, 0x8, 0x1, 0x0, [{@remote}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) 1.561755875s ago: executing program 4 (id=686): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x80800) r4 = getpid() r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000001ec0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000001e80)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc0200002000080027bd7000fbdbdf252b000000fe8000000000000000000000000000bbac1e01010000000000000000000000004e2300014e2403ff0a0080802c000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0800160007000000b10003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048030000a291c2523ef65dee6177e414434c86685bce30b5115b36a5d5d9ea00fa80c7ac4eca50900a046b1404bcd4a20602ed3a08e2be110e8584fde971f570d83af50712e6014e9bf5914bd1b30049d7a2819eea948ced32f376270f7bba65de8210662aa0bcb92b81bba05700000080011100fc000000000000000000000000000001fe8000000000000000000000000000bbff020000000000000000000000000001fe8000000000000000000000000000aaff030000023500000a000200ac1414bb000000000000000000000000ffffffff0000000000000000000000007f000001000000000000000000000000fc0000000000000000000000000000013c0200000535000002000200fe880000000000000000000000000101fe8000000000000000000000000000aaff020000000000000000000000000001fc0200000000000000000000000000002b020000000000000a000200ac1e000100000000000000000000000064010102000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa32020000003500000a000200fe8000000000000000000000000000aa20010000000000000000000000000001e00000020000000000000000000000000a0101010000000000000000000000003c0300000035000002000a0044000500ffffffff000000000000000000000000000004d5320000000a0000007f0000010000000000000000000000000035000000030900d20400000c000000800000004952c24369c3b8ed3dd56b8f31df3564137a4a1afadb6ef3e07e5eb89c0f97a4e8c3b313612e856fe4022cbd2a43eb9ffe5154486d3940eed9f1db0f424eb0eef4e92a881d760df6e3"], 0xfffffdc0}, 0x1, 0x0, 0x0, 0x4}, 0x40) r8 = getgid() setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={r4, r7, r8}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r2, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x3, 0xd645, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x67}]}]}]}}]}, 0xb8}, 0x1, 0x7a00}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r11, 0x0) r12 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r12, 0x116, 0x80, &(0x7f0000000100)='n)z', 0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) socket(0x10, 0x4, 0x4) 1.495565642s ago: executing program 1 (id=687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@gettfilter={0x64, 0x2e, 0x200, 0x70bd2b, 0xf5f, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff3}, {0x6, 0x9}, {0x1, 0x9}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0x9f6d}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xe37}]}, 0x64}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x3, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0xe9b6, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x1000000, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)="b7e4beaed65f8fe1c5637dde8f69cfe980e7a306412915e780ffc71fd638b3f90864c23359c3f9761da280741935969696111ac4adb81b886a915c2f8d857b376a3f9bedb9171a2e2831a985", 0x4c}, {&(0x7f0000001a40)="5d645b621b3df9832ef948269b0c42fed99cb5c76d7a2c3542d3864f3a20d4efd53d529529f85be060f4127f3df148a9db49", 0x32}, {&(0x7f0000000380)="dbf518c8df2bab21c743a413818a1b695f18c7ab7c305b0bb0bfa2b2fae3d8808fc3845c8ea35a7ba60d6bc24ef1292f646a516b15a5a8e3e749d944f25f0489f9c2c6", 0x43}], 0x3}}], 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa", 0xa0}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="5a71790469917419eeba6ce4a83f995dc349f214543cf6521ca866413a5903d1c2d4a086fccb14c20b9bac8e45b8cfc832e9ab19d0822f1d6088b93502df9b579992b7c6e46e083a8b91fe4276388c4592cf3d78814115d6b8340f5b8a2423b84ee9f9a2d8360fb4c8", @ANYRES32=r11, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006adf616462616c616e63"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000d80)={'filter\x00', 0x7, 0xa00, 0x3c8, 0x1d0, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="ac2af0635e6a", @mac=@broadcast, @multicast2, @multicast2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) 1.408196843s ago: executing program 2 (id=688): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000400"/15, @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000b2e4c08f00001e548c1691ab4fbc0be399903a60864ac315c694e418ec02a3c7befe2887e6250506e9aa8f03daa74e6baa2c1590883a1b70c1c1640d869d0bd1ddd13f9c5b5517023a80910c60e77dc4b5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000300), &(0x7f00000005c0)=""/255}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r5, 0xbfd1bec9ce0df7f7, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x844) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xffffffffffffff9a, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 1.336148451s ago: executing program 1 (id=689): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x40006, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x894, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000004, 0x4, 0x1, 0x9, {0x9, 0x0, 0x9, 0x3, 0x3, 0x3}, {0x9, 0x0, 0x0, 0xd, 0x9, 0x4}, 0x1, 0x7a2, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x4, 0x3, 0x4, 0x7, 0x6, 0x6, 0x3, 0x8, 0x9, 0x1000000, 0x5, 0x7, 0x1, 0x81, 0x8, 0x0, 0xa1c, 0xd, 0x4, 0x80, 0x400, 0x72dd, 0x9, 0x8, 0xfffffff7, 0x0, 0x0, 0xe, 0x6, 0x2, 0x66, 0x9, 0x4, 0x40, 0x9, 0x5, 0xa07, 0xf, 0x200, 0x6, 0xfffffff8, 0xf, 0x2, 0xa5, 0x5, 0x7, 0x81, 0x1b4, 0x80000000, 0x404, 0x3, 0x6, 0xc, 0x8, 0x221e0033, 0x5, 0xffff, 0x80000000, 0x1, 0x8f0f, 0x0, 0xffffff8b, 0x0, 0x0, 0x8, 0xfffffff9, 0x3, 0x7, 0x200, 0x2c, 0x7e309646, 0xfffffff9, 0x6, 0x10000, 0x39, 0x80000001, 0x1ff, 0x800, 0x8, 0x4, 0xffffffff, 0x81d, 0xf1d1, 0x4, 0x1, 0x6ab9, 0x2, 0x6, 0x0, 0x4, 0x535a, 0x40, 0x3, 0x9, 0x5, 0x3, 0x5, 0x5, 0x8bb6, 0x7, 0x3, 0xe000000, 0x200, 0x3, 0x0, 0x1, 0x6e, 0xa9, 0x193a, 0xb0a3, 0xd4, 0x81, 0x3, 0xc94, 0x1, 0xfffffffb, 0x10, 0x7fffffff, 0x8, 0x30, 0x1ff, 0x5, 0x7, 0x0, 0x8, 0x1, 0x3, 0xfffff001, 0x15b, 0x6, 0x3, 0x6cb, 0x9, 0x2, 0x3bd3, 0x7, 0x9, 0x7, 0xffff8001, 0x1a7c, 0x8, 0x9f, 0x2, 0x0, 0x1, 0x6, 0x8, 0x4de142e3, 0x2, 0x5, 0x1, 0xb, 0x6, 0x4, 0x6, 0x4, 0x5, 0x3, 0x6, 0x3, 0xd, 0x5, 0x0, 0x5, 0x5, 0x101, 0x5, 0x101, 0x1, 0x81, 0xb5e, 0x6, 0xff, 0x2, 0x19, 0xe48, 0xfffffff5, 0x1, 0x10000, 0x2, 0x5, 0xffff, 0x9, 0xe1, 0x2d, 0x10000, 0x7f, 0x7, 0x80, 0x4, 0x13d, 0x81, 0x7, 0xc000, 0x8, 0x9, 0xfda3, 0x81, 0x4537c492, 0x8001, 0x73, 0x401, 0x2, 0xf2ea, 0xa1e3, 0x43294b6d, 0x3ff, 0x10, 0x89e, 0x5, 0xb, 0x8, 0x0, 0x200, 0x3ff, 0x0, 0x4, 0x0, 0x100, 0xf, 0x5, 0x3, 0x40, 0x3, 0x1, 0x800, 0x10000400, 0x5, 0x9, 0x7, 0x0, 0x401, 0xfffffc01, 0x1ff, 0xffff2546, 0x9, 0x9, 0x3, 0x80, 0xd, 0x3, 0x8a, 0x88, 0x8, 0x9, 0x3ff, 0x3, 0x3, 0x7fff, 0x50000000, 0x5, 0x3, 0xff, 0x1f, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2f3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6f93, 0x101, 0x1, 0x6, 0xda, 0x5815c37c, 0x4, 0x2, 0x1, 0x10, 0x2, 0x2, 0x14, 0x80000000, 0x6, 0x1858, 0xed5, 0x9, 0xd0, 0x8, 0xfffffff9, 0xff, 0x67ef, 0xfffffff7, 0x4, 0x7, 0x8ed1, 0xa43c, 0x9, 0x3, 0x8001, 0x9, 0xffff879c, 0x5, 0x0, 0x5, 0x8001, 0x0, 0x0, 0x40, 0x2, 0x7, 0x7, 0x2, 0x6, 0x3, 0x7, 0x7, 0x10a, 0x80000001, 0x401, 0x3d6, 0x7, 0x3, 0x8, 0x0, 0x1, 0x2, 0x1ee4, 0x1, 0x0, 0x7, 0x7, 0x101, 0x0, 0x4, 0xb50, 0x7d, 0x80, 0x7, 0x3, 0x2, 0x0, 0xfffff510, 0x80000001, 0x3, 0x4, 0x4504, 0x8, 0x8, 0x8, 0xb73, 0x1, 0x2, 0x7, 0x4, 0xebf, 0xf4, 0x1, 0x48, 0x1, 0x3, 0x10, 0x1, 0x2, 0xd, 0x0, 0x6, 0x7, 0x6, 0x7, 0x0, 0x39, 0x80, 0x4, 0xa829, 0x6c52, 0xffffffee, 0x5, 0x1, 0x200, 0x8, 0x5, 0x346b, 0x1, 0x1, 0x7, 0xa, 0xa6, 0x5, 0x0, 0x8, 0x8000, 0xffff, 0xfffffffc, 0x3, 0x8, 0x6, 0x9, 0xcc, 0xad0c, 0x37, 0x9, 0x1, 0x6, 0x9, 0x1, 0x53, 0x0, 0x6, 0xe96, 0x6, 0x0, 0xfff, 0x6, 0xbb4, 0x0, 0x81, 0x6fe639b1, 0xfff, 0x9, 0x0, 0x6, 0xb, 0x8, 0x5, 0x85, 0x4, 0x2, 0x0, 0xfff, 0x6, 0xd, 0x10001, 0x8b, 0x4, 0x7, 0x1, 0x3, 0x7fff, 0xfffffff9, 0x6, 0x0, 0x653, 0x4, 0x688, 0x10000, 0x1, 0x8c2000, 0x275, 0x1, 0xa718, 0x7, 0x4, 0x8, 0xd4, 0x0, 0xe, 0x9, 0xffff, 0x10001, 0xd45, 0x400, 0x7a, 0x93, 0x2, 0xea, 0x1, 0x400, 0x80, 0x5, 0x1, 0xf705, 0x8, 0xffff, 0x3, 0x1ff, 0xb4, 0x0, 0xd0, 0x9, 0x9, 0x4, 0x10, 0x6724, 0x4144, 0xffff, 0x9, 0x0, 0xb2, 0x101, 0x7, 0xcee, 0x6, 0x6, 0x6, 0x4, 0x7, 0x10, 0x7f, 0x400, 0x80000000, 0x80000000, 0xff, 0x6, 0x8000, 0x2, 0x40, 0x6, 0x101, 0x8, 0xdfb6, 0x2, 0xb, 0x7, 0x6, 0xb41, 0x0, 0x9, 0x80, 0x0, 0x2, 0x4, 0x3, 0xc]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28280, 0x0) 977.868767ms ago: executing program 1 (id=690): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000050000000800000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x66}, 0x10) 864.21054ms ago: executing program 2 (id=691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rpcb_getport\x00', r0, 0x0, 0x1}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x84) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0xffff}, 0x6) write(r1, &(0x7f0000000000)='\\\x00\x00\x00', 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) 863.856501ms ago: executing program 4 (id=692): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="36cde944c0263dc41e05e5aefe2a8fb47d99f116dc5d37236b5383be9c18655ccb", 0x21}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40, r3}) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000080)) ioctl(r4, 0x8936, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r5, 0x76c96000) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 739.184305ms ago: executing program 2 (id=693): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000d30000000800000002", @ANYRES32=r0], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r2, &(0x7f0000000480)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000280)=""/107, 0x6b}], 0x5) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x74, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x74}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000940)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f00000006c0), 0x0}, 0x20) 697.027325ms ago: executing program 1 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="186000000000000000000000000000001857000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x26, 0xa8, @random="5c7cd2bcddd318567be587df23dfe5159671880ef469a5b51f084b494758ea825fad"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x17, 0xa8, @random="b400cba75d779e14e6ba077aef227de566e3c1"}]}, 0x70}, 0x1, 0x0, 0x0, 0x48010}, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000c829f168b70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r9, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c0007000000", @ANYRES16], 0x40c}}, 0x0) unshare(0x20040600) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000080)={0x2c, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}]}, 0x2c}}, 0x44844) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x48, r13, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000015) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='spmi_read_begin\x00', r7, 0x0, 0xa}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe77, 0x0, 0x8, 0xfffffffffffffffb, 0xfffffffffffffffd}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 620.205621ms ago: executing program 4 (id=695): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'bond0\x00', {}, 0xd}) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) unshare(0x22020400) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-7'], 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) shutdown(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002100050100000000000000000200000000230000020000000c000c4000000000000000070500130001000000"], 0x30}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000005165000007000000000000000200000000000000e50600000000000002000000000000000000000000000000000000000000000000000000000000000300000006000000ff7f000000000000060000000000000000000000070000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffffffffffff00"/448]) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 580.556884ms ago: executing program 3 (id=696): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000000000000c28c00"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800a000100767863616e00000004000280"], 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) 478.046215ms ago: executing program 4 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) write$ppp(r1, &(0x7f00000003c0)='\x00!', 0x100000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r6, 0x0, 0x8000000}, 0x27) 392.304124ms ago: executing program 2 (id=698): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0xa}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002180)=[{&(0x7f0000000b80)="2eec711f70abb5a31ead08c7571d8dbe3513461cdae3e277bb4a0c321145a64f7d3038a91ff1feab2bfbe7d0ce8dcfa4f107ccf32e039663002f9e38a82711255bc508d495b07b09ec17922ccdcbb5f84bc3efb04a84fac3f7ad1b0f3a012ff312c13292a08fb5b5d28ffbbf060f7f9d5cc4d3", 0x73}, {&(0x7f0000000c00)="7cf2c3eb81af2d4a17e32b07f1e5774d91f558979e6b7c3f8f15cb5f0b3ca18202d1ddee09f26e2b34519623fea7b40188deace7a6b05bd2cf9e4203b034aaee2162f52c7b361902847e03f3454bcf3b107febde557e59bd9dcaa80a97e2d1c2520c289ca8e296a2c53ff0bec2930dfd0a238475c3ff115beeee9cd90ee6d2b83df025bc7d69438990ee3316174f0c6b31ae3ddcab1bb6493d8544521f2da302277f2da5c07dceafd74d5cd6c3de3e90af65d68dc58ae4c34d8ec9c6dfd8f96db8902894cb87f139ff5855d533e4010854587d", 0xd3}, {&(0x7f0000000d00)="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", 0xe95}], 0x3) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000bbbbbbbbbbbbaafcd18a14a9c6b1c400000c02000060070100008e8c2e1e804969ef8afa7afdd5f2dcaa426f1afc74a656fd927ef48eba36bd56d32c3b9acb41e3c7be82eae7bed3286f0c7ecb8151e26b11b5b08fd03a4bee1f7774a5b073b450dc0b2e64d233e85eb04e1bf6f1a18b266159b1078a4cff7ceae11c2c0f9c4d895724893496cf997323cd8b376e633d83b8f342a8fab63c057ee767734752d2aa7e7c418d9cf4abab"], 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x900) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000000)) 366.379388ms ago: executing program 1 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb7}}]}, 0x24}, 0x1, 0x0, 0x0, 0x5b815559fa60bd15}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) readv(r1, &(0x7f0000000a00), 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a09040000000000000000020000000900010073797a2b67a5cb03a930000000000900020073797a32000000000c0003400000000000000003140000001100010000000000000000000000000ad5c2f659b5ed32926027201ebe86bb09cd4549a0af049dd55c5201f2aadfab471288f601e44a2817177aaf8cc6a953c8d10c3117bd33ff73861d8e9fcc8c48c1c96d5794e77b730aeaa8b5852eff69bc7a70eb14fd27a05b74373c60ab8d024f439d502226208c7ed3e8554f28fdf00a96512b744ab9c9574f9f78d92a1e9daeadd52e35"], 0x60}, 0x1, 0x0, 0x0, 0xc008080}, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) shutdown(r1, 0x1) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(r1, &(0x7f0000000440)="4b20613da2e0ac0f5d52bd9330f925ac969a979f1e769a4f7dcb76b2dcbee040b2497a6873efd334fe9e51c49be3f0a665ba47a064cb8c6e7240435a7369da5810bb400c96b33bfba0558c23c117d3920ba99de5e117c621d30a314840dc42bf7f7bf925df40676f4d8b06e792738aa47fae6644ac8c8b86cbc9322e0e5873e858206cc88a089200b8cbfad61c4b91381c50c9632806a2a1a11b82e354267f6f7d3b9f37ab9c415b02a84464562499ee47c095672920f60db6827de22ec9fd1432843c85dca4d62278c87e8088ab920ef443724531b677cc5300c8d8626a38140450ce", 0xe3) 255.660693ms ago: executing program 2 (id=700): socket$kcm(0x10, 0x2, 0x4) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x402, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x808}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x24}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x3, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000098120100240012800b00010062726964676500001400028005002c000600010005002b000200000030f0374fc95ca0ba7e1989497f709b4c2e9c827768a00ab66d75a34ba1ade2ebf5bf1610101dc1e512ad029136", @ANYBLOB="ed7c2d681a51bc0a57892ca64d04598d6069bcc5032b40226321c6deb1e8fcd9773eae5f5e444231f323ed49b512b156d5309e39e9c76fffdb5ab87914a677e0b7a056a5d80d3ee1f9a8e4ce6a80c76f6843b3289493edd8c8f33ed0b31422cb25ac28d0c0f68e0984a469ffb0e4d00c147d3e823418cdd0cbd1daad0f38ede9406e9df2b3ace0bf744b7ff623c9e2170e6070197e73cd55d1dfb4d1cf595a641cae482c27bab257b4e56f0e7f48c02a18ed39f44a4ee8751570dd59cce1fe7d8dc8f1c8198569a9b2bef10637122cd4617b5d27c12418b3107e51fce37e40aa", @ANYRESOCT], 0x44}}, 0x4000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r4]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f0000000440)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @remote}]}) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140), 0x4) 96.070346ms ago: executing program 3 (id=701): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffefff}]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000a00ead3001000009508000000000000"], 0x0, 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001640)=""/4099, 0x1003}], 0x1, 0x0, 0x0, 0x81}, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000001580)=ANY=[], 0x32600) r6 = epoll_create1(0x0) epoll_wait(r6, 0x0, 0x0, 0xfffeffff) epoll_pwait(r6, 0x0, 0x0, 0xea1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) write(r3, 0x0, 0x0) close(r3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090100000000000000010000000500070000000000080009000000000008000a0000000000060002000100000014001f0000000000000000"], 0x5c}}, 0x0) 95.401838ms ago: executing program 4 (id=702): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffefff}]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000a00ead3001000009508000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001640)=""/4099, 0x1003}], 0x1, 0x0, 0x0, 0x81}, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000001580)=ANY=[], 0x32600) r6 = epoll_create1(0x0) epoll_wait(r6, 0x0, 0x0, 0xfffeffff) epoll_pwait(r6, 0x0, 0x0, 0xea1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) write(r3, 0x0, 0x0) close(r3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090100000000000000010000000500070000000000080009000000000008000a0000000000060002000100000014001f0000000000000000"], 0x5c}}, 0x0) 0s ago: executing program 4 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x24, r2, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) kernel console output (not intermixed with test programs): icast mode [ 83.321492][ T5829] bridge_slave_1: entered promiscuous mode [ 83.330735][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.417926][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.424904][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.451460][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.464166][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.471183][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.497463][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.511983][ T5831] team0: Port device team_slave_0 added [ 83.543977][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.588840][ T5831] team0: Port device team_slave_1 added [ 83.611284][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.623916][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.635262][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.658811][ T5832] team0: Port device team_slave_0 added [ 83.695276][ T5830] hsr_slave_0: entered promiscuous mode [ 83.701786][ T5830] hsr_slave_1: entered promiscuous mode [ 83.724360][ T5832] team0: Port device team_slave_1 added [ 83.737509][ T5844] Bluetooth: hci2: command tx timeout [ 83.743561][ T5839] Bluetooth: hci1: command tx timeout [ 83.753825][ T5829] team0: Port device team_slave_0 added [ 83.773218][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.780772][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.807215][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.817869][ T5844] Bluetooth: hci4: command tx timeout [ 83.823495][ T5844] Bluetooth: hci0: command tx timeout [ 83.829514][ T5839] Bluetooth: hci3: command tx timeout [ 83.866496][ T5829] team0: Port device team_slave_1 added [ 83.888514][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.895477][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.921730][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.942034][ T5845] team0: Port device team_slave_0 added [ 83.949278][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.956240][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.983105][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.995378][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.002736][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.029120][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.077779][ T5845] team0: Port device team_slave_1 added [ 84.090475][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.097492][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.123948][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.136979][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.143928][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.169968][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.234193][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.242088][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.268683][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.323227][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.330318][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.356553][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.390982][ T5831] hsr_slave_0: entered promiscuous mode [ 84.397578][ T5831] hsr_slave_1: entered promiscuous mode [ 84.403652][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.411622][ T5831] Cannot create hsr debugfs directory [ 84.488665][ T5829] hsr_slave_0: entered promiscuous mode [ 84.495054][ T5829] hsr_slave_1: entered promiscuous mode [ 84.501416][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.509150][ T5829] Cannot create hsr debugfs directory [ 84.533120][ T5832] hsr_slave_0: entered promiscuous mode [ 84.544475][ T5832] hsr_slave_1: entered promiscuous mode [ 84.551645][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.559737][ T5832] Cannot create hsr debugfs directory [ 84.673313][ T5845] hsr_slave_0: entered promiscuous mode [ 84.680111][ T5845] hsr_slave_1: entered promiscuous mode [ 84.686111][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.694150][ T5845] Cannot create hsr debugfs directory [ 84.901511][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.946356][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.958980][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.992618][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.185115][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.201645][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.226134][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.249089][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.288432][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.313545][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.325095][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.335996][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.419604][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.430578][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.442001][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.453257][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.557347][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.635392][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.643425][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.658894][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.684650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.692009][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.702041][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.723773][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.730901][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.740114][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.818707][ T5839] Bluetooth: hci2: command tx timeout [ 85.824336][ T5844] Bluetooth: hci1: command tx timeout [ 85.873477][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.892707][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.907325][ T5841] Bluetooth: hci4: command tx timeout [ 85.912825][ T5839] Bluetooth: hci3: command tx timeout [ 85.919509][ T5844] Bluetooth: hci0: command tx timeout [ 85.925187][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.940676][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.993407][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.000560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.022399][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.035157][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.062286][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.069453][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.092967][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.100104][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.110328][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.117463][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.126550][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.133679][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.171484][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.178680][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.292010][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.355186][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.385117][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.392432][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.436771][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.443924][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.516524][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.582527][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.610714][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.762523][ T5830] veth0_vlan: entered promiscuous mode [ 86.838378][ T5830] veth1_vlan: entered promiscuous mode [ 86.956079][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.019865][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.042067][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.058966][ T5830] veth0_macvtap: entered promiscuous mode [ 87.084197][ T5830] veth1_macvtap: entered promiscuous mode [ 87.156041][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.191215][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.212314][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.258040][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.269354][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.279122][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.292148][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.317686][ T5831] veth0_vlan: entered promiscuous mode [ 87.359287][ T5832] veth0_vlan: entered promiscuous mode [ 87.373902][ T5831] veth1_vlan: entered promiscuous mode [ 87.406006][ T5832] veth1_vlan: entered promiscuous mode [ 87.453555][ T5829] veth0_vlan: entered promiscuous mode [ 87.483815][ T5829] veth1_vlan: entered promiscuous mode [ 87.533495][ T5831] veth0_macvtap: entered promiscuous mode [ 87.605678][ T5832] veth0_macvtap: entered promiscuous mode [ 87.615757][ T5831] veth1_macvtap: entered promiscuous mode [ 87.633904][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.651706][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.668211][ T5832] veth1_macvtap: entered promiscuous mode [ 87.705368][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.716063][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.729083][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.743397][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.743728][ T5829] veth0_macvtap: entered promiscuous mode [ 87.755970][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.781164][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.794252][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.805914][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.829282][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.840890][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.850515][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.860518][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.872345][ T5829] veth1_macvtap: entered promiscuous mode [ 87.888873][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.901596][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.911794][ T5839] Bluetooth: hci1: command tx timeout [ 87.912374][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.918628][ T5839] Bluetooth: hci2: command tx timeout [ 87.935339][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.947173][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.957484][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.977689][ T5844] Bluetooth: hci3: command tx timeout [ 87.977780][ T5839] Bluetooth: hci0: command tx timeout [ 87.983091][ T5844] Bluetooth: hci4: command tx timeout [ 88.002984][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.013883][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.024024][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.034780][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.046195][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.083451][ T5845] veth0_vlan: entered promiscuous mode [ 88.097668][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.106400][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.122635][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.132743][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.182903][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.204865][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.214923][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.226254][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.237383][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.256743][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.278855][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.309116][ T5845] veth1_vlan: entered promiscuous mode [ 88.345932][ T5918] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 88.348175][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.363053][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.374670][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.385743][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.396101][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.407163][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.419947][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.439638][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.452018][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.461678][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.465713][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.479956][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.489035][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.562939][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.585437][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.689204][ T5845] veth0_macvtap: entered promiscuous mode [ 88.709036][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.728124][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.754088][ T5845] veth1_macvtap: entered promiscuous mode [ 88.862491][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.873301][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.884915][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.892845][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.917194][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.946712][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.977384][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.997084][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.016893][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.033127][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.046185][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.115223][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 89.131930][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.151833][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.164444][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.168720][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.183385][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.197545][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.210207][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.220749][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.232212][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.248731][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.299493][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.328075][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.341876][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.350765][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.417325][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.444681][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.604446][ T5945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9'. [ 89.683327][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.701326][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.978624][ T5844] Bluetooth: hci2: command tx timeout [ 89.978724][ T5839] Bluetooth: hci1: command tx timeout [ 90.056890][ T5839] Bluetooth: hci4: command tx timeout [ 90.057186][ T5844] Bluetooth: hci0: command tx timeout [ 90.062599][ T5841] Bluetooth: hci3: command tx timeout [ 90.190954][ T5957] x_tables: duplicate underflow at hook 4 [ 90.249665][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.285162][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.565227][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.603318][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.490079][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 91.502373][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 91.647072][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 91.742062][ T47] cfg80211: failed to load regulatory.db [ 91.872682][ T6012] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 91.932027][ T6013] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 92.150671][ T6030] netlink: 48 bytes leftover after parsing attributes in process `syz.2.27'. [ 92.170612][ T6030] netlink: 100 bytes leftover after parsing attributes in process `syz.2.27'. [ 92.316923][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'. [ 92.362053][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'. [ 92.399112][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 93.176163][ T6057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 93.700930][ T6081] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 94.050213][ T6096] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 94.071584][ T6096] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 94.154168][ T6088] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 94.254671][ T6096] syz.0.43 (6096) used greatest stack depth: 19584 bytes left [ 94.779710][ T6139] nbd: must specify an index to disconnect [ 94.973319][ T6141] __nla_validate_parse: 3 callbacks suppressed [ 94.973338][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 95.166140][ T6154] netlink: 260 bytes leftover after parsing attributes in process `syz.3.48'. [ 95.317073][ T6155] dvmrp0: entered allmulticast mode [ 95.398916][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 95.755709][ T6180] batadv1: entered promiscuous mode [ 95.794029][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.801591][ T6182] netlink: 32 bytes leftover after parsing attributes in process `syz.0.56'. [ 96.039581][ T6202] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 96.071841][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 96.108968][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 96.205187][ T6204] dummy0: entered promiscuous mode [ 96.248491][ T6204] dummy0: left promiscuous mode [ 96.360705][ T6209] warning: `syz.4.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.393981][ T6217] netlink: 'syz.1.67': attribute type 23 has an invalid length. [ 96.611142][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 96.655694][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 96.703206][ T6230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.728309][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 96.747935][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 96.998310][ T6239] Zero length message leads to an empty skb [ 97.025747][ T6239] caif0: entered promiscuous mode [ 97.069526][ T6126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.288790][ T6126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.449932][ T6126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.592905][ T6126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.049014][ T6263] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.471443][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.486499][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.498486][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.507815][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.515844][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.699661][ T6126] bridge_slave_1: left allmulticast mode [ 98.705442][ T6126] bridge_slave_1: left promiscuous mode [ 98.731073][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.807863][ T6126] bridge_slave_0: left allmulticast mode [ 98.844690][ T6126] bridge_slave_0: left promiscuous mode [ 98.865458][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.460499][ T6126] dvmrp0 (unregistering): left allmulticast mode [ 99.582348][ T6126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.593388][ T6126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.603712][ T6126] bond0 (unregistering): Released all slaves [ 99.851814][ T6312] xt_bpf: check failed: parse error [ 100.025136][ T30] audit: type=1804 audit(1745816993.742:2): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.96" name="/newroot/24/cgroup.controllers" dev="tmpfs" ino=142 res=1 errno=0 [ 100.068529][ T30] audit: type=1800 audit(1745816993.742:3): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.96" name="cgroup.controllers" dev="tmpfs" ino=142 res=0 errno=0 [ 100.153438][ T30] audit: type=1800 audit(1745816993.752:4): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.96" name="cgroup.controllers" dev="tmpfs" ino=142 res=0 errno=0 [ 100.281345][ T6331] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (20) [ 100.302025][ T6331] __nla_validate_parse: 4 callbacks suppressed [ 100.302042][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 100.617641][ T5839] Bluetooth: hci3: command tx timeout [ 101.190184][ T6126] hsr_slave_0: left promiscuous mode [ 101.239330][ T6126] hsr_slave_1: left promiscuous mode [ 101.256347][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.278898][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.300378][ T6377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.108'. [ 101.311294][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.323297][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.367381][ T6126] veth1_macvtap: left promiscuous mode [ 101.373476][ T6126] veth0_macvtap: left promiscuous mode [ 101.384208][ T6126] veth1_vlan: left promiscuous mode [ 101.390723][ T6126] veth0_vlan: left promiscuous mode [ 101.495739][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 101.760149][ T6126] team0 (unregistering): Port device team_slave_1 removed [ 101.793481][ T6126] team0 (unregistering): Port device team_slave_0 removed [ 102.206987][ T6390] netlink: 'syz.1.109': attribute type 4 has an invalid length. [ 102.224516][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 102.658633][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.665928][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.693287][ T6269] bridge_slave_0: entered allmulticast mode [ 102.707828][ T5839] Bluetooth: hci3: command tx timeout [ 102.723858][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 102.731539][ T6269] bridge_slave_0: entered promiscuous mode [ 102.746131][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.753593][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.762234][ T6269] bridge_slave_1: entered allmulticast mode [ 102.769859][ T6269] bridge_slave_1: entered promiscuous mode [ 102.964689][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.013037][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.247789][ T6269] team0: Port device team_slave_0 added [ 103.297397][ T6269] team0: Port device team_slave_1 added [ 103.369507][ T6444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 103.380510][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 103.473196][ T6441] hsr0: entered promiscuous mode [ 103.489932][ T6444] hsr_slave_0: left promiscuous mode [ 103.547132][ T6444] hsr_slave_1: left promiscuous mode [ 103.628779][ T6444] hsr0 (unregistering): left promiscuous mode [ 103.787329][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 103.799992][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.818785][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 103.827905][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.902805][ T6465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.124'. [ 103.945938][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.974322][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.981979][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.013287][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.026403][ T6480] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 104.039326][ T6481] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 104.061518][ T6473] syzkaller1: entered promiscuous mode [ 104.073537][ T6473] syzkaller1: entered allmulticast mode [ 104.242274][ T6485] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 104.264286][ T6485] netlink: 'syz.2.129': attribute type 2 has an invalid length. [ 104.306174][ T6269] hsr_slave_0: entered promiscuous mode [ 104.321532][ T6269] hsr_slave_1: entered promiscuous mode [ 104.341922][ T6269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.380015][ T6269] Cannot create hsr debugfs directory [ 104.515890][ T6494] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (225) [ 104.759718][ T6501] netlink: 180 bytes leftover after parsing attributes in process `syz.2.132'. [ 104.778757][ T5839] Bluetooth: hci3: command tx timeout [ 104.819844][ T6500] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 105.026819][ T6508] xt_HMARK: spi-set and port-set can't be combined [ 105.093717][ T6511] vti0: entered promiscuous mode [ 105.860046][ T6543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.930629][ T6543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.969317][ T6269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.001908][ T6543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.051742][ T6269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.098938][ T6269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.154687][ T6269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.321468][ T6560] __nla_validate_parse: 2 callbacks suppressed [ 106.321484][ T6560] netlink: 180 bytes leftover after parsing attributes in process `syz.3.145'. [ 106.452854][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.501955][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.525279][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.532561][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.562797][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.570037][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.570395][ T6565] netlink: 47 bytes leftover after parsing attributes in process `syz.3.146'. [ 106.721990][ T6571] Bluetooth: MGMT ver 1.23 [ 106.857783][ T5839] Bluetooth: hci3: command tx timeout [ 107.202272][ T6593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.150'. [ 107.365216][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.486244][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 107.503538][ T6269] veth0_vlan: entered promiscuous mode [ 107.541681][ T6269] veth1_vlan: entered promiscuous mode [ 107.680494][ T6269] veth0_macvtap: entered promiscuous mode [ 107.715855][ T6269] veth1_macvtap: entered promiscuous mode [ 107.796540][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.853278][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.887795][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.905505][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.921699][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.951689][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.964731][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.984062][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.011988][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.021990][ T6613] Driver unsupported XDP return value 0 on prog (id 75) dev N/A, expect packet loss! [ 108.081545][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.123375][ T6595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.151'. [ 108.132396][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.176999][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.179746][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 108.212868][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.233569][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 108.266405][ T6624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.156'. [ 108.290728][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 108.312205][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.336957][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.392098][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.414825][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.459954][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.499578][ T6620] batadv1: entered promiscuous mode [ 108.632510][ T5839] block nbd0: Receive control failed (result -107) [ 108.647098][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 108.687285][ T6624] nbd0: detected capacity change from 0 to 256 [ 108.707992][ T5843] block nbd0: Dead connection, failed to find a fallback [ 108.715227][ T5843] block nbd0: shutting down sockets [ 108.766163][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.796063][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.831188][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.856801][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.865035][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.885634][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.910152][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.923596][ T6269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.937620][ T6269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.946357][ T6269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.955377][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.970191][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.994475][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.002586][ T6269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.012386][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.046991][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.054932][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.100255][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.165101][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.195644][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.227732][ T5843] ldm_validate_partition_table(): Disk read failed. [ 109.257004][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.266091][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.306855][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.315941][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.398036][ T5843] Dev nbd0: unable to read RDB block 0 [ 109.404175][ T5843] nbd0: unable to read partition table [ 109.493734][ T5843] ldm_validate_partition_table(): Disk read failed. [ 109.547998][ T5843] Dev nbd0: unable to read RDB block 0 [ 109.554763][ T5843] nbd0: unable to read partition table [ 109.601850][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.642476][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.791474][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.830586][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.052108][ T6688] x_tables: duplicate underflow at hook 3 [ 110.172060][ T6693] netlink: 'syz.1.168': attribute type 1 has an invalid length. [ 110.797420][ T6126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.954529][ T6126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.118585][ T6126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.281446][ T6126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.312659][ T6737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.330374][ T6736] vlan3: entered promiscuous mode [ 111.347976][ T6736] bond0: entered promiscuous mode [ 111.364413][ T6739] __nla_validate_parse: 1 callbacks suppressed [ 111.364427][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 111.402956][ T6736] bond_slave_0: entered promiscuous mode [ 111.409307][ T6736] bond_slave_1: entered promiscuous mode [ 111.551196][ T6747] netlink: 56 bytes leftover after parsing attributes in process `syz.1.180'. [ 111.653476][ T6747] bridge1: entered promiscuous mode [ 111.686760][ T6747] bridge1: entered allmulticast mode [ 111.711088][ T6751] netlink: 'syz.1.180': attribute type 8 has an invalid length. [ 111.768122][ T6747] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 111.775809][ T6747] netlink: 244 bytes leftover after parsing attributes in process `syz.1.180'. [ 112.020979][ T6126] bridge_slave_1: left allmulticast mode [ 112.043425][ T6126] bridge_slave_1: left promiscuous mode [ 112.058004][ T6770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.185'. [ 112.077013][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.200022][ T6126] bridge_slave_0: left allmulticast mode [ 112.205733][ T6126] bridge_slave_0: left promiscuous mode [ 112.256964][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.322364][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.335593][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.343812][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.359165][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.387776][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.486199][ T6790] netlink: 168 bytes leftover after parsing attributes in process `syz.4.189'. [ 113.012622][ T6126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.042497][ T6126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.061142][ T6126] bond0 (unregistering): Released all slaves [ 113.122912][ T6777] dvmrp0: entered allmulticast mode [ 113.136249][ T6778] dvmrp0: left allmulticast mode [ 113.531622][ T6816] tipc: Enabling of bearer rejected, failed to enable media [ 113.629176][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 114.103844][ T6126] hsr_slave_0: left promiscuous mode [ 114.113779][ T6126] hsr_slave_1: left promiscuous mode [ 114.120235][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.128751][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.137670][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.145125][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.165573][ T6126] veth1_macvtap: left promiscuous mode [ 114.171617][ T6126] veth0_macvtap: left promiscuous mode [ 114.178414][ T6126] veth1_vlan: left promiscuous mode [ 114.183725][ T6126] veth0_vlan: left promiscuous mode [ 114.468274][ T5839] Bluetooth: hci3: command tx timeout [ 114.589016][ T6126] team0 (unregistering): Port device team_slave_1 removed [ 114.646583][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 114.658779][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 114.673414][ T6126] team0 (unregistering): Port device team_slave_0 removed [ 115.197481][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.205590][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.366597][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.384986][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.515720][ T6835] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.525588][ T6835] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.535250][ T6835] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.544550][ T6835] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.715546][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.729053][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.755282][ T6839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.065876][ T6783] chnl_net:caif_netlink_parms(): no params data found [ 116.308001][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.208'. [ 116.368189][ T6884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.207'. [ 116.537484][ T5839] Bluetooth: hci3: command tx timeout [ 116.658616][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.658943][ T6907] netlink: 'syz.4.211': attribute type 39 has an invalid length. [ 116.665831][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.716859][ T6783] bridge_slave_0: entered allmulticast mode [ 116.743883][ T6783] bridge_slave_0: entered promiscuous mode [ 116.792622][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.830846][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.852471][ T6783] bridge_slave_1: entered allmulticast mode [ 116.879428][ T6783] bridge_slave_1: entered promiscuous mode [ 117.222312][ T6783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.280727][ T6783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.395095][ T6939] x_tables: ip_tables: osf match: only valid for protocol 6 [ 117.441902][ T6936] pim6reg1: entered promiscuous mode [ 117.453797][ T6936] pim6reg1: entered allmulticast mode [ 117.579137][ T6783] team0: Port device team_slave_0 added [ 117.666177][ T6783] team0: Port device team_slave_1 added [ 117.836203][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.846606][ T6958] netlink: 36 bytes leftover after parsing attributes in process `syz.1.223'. [ 117.867549][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.906351][ T6783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.921236][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.928352][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.955658][ T6783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.966992][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 118.336926][ T6783] hsr_slave_0: entered promiscuous mode [ 118.350110][ T6783] hsr_slave_1: entered promiscuous mode [ 118.356458][ T6783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.365541][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 118.393082][ T6783] Cannot create hsr debugfs directory [ 118.585573][ T6985] Cannot find set identified by id 0 to match [ 118.618966][ T5839] Bluetooth: hci3: command tx timeout [ 119.345285][ T7026] netlink: 132 bytes leftover after parsing attributes in process `syz.2.239'. [ 119.397682][ T7030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.240'. [ 119.703186][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 119.744008][ T7038] macsec1: entered promiscuous mode [ 119.775294][ T7038] macsec1: entered allmulticast mode [ 119.957155][ T5923] IPVS: starting estimator thread 0... [ 119.987239][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.244'. [ 120.052889][ T7044] bridge1: entered allmulticast mode [ 120.069823][ T6783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.077325][ T7045] IPVS: using max 25 ests per chain, 60000 per kthread [ 120.098631][ T6783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.142955][ T6783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.241482][ T6783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.602904][ T6783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.660922][ T6783] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.696921][ T5839] Bluetooth: hci3: command tx timeout [ 120.701722][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.709482][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.731864][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.739043][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.444413][ T6783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.521704][ T7100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.253'. [ 121.655226][ T6783] veth0_vlan: entered promiscuous mode [ 121.678525][ T6783] veth1_vlan: entered promiscuous mode [ 121.716981][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.255'. [ 121.762839][ T6783] veth0_macvtap: entered promiscuous mode [ 121.782189][ T6783] veth1_macvtap: entered promiscuous mode [ 121.833422][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.851180][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.861987][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.873433][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.884253][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.906006][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.929954][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.969332][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.001198][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.016325][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.032319][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.043961][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.083882][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.095992][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.113594][ T7123] openvswitch: netlink: Duplicate or invalid key (type 0). [ 122.115504][ T6783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.134761][ T6783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.158773][ T6783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.159180][ T7123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.173800][ T6783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.445647][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.485049][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.647147][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.655020][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.712039][ T7142] netlink: 132 bytes leftover after parsing attributes in process `syz.3.268'. [ 122.862054][ T7150] netlink: 'syz.2.271': attribute type 11 has an invalid length. [ 123.136545][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.233845][ T7159] bridge0: entered promiscuous mode [ 123.239762][ T7159] macvtap1: entered promiscuous mode [ 123.245349][ T7159] macvtap1: entered allmulticast mode [ 123.250932][ T7159] bridge0: entered allmulticast mode [ 123.266962][ T7162] bridge0: left allmulticast mode [ 123.273467][ T7162] bridge0: left promiscuous mode [ 123.666373][ T3461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.909283][ T3461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.044409][ T7184] netlink: 'syz.2.281': attribute type 21 has an invalid length. [ 124.056027][ T7186] netlink: 5 bytes leftover after parsing attributes in process `syz.4.282'. [ 124.145836][ T3461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.195722][ T7184] netlink: 156 bytes leftover after parsing attributes in process `syz.2.281'. [ 124.260594][ T7194] ipt_REJECT: ECHOREPLY no longer supported. [ 124.334588][ T3461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.443181][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.287'. [ 124.731085][ T3461] bridge_slave_1: left allmulticast mode [ 124.753870][ T3461] bridge_slave_1: left promiscuous mode [ 124.774357][ T3461] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.815690][ T3461] bridge_slave_0: left allmulticast mode [ 124.834052][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.834476][ T3461] bridge_slave_0: left promiscuous mode [ 124.849258][ T3461] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.850609][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.866975][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.874903][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.882901][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.417768][ T3461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.431078][ T3461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.441317][ T3461] bond0 (unregistering): Released all slaves [ 125.568634][ T7229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.617114][ T7229] bond0: (slave bond1): Enslaving as an active interface with an up link [ 125.729866][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 125.945879][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 125.966102][ T7253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 126.050808][ T7258] Dead loop on virtual device ip6_vti0, fix it urgently! [ 126.250204][ T3461] hsr_slave_0: left promiscuous mode [ 126.263173][ T3461] hsr_slave_1: left promiscuous mode [ 126.269330][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.292974][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.344694][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.369608][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.450271][ T3461] veth1_macvtap: left promiscuous mode [ 126.458336][ T3461] veth0_macvtap: left promiscuous mode [ 126.464372][ T3461] veth1_vlan: left promiscuous mode [ 126.476647][ T3461] veth0_vlan: left promiscuous mode [ 126.937139][ T5839] Bluetooth: hci3: command tx timeout [ 127.092423][ T3461] team0 (unregistering): Port device team_slave_1 removed [ 127.128263][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 127.140423][ T3461] team0 (unregistering): Port device team_slave_0 removed [ 127.456375][ T7277] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 127.463212][ T7279] tipc: Started in network mode [ 127.503368][ T7279] tipc: Node identity , cluster identity 4711 [ 127.513489][ T7279] tipc: Failed to set node id, please configure manually [ 127.528827][ T7279] tipc: Enabling of bearer rejected, failed to enable media [ 127.842873][ T7305] x_tables: duplicate underflow at hook 2 [ 127.893783][ T7305] netlink: 'syz.1.319': attribute type 13 has an invalid length. [ 128.090447][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 128.349773][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.357690][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.752301][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.772490][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.868275][ T7356] x_tables: duplicate underflow at hook 1 [ 128.903663][ T7305] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.913589][ T7305] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.929318][ T7305] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.939263][ T7305] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.017172][ T5839] Bluetooth: hci3: command tx timeout [ 129.066095][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.322'. [ 129.155812][ T7339] veth1_macvtap: left promiscuous mode [ 129.170232][ T7339] macsec0: entered promiscuous mode [ 129.230884][ T7361] lo speed is unknown, defaulting to 1000 [ 129.242295][ T7210] chnl_net:caif_netlink_parms(): no params data found [ 129.278800][ T7362] netlink: 'syz.1.328': attribute type 3 has an invalid length. [ 129.286472][ T7362] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 129.327590][ T7361] lo speed is unknown, defaulting to 1000 [ 129.356293][ T7362] netlink: 220 bytes leftover after parsing attributes in process `syz.1.328'. [ 129.409356][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 129.426099][ T7361] lo speed is unknown, defaulting to 1000 [ 129.450009][ T7361] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.474404][ T7361] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.589060][ T7361] lo speed is unknown, defaulting to 1000 [ 129.650849][ T7361] lo speed is unknown, defaulting to 1000 [ 129.651874][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.688357][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.713305][ T7210] bridge_slave_0: entered allmulticast mode [ 129.740427][ T7210] bridge_slave_0: entered promiscuous mode [ 129.759460][ T7374] netlink: 'syz.4.330': attribute type 38 has an invalid length. [ 129.779061][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.786246][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.803021][ T7210] bridge_slave_1: entered allmulticast mode [ 129.811797][ T7210] bridge_slave_1: entered promiscuous mode [ 129.877934][ T7361] lo speed is unknown, defaulting to 1000 [ 129.885566][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.332'. [ 129.905673][ T7361] lo speed is unknown, defaulting to 1000 [ 129.949770][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.334'. [ 129.974341][ T7210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.993199][ T7361] lo speed is unknown, defaulting to 1000 [ 130.026477][ T7210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.106163][ T7374] lo speed is unknown, defaulting to 1000 [ 130.154738][ T7210] team0: Port device team_slave_0 added [ 130.179629][ T7210] team0: Port device team_slave_1 added [ 130.319748][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.329214][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.359024][ T7210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.376577][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.386256][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.414669][ T7210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.565949][ T7210] hsr_slave_0: entered promiscuous mode [ 130.572728][ T7210] hsr_slave_1: entered promiscuous mode [ 130.580443][ T7210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.588406][ T7210] Cannot create hsr debugfs directory [ 130.738181][ T7399] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.762383][ T7399] netlink: 'syz.2.340': attribute type 8 has an invalid length. [ 131.048711][ T7408] netlink: 'syz.2.343': attribute type 29 has an invalid length. [ 131.081360][ T7408] netlink: 500 bytes leftover after parsing attributes in process `syz.2.343'. [ 131.091049][ T7411] netlink: 'syz.2.343': attribute type 29 has an invalid length. [ 131.099101][ T5839] Bluetooth: hci3: command tx timeout [ 131.115085][ T7408] netlink: 'syz.2.343': attribute type 1 has an invalid length. [ 131.157231][ T7408] geneve2: entered promiscuous mode [ 131.162476][ T7408] geneve2: entered allmulticast mode [ 131.458236][ T7425] sctp: [Deprecated]: syz.1.348 (pid 7425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.458236][ T7425] Use struct sctp_sack_info instead [ 131.553975][ T7425] lo speed is unknown, defaulting to 1000 [ 131.570688][ T7210] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.640290][ T7210] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.690123][ T7210] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.704516][ T7434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 131.742298][ T7210] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.041154][ T7444] batman_adv: batadv0: Adding interface: dummy0 [ 132.085828][ T7444] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.121686][ T7444] batman_adv: batadv0: Interface activated: dummy0 [ 132.291141][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.297056][ T7450] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.354'. [ 132.342658][ T7210] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.580661][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.587891][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.672727][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.680027][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.703936][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.722496][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.795096][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.359'. [ 133.103223][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.362'. [ 133.154688][ T7476] caif0: entered promiscuous mode [ 133.176860][ T5839] Bluetooth: hci3: command tx timeout [ 133.207399][ T7210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.297999][ T7210] veth0_vlan: entered promiscuous mode [ 133.312675][ T7210] veth1_vlan: entered promiscuous mode [ 133.360885][ T7210] veth0_macvtap: entered promiscuous mode [ 133.397437][ T7210] veth1_macvtap: entered promiscuous mode [ 133.462529][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.506467][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.550172][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.574290][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.595128][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.606908][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.617963][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.628977][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.641960][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.659378][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.670626][ T7210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.680398][ T7210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.721221][ T7210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.744570][ T7210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.768655][ T7486] ip6gretap1: entered allmulticast mode [ 133.785077][ T7499] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 133.798700][ T7499] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 133.828105][ T7500] netlink: 196 bytes leftover after parsing attributes in process `syz.2.370'. [ 133.903698][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 133.922462][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 133.964549][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 133.974688][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 133.986498][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 133.996162][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 134.039286][ T7499] lo speed is unknown, defaulting to 1000 [ 134.251761][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.274520][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.308559][ T7511] lo speed is unknown, defaulting to 1000 [ 134.431032][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.469660][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.821028][ T7524] block nbd1: shutting down sockets [ 135.420988][ T6122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.730232][ T6122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.289268][ T6122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.311346][ T7570] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 136.449376][ T6122] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.495058][ T7579] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 136.521963][ T7579] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 136.570425][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.588008][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.595616][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.604405][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.613156][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.627924][ T7579] NCSI netlink: No device for ifindex 458760 [ 136.657522][ T7569] lo speed is unknown, defaulting to 1000 [ 136.970746][ T7581] lo speed is unknown, defaulting to 1000 [ 137.078567][ T6122] bridge_slave_1: left allmulticast mode [ 137.084475][ T6122] bridge_slave_1: left promiscuous mode [ 137.090917][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.107261][ T6122] bridge_slave_0: left allmulticast mode [ 137.113069][ T6122] bridge_slave_0: left promiscuous mode [ 137.119338][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.349119][ T7602] __nla_validate_parse: 55 callbacks suppressed [ 137.349138][ T7602] netlink: 196 bytes leftover after parsing attributes in process `syz.1.398'. [ 137.727902][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 137.842288][ T6122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.854123][ T6122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.864471][ T6122] bond0 (unregistering): Released all slaves [ 138.432978][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.417'. [ 138.706327][ T5839] Bluetooth: hci3: command tx timeout [ 138.901012][ T7653] lo speed is unknown, defaulting to 1000 [ 138.949887][ T6122] hsr_slave_0: left promiscuous mode [ 138.955908][ T6122] hsr_slave_1: left promiscuous mode [ 138.964357][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.972086][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.981574][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.981612][ T7670] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.992618][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.018867][ T6122] veth1_macvtap: left promiscuous mode [ 139.024403][ T6122] veth0_macvtap: left promiscuous mode [ 139.035675][ T6122] veth1_vlan: left promiscuous mode [ 139.041096][ T6122] veth0_vlan: left promiscuous mode [ 139.114199][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bfb7c00: rx timeout, send abort [ 139.396497][ T6122] team0 (unregistering): Port device team_slave_1 removed [ 139.434587][ T6122] team0 (unregistering): Port device team_slave_0 removed [ 139.614904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bfb5000: rx timeout, send abort [ 139.623451][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bfb7c00: abort rx timeout. Force session deactivation [ 139.943090][ T7581] chnl_net:caif_netlink_parms(): no params data found [ 139.972725][ T7682] lo speed is unknown, defaulting to 1000 [ 140.123991][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bfb5000: abort rx timeout. Force session deactivation [ 140.495032][ T7692] batman_adv: batadv0: Interface deactivated: dummy0 [ 140.522629][ T7692] caif0: left promiscuous mode [ 140.549867][ T7692] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 140.673443][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 140.777044][ T5839] Bluetooth: hci3: command tx timeout [ 140.871501][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.880892][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.889293][ T7581] bridge_slave_0: entered allmulticast mode [ 140.896559][ T7581] bridge_slave_0: entered promiscuous mode [ 140.911666][ T7697] dvmrp0: entered allmulticast mode [ 140.918362][ T7700] dvmrp0: left allmulticast mode [ 140.942634][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.950080][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.957368][ T7581] bridge_slave_1: entered allmulticast mode [ 140.964596][ T7581] bridge_slave_1: entered promiscuous mode [ 141.028062][ T7581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.045987][ T7581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.140062][ T7581] team0: Port device team_slave_0 added [ 141.162793][ T7581] team0: Port device team_slave_1 added [ 141.265907][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.434'. [ 141.287365][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.434'. [ 141.340635][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.347996][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.374946][ T7581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.433642][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.441474][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.470510][ T7581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.522217][ T7718] ipt_ECN: cannot use operation on non-tcp rule [ 141.704201][ T7728] netlink: 156 bytes leftover after parsing attributes in process `syz.2.439'. [ 141.744308][ T7581] hsr_slave_0: entered promiscuous mode [ 141.778495][ T7581] hsr_slave_1: entered promiscuous mode [ 141.791885][ T7581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.815493][ T7723] netlink: 'syz.1.437': attribute type 11 has an invalid length. [ 141.823837][ T7581] Cannot create hsr debugfs directory [ 142.093622][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.116976][ T7744] bond_slave_1: entered promiscuous mode [ 142.151628][ T7745] bond0: (slave bond_slave_1): Releasing backup interface [ 142.178670][ T7745] bond_slave_1 (unregistering): left promiscuous mode [ 142.257138][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.266138][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.360926][ T7745] __nla_validate_parse: 11 callbacks suppressed [ 142.360944][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.395951][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.405342][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.414898][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.424469][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.435200][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.446018][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.489218][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.514564][ T7757] netlink: 136 bytes leftover after parsing attributes in process `syz.2.448'. [ 142.535660][ T7757] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 142.552928][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.752478][ T7758] lo speed is unknown, defaulting to 1000 [ 142.856770][ T5839] Bluetooth: hci3: command tx timeout [ 142.945986][ T7768] sctp: [Deprecated]: syz.4.450 (pid 7768) Use of int in max_burst socket option deprecated. [ 142.945986][ T7768] Use struct sctp_assoc_value instead [ 143.007654][ T7771] syzkaller0: entered allmulticast mode [ 143.093298][ T7581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.112191][ T7581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.138279][ T7581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.164647][ T7581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.370829][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.409803][ T7581] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.456235][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.463496][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.514837][ T7793] ip6t_rpfilter: unknown options [ 143.516579][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.527099][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.110644][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.209736][ T7581] veth0_vlan: entered promiscuous mode [ 144.237579][ T7581] veth1_vlan: entered promiscuous mode [ 144.295536][ T7581] veth0_macvtap: entered promiscuous mode [ 144.322404][ T7581] veth1_macvtap: entered promiscuous mode [ 144.372043][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.384630][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.395283][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.424923][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.439684][ T7823] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.447773][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.473512][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.485287][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.496292][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.508052][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.520580][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.545931][ T7581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.554928][ T7581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.570780][ T7581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.579951][ T7581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.683758][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.707013][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.736053][ T6120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.757599][ T6120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.828130][ T7832] netlink: 'syz.2.472': attribute type 3 has an invalid length. [ 145.318656][ T7859] netlink: 'syz.1.481': attribute type 8 has an invalid length. [ 145.644717][ T7878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.651898][ T7878] bridge0: port 3(bond1) entered blocking state [ 145.659353][ T7878] bridge0: port 3(bond1) entered disabled state [ 145.665760][ T7878] bond1: entered allmulticast mode [ 145.673539][ T7878] bond1: entered promiscuous mode [ 145.684585][ T6006] IPVS: starting estimator thread 0... [ 145.799656][ T7882] IPVS: using max 29 ests per chain, 69600 per kthread [ 145.820513][ T7886] bridge0: port 3(batadv1) entered blocking state [ 145.834078][ T7886] bridge0: port 3(batadv1) entered disabled state [ 145.842606][ T7886] batadv1: entered allmulticast mode [ 145.850065][ T7886] batadv1: entered promiscuous mode [ 146.081222][ T7895] syzkaller0: entered promiscuous mode [ 146.086951][ T7895] syzkaller0: entered allmulticast mode [ 146.152736][ T7905] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.166358][ T3461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.298882][ T6126] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 146.308511][ T6126] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 147.186479][ T7917] xt_CT: No such helper "syz1" [ 147.373187][ T5839] block nbd1: Receive control failed (result -32) [ 147.474103][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.488254][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.496054][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.510814][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.520636][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.753811][ T7931] __nla_validate_parse: 35 callbacks suppressed [ 147.753830][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.497'. [ 147.964575][ T3461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.083318][ T7927] lo speed is unknown, defaulting to 1000 [ 148.146583][ T7938] FAULT_INJECTION: forcing a failure. [ 148.146583][ T7938] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.185940][ T3461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.206744][ T7938] CPU: 0 UID: 0 PID: 7938 Comm: syz.2.501 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 148.206784][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 148.206807][ T7938] Call Trace: [ 148.206817][ T7938] [ 148.206827][ T7938] dump_stack_lvl+0x189/0x250 [ 148.206867][ T7938] ? __lock_acquire+0xaac/0xd20 [ 148.206895][ T7938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.206921][ T7938] ? __pfx__printk+0x10/0x10 [ 148.206939][ T7938] ? __might_fault+0xb0/0x130 [ 148.206973][ T7938] should_fail_ex+0x414/0x560 [ 148.207005][ T7938] _copy_from_user+0x2d/0xb0 [ 148.207030][ T7938] ___sys_sendmsg+0x158/0x2a0 [ 148.207054][ T7938] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.207116][ T7938] ? __fget_files+0x2a/0x420 [ 148.207138][ T7938] ? __fget_files+0x3a0/0x420 [ 148.207172][ T7938] __x64_sys_sendmsg+0x19b/0x260 [ 148.207194][ T7938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.207231][ T7938] ? do_syscall_64+0xba/0x210 [ 148.207259][ T7938] do_syscall_64+0xf6/0x210 [ 148.207283][ T7938] ? clear_bhb_loop+0x45/0xa0 [ 148.207306][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.207323][ T7938] RIP: 0033:0x7f6ea978e969 [ 148.207343][ T7938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.207358][ T7938] RSP: 002b:00007f6ea75f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.207380][ T7938] RAX: ffffffffffffffda RBX: 00007f6ea99b5fa0 RCX: 00007f6ea978e969 [ 148.207393][ T7938] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 148.207404][ T7938] RBP: 00007f6ea75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.207415][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.207425][ T7938] R13: 0000000000000000 R14: 00007f6ea99b5fa0 R15: 00007ffcf2f8bce8 [ 148.207453][ T7938] [ 148.527738][ T7922] lo speed is unknown, defaulting to 1000 [ 148.656219][ T7943] netlink: 96 bytes leftover after parsing attributes in process `syz.2.503'. [ 148.682693][ T7943] netlink: 120 bytes leftover after parsing attributes in process `syz.2.503'. [ 148.702793][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'. [ 148.721314][ T3461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.738710][ T7948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.503'. [ 148.786481][ T7943] vlan3: entered allmulticast mode [ 148.796454][ T7943] gretap0: entered allmulticast mode [ 148.883269][ T7951] netlink: 184 bytes leftover after parsing attributes in process `syz.1.506'. [ 148.943510][ T7953] syz.2.507 (7953) used obsolete PPPIOCDETACH ioctl [ 149.029218][ T7953] ip6tnl2: entered promiscuous mode [ 149.034618][ T7953] ip6tnl2: entered allmulticast mode [ 149.170011][ T7959] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 149.205751][ T7959] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 149.322923][ T3461] bridge_slave_1: left allmulticast mode [ 149.329260][ T3461] bridge_slave_1: left promiscuous mode [ 149.335415][ T3461] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.364891][ T3461] bridge_slave_0: left allmulticast mode [ 149.371905][ T3461] bridge_slave_0: left promiscuous mode [ 149.377738][ T3461] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.582483][ T5839] Bluetooth: hci3: command tx timeout [ 149.602223][ T7974] FAULT_INJECTION: forcing a failure. [ 149.602223][ T7974] name failslab, interval 1, probability 0, space 0, times 1 [ 149.615263][ T7974] CPU: 1 UID: 0 PID: 7974 Comm: syz.3.513 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 149.615304][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 149.615315][ T7974] Call Trace: [ 149.615322][ T7974] [ 149.615330][ T7974] dump_stack_lvl+0x189/0x250 [ 149.615363][ T7974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.615389][ T7974] ? __pfx__printk+0x10/0x10 [ 149.615413][ T7974] ? __pfx___might_resched+0x10/0x10 [ 149.615434][ T7974] should_fail_ex+0x414/0x560 [ 149.615467][ T7974] should_failslab+0xa8/0x100 [ 149.615492][ T7974] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 149.615516][ T7974] ? __alloc_skb+0x112/0x2d0 [ 149.615537][ T7974] __alloc_skb+0x112/0x2d0 [ 149.615558][ T7974] netlink_sendmsg+0x5c6/0xb30 [ 149.615585][ T7974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.615606][ T7974] ? aa_sock_msg_perm+0x94/0x160 [ 149.615625][ T7974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.615645][ T7974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.615663][ T7974] __sock_sendmsg+0x219/0x270 [ 149.615691][ T7974] ____sys_sendmsg+0x505/0x830 [ 149.615723][ T7974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.615753][ T7974] ? import_iovec+0x74/0xa0 [ 149.615779][ T7974] ___sys_sendmsg+0x21f/0x2a0 [ 149.615801][ T7974] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.615857][ T7974] ? __fget_files+0x2a/0x420 [ 149.615879][ T7974] ? __fget_files+0x3a0/0x420 [ 149.615912][ T7974] __x64_sys_sendmsg+0x19b/0x260 [ 149.615934][ T7974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.615971][ T7974] ? do_syscall_64+0xba/0x210 [ 149.615999][ T7974] do_syscall_64+0xf6/0x210 [ 149.616023][ T7974] ? clear_bhb_loop+0x45/0xa0 [ 149.616064][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.616082][ T7974] RIP: 0033:0x7f9af538e969 [ 149.616098][ T7974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.616114][ T7974] RSP: 002b:00007f9af6159038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.616134][ T7974] RAX: ffffffffffffffda RBX: 00007f9af55b5fa0 RCX: 00007f9af538e969 [ 149.616147][ T7974] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 149.616159][ T7974] RBP: 00007f9af6159090 R08: 0000000000000000 R09: 0000000000000000 [ 149.616170][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.616181][ T7974] R13: 0000000000000000 R14: 00007f9af55b5fa0 R15: 00007fff518f14f8 [ 149.616212][ T7974] [ 150.037179][ T3461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.052746][ T3461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.068420][ T3461] bond0 (unregistering): Released all slaves [ 150.158989][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 150.254192][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 150.313504][ T7989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.518'. [ 150.445801][ T7996] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 150.500069][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 150.711612][ T3461] hsr_slave_0: left promiscuous mode [ 150.719859][ T3461] hsr_slave_1: left promiscuous mode [ 150.726035][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.737562][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.751563][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.760051][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.814353][ T3461] veth1_macvtap: left promiscuous mode [ 150.824629][ T3461] veth0_macvtap: left promiscuous mode [ 150.830963][ T3461] veth1_vlan: left promiscuous mode [ 150.836469][ T3461] veth0_vlan: left promiscuous mode [ 150.849656][ T8012] sctp: [Deprecated]: syz.4.526 (pid 8012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.849656][ T8012] Use struct sctp_sack_info instead [ 151.506971][ T3461] team0 (unregistering): Port device team_slave_1 removed [ 151.551474][ T3461] team0 (unregistering): Port device team_slave_0 removed [ 151.669130][ T5839] Bluetooth: hci3: command tx timeout [ 151.891774][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.900067][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.907604][ T7922] bridge_slave_0: entered allmulticast mode [ 151.915448][ T7922] bridge_slave_0: entered promiscuous mode [ 151.981309][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.997431][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.004681][ T7922] bridge_slave_1: entered allmulticast mode [ 152.034605][ T7922] bridge_slave_1: entered promiscuous mode [ 152.212306][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.256530][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.294955][ T8049] FAULT_INJECTION: forcing a failure. [ 152.294955][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.329424][ T8049] CPU: 0 UID: 0 PID: 8049 Comm: syz.1.536 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 152.329451][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 152.329462][ T8049] Call Trace: [ 152.329470][ T8049] [ 152.329478][ T8049] dump_stack_lvl+0x189/0x250 [ 152.329517][ T8049] ? __lock_acquire+0xaac/0xd20 [ 152.329559][ T8049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.329587][ T8049] ? __pfx__printk+0x10/0x10 [ 152.329617][ T8049] ? __might_fault+0xb0/0x130 [ 152.329650][ T8049] should_fail_ex+0x414/0x560 [ 152.329681][ T8049] _copy_from_iter+0x1db/0x15a0 [ 152.329710][ T8049] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 152.329730][ T8049] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 152.329754][ T8049] ? __pfx__copy_from_iter+0x10/0x10 [ 152.329776][ T8049] ? __build_skb_around+0x257/0x3e0 [ 152.329798][ T8049] ? netlink_sendmsg+0x642/0xb30 [ 152.329813][ T8049] ? skb_put+0x11b/0x210 [ 152.329834][ T8049] netlink_sendmsg+0x6b2/0xb30 [ 152.329858][ T8049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.329878][ T8049] ? aa_sock_msg_perm+0x94/0x160 [ 152.329899][ T8049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.329919][ T8049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.329937][ T8049] __sock_sendmsg+0x219/0x270 [ 152.329965][ T8049] ____sys_sendmsg+0x505/0x830 [ 152.329990][ T8049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.330018][ T8049] ? import_iovec+0x74/0xa0 [ 152.330043][ T8049] ___sys_sendmsg+0x21f/0x2a0 [ 152.330065][ T8049] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.330122][ T8049] ? __fget_files+0x2a/0x420 [ 152.330144][ T8049] ? __fget_files+0x3a0/0x420 [ 152.330197][ T8049] __x64_sys_sendmsg+0x19b/0x260 [ 152.330221][ T8049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.330261][ T8049] ? do_syscall_64+0xba/0x210 [ 152.330293][ T8049] do_syscall_64+0xf6/0x210 [ 152.330320][ T8049] ? clear_bhb_loop+0x45/0xa0 [ 152.330344][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.330362][ T8049] RIP: 0033:0x7f2a9438e969 [ 152.330380][ T8049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.330396][ T8049] RSP: 002b:00007f2a952c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.330417][ T8049] RAX: ffffffffffffffda RBX: 00007f2a945b5fa0 RCX: 00007f2a9438e969 [ 152.330431][ T8049] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 152.330443][ T8049] RBP: 00007f2a952c0090 R08: 0000000000000000 R09: 0000000000000000 [ 152.330455][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.330466][ T8049] R13: 0000000000000000 R14: 00007f2a945b5fa0 R15: 00007ffccb8d8f98 [ 152.330504][ T8049] [ 152.650080][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.537'. [ 152.676286][ T7922] team0: Port device team_slave_0 added [ 152.695500][ T8052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.708638][ T8052] batadv_slave_1: entered promiscuous mode [ 152.758086][ T8053] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 152.766102][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.538'. [ 152.771475][ T5885] IPVS: starting estimator thread 0... [ 152.828336][ T7922] team0: Port device team_slave_1 added [ 152.907728][ T8064] IPVS: using max 31 ests per chain, 74400 per kthread [ 152.934015][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.976786][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.003209][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.025894][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.033520][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.087070][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.123092][ T8075] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 153.144882][ T8075] netlink: 212 bytes leftover after parsing attributes in process `syz.1.544'. [ 153.198354][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 153.241762][ T8073] bridge5: entered promiscuous mode [ 153.253573][ T8073] bridge5: entered allmulticast mode [ 153.279302][ T7922] hsr_slave_0: entered promiscuous mode [ 153.285893][ T7922] hsr_slave_1: entered promiscuous mode [ 153.313307][ T7922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.337129][ T7922] Cannot create hsr debugfs directory [ 153.444306][ T8089] FAULT_INJECTION: forcing a failure. [ 153.444306][ T8089] name failslab, interval 1, probability 0, space 0, times 0 [ 153.463519][ T8089] CPU: 1 UID: 0 PID: 8089 Comm: syz.2.550 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 153.463546][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 153.463557][ T8089] Call Trace: [ 153.463565][ T8089] [ 153.463572][ T8089] dump_stack_lvl+0x189/0x250 [ 153.463606][ T8089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.463632][ T8089] ? __pfx__printk+0x10/0x10 [ 153.463657][ T8089] ? ref_tracker_alloc+0x318/0x460 [ 153.463678][ T8089] should_fail_ex+0x414/0x560 [ 153.463711][ T8089] should_failslab+0xa8/0x100 [ 153.463737][ T8089] kmem_cache_alloc_noprof+0x73/0x3c0 [ 153.463758][ T8089] ? skb_clone+0x212/0x3a0 [ 153.463784][ T8089] skb_clone+0x212/0x3a0 [ 153.463808][ T8089] __netlink_deliver_tap+0x404/0x850 [ 153.463849][ T8089] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.463879][ T8089] netlink_deliver_tap+0x19c/0x1b0 [ 153.463908][ T8089] netlink_unicast+0x72f/0x8d0 [ 153.463945][ T8089] netlink_sendmsg+0x805/0xb30 [ 153.463972][ T8089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.463992][ T8089] ? aa_sock_msg_perm+0x94/0x160 [ 153.464013][ T8089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.464033][ T8089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.464051][ T8089] __sock_sendmsg+0x219/0x270 [ 153.464079][ T8089] ____sys_sendmsg+0x505/0x830 [ 153.464104][ T8089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.464134][ T8089] ? import_iovec+0x74/0xa0 [ 153.464161][ T8089] ___sys_sendmsg+0x21f/0x2a0 [ 153.464184][ T8089] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.464240][ T8089] ? __fget_files+0x2a/0x420 [ 153.464262][ T8089] ? __fget_files+0x3a0/0x420 [ 153.464295][ T8089] __x64_sys_sendmsg+0x19b/0x260 [ 153.464318][ T8089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.464364][ T8089] ? do_syscall_64+0xba/0x210 [ 153.464393][ T8089] do_syscall_64+0xf6/0x210 [ 153.464428][ T8089] ? clear_bhb_loop+0x45/0xa0 [ 153.464450][ T8089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.464467][ T8089] RIP: 0033:0x7f6ea978e969 [ 153.464482][ T8089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.464496][ T8089] RSP: 002b:00007f6ea75f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.464514][ T8089] RAX: ffffffffffffffda RBX: 00007f6ea99b5fa0 RCX: 00007f6ea978e969 [ 153.464526][ T8089] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 153.464536][ T8089] RBP: 00007f6ea75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.464547][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.464556][ T8089] R13: 0000000000000000 R14: 00007f6ea99b5fa0 R15: 00007ffcf2f8bce8 [ 153.464583][ T8089] [ 153.757493][ T5839] Bluetooth: hci3: command tx timeout [ 153.769285][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 154.022739][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 154.246754][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 154.364049][ T8112] lo speed is unknown, defaulting to 1000 [ 154.538248][ T8126] FAULT_INJECTION: forcing a failure. [ 154.538248][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 154.551494][ T8126] CPU: 0 UID: 0 PID: 8126 Comm: syz.1.563 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 154.551517][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.551527][ T8126] Call Trace: [ 154.551534][ T8126] [ 154.551541][ T8126] dump_stack_lvl+0x189/0x250 [ 154.551573][ T8126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.551598][ T8126] ? __pfx__printk+0x10/0x10 [ 154.551621][ T8126] ? __pfx___might_resched+0x10/0x10 [ 154.551642][ T8126] should_fail_ex+0x414/0x560 [ 154.551674][ T8126] should_failslab+0xa8/0x100 [ 154.551698][ T8126] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.551738][ T8126] ? __alloc_skb+0x112/0x2d0 [ 154.551761][ T8126] __alloc_skb+0x112/0x2d0 [ 154.551793][ T8126] netlink_dump+0x245/0xe70 [ 154.551831][ T8126] ? __pfx_netlink_dump+0x10/0x10 [ 154.551873][ T8126] ? __asan_memset+0x22/0x50 [ 154.551889][ T8126] ? genl_start+0x499/0x6c0 [ 154.551917][ T8126] __netlink_dump_start+0x5cb/0x7e0 [ 154.551951][ T8126] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 154.551976][ T8126] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 154.551996][ T8126] ? genl_get_cmd+0x7d9/0x910 [ 154.552021][ T8126] ? __pfx_genl_start+0x10/0x10 [ 154.552039][ T8126] ? __pfx_genl_dumpit+0x10/0x10 [ 154.552057][ T8126] ? __pfx_genl_done+0x10/0x10 [ 154.552082][ T8126] ? stack_depot_save_flags+0x40/0x910 [ 154.552115][ T8126] genl_rcv_msg+0x5da/0x790 [ 154.552141][ T8126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.552161][ T8126] ? __pfx_tcp_metrics_nl_dump+0x10/0x10 [ 154.552200][ T8126] netlink_rcv_skb+0x219/0x490 [ 154.552227][ T8126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.552275][ T8126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.552330][ T8126] ? down_read+0x1ad/0x2e0 [ 154.552358][ T8126] genl_rcv+0x28/0x40 [ 154.552377][ T8126] netlink_unicast+0x758/0x8d0 [ 154.552414][ T8126] netlink_sendmsg+0x805/0xb30 [ 154.552442][ T8126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.552463][ T8126] ? aa_sock_msg_perm+0x94/0x160 [ 154.552484][ T8126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.552504][ T8126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.552522][ T8126] __sock_sendmsg+0x219/0x270 [ 154.552551][ T8126] ____sys_sendmsg+0x505/0x830 [ 154.552577][ T8126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.552606][ T8126] ? import_iovec+0x74/0xa0 [ 154.552633][ T8126] ___sys_sendmsg+0x21f/0x2a0 [ 154.552656][ T8126] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.552714][ T8126] ? __fget_files+0x2a/0x420 [ 154.552736][ T8126] ? __fget_files+0x3a0/0x420 [ 154.552780][ T8126] __x64_sys_sendmsg+0x19b/0x260 [ 154.552802][ T8126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.552837][ T8126] ? do_syscall_64+0xba/0x210 [ 154.552864][ T8126] do_syscall_64+0xf6/0x210 [ 154.552887][ T8126] ? clear_bhb_loop+0x45/0xa0 [ 154.552908][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.552924][ T8126] RIP: 0033:0x7f2a9438e969 [ 154.552939][ T8126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.552953][ T8126] RSP: 002b:00007f2a952c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.552970][ T8126] RAX: ffffffffffffffda RBX: 00007f2a945b5fa0 RCX: 00007f2a9438e969 [ 154.552983][ T8126] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 154.552993][ T8126] RBP: 00007f2a952c0090 R08: 0000000000000000 R09: 0000000000000000 [ 154.553021][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.553031][ T8126] R13: 0000000000000000 R14: 00007f2a945b5fa0 R15: 00007ffccb8d8f98 [ 154.553060][ T8126] [ 155.090018][ T7922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.126103][ T7922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.147263][ T7922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.160314][ T7922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.212307][ T8144] bridge0: port 4(wlan1) entered blocking state [ 155.219081][ T8144] bridge0: port 4(wlan1) entered disabled state [ 155.225582][ T8144] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 155.235558][ T8144] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 155.433656][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.470434][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.481542][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 155.536088][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.543472][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.578723][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.585942][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.818746][ T5839] Bluetooth: hci3: command tx timeout [ 155.841715][ T8171] pim6reg1: entered promiscuous mode [ 155.847314][ T8171] pim6reg1: entered allmulticast mode [ 156.022574][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.577'. [ 156.050425][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.268636][ T7922] veth0_vlan: entered promiscuous mode [ 156.293066][ T7922] veth1_vlan: entered promiscuous mode [ 156.302246][ T8189] bridge_slave_0: invalid flags given to default FDB implementation [ 156.394122][ T8189] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 156.404304][ T7922] veth0_macvtap: entered promiscuous mode [ 156.428134][ T8190] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.581'. [ 156.453703][ T7922] veth1_macvtap: entered promiscuous mode [ 156.462423][ T8187] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.581'. [ 156.566490][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.592843][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.613014][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.627566][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.644998][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.674622][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.703517][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.738268][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.808344][ T7922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.854133][ T7922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.882764][ T7922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.901712][ T7922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.102473][ T6123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.131998][ T6123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.195436][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.229808][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.278772][ T8237] FAULT_INJECTION: forcing a failure. [ 157.278772][ T8237] name failslab, interval 1, probability 0, space 0, times 0 [ 157.302538][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.2.594 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 157.302565][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 157.302576][ T8237] Call Trace: [ 157.302584][ T8237] [ 157.302592][ T8237] dump_stack_lvl+0x189/0x250 [ 157.302629][ T8237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.302658][ T8237] ? __pfx__printk+0x10/0x10 [ 157.302684][ T8237] ? __pfx___might_resched+0x10/0x10 [ 157.302707][ T8237] should_fail_ex+0x414/0x560 [ 157.302744][ T8237] should_failslab+0xa8/0x100 [ 157.302772][ T8237] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 157.302798][ T8237] ? __alloc_skb+0x112/0x2d0 [ 157.302822][ T8237] __alloc_skb+0x112/0x2d0 [ 157.302845][ T8237] netlink_dump+0x245/0xe70 [ 157.302889][ T8237] ? __pfx_netlink_dump+0x10/0x10 [ 157.302935][ T8237] ? __asan_memset+0x22/0x50 [ 157.302955][ T8237] ? genl_start+0x499/0x6c0 [ 157.302987][ T8237] __netlink_dump_start+0x5cb/0x7e0 [ 157.303025][ T8237] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 157.303055][ T8237] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 157.303077][ T8237] ? genl_get_cmd+0x7d9/0x910 [ 157.303105][ T8237] ? __pfx_genl_start+0x10/0x10 [ 157.303126][ T8237] ? __pfx_genl_dumpit+0x10/0x10 [ 157.303146][ T8237] ? __pfx_genl_done+0x10/0x10 [ 157.303185][ T8237] genl_rcv_msg+0x5da/0x790 [ 157.303216][ T8237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.303239][ T8237] ? __pfx_tcp_metrics_nl_dump+0x10/0x10 [ 157.303275][ T8237] ? ref_tracker_free+0x63a/0x7d0 [ 157.303293][ T8237] ? __copy_skb_header+0xa7/0x550 [ 157.303325][ T8237] netlink_rcv_skb+0x219/0x490 [ 157.303356][ T8237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.303381][ T8237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.303437][ T8237] ? down_read+0x1ad/0x2e0 [ 157.303467][ T8237] genl_rcv+0x28/0x40 [ 157.303488][ T8237] netlink_unicast+0x758/0x8d0 [ 157.303528][ T8237] netlink_sendmsg+0x805/0xb30 [ 157.303557][ T8237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.303590][ T8237] ? aa_sock_msg_perm+0x94/0x160 [ 157.303612][ T8237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.303652][ T8237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.303672][ T8237] __sock_sendmsg+0x219/0x270 [ 157.303705][ T8237] ____sys_sendmsg+0x505/0x830 [ 157.303734][ T8237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.303767][ T8237] ? import_iovec+0x74/0xa0 [ 157.303797][ T8237] ___sys_sendmsg+0x21f/0x2a0 [ 157.303822][ T8237] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.303885][ T8237] ? __fget_files+0x2a/0x420 [ 157.303910][ T8237] ? __fget_files+0x3a0/0x420 [ 157.303948][ T8237] __x64_sys_sendmsg+0x19b/0x260 [ 157.303974][ T8237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.304015][ T8237] ? do_syscall_64+0xba/0x210 [ 157.304046][ T8237] do_syscall_64+0xf6/0x210 [ 157.304074][ T8237] ? clear_bhb_loop+0x45/0xa0 [ 157.304110][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.304129][ T8237] RIP: 0033:0x7f6ea978e969 [ 157.304146][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.304162][ T8237] RSP: 002b:00007f6ea75f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.304182][ T8237] RAX: ffffffffffffffda RBX: 00007f6ea99b5fa0 RCX: 00007f6ea978e969 [ 157.304195][ T8237] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 157.304207][ T8237] RBP: 00007f6ea75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.304219][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.304230][ T8237] R13: 0000000000000000 R14: 00007f6ea99b5fa0 R15: 00007ffcf2f8bce8 [ 157.304261][ T8237] [ 157.785867][ T8246] __nla_validate_parse: 8 callbacks suppressed [ 157.785886][ T8246] netlink: 248 bytes leftover after parsing attributes in process `syz.2.596'. [ 158.126646][ T8250] lo speed is unknown, defaulting to 1000 [ 158.752370][ T8264] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 159.020666][ T8275] FAULT_INJECTION: forcing a failure. [ 159.020666][ T8275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.045476][ T8275] CPU: 1 UID: 0 PID: 8275 Comm: syz.3.606 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 159.045503][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 159.045514][ T8275] Call Trace: [ 159.045522][ T8275] [ 159.045529][ T8275] dump_stack_lvl+0x189/0x250 [ 159.045558][ T8275] ? __lock_acquire+0xaac/0xd20 [ 159.045586][ T8275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.045612][ T8275] ? __pfx__printk+0x10/0x10 [ 159.045631][ T8275] ? __might_fault+0xb0/0x130 [ 159.045665][ T8275] should_fail_ex+0x414/0x560 [ 159.045698][ T8275] _copy_from_user+0x2d/0xb0 [ 159.045722][ T8275] kstrtouint_from_user+0xc4/0x170 [ 159.045745][ T8275] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 159.045781][ T8275] proc_fail_nth_write+0x88/0x240 [ 159.045807][ T8275] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 159.045838][ T8275] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 159.045876][ T8275] vfs_write+0x27b/0xa90 [ 159.045907][ T8275] ? __pfx_vfs_write+0x10/0x10 [ 159.045929][ T8275] ? __fget_files+0x2a/0x420 [ 159.045958][ T8275] ? __fget_files+0x3a0/0x420 [ 159.045979][ T8275] ? __fget_files+0x2a/0x420 [ 159.046011][ T8275] ksys_write+0x145/0x250 [ 159.046031][ T8275] ? rcu_is_watching+0x15/0xb0 [ 159.046060][ T8275] ? __pfx_ksys_write+0x10/0x10 [ 159.046084][ T8275] ? do_syscall_64+0xba/0x210 [ 159.046113][ T8275] do_syscall_64+0xf6/0x210 [ 159.046137][ T8275] ? clear_bhb_loop+0x45/0xa0 [ 159.046160][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.046177][ T8275] RIP: 0033:0x7f9af538d41f [ 159.046193][ T8275] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 159.046208][ T8275] RSP: 002b:00007f9af6159030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 159.046227][ T8275] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9af538d41f [ 159.046240][ T8275] RDX: 0000000000000001 RSI: 00007f9af61590a0 RDI: 0000000000000004 [ 159.046250][ T8275] RBP: 00007f9af6159090 R08: 0000000000000000 R09: 0000000000000000 [ 159.046261][ T8275] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 159.046271][ T8275] R13: 0000000000000000 R14: 00007f9af55b5fa0 R15: 00007fff518f14f8 [ 159.046301][ T8275] [ 159.351278][ T3523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.469285][ T3523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.579344][ T3523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.654733][ T3523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.789396][ T3523] bridge_slave_1: left allmulticast mode [ 159.797506][ T3523] bridge_slave_1: left promiscuous mode [ 159.803718][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.813731][ T3523] bridge_slave_0: left allmulticast mode [ 159.821212][ T3523] bridge_slave_0: left promiscuous mode [ 159.827924][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.135768][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.149529][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.159518][ T3523] bond0 (unregistering): Released all slaves [ 160.793476][ T8311] syzkaller1: entered promiscuous mode [ 160.824668][ T8311] syzkaller1: entered allmulticast mode [ 160.936969][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.945765][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.954890][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.962533][ T3523] hsr_slave_0: left promiscuous mode [ 160.970758][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.980475][ T3523] hsr_slave_1: left promiscuous mode [ 160.980629][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.986416][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.013780][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.028538][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.036005][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.054219][ T3523] veth1_macvtap: left promiscuous mode [ 161.061811][ T3523] veth0_macvtap: left promiscuous mode [ 161.069951][ T3523] veth1_vlan: left promiscuous mode [ 161.075311][ T3523] veth0_vlan: left promiscuous mode [ 161.436402][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 161.469422][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 161.786118][ T8320] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 161.795124][ T8320] bridge6: entered allmulticast mode [ 161.876593][ T8321] lo speed is unknown, defaulting to 1000 [ 162.012046][ T8329] sctp: [Deprecated]: syz.1.624 (pid 8329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.012046][ T8329] Use struct sctp_sack_info instead [ 162.077285][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 162.142820][ T8337] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.516232][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 162.538914][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.632'. [ 162.556884][ T8355] geneve2: entered promiscuous mode [ 162.562282][ T8355] geneve2: entered allmulticast mode [ 162.573797][ T8355] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 162.581791][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 162.680833][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 162.700903][ T8363] netlink: 52 bytes leftover after parsing attributes in process `syz.4.635'. [ 163.060588][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.072330][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.084008][ T8321] bridge_slave_0: entered allmulticast mode [ 163.098910][ T5839] Bluetooth: hci3: command tx timeout [ 163.102458][ T8321] bridge_slave_0: entered promiscuous mode [ 163.158692][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.165868][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.211881][ T8321] bridge_slave_1: entered allmulticast mode [ 163.223383][ T8321] bridge_slave_1: entered promiscuous mode [ 163.279899][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.299554][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.381008][ T8386] netlink: 40 bytes leftover after parsing attributes in process `syz.4.640'. [ 163.443661][ T8321] team0: Port device team_slave_0 added [ 163.458213][ T8321] team0: Port device team_slave_1 added [ 163.616494][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.637490][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.684646][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.708233][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.715216][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.755132][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.772230][ T8399] netlink: 48 bytes leftover after parsing attributes in process `syz.4.645'. [ 163.802838][ T8398] netlink: 48 bytes leftover after parsing attributes in process `syz.4.645'. [ 163.926969][ T8411] netlink: 136 bytes leftover after parsing attributes in process `syz.1.647'. [ 163.927043][ T8321] hsr_slave_0: entered promiscuous mode [ 163.953490][ T8321] hsr_slave_1: entered promiscuous mode [ 163.961781][ T8321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.967325][ T8412] netlink: 136 bytes leftover after parsing attributes in process `syz.1.647'. [ 163.979777][ T8321] Cannot create hsr debugfs directory [ 164.155747][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 164.173963][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.652'. [ 164.194409][ T8419] lo speed is unknown, defaulting to 1000 [ 164.225920][ T8431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.649'. [ 164.241599][ T8431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 164.252113][ T8431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.649'. [ 164.779323][ T8456] tc_dump_action: action bad kind [ 164.795488][ T8461] sctp: [Deprecated]: syz.3.660 (pid 8461) Use of int in max_burst socket option deprecated. [ 164.795488][ T8461] Use struct sctp_assoc_value instead [ 165.101422][ T8478] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 165.176901][ T5839] Bluetooth: hci3: command tx timeout [ 165.180022][ T8321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.246415][ T8321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.268906][ T8485] FAULT_INJECTION: forcing a failure. [ 165.268906][ T8485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.287161][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.1.667 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 165.287204][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 165.287217][ T8485] Call Trace: [ 165.287225][ T8485] [ 165.287234][ T8485] dump_stack_lvl+0x189/0x250 [ 165.287273][ T8485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.287302][ T8485] ? __pfx__printk+0x10/0x10 [ 165.287337][ T8485] should_fail_ex+0x414/0x560 [ 165.287378][ T8485] strncpy_from_user+0x36/0x290 [ 165.287413][ T8485] bpf_raw_tp_link_attach+0x1ea/0x6b0 [ 165.287451][ T8485] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 165.287494][ T8485] ? __fget_files+0x2a/0x420 [ 165.287530][ T8485] bpf_raw_tracepoint_open+0x178/0x1f0 [ 165.287561][ T8485] __sys_bpf+0x3cd/0x860 [ 165.287594][ T8485] ? __pfx___sys_bpf+0x10/0x10 [ 165.287633][ T8485] ? ksys_write+0x1f0/0x250 [ 165.287654][ T8485] ? rcu_is_watching+0x15/0xb0 [ 165.287696][ T8485] __x64_sys_bpf+0x7c/0x90 [ 165.287719][ T8485] do_syscall_64+0xf6/0x210 [ 165.287747][ T8485] ? clear_bhb_loop+0x45/0xa0 [ 165.287772][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.287791][ T8485] RIP: 0033:0x7f2a9438e969 [ 165.287809][ T8485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.287827][ T8485] RSP: 002b:00007f2a952c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.287849][ T8485] RAX: ffffffffffffffda RBX: 00007f2a945b5fa0 RCX: 00007f2a9438e969 [ 165.287864][ T8485] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 165.287877][ T8485] RBP: 00007f2a952c0090 R08: 0000000000000000 R09: 0000000000000000 [ 165.287889][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.287901][ T8485] R13: 0000000000000000 R14: 00007f2a945b5fa0 R15: 00007ffccb8d8f98 [ 165.287933][ T8485] [ 165.565151][ T8321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.595605][ T8321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.733164][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.772418][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.806023][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.813264][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.840948][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.848205][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.999117][ T8321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.042937][ T8510] 8021q: VLANs not supported on nlmon0 [ 166.081516][ T8512] @ÿ: renamed from bond_slave_0 [ 166.498276][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.656339][ T8321] veth0_vlan: entered promiscuous mode [ 166.664297][ T8547] netlink: 'syz.4.686': attribute type 11 has an invalid length. [ 166.695698][ T8321] veth1_vlan: entered promiscuous mode [ 167.074754][ T8321] veth0_macvtap: entered promiscuous mode [ 167.136401][ T8321] veth1_macvtap: entered promiscuous mode [ 167.243833][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.256791][ T5839] Bluetooth: hci3: command tx timeout [ 167.262069][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.295302][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.311780][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.358279][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.392126][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.421138][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.436363][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.505418][ T8321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.522821][ T8321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.553194][ T8321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.577962][ T8321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.800635][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.830036][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.908231][ T8587] sctp: [Deprecated]: syz.2.700 (pid 8587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.908231][ T8587] Use struct sctp_sack_info instead [ 167.911729][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.933209][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.163129][ T8591] ================================================================== [ 168.171211][ T8591] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 168.179376][ T8591] Read of size 8 at addr ffff88807fb40c50 by task syz.2.700/8591 [ 168.187090][ T8591] [ 168.189410][ T8591] CPU: 1 UID: 0 PID: 8591 Comm: syz.2.700 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 168.189427][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 168.189436][ T8591] Call Trace: [ 168.189442][ T8591] [ 168.189449][ T8591] dump_stack_lvl+0x189/0x250 [ 168.189470][ T8591] ? __virt_addr_valid+0x18c/0x540 [ 168.189486][ T8591] ? rcu_is_watching+0x15/0xb0 [ 168.189506][ T8591] ? __kasan_check_byte+0x12/0x40 [ 168.189523][ T8591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.189541][ T8591] ? rcu_is_watching+0x15/0xb0 [ 168.189560][ T8591] ? lock_release+0x4b/0x3e0 [ 168.189579][ T8591] ? __virt_addr_valid+0x18c/0x540 [ 168.189594][ T8591] ? __virt_addr_valid+0x469/0x540 [ 168.189612][ T8591] print_report+0xb4/0x290 [ 168.189627][ T8591] ? cfusbl_device_notify+0x150/0x6a0 [ 168.189646][ T8591] kasan_report+0x118/0x150 [ 168.189662][ T8591] ? cfusbl_device_notify+0x150/0x6a0 [ 168.189684][ T8591] cfusbl_device_notify+0x150/0x6a0 [ 168.189704][ T8591] ? net_generic+0x1e/0x240 [ 168.189722][ T8591] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 168.189742][ T8591] ? caif_device_notify+0x250/0xfc0 [ 168.189762][ T8591] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 168.189783][ T8591] notifier_call_chain+0x1b3/0x3e0 [ 168.189816][ T8591] register_netdevice+0x121c/0x1ae0 [ 168.189832][ T8591] ? __mutex_lock+0x51b/0xe80 [ 168.189855][ T8591] ? __pfx_register_netdevice+0x10/0x10 [ 168.189874][ T8591] ? __asan_memset+0x22/0x50 [ 168.189886][ T8591] ? dev_addr_mod+0x2ce/0x3d0 [ 168.189901][ T8591] register_netdev+0x40/0x60 [ 168.189916][ T8591] bnep_add_connection+0x6bf/0xbf0 [ 168.189935][ T8591] ? __pfx_bnep_add_connection+0x10/0x10 [ 168.189950][ T8591] ? __fget_files+0x3a0/0x420 [ 168.189971][ T8591] do_bnep_sock_ioctl+0x40e/0x640 [ 168.189988][ T8591] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 168.190006][ T8591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 168.190032][ T8591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 168.190053][ T8591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 168.190074][ T8591] ? call_rcu+0x6dd/0x990 [ 168.190088][ T8591] sock_do_ioctl+0xd9/0x300 [ 168.190106][ T8591] ? __pfx_sock_do_ioctl+0x10/0x10 [ 168.190127][ T8591] ? __lock_acquire+0xaac/0xd20 [ 168.190149][ T8591] sock_ioctl+0x576/0x790 [ 168.190184][ T8591] ? __pfx_sock_ioctl+0x10/0x10 [ 168.190204][ T8591] ? __fget_files+0x3a0/0x420 [ 168.190222][ T8591] ? __fget_files+0x2a/0x420 [ 168.190241][ T8591] ? bpf_lsm_file_ioctl+0x9/0x20 [ 168.190260][ T8591] ? __pfx_sock_ioctl+0x10/0x10 [ 168.190278][ T8591] __se_sys_ioctl+0xf9/0x170 [ 168.190293][ T8591] do_syscall_64+0xf6/0x210 [ 168.190313][ T8591] ? clear_bhb_loop+0x45/0xa0 [ 168.190330][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.190345][ T8591] RIP: 0033:0x7f6ea978e969 [ 168.190357][ T8591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.190370][ T8591] RSP: 002b:00007f6ea75d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.190386][ T8591] RAX: ffffffffffffffda RBX: 00007f6ea99b6080 RCX: 00007f6ea978e969 [ 168.190397][ T8591] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000010 [ 168.190407][ T8591] RBP: 00007f6ea9810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 168.190416][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.190425][ T8591] R13: 0000000000000000 R14: 00007f6ea99b6080 R15: 00007ffcf2f8bce8 [ 168.190443][ T8591] [ 168.190448][ T8591] [ 168.529146][ T8591] Allocated by task 5839: [ 168.533458][ T8591] kasan_save_track+0x3e/0x80 [ 168.538126][ T8591] __kasan_kmalloc+0x93/0xb0 [ 168.542702][ T8591] __kmalloc_cache_noprof+0x230/0x3d0 [ 168.548068][ T8591] __hci_conn_add+0x1ed/0x1aa0 [ 168.552844][ T8591] hci_conn_request_evt+0x528/0xb50 [ 168.558049][ T8591] hci_event_packet+0x7fb/0x1270 [ 168.563067][ T8591] hci_rx_work+0x46a/0xe80 [ 168.567546][ T8591] process_scheduled_works+0xadb/0x17a0 [ 168.573098][ T8591] worker_thread+0x8a0/0xda0 [ 168.577698][ T8591] kthread+0x70e/0x8a0 [ 168.581754][ T8591] ret_from_fork+0x4b/0x80 [ 168.586157][ T8591] ret_from_fork_asm+0x1a/0x30 [ 168.590929][ T8591] [ 168.593246][ T8591] Freed by task 8321: [ 168.597208][ T8591] kasan_save_track+0x3e/0x80 [ 168.601875][ T8591] kasan_save_free_info+0x46/0x50 [ 168.606919][ T8591] __kasan_slab_free+0x62/0x70 [ 168.611698][ T8591] kfree+0x193/0x440 [ 168.615595][ T8591] device_release+0x99/0x1c0 [ 168.620200][ T8591] kobject_put+0x228/0x480 [ 168.624628][ T8591] hci_conn_del+0x8f5/0xca0 [ 168.629130][ T8591] hci_conn_hash_flush+0x191/0x230 [ 168.634233][ T8591] hci_dev_close_sync+0xaef/0x1330 [ 168.639341][ T8591] hci_unregister_dev+0x206/0x500 [ 168.644367][ T8591] vhci_release+0x80/0xd0 [ 168.648682][ T8591] __fput+0x449/0xa70 [ 168.652657][ T8591] task_work_run+0x1d1/0x260 [ 168.657258][ T8591] do_exit+0x8d6/0x2550 [ 168.661456][ T8591] do_group_exit+0x21c/0x2d0 [ 168.666049][ T8591] __x64_sys_exit_group+0x3f/0x40 [ 168.671072][ T8591] x64_sys_call+0x21ba/0x21c0 [ 168.675746][ T8591] do_syscall_64+0xf6/0x210 [ 168.680244][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.686127][ T8591] [ 168.688436][ T8591] Last potentially related work creation: [ 168.694142][ T8591] kasan_save_stack+0x3e/0x60 [ 168.698815][ T8591] kasan_record_aux_stack+0xbc/0xd0 [ 168.704011][ T8591] insert_work+0x3d/0x330 [ 168.708347][ T8591] __queue_work+0xcfc/0xfe0 [ 168.712857][ T8591] queue_delayed_work_on+0x18b/0x280 [ 168.718149][ T8591] l2cap_chan_del+0x285/0x5e0 [ 168.722820][ T8591] l2cap_conn_del+0x388/0x680 [ 168.727490][ T8591] hci_conn_hash_flush+0x10a/0x230 [ 168.732613][ T8591] hci_dev_close_sync+0xaef/0x1330 [ 168.737726][ T8591] hci_unregister_dev+0x206/0x500 [ 168.742747][ T8591] vhci_release+0x80/0xd0 [ 168.747096][ T8591] __fput+0x449/0xa70 [ 168.751086][ T8591] task_work_run+0x1d1/0x260 [ 168.755683][ T8591] do_exit+0x8d6/0x2550 [ 168.759849][ T8591] do_group_exit+0x21c/0x2d0 [ 168.764461][ T8591] __x64_sys_exit_group+0x3f/0x40 [ 168.769482][ T8591] x64_sys_call+0x21ba/0x21c0 [ 168.774154][ T8591] do_syscall_64+0xf6/0x210 [ 168.778655][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.784536][ T8591] [ 168.786856][ T8591] The buggy address belongs to the object at ffff88807fb40000 [ 168.786856][ T8591] which belongs to the cache kmalloc-8k of size 8192 [ 168.800925][ T8591] The buggy address is located 3152 bytes inside of [ 168.800925][ T8591] freed 8192-byte region [ffff88807fb40000, ffff88807fb42000) [ 168.814895][ T8591] [ 168.817208][ T8591] The buggy address belongs to the physical page: [ 168.823614][ T8591] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fb40 [ 168.832360][ T8591] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 168.840848][ T8591] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 168.848486][ T8591] page_type: f5(slab) [ 168.852464][ T8591] raw: 00fff00000000040 ffff88801a042280 ffffea0001639e00 0000000000000006 [ 168.861056][ T8591] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 168.869653][ T8591] head: 00fff00000000040 ffff88801a042280 ffffea0001639e00 0000000000000006 [ 168.878315][ T8591] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 168.886990][ T8591] head: 00fff00000000003 ffffea0001fed001 00000000ffffffff 00000000ffffffff [ 168.895825][ T8591] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 168.904478][ T8591] page dumped because: kasan: bad access detected [ 168.910908][ T8591] page_owner tracks the page as allocated [ 168.916636][ T8591] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7581, tgid 7581 (syz-executor), ts 143271304486, free_ts 143225497289 [ 168.938181][ T8591] post_alloc_hook+0x1d8/0x230 [ 168.942944][ T8591] get_page_from_freelist+0x21e0/0x22c0 [ 168.948494][ T8591] __alloc_frozen_pages_noprof+0x181/0x370 [ 168.954320][ T8591] alloc_pages_mpol+0x232/0x4a0 [ 168.959170][ T8591] allocate_slab+0x8a/0x3b0 [ 168.963683][ T8591] ___slab_alloc+0xbfc/0x1480 [ 168.968368][ T8591] __kvmalloc_node_noprof+0x411/0x5e0 [ 168.973732][ T8591] pfifo_fast_init+0x363/0x6b0 [ 168.978493][ T8591] qdisc_create_dflt+0x11f/0x470 [ 168.983424][ T8591] dev_activate+0x378/0x1150 [ 168.988018][ T8591] __dev_open+0x69c/0x880 [ 168.992355][ T8591] __dev_change_flags+0x1ea/0x6d0 [ 168.997370][ T8591] netif_change_flags+0x88/0x1a0 [ 169.002308][ T8591] do_setlink+0xcb9/0x40d0 [ 169.006715][ T8591] rtnl_newlink+0x160b/0x1c70 [ 169.011429][ T8591] rtnetlink_rcv_msg+0x7cc/0xb70 [ 169.016371][ T8591] page last free pid 5831 tgid 5831 stack trace: [ 169.022707][ T8591] __free_frozen_pages+0xb14/0xce0 [ 169.027820][ T8591] __put_partials+0x161/0x1c0 [ 169.032495][ T8591] put_cpu_partial+0x17c/0x250 [ 169.037255][ T8591] __slab_free+0x2f7/0x400 [ 169.041659][ T8591] qlist_free_all+0x9a/0x140 [ 169.046244][ T8591] kasan_quarantine_reduce+0x148/0x160 [ 169.051689][ T8591] __kasan_slab_alloc+0x22/0x80 [ 169.056537][ T8591] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 169.061994][ T8591] ptlock_alloc+0x20/0x70 [ 169.066333][ T8591] pte_alloc_one+0x6d/0x160 [ 169.070831][ T8591] __pte_alloc+0x25/0x160 [ 169.075164][ T8591] copy_pmd_range+0x6903/0x7000 [ 169.080020][ T8591] copy_page_range+0x95c/0xd40 [ 169.084789][ T8591] copy_mm+0x121c/0x2100 [ 169.089031][ T8591] copy_process+0x16d3/0x3b80 [ 169.093787][ T8591] kernel_clone+0x21e/0x870 [ 169.098292][ T8591] [ 169.100603][ T8591] Memory state around the buggy address: [ 169.106225][ T8591] ffff88807fb40b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.114287][ T8591] ffff88807fb40b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.122352][ T8591] >ffff88807fb40c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.130401][ T8591] ^ [ 169.137063][ T8591] ffff88807fb40c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.145112][ T8591] ffff88807fb40d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.153160][ T8591] ================================================================== [ 169.173169][ T8591] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.180412][ T8591] CPU: 0 UID: 0 PID: 8591 Comm: syz.2.700 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 169.192323][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 169.202392][ T8591] Call Trace: [ 169.205683][ T8591] [ 169.208630][ T8591] dump_stack_lvl+0x99/0x250 [ 169.213248][ T8591] ? __asan_memcpy+0x40/0x70 [ 169.217854][ T8591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.223074][ T8591] ? __pfx__printk+0x10/0x10 [ 169.227672][ T8591] panic+0x2db/0x790 [ 169.231619][ T8591] ? __pfx_panic+0x10/0x10 [ 169.236039][ T8591] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 169.241932][ T8591] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.248257][ T8591] ? print_memory_metadata+0x314/0x400 [ 169.253716][ T8591] ? cfusbl_device_notify+0x150/0x6a0 [ 169.259093][ T8591] check_panic_on_warn+0x89/0xb0 [ 169.264034][ T8591] ? cfusbl_device_notify+0x150/0x6a0 [ 169.269430][ T8591] end_report+0x78/0x160 [ 169.273675][ T8591] kasan_report+0x129/0x150 [ 169.278183][ T8591] ? cfusbl_device_notify+0x150/0x6a0 [ 169.283566][ T8591] cfusbl_device_notify+0x150/0x6a0 [ 169.288771][ T8591] ? net_generic+0x1e/0x240 [ 169.293280][ T8591] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 169.299012][ T8591] ? caif_device_notify+0x250/0xfc0 [ 169.304216][ T8591] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 169.309695][ T8591] notifier_call_chain+0x1b3/0x3e0 [ 169.314816][ T8591] register_netdevice+0x121c/0x1ae0 [ 169.320017][ T8591] ? __mutex_lock+0x51b/0xe80 [ 169.324702][ T8591] ? __pfx_register_netdevice+0x10/0x10 [ 169.330252][ T8591] ? __asan_memset+0x22/0x50 [ 169.334847][ T8591] ? dev_addr_mod+0x2ce/0x3d0 [ 169.339523][ T8591] register_netdev+0x40/0x60 [ 169.344115][ T8591] bnep_add_connection+0x6bf/0xbf0 [ 169.349240][ T8591] ? __pfx_bnep_add_connection+0x10/0x10 [ 169.354874][ T8591] ? __fget_files+0x3a0/0x420 [ 169.359562][ T8591] do_bnep_sock_ioctl+0x40e/0x640 [ 169.364591][ T8591] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 169.370147][ T8591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 169.375816][ T8591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 169.381459][ T8591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 169.387107][ T8591] ? call_rcu+0x6dd/0x990 [ 169.391449][ T8591] sock_do_ioctl+0xd9/0x300 [ 169.396025][ T8591] ? __pfx_sock_do_ioctl+0x10/0x10 [ 169.401170][ T8591] ? __lock_acquire+0xaac/0xd20 [ 169.406068][ T8591] sock_ioctl+0x576/0x790 [ 169.410423][ T8591] ? __pfx_sock_ioctl+0x10/0x10 [ 169.415302][ T8591] ? __fget_files+0x3a0/0x420 [ 169.419994][ T8591] ? __fget_files+0x2a/0x420 [ 169.424596][ T8591] ? bpf_lsm_file_ioctl+0x9/0x20 [ 169.429545][ T8591] ? __pfx_sock_ioctl+0x10/0x10 [ 169.434408][ T8591] __se_sys_ioctl+0xf9/0x170 [ 169.439003][ T8591] do_syscall_64+0xf6/0x210 [ 169.443510][ T8591] ? clear_bhb_loop+0x45/0xa0 [ 169.448194][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.454090][ T8591] RIP: 0033:0x7f6ea978e969 [ 169.458508][ T8591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.478115][ T8591] RSP: 002b:00007f6ea75d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.486554][ T8591] RAX: ffffffffffffffda RBX: 00007f6ea99b6080 RCX: 00007f6ea978e969 [ 169.494622][ T8591] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000010 [ 169.502600][ T8591] RBP: 00007f6ea9810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 169.510576][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.518554][ T8591] R13: 0000000000000000 R14: 00007f6ea99b6080 R15: 00007ffcf2f8bce8 [ 169.526539][ T8591] [ 169.529900][ T8591] Kernel Offset: disabled [ 169.534233][ T8591] Rebooting in 86400 seconds..