last executing test programs: 1m13.835775442s ago: executing program 0 (id=1162): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value}, 0x20) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000094a50017ba7572e6d5dd11e627000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r8, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000003580)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000001000000030000000002000000020000000000000000000271604020526d57615bb530b0256852d38d7d5080d80f79b979b0bd6fbe215d88048db95dcced1ea2a8bce3e425df03d75ba446a2ee3eabd3a8f7aa365dc9040177d1e16c2937e887fbfc0a0b2ffb6e5e6217d6830ec4abf957646d95af81b8be9cd678b194920000c85c7a40c352a3679a9c03d3dc73fb8a98ee8e23"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m3.632109584s ago: executing program 1 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000eb0000000000bc0a88", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) unshare(0x2000400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r3, 0x1) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r6 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r6}, 0x20) bind$unix(r6, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003b40)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 1m2.822261665s ago: executing program 0 (id=1162): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value}, 0x20) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000094a50017ba7572e6d5dd11e627000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r8, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000003580)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000001000000030000000002000000020000000000000000000271604020526d57615bb530b0256852d38d7d5080d80f79b979b0bd6fbe215d88048db95dcced1ea2a8bce3e425df03d75ba446a2ee3eabd3a8f7aa365dc9040177d1e16c2937e887fbfc0a0b2ffb6e5e6217d6830ec4abf957646d95af81b8be9cd678b194920000c85c7a40c352a3679a9c03d3dc73fb8a98ee8e23"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 51.460474839s ago: executing program 1 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000eb0000000000bc0a88", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) unshare(0x2000400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r3, 0x1) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r6 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r6}, 0x20) bind$unix(r6, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003b40)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 50.055253826s ago: executing program 0 (id=1162): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value}, 0x20) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000094a50017ba7572e6d5dd11e627000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r8, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000003580)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000001000000030000000002000000020000000000000000000271604020526d57615bb530b0256852d38d7d5080d80f79b979b0bd6fbe215d88048db95dcced1ea2a8bce3e425df03d75ba446a2ee3eabd3a8f7aa365dc9040177d1e16c2937e887fbfc0a0b2ffb6e5e6217d6830ec4abf957646d95af81b8be9cd678b194920000c85c7a40c352a3679a9c03d3dc73fb8a98ee8e23"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 38.561008369s ago: executing program 1 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000eb0000000000bc0a88", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) unshare(0x2000400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r3, 0x1) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r6 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r6}, 0x20) bind$unix(r6, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003b40)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 38.105514805s ago: executing program 0 (id=1162): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value}, 0x20) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000094a50017ba7572e6d5dd11e627000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r8, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaa80c80347bdfa1d8a00006600000f06907864010101ffffffff4400a4c10000000000000e32e0000002ffffe2fbac1414bb000002000a01010000000004ac14142fffffffffe000000200000004e000000100000002ac1414aa0000000aac1414aa000100018900e500000000ac14140c64010100ac1414aaac1414aa7f0000018300698300837f000001ac1414bb64010101ac1414227f000001ffffffff7f000001ac1414aaffffffffe0000002440023310000000080000000ac1e0001000000090000000000000000000000000000000000000300004e2300004e24000000020000000000000003000000040000000300000000006f4f999c7d05779b3c8083d1df2b1aa5caf67aa3ec8b4b8995f5d861a099d35dd0ecb3d3564b3c7165e3a9b8ec893c4536bfb1c271a875196437b9d5"], 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000003580)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000001000000030000000002000000020000000000000000000271604020526d57615bb530b0256852d38d7d5080d80f79b979b0bd6fbe215d88048db95dcced1ea2a8bce3e425df03d75ba446a2ee3eabd3a8f7aa365dc9040177d1e16c2937e887fbfc0a0b2ffb6e5e6217d6830ec4abf957646d95af81b8be9cd678b194920000c85c7a40c352a3679a9c03d3dc73fb8a98ee8e23"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 25.999159235s ago: executing program 1 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000eb0000000000bc0a88", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) unshare(0x2000400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r3, 0x1) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r6 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r6}, 0x20) bind$unix(r6, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003b40)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 23.164070763s ago: executing program 0 (id=1162): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value}, 0x20) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000094a50017ba7572e6d5dd11e627000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r8, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000003580)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000001000000030000000002000000020000000000000000000271604020526d57615bb530b0256852d38d7d5080d80f79b979b0bd6fbe215d88048db95dcced1ea2a8bce3e425df03d75ba446a2ee3eabd3a8f7aa365dc9040177d1e16c2937e887fbfc0a0b2ffb6e5e6217d6830ec4abf957646d95af81b8be9cd678b194920000c85c7a40c352a3679a9c03d3dc73fb8a98ee8e23"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="61129900000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000170600000ee60000bf0500000000000063620000000000006507000000000000460700004c0000000f75000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000ff7f00009eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd86292d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc72be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035bc6a35a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa3e8ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c07935"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.420316349s ago: executing program 1 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000eb0000000000bc0a88", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) unshare(0x2000400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r3, 0x1) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r6 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r6}, 0x20) bind$unix(r6, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003b40)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 9.012811397s ago: executing program 4 (id=2650): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 8.869357707s ago: executing program 4 (id=2651): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)=""/207, 0xcf}, {&(0x7f00000022c0)=""/261, 0x105}, {&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000f00)=""/196, 0xc4}, {&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000000480)=""/68, 0x44}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f00000007c0)=""/125, 0x7d}, {&(0x7f0000000dc0)=""/186, 0xba}, {&(0x7f00000009c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/138, 0x8a}], 0xd}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 7.772320834s ago: executing program 4 (id=2656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcf49, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.398968397s ago: executing program 4 (id=2659): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_ethernet(0xc0, &(0x7f00000005c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8a, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0xe, 0x6, "39049f", 0x2, 0x0, 0x0, @local, @private2, [@routing={0x6, 0x0, 0x0, 0x5}], "64a27227a864721cf2a4faaa93b946656c32e8e3f1967f97a3e18b7c8d23a297dedebff06305a4123fbe5fcc16c706f72b85b4241bf166799684eeec34d12fee873f8d69ed4672313e490e0bfb4ddc44b127"}}}}}}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2004040000"], 0x20}}, 0x4040040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000001c0)='syzkaller0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1000000, [{0x0, 0x2, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 7.290705485s ago: executing program 4 (id=2661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 6.937090168s ago: executing program 4 (id=2662): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x36e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) 6.490307148s ago: executing program 0 (id=1162): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value}, 0x20) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000094a50017ba7572e6d5dd11e627000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r8, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaa80c80347bdfa1d8a00006600000f06907864010101ffffffff4400a4c10000000000000e32e0000002ffffe2fbac1414bb000002000a01010000000004ac14142fffffffffe000000200000004e000000100000002ac1414aa0000000aac1414aa000100018900e500000000ac14140c64010100ac1414aaac1414aa7f0000018300698300837f000001ac1414bb64010101ac1414227f000001ffffffff7f000001ac1414aaffffffffe0000002440023310000000080000000ac1e0001000000090000000000000000000000000000000000000300004e2300004e24000000020000000000000003000000040000000300000000006f4f999c7d05779b3c8083d1df2b1aa5caf67aa3ec8b4b8995f5d861a099d35dd0ecb3d3564b3c7165e3a9b8ec893c4536bfb1c271a875196437b9d5"], 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000003580)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000001000000030000000002000000020000000000000000000271604020526d57615bb530b0256852d38d7d5080d80f79b979b0bd6fbe215d88048db95dcced1ea2a8bce3e425df03d75ba446a2ee3eabd3a8f7aa365dc9040177d1e16c2937e887fbfc0a0b2ffb6e5e6217d6830ec4abf957646d95af81b8be9cd678b194920000c85c7a40c352a3679a9c03d3dc73fb8a98ee8e23"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.475301078s ago: executing program 2 (id=2665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="7b03eedc604dc495b70571f75d", @ANYRES16=r1, @ANYBLOB='kN\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="7b03eedc604dc495b70571f75d", @ANYRES16=r1, @ANYBLOB='kN\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00'], 0x14}}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x8000a4ff, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x108, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x31b8774e}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x35}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6bcbb6ae}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x108, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x31b8774e}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x35}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6bcbb6ae}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) 4.313276754s ago: executing program 2 (id=2667): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x110, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0xc8, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x69}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_bpf={0xa8, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0x6d, 0x6, "ca8fd735f4c425bd44291fa86781920ab90ff95c64e3d33704248d0546950f6c3113358c2551981c52f5a6dd8a3891697d8ab8d8f56d11025dc3c339c95c2c879249dbbfa3c3f7576ea41a624c8db9b4a2896e26ced3361e33c793332fc709bb25bcdfc387325cb1fa"}, {0xc}, {0xc}}}]}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.222577577s ago: executing program 2 (id=2669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020605000000000000fffc000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d616300"], 0x5c}}, 0x20000000) 3.17782642s ago: executing program 3 (id=2670): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xf0a7}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x7fff}]}}]}, 0x4c}}, 0x4080) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x13, r8, 0x1fdc0000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x8}, @broadcast}, 0xa) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002380)={0x60, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8841}, 0x800) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d0404000000fedbff25000000003aef01d9306ff5309ed19535ba7c0a18a12b2c805cf0a52f644e7a4cfa5874b1f816a5d26ea87c69594e814a53d3e9024ef349eebc6c864e96758ce43c3e3092b689f9466a58e33775216606cb937a8564fae9ccaf2c387d9445aea6ea387db84946866e454935a35ee3bae37dfa4736c8aeadff6d5cc13c75194030367a8bbd9c4c2ca041a40fe36789bc35625db201884e485bb468acf717c109e855a111f071b7e212d60a7070d29060e2942a91670d938c1b45c09b73e8474f79c63934e9c77b", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 3.073109116s ago: executing program 2 (id=2671): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_ethernet(0xc0, &(0x7f00000005c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8a, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0xe, 0x6, "39049f", 0x2, 0x0, 0x0, @local, @private2, [@routing={0x6, 0x0, 0x0, 0x5}], "64a27227a864721cf2a4faaa93b946656c32e8e3f1967f97a3e18b7c8d23a297dedebff06305a4123fbe5fcc16c706f72b85b4241bf166799684eeec34d12fee873f8d69ed4672313e490e0bfb4ddc44b127"}}}}}}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2004040000"], 0x20}}, 0x4040040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000001c0)='syzkaller0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1000000, [{0x0, 0x2, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 2.855633045s ago: executing program 2 (id=2672): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a0001"], 0x18}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@remote, @rand_addr, 0x0}, &(0x7f0000000180)=0xc) recvfrom$packet(r2, &(0x7f0000000280)=""/4096, 0x1000, 0x2040, &(0x7f0000001280)={0x11, 0xc, r3, 0x1, 0xe2, 0x6, @multicast}, 0x14) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x0, 0x6, 0xd, 0x80000000}, {0xa, 0x7, 0x8, 0x4}, {0x3, 0x2, 0x30, 0x6}, {0xc000, 0xb, 0x8, 0x1}, {0xfffc, 0x81, 0x3, 0x6}, {0x7ff, 0x1, 0x5, 0x4a}, {0xe, 0x6, 0x8, 0x5}, {0x56, 0x10, 0x7, 0x8}]}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRESHEX=r4], 0x114}], 0x1}, 0x0) 2.796612141s ago: executing program 2 (id=2673): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)="ac87f28a0235c25272cd7f0756e1aab4be6c82b7675ff22dd841bb267aea869e5b7e65c13718b842e5f3362de9c5809f33891e0a4411f5c9f15fa0f8fce29640f5682c733c8a235671d1885021760727f7e7285b300a110b9041488a682df550230bc2a858af87faa40177899b85006dc12109c537b618eae25dfc8dc0bf8d0c583499d5bfcfeeb16bf7d7a4e76229927e1433b7a8c028ec4c7d20464ba12032246d5ed790abaffa783084350a642628a89a19361c38b87a850ab59e581d81005e4c", 0xc2}, {&(0x7f0000000800)="027cf23eaf23672c3251d58a5e24195ccabcd8b24432802fef72031cc894945618ff3503241e827336ffc270fa2e72751dfbededa625f483ee9a70dde1ceae7ba0e9775ec205e484c3a9fe85c005c50a4116bf7e6c2ae4a17107c03377b5db30cf7f9d1cb18fdce685c04fc042fa35d08b46abd14a79e0637aa56853ff120f899ef93a00a125dc9ab616c4c7ea1dc43308983a4498b3d2c0d737f144a8929e7a0b924c039ba42177b8b6d4a1535b8045a711a838fd9061219b4560ab8d753bd9784c1d967c607bbda0464f3ed27bc7f625ec8e1cb3b2faceed3bd6e2fd453b", 0xdf}, {&(0x7f0000000100)="e09c1a9c4fc85bbc2250f2539894c081d6161bfacc0b0d803ef0fe36", 0x1c}], 0x3, 0x0, 0x0, 0x20000000}, 0x24000015) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="7b4989a988d7d7aa22a73025d421fcf2105b7d109d48a8cb0916dd3f72cf5ff4316631051c424b3876eac4f7b94f0971c20073432b0048ec39aa013c50dc7226c2178a6ef3586a18a2fb7c9df1f9fbe17f0a26f2fac8cf33d1154e82939409bd69597b229e615a18876e3518dc1571b009190b90915265fb09d4c91523f5d628f698d5f1772500fb9a8590aafc2392a42865aca53c89a5fef962de637ffd9065808fe5db4cbfea99ba"], 0xb5) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.185328795s ago: executing program 3 (id=2674): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002240)=""/4118, 0x1016}], 0x1, 0x0, 0x0, 0x407006}, 0x104) 2.164843442s ago: executing program 1 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000eb0000000000bc0a88", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) unshare(0x2000400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r3, 0x1) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r6 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r6}, 0x20) bind$unix(r6, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003b40)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 1.077890827s ago: executing program 3 (id=2675): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f0000002b80)=""/207, 0xcf}, {&(0x7f0000000740)=""/117, 0x75}, {&(0x7f00000007c0)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/4062, 0xfde}, {&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f0000001b40)=""/130, 0x82}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f00000070c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/249, 0xf9}], 0xa}, 0x0) 158.329143ms ago: executing program 3 (id=2676): r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 45.308659ms ago: executing program 3 (id=2677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r4, 0x71e4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff00000ec00000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 0s ago: executing program 3 (id=2678): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x70bd26, 0x2000, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x20000800) (fail_nth: 7) kernel console output (not intermixed with test programs): a RBX: 00007ff169975fa0 RCX: 00007ff169785d29 [ 271.109823][T12321] RDX: 00000000ffffff0c RSI: 0000000020000000 RDI: 0000000000000005 [ 271.117800][T12321] RBP: 00007ff16a4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 271.125776][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.133753][T12321] R13: 0000000000000000 R14: 00007ff169975fa0 R15: 00007ffef25d65b8 [ 271.141858][T12321] [ 271.619715][ T5833] Bluetooth: hci4: command tx timeout [ 271.800087][T12300] chnl_net:caif_netlink_parms(): no params data found [ 271.885962][T12342] __nla_validate_parse: 4 callbacks suppressed [ 271.885986][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2323'. [ 271.906019][T12342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2323'. [ 271.915129][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2323'. [ 271.924245][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2323'. [ 271.970941][T12346] netlink: zone id is out of range [ 271.977815][T12346] netlink: zone id is out of range [ 271.983142][T12346] netlink: zone id is out of range [ 271.989133][T12346] netlink: zone id is out of range [ 272.019242][ T5833] Bluetooth: hci1: command tx timeout [ 272.031124][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2325'. [ 272.049369][T10812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.062050][T10810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.212848][T10810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.278018][T12300] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.286936][T12300] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.294529][T12300] bridge_slave_0: entered allmulticast mode [ 272.304780][T12300] bridge_slave_0: entered promiscuous mode [ 272.344987][T10810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.380315][T12276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.395818][T12300] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.405298][T12300] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.425606][T12300] bridge_slave_1: entered allmulticast mode [ 272.440533][T12300] bridge_slave_1: entered promiscuous mode [ 272.447343][T12276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.488030][T10810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.532423][T12276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.549621][T12276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.567859][T12300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.592778][T12300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.715545][T12300] team0: Port device team_slave_0 added [ 272.739924][T12300] team0: Port device team_slave_1 added [ 272.829911][T12300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.836914][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.906688][T12300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.954182][T12375] netlink: 'syz.2.2335': attribute type 11 has an invalid length. [ 272.977698][T12300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.995027][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.037111][T12300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.068199][T10810] bridge_slave_1: left allmulticast mode [ 273.082906][T10810] bridge_slave_1: left promiscuous mode [ 273.098867][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.161801][T10810] bridge_slave_0: left allmulticast mode [ 273.171552][T10810] bridge_slave_0: left promiscuous mode [ 273.177282][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.184975][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.268173][T12386] FAULT_INJECTION: forcing a failure. [ 273.268173][T12386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.282430][T12386] CPU: 1 UID: 0 PID: 12386 Comm: syz.2.2340 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 273.293243][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 273.303337][T12386] Call Trace: [ 273.306638][T12386] [ 273.309589][T12386] dump_stack_lvl+0x241/0x360 [ 273.314318][T12386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.319564][T12386] ? __pfx__printk+0x10/0x10 [ 273.324187][T12386] ? __pfx_lock_release+0x10/0x10 [ 273.329227][T12386] ? percpu_ref_get_many+0x19/0x140 [ 273.334446][T12386] should_fail_ex+0x3b0/0x4e0 [ 273.339154][T12386] _copy_from_iter+0x1e9/0x1c20 [ 273.344031][T12386] ? pipe_write+0x1c6/0x1a30 [ 273.348635][T12386] ? __pfx__copy_from_iter+0x10/0x10 [ 273.353951][T12386] ? alloc_pages_mpol_noprof+0x417/0x680 [ 273.359612][T12386] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 273.365608][T12386] ? page_copy_sane+0x46/0x260 [ 273.370409][T12386] copy_page_from_iter+0x7a/0x100 [ 273.375463][T12386] pipe_write+0x7f5/0x1a30 [ 273.379918][T12386] ? __pfx_pipe_write+0x10/0x10 [ 273.384784][T12386] ? common_file_perm+0x1a6/0x210 [ 273.389838][T12386] ? bpf_lsm_file_permission+0x9/0x10 [ 273.395225][T12386] ? security_file_permission+0x74/0x280 [ 273.400886][T12386] vfs_write+0xaeb/0xd30 [ 273.405141][T12386] ? __pfx_pipe_write+0x10/0x10 [ 273.410027][T12386] ? __pfx_vfs_write+0x10/0x10 [ 273.414844][T12386] ? __fget_files+0x2a/0x410 [ 273.419465][T12386] ? __fget_files+0x2a/0x410 [ 273.424092][T12386] ksys_write+0x18f/0x2b0 [ 273.428436][T12386] ? __pfx_ksys_write+0x10/0x10 [ 273.433297][T12386] ? trace_sys_enter+0x74/0x120 [ 273.438163][T12386] ? rcu_is_watching+0x15/0xb0 [ 273.442948][T12386] ? trace_sys_enter+0x25/0x120 [ 273.447844][T12386] do_syscall_64+0xf3/0x230 [ 273.452370][T12386] ? clear_bhb_loop+0x35/0x90 [ 273.457067][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.462974][T12386] RIP: 0033:0x7f95b6185d29 [ 273.467396][T12386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.487009][T12386] RSP: 002b:00007f95b7082038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.495458][T12386] RAX: ffffffffffffffda RBX: 00007f95b6375fa0 RCX: 00007f95b6185d29 [ 273.503440][T12386] RDX: 00000000ffffff0c RSI: 0000000020000000 RDI: 0000000000000005 [ 273.511451][T12386] RBP: 00007f95b7082090 R08: 0000000000000000 R09: 0000000000000000 [ 273.519424][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.527407][T12386] R13: 0000000000000000 R14: 00007f95b6375fa0 R15: 00007ffcb801e078 [ 273.535431][T12386] [ 273.550112][T12388] netlink: 'syz.3.2339': attribute type 10 has an invalid length. [ 273.701805][ T5833] Bluetooth: hci4: command tx timeout [ 273.870296][T10810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.883585][T10810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.894571][T10810] bond0 (unregistering): Released all slaves [ 273.937751][T12300] hsr_slave_0: entered promiscuous mode [ 274.017423][T12300] hsr_slave_1: entered promiscuous mode [ 274.049974][T12300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.057606][T12300] Cannot create hsr debugfs directory [ 274.068310][T12398] Cannot find set identified by id 3 to match [ 274.099462][ T5833] Bluetooth: hci1: command tx timeout [ 274.171762][T12403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2345'. [ 274.191046][T12403] netlink: 'syz.2.2345': attribute type 7 has an invalid length. [ 274.198827][T12403] netlink: 'syz.2.2345': attribute type 8 has an invalid length. [ 274.219872][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 274.336991][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2348'. [ 274.537878][T12413] netlink: 'syz.2.2349': attribute type 11 has an invalid length. [ 274.557597][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.589690][T10810] hsr_slave_0: left promiscuous mode [ 274.595713][T10810] hsr_slave_1: left promiscuous mode [ 274.603237][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.611201][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.620089][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.627597][T10810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.661218][T10810] veth1_macvtap: left promiscuous mode [ 274.669133][T10810] veth0_macvtap: left promiscuous mode [ 274.674841][T10810] veth1_vlan: left promiscuous mode [ 274.680487][T10810] veth0_vlan: left promiscuous mode [ 275.171442][T10810] team0 (unregistering): Port device team_slave_1 removed [ 275.217071][T10810] team0 (unregistering): Port device team_slave_0 removed [ 275.221551][T12426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2353'. [ 275.238920][T12426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2353'. [ 275.343365][T12428] FAULT_INJECTION: forcing a failure. [ 275.343365][T12428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.365617][T12428] CPU: 0 UID: 0 PID: 12428 Comm: syz.4.2354 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 275.376455][T12428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 275.386527][T12428] Call Trace: [ 275.389915][T12428] [ 275.392904][T12428] dump_stack_lvl+0x241/0x360 [ 275.397639][T12428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.402845][T12428] ? __pfx__printk+0x10/0x10 [ 275.407472][T12428] should_fail_ex+0x3b0/0x4e0 [ 275.412192][T12428] _copy_from_user+0x2f/0xc0 [ 275.416807][T12428] move_addr_to_kernel+0x82/0x150 [ 275.421852][T12428] __sys_sendto+0x268/0x4c0 [ 275.426386][T12428] ? __pfx___sys_sendto+0x10/0x10 [ 275.431450][T12428] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.437523][T12428] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.443872][T12428] ? exc_page_fault+0x590/0x8b0 [ 275.448837][T12428] __x64_sys_sendto+0xde/0x100 [ 275.453628][T12428] do_syscall_64+0xf3/0x230 [ 275.458154][T12428] ? clear_bhb_loop+0x35/0x90 [ 275.462862][T12428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.468784][T12428] RIP: 0033:0x7ff169787bbc [ 275.473206][T12428] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 275.492818][T12428] RSP: 002b:00007ff16a4d0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 275.501253][T12428] RAX: ffffffffffffffda RBX: 00007ff16a4d0fc0 RCX: 00007ff169787bbc [ 275.509231][T12428] RDX: 0000000000000020 RSI: 00007ff16a4d1010 RDI: 0000000000000004 [ 275.517203][T12428] RBP: 0000000000000000 R08: 00007ff16a4d0f14 R09: 000000000000000c [ 275.525266][T12428] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 275.533243][T12428] R13: 00007ff16a4d0f68 R14: 00007ff16a4d1010 R15: 0000000000000000 [ 275.541227][T12428] [ 275.789200][ T5833] Bluetooth: hci4: command tx timeout [ 275.879372][T10812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.893590][T12276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.042589][T12276] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.067052][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.074341][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.110717][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.117883][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.189017][ T5833] Bluetooth: hci1: command tx timeout [ 276.743315][T12467] netlink: 'syz.3.2366': attribute type 11 has an invalid length. [ 276.749847][T12300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.761643][T12300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.805826][T12276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.819802][T12300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.840191][T12300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.908748][T12276] veth0_vlan: entered promiscuous mode [ 276.938045][T12471] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 276.954721][T12276] veth1_vlan: entered promiscuous mode [ 277.021139][T10812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.057295][T12300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.076696][T12276] veth0_macvtap: entered promiscuous mode [ 277.104404][T12276] veth1_macvtap: entered promiscuous mode [ 277.138129][T12300] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.175755][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.182955][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.200250][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.217790][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.237633][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.251593][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.265820][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.276392][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.288657][T12276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.310722][T10812] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.317938][T10812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.352253][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.368229][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.409484][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.434216][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.451279][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.454669][T12484] netlink: 'syz.4.2374': attribute type 4 has an invalid length. [ 277.470216][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.500816][T12276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.547932][T12276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.578102][T12276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.591085][T12276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.600281][T12276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.790608][T10812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.817428][T10812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.859310][ T5833] Bluetooth: hci4: command tx timeout [ 277.869673][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.890601][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.073199][T12300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.150643][T12505] FAULT_INJECTION: forcing a failure. [ 278.150643][T12505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.160689][T10812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.188376][T12507] netlink: 'syz.2.2379': attribute type 10 has an invalid length. [ 278.192514][T12300] veth0_vlan: entered promiscuous mode [ 278.203028][T12505] CPU: 1 UID: 0 PID: 12505 Comm: syz.4.2381 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 278.213840][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 278.223917][T12505] Call Trace: [ 278.227239][T12505] [ 278.230199][T12505] dump_stack_lvl+0x241/0x360 [ 278.234922][T12505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.240166][T12505] ? __pfx__printk+0x10/0x10 [ 278.240467][T12300] veth1_vlan: entered promiscuous mode [ 278.244780][T12505] ? __pfx_lock_release+0x10/0x10 [ 278.255467][T12505] should_fail_ex+0x3b0/0x4e0 [ 278.260200][T12505] _copy_from_user+0x2f/0xc0 [ 278.264834][T12505] copy_msghdr_from_user+0xae/0x680 [ 278.270086][T12505] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 278.275942][T12505] ? __fget_files+0x2a/0x410 [ 278.280575][T12505] ? __fget_files+0x2a/0x410 [ 278.285207][T12505] __sys_sendmsg+0x209/0x350 [ 278.285678][T12300] veth0_macvtap: entered promiscuous mode [ 278.289809][T12505] ? __pfx_lock_release+0x10/0x10 [ 278.289844][T12505] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.289883][T12505] ? __pfx_vfs_write+0x10/0x10 [ 278.289936][T12505] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.301461][T12300] veth1_macvtap: entered promiscuous mode [ 278.305755][T12505] ? do_syscall_64+0x100/0x230 [ 278.324530][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.327331][T12505] ? do_syscall_64+0xb6/0x230 [ 278.340265][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.342486][T12505] do_syscall_64+0xf3/0x230 [ 278.352601][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.356777][T12505] ? clear_bhb_loop+0x35/0x90 [ 278.367475][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.371840][T12505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.371881][T12505] RIP: 0033:0x7ff169785d29 [ 278.371903][T12505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.371924][T12505] RSP: 002b:00007ff16a4d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.371951][T12505] RAX: ffffffffffffffda RBX: 00007ff169975fa0 RCX: 00007ff169785d29 [ 278.371969][T12505] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 278.371984][T12505] RBP: 00007ff16a4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 278.372000][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.372015][T12505] R13: 0000000000000000 R14: 00007ff169975fa0 R15: 00007ffef25d65b8 [ 278.372045][T12505] [ 278.375253][T12508] openvswitch: netlink: Key type 125 is out of range max 32 [ 278.383311][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.488084][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.506314][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.518293][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.567423][T12300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.605333][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.628759][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.642006][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.656361][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.675208][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.709025][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.729170][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.751750][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.780198][T12300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.841660][T12300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.859098][T12300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.867934][T12300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.887603][T12300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.920614][T12522] __nla_validate_parse: 4 callbacks suppressed [ 278.920655][T12522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2386'. [ 279.069333][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2388'. [ 279.078444][T12529] netlink: 'syz.3.2388': attribute type 7 has an invalid length. [ 279.115537][T10810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.127139][T12529] netlink: 'syz.3.2388': attribute type 8 has an invalid length. [ 279.154326][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 279.174115][T12529] erspan0: entered promiscuous mode [ 279.191021][T12529] batadv_slave_1: entered promiscuous mode [ 279.198437][T12529] erspan0: left promiscuous mode [ 279.212561][T12529] batadv_slave_1: left promiscuous mode [ 279.227610][T12526] netlink: 'syz.3.2388': attribute type 5 has an invalid length. [ 279.260063][T10810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.321196][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.342560][T10810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.383287][T10794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.395889][T10794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.422263][T10794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.430496][T10794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.704647][T10810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.037048][T10810] bridge_slave_1: left allmulticast mode [ 280.042913][T10810] bridge_slave_1: left promiscuous mode [ 280.048898][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.092290][T10810] bridge_slave_0: left allmulticast mode [ 280.098004][T10810] bridge_slave_0: left promiscuous mode [ 280.104057][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.179841][T10812] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 280.272257][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.281467][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.290212][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.299880][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.309636][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.317123][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.600373][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.668574][T10810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.684347][T10810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.694844][T10810] bond0 (unregistering): Released all slaves [ 281.036363][T12549] chnl_net:caif_netlink_parms(): no params data found [ 281.168474][T10810] hsr_slave_0: left promiscuous mode [ 281.177411][T10810] hsr_slave_1: left promiscuous mode [ 281.186129][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.194732][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.202790][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.210802][T10810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.231705][T10810] veth1_macvtap: left promiscuous mode [ 281.237243][T10810] veth0_macvtap: left promiscuous mode [ 281.243023][T10810] veth1_vlan: left promiscuous mode [ 281.248304][T10810] veth0_vlan: left promiscuous mode [ 281.638693][T10810] team0 (unregistering): Port device team_slave_1 removed [ 281.677807][T10810] team0 (unregistering): Port device team_slave_0 removed [ 281.721717][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.046901][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.056704][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.065968][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.078898][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.098701][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.106490][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.366416][T12577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2404'. [ 282.421677][ T5840] Bluetooth: hci1: command tx timeout [ 282.552838][T12571] team0: No ports can be present during mode change [ 282.560485][T12577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2404'. [ 282.659607][T12549] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.666756][T12549] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.724381][T12549] bridge_slave_0: entered allmulticast mode [ 282.751413][T12549] bridge_slave_0: entered promiscuous mode [ 282.785340][T12549] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.809207][T12549] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.824240][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2405'. [ 282.829283][T12549] bridge_slave_1: entered allmulticast mode [ 282.863167][T12549] bridge_slave_1: entered promiscuous mode [ 282.977194][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.013312][T12549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.045338][T12549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.116364][T12549] team0: Port device team_slave_0 added [ 283.153375][T12549] team0: Port device team_slave_1 added [ 283.216647][T12549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.229788][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.283382][T12549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.304476][T12549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.311693][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.338316][T12549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.389154][T10810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.423054][T12549] hsr_slave_0: entered promiscuous mode [ 283.430278][T12549] hsr_slave_1: entered promiscuous mode [ 283.436581][T12549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.444539][T12549] Cannot create hsr debugfs directory [ 283.466842][T10810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.592547][T10810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.785961][T10810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.808157][T12609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2414'. [ 283.813235][T12567] chnl_net:caif_netlink_parms(): no params data found [ 284.000225][T12614] Cannot find set identified by id 3 to match [ 284.104885][T10810] bridge_slave_1: left allmulticast mode [ 284.110769][T10810] bridge_slave_1: left promiscuous mode [ 284.116710][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.139206][T10795] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.155581][T10810] bridge_slave_0: left allmulticast mode [ 284.166745][T10810] bridge_slave_0: left promiscuous mode [ 284.180075][ T5840] Bluetooth: hci4: command tx timeout [ 284.191402][T12625] xt_hashlimit: size too large, truncated to 1048576 [ 284.198459][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.274943][T12625] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2416'. [ 284.499436][ T5840] Bluetooth: hci1: command tx timeout [ 284.591863][T10810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.605400][T10810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.615860][T10810] bond0 (unregistering): Released all slaves [ 284.633203][T12567] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.640796][T12567] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.648197][T12567] bridge_slave_0: entered allmulticast mode [ 284.655945][T12567] bridge_slave_0: entered promiscuous mode [ 284.667708][T12620] geneve2: entered promiscuous mode [ 284.689759][T12620] geneve2: entered allmulticast mode [ 284.772706][T12567] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.799200][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.819981][T12567] bridge_slave_1: entered allmulticast mode [ 284.827311][T12567] bridge_slave_1: entered promiscuous mode [ 285.033484][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2421'. [ 285.057390][T12567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.093610][T12567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.269229][T10812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.322143][T12567] team0: Port device team_slave_0 added [ 285.361690][T10810] hsr_slave_0: left promiscuous mode [ 285.395335][T10810] hsr_slave_1: left promiscuous mode [ 285.414975][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.426956][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.437344][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.446521][T10810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.474373][T10810] veth1_macvtap: left promiscuous mode [ 285.480599][T10810] veth0_macvtap: left promiscuous mode [ 285.486624][T10810] veth1_vlan: left promiscuous mode [ 285.495700][T10810] veth0_vlan: left promiscuous mode [ 286.107249][T10810] team0 (unregistering): Port device team_slave_1 removed [ 286.153581][T10810] team0 (unregistering): Port device team_slave_0 removed [ 286.260183][ T5840] Bluetooth: hci4: command tx timeout [ 286.430364][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.579274][ T5840] Bluetooth: hci1: command tx timeout [ 286.584627][T12567] team0: Port device team_slave_1 added [ 286.730679][T12567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.737765][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.778364][T12567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.792527][T12567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.800587][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.830861][T12567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.973606][T12567] hsr_slave_0: entered promiscuous mode [ 287.000391][T12567] hsr_slave_1: entered promiscuous mode [ 287.016224][T12567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.024189][T12567] Cannot create hsr debugfs directory [ 287.114155][T12549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.125173][T12687] siw: device registration error -23 [ 287.197825][T12549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.227911][T12549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.274637][T12549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.370075][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2444'. [ 287.413626][T12696] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 287.531999][T12701] FAULT_INJECTION: forcing a failure. [ 287.531999][T12701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.579798][T12701] CPU: 0 UID: 0 PID: 12701 Comm: syz.4.2446 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 287.580133][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.590617][T12701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 287.590635][T12701] Call Trace: [ 287.590644][T12701] [ 287.590654][T12701] dump_stack_lvl+0x241/0x360 [ 287.590693][T12701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.590723][T12701] ? __pfx__printk+0x10/0x10 [ 287.629431][T12701] should_fail_ex+0x3b0/0x4e0 [ 287.634146][T12701] prepare_alloc_pages+0x1da/0x5b0 [ 287.639278][T12701] __alloc_pages_noprof+0x16f/0x710 [ 287.644487][T12701] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 287.650216][T12701] ? _copy_from_iter+0x268/0x1c20 [ 287.655266][T12701] ? pipe_write+0x1c6/0x1a30 [ 287.659876][T12701] alloc_pages_mpol_noprof+0x3e8/0x680 [ 287.665359][T12701] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 287.671365][T12701] ? page_copy_sane+0x46/0x260 [ 287.676145][T12701] ? alloc_pages_noprof+0xef/0x170 [ 287.681272][T12701] pipe_write+0x652/0x1a30 [ 287.685720][T12701] ? __pfx_pipe_write+0x10/0x10 [ 287.690581][T12701] ? common_file_perm+0x1a6/0x210 [ 287.695610][T12701] ? bpf_lsm_file_permission+0x9/0x10 [ 287.700995][T12701] ? security_file_permission+0x74/0x280 [ 287.706646][T12701] vfs_write+0xaeb/0xd30 [ 287.710895][T12701] ? __pfx_pipe_write+0x10/0x10 [ 287.715751][T12701] ? __pfx_vfs_write+0x10/0x10 [ 287.720518][T12701] ? __fget_files+0x2a/0x410 [ 287.725122][T12701] ? __fget_files+0x2a/0x410 [ 287.729733][T12701] ksys_write+0x18f/0x2b0 [ 287.734072][T12701] ? __pfx_ksys_write+0x10/0x10 [ 287.738935][T12701] ? trace_sys_enter+0x74/0x120 [ 287.743815][T12701] ? rcu_is_watching+0x15/0xb0 [ 287.748595][T12701] ? trace_sys_enter+0x25/0x120 [ 287.753461][T12701] do_syscall_64+0xf3/0x230 [ 287.757980][T12701] ? clear_bhb_loop+0x35/0x90 [ 287.762664][T12701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.768571][T12701] RIP: 0033:0x7ff169785d29 [ 287.772991][T12701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.792683][T12701] RSP: 002b:00007ff16a4d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.801107][T12701] RAX: ffffffffffffffda RBX: 00007ff169975fa0 RCX: 00007ff169785d29 [ 287.809096][T12701] RDX: 00000000ffffff0c RSI: 0000000020000000 RDI: 0000000000000005 [ 287.817067][T12701] RBP: 00007ff16a4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 287.825044][T12701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.833019][T12701] R13: 0000000000000000 R14: 00007ff169975fa0 R15: 00007ffef25d65b8 [ 287.841009][T12701] [ 287.873241][T12549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.921830][T12549] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.002018][T10810] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.009289][T10810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.027989][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.035222][T10810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.177408][T12549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.255042][T12712] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2449'. [ 288.315050][T12567] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.339254][ T5840] Bluetooth: hci4: command tx timeout [ 288.347528][T12567] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.366408][T12567] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.392448][T12567] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 288.463779][T12549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.622349][T12549] veth0_vlan: entered promiscuous mode [ 288.633768][T12549] veth1_vlan: entered promiscuous mode [ 288.659294][ T5840] Bluetooth: hci1: command tx timeout [ 288.664595][T12567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.691699][T12549] veth0_macvtap: entered promiscuous mode [ 288.701065][T12549] veth1_macvtap: entered promiscuous mode [ 288.748745][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.784571][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.790474][T12728] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2453'. [ 288.794837][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.822018][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.837060][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.868273][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.880908][T10812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.887030][T12549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.941627][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.969613][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.980072][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.015069][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.025094][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.035801][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.046918][T12549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.065826][T12567] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.106563][T12567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.117366][T12567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.144444][T12549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.153353][T12549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.162418][T12549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.171248][T12549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.201778][T10810] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.209054][T10810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.220454][T12737] FAULT_INJECTION: forcing a failure. [ 289.220454][T12737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.247642][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.254877][T10810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.256549][T12737] CPU: 0 UID: 0 PID: 12737 Comm: syz.2.2458 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 289.272881][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 289.282984][T12737] Call Trace: [ 289.286296][T12737] [ 289.289259][T12737] dump_stack_lvl+0x241/0x360 [ 289.294006][T12737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.299254][T12737] ? __pfx__printk+0x10/0x10 [ 289.303887][T12737] ? __pfx_lock_release+0x10/0x10 [ 289.308937][T12737] ? percpu_ref_get_many+0x19/0x140 [ 289.314166][T12737] should_fail_ex+0x3b0/0x4e0 [ 289.318870][T12737] _copy_from_iter+0x1e9/0x1c20 [ 289.323762][T12737] ? pipe_write+0x1c6/0x1a30 [ 289.328366][T12737] ? __pfx__copy_from_iter+0x10/0x10 [ 289.333680][T12737] ? alloc_pages_mpol_noprof+0x417/0x680 [ 289.339336][T12737] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 289.345330][T12737] ? page_copy_sane+0x46/0x260 [ 289.350136][T12737] copy_page_from_iter+0x7a/0x100 [ 289.355241][T12737] pipe_write+0x7f5/0x1a30 [ 289.359706][T12737] ? __pfx_pipe_write+0x10/0x10 [ 289.364578][T12737] ? common_file_perm+0x1a6/0x210 [ 289.369626][T12737] ? bpf_lsm_file_permission+0x9/0x10 [ 289.375026][T12737] ? security_file_permission+0x74/0x280 [ 289.380689][T12737] vfs_write+0xaeb/0xd30 [ 289.384953][T12737] ? __pfx_pipe_write+0x10/0x10 [ 289.389818][T12737] ? __pfx_vfs_write+0x10/0x10 [ 289.394596][T12737] ? __fget_files+0x2a/0x410 [ 289.399215][T12737] ? __fget_files+0x2a/0x410 [ 289.403840][T12737] ksys_write+0x18f/0x2b0 [ 289.408186][T12737] ? __pfx_ksys_write+0x10/0x10 [ 289.413049][T12737] ? trace_sys_enter+0x74/0x120 [ 289.417928][T12737] ? rcu_is_watching+0x15/0xb0 [ 289.422712][T12737] ? trace_sys_enter+0x25/0x120 [ 289.427585][T12737] do_syscall_64+0xf3/0x230 [ 289.432109][T12737] ? clear_bhb_loop+0x35/0x90 [ 289.436798][T12737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.442713][T12737] RIP: 0033:0x7f95b6185d29 [ 289.447139][T12737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.466759][T12737] RSP: 002b:00007f95b7082038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.475188][T12737] RAX: ffffffffffffffda RBX: 00007f95b6375fa0 RCX: 00007f95b6185d29 [ 289.483169][T12737] RDX: 00000000ffffff0c RSI: 0000000020000000 RDI: 0000000000000005 [ 289.491174][T12737] RBP: 00007f95b7082090 R08: 0000000000000000 R09: 0000000000000000 [ 289.499162][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.507170][T12737] R13: 0000000000000000 R14: 00007f95b6375fa0 R15: 00007ffcb801e078 [ 289.515177][T12737] [ 289.756022][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.789405][T12747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2460'. [ 289.795266][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.833773][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.841831][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.845583][T12567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.907360][T12567] veth0_vlan: entered promiscuous mode [ 289.934859][T12567] veth1_vlan: entered promiscuous mode [ 289.966762][T12567] veth0_macvtap: entered promiscuous mode [ 289.976232][T12567] veth1_macvtap: entered promiscuous mode [ 289.993458][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.004048][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.013973][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.024718][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.034827][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.045396][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.055421][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.065966][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.077300][T12567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.087260][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.097840][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.107791][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.118337][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.128231][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.138728][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.148636][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.159225][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.170078][T12567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.180446][T12567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.189305][T12567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.198039][T12567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.206834][T12567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.419421][ T5840] Bluetooth: hci4: command tx timeout [ 290.449417][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.588527][T12761] netlink: 'syz.3.2464': attribute type 32 has an invalid length. [ 290.603536][T10812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.611621][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'. [ 290.612578][T10812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.631994][T12761] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 290.665977][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.684226][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.772506][T12765] delete_channel: no stack [ 290.823763][T12765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2466'. [ 290.995138][T12776] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2471'. [ 291.096021][T12779] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 291.197981][T12785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2474'. [ 291.208295][T12785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2474'. [ 291.229266][T12785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2474'. [ 291.238280][T12785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2474'. [ 291.320731][T12791] netlink: 'syz.3.2475': attribute type 1 has an invalid length. [ 291.385079][T12791] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.494474][T12794] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.509907][T12794] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 291.530297][T12794] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 291.555516][T12801] netlink: 'syz.4.2478': attribute type 10 has an invalid length. [ 291.577683][T12787] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 291.587088][T12787] bond4: (slave batadv1): making interface the new active one [ 291.596567][T12787] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 291.597563][T10795] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.675687][T12801] team0: Device veth1_macvtap failed to register rx_handler [ 291.961145][T10810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.361854][T10810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.458613][T10810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.513173][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.523563][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.533327][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.544014][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.551668][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 292.563601][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.572116][T10810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.698757][T10810] bridge_slave_1: left allmulticast mode [ 292.704607][T10810] bridge_slave_1: left promiscuous mode [ 292.718967][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.727780][T10810] bridge_slave_0: left allmulticast mode [ 292.733723][T10810] bridge_slave_0: left promiscuous mode [ 292.739816][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.759761][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.064899][T10810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.075841][T10810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.088598][T10810] bond0 (unregistering): Released all slaves [ 293.244685][T12815] chnl_net:caif_netlink_parms(): no params data found [ 293.350290][T12815] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.367022][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.375403][T12815] bridge_slave_0: entered allmulticast mode [ 293.404520][T12815] bridge_slave_0: entered promiscuous mode [ 293.414600][T12815] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.421932][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.429364][T12815] bridge_slave_1: entered allmulticast mode [ 293.439592][T12815] bridge_slave_1: entered promiscuous mode [ 293.487131][T10810] hsr_slave_0: left promiscuous mode [ 293.493818][T10810] hsr_slave_1: left promiscuous mode [ 293.500143][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.507589][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.516238][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.524227][T10810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.545173][T10810] veth1_macvtap: left promiscuous mode [ 293.552127][T10810] veth0_macvtap: left promiscuous mode [ 293.557697][T10810] veth1_vlan: left promiscuous mode [ 293.563338][T10810] veth0_vlan: left promiscuous mode [ 293.900176][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.922937][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.950916][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.960772][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.980036][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.990684][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.999512][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.311261][T10810] team0 (unregistering): Port device team_slave_1 removed [ 294.352393][T10810] team0 (unregistering): Port device team_slave_0 removed [ 294.671831][ T5840] Bluetooth: hci1: command tx timeout [ 294.766475][T12815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.802105][T12815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.986735][T12815] team0: Port device team_slave_0 added [ 295.006399][T12852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.022704][T12815] team0: Port device team_slave_1 added [ 295.059448][T10795] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.180732][T12815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.187743][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.237858][T12815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.271880][T12815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.279284][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.306718][T12815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.417847][T12815] hsr_slave_0: entered promiscuous mode [ 295.433986][T12815] hsr_slave_1: entered promiscuous mode [ 295.456494][T12815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.482436][T12815] Cannot create hsr debugfs directory [ 295.700173][T12870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2494'. [ 295.741925][T12861] sctp: [Deprecated]: syz.4.2493 (pid 12861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.741925][T12861] Use struct sctp_sack_info instead [ 295.744499][T10810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.814418][T12869] wireguard: wg1: Could not create IPv4 socket [ 295.900976][T10810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.944985][T12859] ebt_among: src integrity fail: 300 [ 296.053580][T10810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.072330][T12859] 8021q: VLANs not supported on ipvlan0 [ 296.101110][ T5840] Bluetooth: hci4: command tx timeout [ 296.209558][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.224266][T10810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.587604][T12901] FAULT_INJECTION: forcing a failure. [ 296.587604][T12901] name failslab, interval 1, probability 0, space 0, times 0 [ 296.620660][T12903] netlink: 'syz.3.2504': attribute type 18 has an invalid length. [ 296.628695][T12901] CPU: 1 UID: 0 PID: 12901 Comm: syz.2.2501 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 296.639503][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 296.649593][T12901] Call Trace: [ 296.652911][T12901] [ 296.655874][T12901] dump_stack_lvl+0x241/0x360 [ 296.656331][T12905] sctp: [Deprecated]: syz.4.2505 (pid 12905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.656331][T12905] Use struct sctp_sack_info instead [ 296.660579][T12901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.660618][T12901] ? __pfx__printk+0x10/0x10 [ 296.660651][T12901] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 296.660683][T12901] ? __pfx___might_resched+0x10/0x10 [ 296.698121][T12901] should_fail_ex+0x3b0/0x4e0 [ 296.702861][T12901] should_failslab+0xac/0x100 [ 296.707587][T12901] kmem_cache_alloc_node_noprof+0x77/0x380 [ 296.713461][T12901] ? __alloc_skb+0x1c3/0x440 [ 296.718101][T12901] __alloc_skb+0x1c3/0x440 [ 296.722558][T12901] ? __pfx___alloc_skb+0x10/0x10 [ 296.727535][T12901] ? netlink_ack_tlv_len+0x6e/0x200 [ 296.732773][T12901] netlink_ack+0x145/0xa50 [ 296.737259][T12901] netlink_rcv_skb+0x262/0x430 [ 296.742078][T12901] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.747581][T12901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.752926][T12901] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.758158][T12901] netlink_unicast+0x7f6/0x990 [ 296.762981][T12901] ? __pfx_netlink_unicast+0x10/0x10 [ 296.768317][T12901] ? __virt_addr_valid+0x45f/0x530 [ 296.773477][T12901] ? __phys_addr_symbol+0x2f/0x70 [ 296.778543][T12901] ? __check_object_size+0x47a/0x730 [ 296.783877][T12901] netlink_sendmsg+0x8e4/0xcb0 [ 296.788699][T12901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.794032][T12901] ? aa_sock_msg_perm+0x91/0x160 [ 296.799030][T12901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.804371][T12901] __sock_sendmsg+0x221/0x270 [ 296.809100][T12901] ____sys_sendmsg+0x52a/0x7e0 [ 296.813919][T12901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.819216][T12901] ? __fget_files+0x2a/0x410 [ 296.823846][T12901] ? __fget_files+0x2a/0x410 [ 296.828485][T12901] __sys_sendmsg+0x269/0x350 [ 296.833114][T12901] ? __pfx_lock_release+0x10/0x10 [ 296.838185][T12901] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.843350][T12901] ? __pfx_vfs_write+0x10/0x10 [ 296.848168][T12901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.854517][T12901] ? do_syscall_64+0x100/0x230 [ 296.859294][T12901] ? do_syscall_64+0xb6/0x230 [ 296.864013][T12901] do_syscall_64+0xf3/0x230 [ 296.868529][T12901] ? clear_bhb_loop+0x35/0x90 [ 296.873212][T12901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.879123][T12901] RIP: 0033:0x7f95b6185d29 [ 296.883537][T12901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.903153][T12901] RSP: 002b:00007f95b7040038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.911600][T12901] RAX: ffffffffffffffda RBX: 00007f95b6376160 RCX: 00007f95b6185d29 [ 296.919578][T12901] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 296.927552][T12901] RBP: 00007f95b7040090 R08: 0000000000000000 R09: 0000000000000000 [ 296.935565][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.943590][T12901] R13: 0000000000000000 R14: 00007f95b6376160 R15: 00007ffcb801e078 [ 296.951593][T12901] [ 296.955920][ T5840] Bluetooth: hci1: command tx timeout [ 296.972762][T10810] bridge_slave_1: left allmulticast mode [ 296.978609][T10810] bridge_slave_1: left promiscuous mode [ 296.987535][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.997917][T10810] bridge_slave_0: left allmulticast mode [ 297.004482][T10810] bridge_slave_0: left promiscuous mode [ 297.010840][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.475609][T10810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.503556][T10810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.520178][T10810] bond0 (unregistering): Released all slaves [ 297.571629][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2510'. [ 297.640661][T10812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 297.681376][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2510'. [ 297.705980][T12834] chnl_net:caif_netlink_parms(): no params data found [ 297.940711][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2513'. [ 298.176505][T12815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 298.183673][ T5840] Bluetooth: hci4: command tx timeout [ 298.193258][T12946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.237621][T12834] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.245126][T12834] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.272011][T12834] bridge_slave_0: entered allmulticast mode [ 298.286455][T12834] bridge_slave_0: entered promiscuous mode [ 298.303985][T12834] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.317429][T12834] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.327336][T12834] bridge_slave_1: entered allmulticast mode [ 298.350454][T12834] bridge_slave_1: entered promiscuous mode [ 298.365942][T12815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.770988][T10812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.981299][ T5840] Bluetooth: hci1: command tx timeout [ 299.880706][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 300.095841][T10810] hsr_slave_0: left promiscuous mode [ 300.106818][T10810] hsr_slave_1: left promiscuous mode [ 300.141822][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.159128][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.185490][T12952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2517'. [ 300.190946][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.209253][T10810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.236800][T10810] veth1_macvtap: left promiscuous mode [ 300.242615][T10810] veth0_macvtap: left promiscuous mode [ 300.249809][T10810] veth1_vlan: left promiscuous mode [ 300.255285][T10810] veth0_vlan: left promiscuous mode [ 300.289428][ T5840] Bluetooth: hci4: command tx timeout [ 300.684417][T10810] team0 (unregistering): Port device team_slave_1 removed [ 300.727008][T10810] team0 (unregistering): Port device team_slave_0 removed [ 300.990157][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 301.065284][ T5840] Bluetooth: hci1: command tx timeout [ 301.143497][T12815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.165601][T12815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.237391][T12834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.252338][T12834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.311753][T12834] team0: Port device team_slave_0 added [ 301.358262][T12834] team0: Port device team_slave_1 added [ 301.428252][T12834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.437115][T12834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.464618][T12834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.479890][T12834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.487038][T12834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.513944][T12834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.596699][T12834] hsr_slave_0: entered promiscuous mode [ 301.605298][T12834] hsr_slave_1: entered promiscuous mode [ 301.611742][T12834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.619943][T12834] Cannot create hsr debugfs directory [ 301.774827][T12815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.872826][T12815] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.918258][T10812] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.925456][T10812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.978688][T10812] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.985844][T10812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.068822][T12815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.133153][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 302.349319][ T5840] Bluetooth: hci4: command tx timeout [ 302.403609][T12815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.422212][T12834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.435300][T12834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.467822][T12834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.481132][T12834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.577581][T12815] veth0_vlan: entered promiscuous mode [ 302.623901][T12815] veth1_vlan: entered promiscuous mode [ 302.641303][T13003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.652450][T13001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.691666][T13001] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2530'. [ 302.706130][T12815] veth0_macvtap: entered promiscuous mode [ 302.732568][T12815] veth1_macvtap: entered promiscuous mode [ 302.753884][T13001] netlink: 'syz.4.2530': attribute type 10 has an invalid length. [ 302.783622][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.796242][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.806173][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.816833][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.827375][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.838130][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.849732][T12815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.862974][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.873916][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.884430][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.896315][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.906530][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.918788][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.930147][T12815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.948569][T12834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.956544][T12815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.965604][T12815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.974494][T12815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.985155][T12815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.019415][T12834] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.051486][T10810] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.058632][T10810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.068303][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.075452][T10810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.111718][T10810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.129882][T10810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.173354][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.186587][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.259818][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.457622][T12834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.467940][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.481269][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.492176][T13018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.501055][T13015] FAULT_INJECTION: forcing a failure. [ 303.501055][T13015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.532149][T13015] CPU: 0 UID: 0 PID: 13015 Comm: syz.2.2535 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 303.542977][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 303.546848][T12834] veth0_vlan: entered promiscuous mode [ 303.553053][T13015] Call Trace: [ 303.553067][T13015] [ 303.553078][T13015] dump_stack_lvl+0x241/0x360 [ 303.553119][T13015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.574714][T13015] ? __pfx__printk+0x10/0x10 [ 303.579365][T13015] ? snprintf+0xda/0x120 [ 303.583651][T13015] should_fail_ex+0x3b0/0x4e0 [ 303.583696][T12834] veth1_vlan: entered promiscuous mode [ 303.588366][T13015] _copy_to_user+0x31/0xb0 [ 303.598394][T13015] simple_read_from_buffer+0xca/0x150 [ 303.603818][T13015] proc_fail_nth_read+0x1e9/0x250 [ 303.608897][T13015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.614508][T13015] ? rw_verify_area+0x55e/0x6f0 [ 303.619411][T13015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.625004][T13015] vfs_read+0x1fc/0xb70 [ 303.627745][T12834] veth0_macvtap: entered promiscuous mode [ 303.629187][T13015] ? __pfx___mutex_lock+0x10/0x10 [ 303.629225][T13015] ? __pfx_vfs_read+0x10/0x10 [ 303.643747][T12834] veth1_macvtap: entered promiscuous mode [ 303.644631][T13015] ? __fget_files+0x2a/0x410 [ 303.654996][T13015] ? __fget_files+0x395/0x410 [ 303.659726][T13015] ? __fget_files+0x2a/0x410 [ 303.663863][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.664344][T13015] ksys_read+0x18f/0x2b0 [ 303.674901][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.679006][T13015] ? __pfx_ksys_read+0x10/0x10 [ 303.679032][T13015] ? trace_sys_enter+0x74/0x120 [ 303.688907][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.693560][T13015] ? rcu_is_watching+0x15/0xb0 [ 303.698403][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.708799][T13015] ? trace_sys_enter+0x25/0x120 [ 303.708837][T13015] do_syscall_64+0xf3/0x230 [ 303.708872][T13015] ? clear_bhb_loop+0x35/0x90 [ 303.708896][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.708928][T13015] RIP: 0033:0x7f95b618473c [ 303.708950][T13015] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 303.708970][T13015] RSP: 002b:00007f95b7082030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.708997][T13015] RAX: ffffffffffffffda RBX: 00007f95b6375fa0 RCX: 00007f95b618473c [ 303.709014][T13015] RDX: 000000000000000f RSI: 00007f95b70820a0 RDI: 0000000000000008 [ 303.709030][T13015] RBP: 00007f95b7082090 R08: 0000000000000000 R09: 0000000000000000 [ 303.709045][T13015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.709061][T13015] R13: 0000000000000000 R14: 00007f95b6375fa0 R15: 00007ffcb801e078 [ 303.709096][T13015] [ 303.859828][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.873873][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.891580][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.908365][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.921975][T12834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.935173][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.949105][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.969048][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.979762][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.989706][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.000332][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.010542][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.022178][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.034505][T12834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.047007][T12834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.055862][T12834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.065832][T12834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.074873][T12834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.190765][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.205300][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.230627][T10812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.243079][T10812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.265693][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2537'. [ 304.394154][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.490333][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 305.345136][T13040] bond0: option updelay: invalid value (18446744073709551615) [ 305.356810][T13040] bond0: option updelay: allowed values 0 - 2147483647 [ 305.507890][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.517907][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.531414][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.540319][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.548396][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 305.556259][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.579820][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.594228][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 305.637307][T13049] FAULT_INJECTION: forcing a failure. [ 305.637307][T13049] name failslab, interval 1, probability 0, space 0, times 0 [ 305.679016][T13049] CPU: 1 UID: 0 PID: 13049 Comm: syz.3.2540 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 305.689839][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 305.699955][T13049] Call Trace: [ 305.703266][T13049] [ 305.706225][T13049] dump_stack_lvl+0x241/0x360 [ 305.710947][T13049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.716179][T13049] ? __pfx__printk+0x10/0x10 [ 305.720808][T13049] ? ref_tracker_alloc+0x332/0x490 [ 305.725938][T13049] should_fail_ex+0x3b0/0x4e0 [ 305.730633][T13049] should_failslab+0xac/0x100 [ 305.735348][T13049] ? skb_clone+0x20c/0x390 [ 305.739804][T13049] kmem_cache_alloc_noprof+0x70/0x380 [ 305.745192][T13049] skb_clone+0x20c/0x390 [ 305.749456][T13049] __netlink_deliver_tap+0x3cc/0x7f0 [ 305.754787][T13049] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.759992][T13049] netlink_deliver_tap+0x19d/0x1b0 [ 305.765107][T13049] netlink_sendskb+0x68/0x140 [ 305.769798][T13049] netlink_unicast+0x39d/0x990 [ 305.774584][T13049] ? __pfx_netlink_unicast+0x10/0x10 [ 305.779896][T13049] netlink_rcv_skb+0x262/0x430 [ 305.784665][T13049] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.790137][T13049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.795446][T13049] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.800655][T13049] netlink_unicast+0x7f6/0x990 [ 305.805436][T13049] ? __pfx_netlink_unicast+0x10/0x10 [ 305.810734][T13049] ? __virt_addr_valid+0x45f/0x530 [ 305.815876][T13049] ? __phys_addr_symbol+0x2f/0x70 [ 305.820906][T13049] ? __check_object_size+0x47a/0x730 [ 305.826203][T13049] netlink_sendmsg+0x8e4/0xcb0 [ 305.830985][T13049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.836282][T13049] ? aa_sock_msg_perm+0x91/0x160 [ 305.841231][T13049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.846522][T13049] __sock_sendmsg+0x221/0x270 [ 305.851213][T13049] ____sys_sendmsg+0x52a/0x7e0 [ 305.855994][T13049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.861290][T13049] ? __fget_files+0x2a/0x410 [ 305.865898][T13049] ? __fget_files+0x2a/0x410 [ 305.870509][T13049] __sys_sendmsg+0x269/0x350 [ 305.875108][T13049] ? __pfx_lock_release+0x10/0x10 [ 305.880147][T13049] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.885274][T13049] ? __pfx_vfs_write+0x10/0x10 [ 305.890061][T13049] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.896411][T13049] ? do_syscall_64+0x100/0x230 [ 305.901205][T13049] ? do_syscall_64+0xb6/0x230 [ 305.905895][T13049] do_syscall_64+0xf3/0x230 [ 305.910410][T13049] ? clear_bhb_loop+0x35/0x90 [ 305.915090][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.921008][T13049] RIP: 0033:0x7fa2a1d85d29 [ 305.925443][T13049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.945056][T13049] RSP: 002b:00007fa2a2c73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.953482][T13049] RAX: ffffffffffffffda RBX: 00007fa2a1f76080 RCX: 00007fa2a1d85d29 [ 305.961462][T13049] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 305.969442][T13049] RBP: 00007fa2a2c73090 R08: 0000000000000000 R09: 0000000000000000 [ 305.977416][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.985393][T13049] R13: 0000000000000000 R14: 00007fa2a1f76080 R15: 00007ffcae4f40d8 [ 305.993382][T13049] [ 306.036179][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 306.037599][T13051] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 306.229430][T13058] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 306.243131][T13058] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2546'. [ 306.321810][T13042] chnl_net:caif_netlink_parms(): no params data found [ 306.433301][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.604395][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.660495][T13080] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 306.892423][T13042] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.929168][T13042] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.936484][T13042] bridge_slave_0: entered allmulticast mode [ 306.960323][T13042] bridge_slave_0: entered promiscuous mode [ 306.981211][T13042] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.988446][T13042] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.996463][T13042] bridge_slave_1: entered allmulticast mode [ 307.004008][T13042] bridge_slave_1: entered promiscuous mode [ 307.031812][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.167422][T13042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.243253][T13042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.258355][ T11] bridge_slave_1: left allmulticast mode [ 307.279378][ T11] bridge_slave_1: left promiscuous mode [ 307.302109][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.333613][ T11] bridge_slave_0: left allmulticast mode [ 307.354040][ T11] bridge_slave_0: left promiscuous mode [ 307.366338][T13113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2557'. [ 307.374566][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.441734][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2557'. [ 307.619674][ T5833] Bluetooth: hci1: command tx timeout [ 307.928702][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.940857][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.951098][ T11] bond0 (unregistering): Released all slaves [ 307.984071][T13113] veth9: entered promiscuous mode [ 307.989249][T13113] veth9: entered allmulticast mode [ 308.028837][T13042] team0: Port device team_slave_0 added [ 308.051498][T13042] team0: Port device team_slave_1 added [ 308.097418][T13042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.113889][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.142358][T13042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.153802][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.174962][T13042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.192889][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.225458][T13042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.283696][T13042] hsr_slave_0: entered promiscuous mode [ 308.290363][T13042] hsr_slave_1: entered promiscuous mode [ 308.296446][T13042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.304124][T13042] Cannot create hsr debugfs directory [ 308.461954][ T11] hsr_slave_0: left promiscuous mode [ 308.467877][ T11] hsr_slave_1: left promiscuous mode [ 308.481276][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.496236][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.507209][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.515326][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.535325][ T11] veth1_macvtap: left promiscuous mode [ 308.541044][ T11] veth0_macvtap: left promiscuous mode [ 308.546567][ T11] veth1_vlan: left promiscuous mode [ 308.551894][ T11] veth0_vlan: left promiscuous mode [ 308.944667][ T11] team0 (unregistering): Port device team_slave_1 removed [ 308.986471][ T11] team0 (unregistering): Port device team_slave_0 removed [ 309.259224][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.319898][T13130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.371109][T13130] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2562'. [ 309.516368][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.538232][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.547291][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.563688][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.572773][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 309.593095][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.701148][ T5833] Bluetooth: hci1: command tx timeout [ 310.257328][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2569'. [ 310.268908][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 310.278696][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2569'. [ 310.370029][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 310.397249][T13153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2568'. [ 310.505649][T13042] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.599907][T13042] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.629831][T13165] macsec0: entered allmulticast mode [ 310.663497][T13042] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.680531][T13042] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.724785][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.754042][T13131] chnl_net:caif_netlink_parms(): no params data found [ 310.779638][T13165] veth1_macvtap: entered allmulticast mode [ 310.785618][T13165] macsec0: left allmulticast mode [ 310.792009][T13165] veth1_macvtap: left allmulticast mode [ 310.951636][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.108822][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.235467][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.249263][T13193] netlink: 'syz.2.2580': attribute type 4 has an invalid length. [ 311.285835][T13193] netlink: 'syz.2.2580': attribute type 11 has an invalid length. [ 311.303430][T13131] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.315034][T13193] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2580'. [ 311.326122][T13131] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.335228][T13131] bridge_slave_0: entered allmulticast mode [ 311.348586][T13131] bridge_slave_0: entered promiscuous mode [ 311.378216][T13131] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.396277][T13131] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.409295][T13131] bridge_slave_1: entered allmulticast mode [ 311.416203][T13131] bridge_slave_1: entered promiscuous mode [ 311.486556][T13131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.502157][T13131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.507090][T10812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.614064][T13131] team0: Port device team_slave_0 added [ 311.634020][T13131] team0: Port device team_slave_1 added [ 311.657335][T13042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.674545][T13201] netlink: 'syz.4.2583': attribute type 12 has an invalid length. [ 311.684127][ T11] bridge_slave_1: left allmulticast mode [ 311.691531][ T11] bridge_slave_1: left promiscuous mode [ 311.697320][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.699497][ T5833] Bluetooth: hci4: command tx timeout [ 311.713939][ T11] bridge_slave_0: left allmulticast mode [ 311.727222][ T11] bridge_slave_0: left promiscuous mode [ 311.734393][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.779679][ T5833] Bluetooth: hci1: command tx timeout [ 312.242816][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.254683][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.273074][ T11] bond0 (unregistering): Released all slaves [ 312.285568][T13131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.299376][T13131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.327615][T13131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.384371][T13131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.391711][T13131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.418725][T13131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.635165][T13042] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.642543][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.656518][T13131] hsr_slave_0: entered promiscuous mode [ 312.663291][T13131] hsr_slave_1: entered promiscuous mode [ 312.704614][T13131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.719637][T13131] Cannot create hsr debugfs directory [ 312.844549][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.851766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.932413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.939727][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.167386][ T11] hsr_slave_0: left promiscuous mode [ 313.177058][ T11] hsr_slave_1: left promiscuous mode [ 313.186218][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.204315][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.229723][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.237200][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.290708][ T11] veth1_macvtap: left promiscuous mode [ 313.296293][ T11] veth0_macvtap: left promiscuous mode [ 313.319500][ T11] veth1_vlan: left promiscuous mode [ 313.324845][ T11] veth0_vlan: left promiscuous mode [ 313.367363][T13246] FAULT_INJECTION: forcing a failure. [ 313.367363][T13246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.381869][T13246] CPU: 0 UID: 0 PID: 13246 Comm: syz.3.2597 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 313.392685][T13246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 313.402767][T13246] Call Trace: [ 313.406054][T13246] [ 313.409010][T13246] dump_stack_lvl+0x241/0x360 [ 313.413724][T13246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.418936][T13246] ? __pfx__printk+0x10/0x10 [ 313.423667][T13246] ? __pfx_lock_release+0x10/0x10 [ 313.428756][T13246] should_fail_ex+0x3b0/0x4e0 [ 313.433493][T13246] _copy_from_iter+0x1e9/0x1c20 [ 313.438369][T13246] ? __virt_addr_valid+0x183/0x530 [ 313.443511][T13246] ? __alloc_skb+0x28f/0x440 [ 313.448109][T13246] ? __pfx__copy_from_iter+0x10/0x10 [ 313.453421][T13246] ? __virt_addr_valid+0x183/0x530 [ 313.458570][T13246] ? __virt_addr_valid+0x183/0x530 [ 313.463724][T13246] ? __virt_addr_valid+0x45f/0x530 [ 313.468884][T13246] ? __phys_addr_symbol+0x2f/0x70 [ 313.473967][T13246] ? __check_object_size+0x47a/0x730 [ 313.479297][T13246] netlink_sendmsg+0x73d/0xcb0 [ 313.484106][T13246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.489429][T13246] ? aa_sock_msg_perm+0x91/0x160 [ 313.494401][T13246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.499697][T13246] __sock_sendmsg+0x221/0x270 [ 313.504388][T13246] ____sys_sendmsg+0x52a/0x7e0 [ 313.509165][T13246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.514454][T13246] ? __fget_files+0x2a/0x410 [ 313.519063][T13246] ? __fget_files+0x2a/0x410 [ 313.523673][T13246] __sys_sendmsg+0x269/0x350 [ 313.528273][T13246] ? __pfx_lock_release+0x10/0x10 [ 313.533312][T13246] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.538439][T13246] ? __pfx_vfs_write+0x10/0x10 [ 313.543233][T13246] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.549584][T13246] ? do_syscall_64+0x100/0x230 [ 313.554367][T13246] ? do_syscall_64+0xb6/0x230 [ 313.559061][T13246] do_syscall_64+0xf3/0x230 [ 313.563580][T13246] ? clear_bhb_loop+0x35/0x90 [ 313.568281][T13246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.574209][T13246] RIP: 0033:0x7fa2a1d85d29 [ 313.578642][T13246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.598266][T13246] RSP: 002b:00007fa2a2c94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.606696][T13246] RAX: ffffffffffffffda RBX: 00007fa2a1f75fa0 RCX: 00007fa2a1d85d29 [ 313.614678][T13246] RDX: 0000000020000800 RSI: 0000000020000280 RDI: 0000000000000004 [ 313.622655][T13246] RBP: 00007fa2a2c94090 R08: 0000000000000000 R09: 0000000000000000 [ 313.630637][T13246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.638619][T13246] R13: 0000000000000000 R14: 00007fa2a1f75fa0 R15: 00007ffcae4f40d8 [ 313.646622][T13246] [ 313.780751][ T5833] Bluetooth: hci4: command tx timeout [ 313.865076][ T5833] Bluetooth: hci1: command tx timeout [ 313.980714][T10795] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 314.121481][ T11] team0 (unregistering): Port device team_slave_1 removed [ 314.161102][ T11] team0 (unregistering): Port device team_slave_0 removed [ 314.618616][T13042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.637276][T13042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.682847][T13248] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 314.706157][T13251] netlink: 'syz.2.2598': attribute type 4 has an invalid length. [ 314.727975][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 315.007421][T13267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2602'. [ 315.101307][T10794] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.226372][T13281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.251135][T13281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.297116][T13042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.379511][T13281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.410272][T13281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.414094][T13042] veth0_vlan: entered promiscuous mode [ 315.437169][T13042] veth1_vlan: entered promiscuous mode [ 315.439742][T13281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.461061][T13042] veth0_macvtap: entered promiscuous mode [ 315.470129][T13042] veth1_macvtap: entered promiscuous mode [ 315.485018][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.495855][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.506061][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.516827][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.526938][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.537822][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.549327][T13042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.593339][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.605036][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.630924][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.642269][T13290] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2610'. [ 315.647866][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.662401][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.673148][T13290] openvswitch: netlink: Message has 44053 unknown bytes. [ 315.680492][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.692273][T13042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.727329][T13042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.739895][T13042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.748797][T13042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.761657][T13042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.859212][ T5833] Bluetooth: hci4: command tx timeout [ 315.988278][T13300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2613'. [ 316.019012][T13131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.025816][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.034150][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.046230][T13298] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2613'. [ 316.073656][T13131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.101540][T13131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.124573][T13131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.131790][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.140204][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.311667][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.478544][T10795] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.943401][ T5833] Bluetooth: hci4: command tx timeout [ 318.258264][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.278221][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.295586][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.304753][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.323889][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 318.331418][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.600608][T10794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.611374][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 318.720878][T10794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.818620][T13334] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2628'. [ 318.915433][T13131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.974991][T13131] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.050476][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.057668][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.082103][T13321] chnl_net:caif_netlink_parms(): no params data found [ 319.097869][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.105160][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.194905][T10794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.268495][T13321] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.276138][T13321] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.284286][T13321] bridge_slave_0: entered allmulticast mode [ 319.293122][T13321] bridge_slave_0: entered promiscuous mode [ 319.302683][T13321] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.310435][T13321] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.317704][T13321] bridge_slave_1: entered allmulticast mode [ 319.325407][T13321] bridge_slave_1: entered promiscuous mode [ 319.374655][T13347] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2631'. [ 319.388823][T13321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.406497][T13321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.516039][T10794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.597778][T13321] team0: Port device team_slave_0 added [ 319.653746][T13321] team0: Port device team_slave_1 added [ 319.739706][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 319.912023][T13321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.930743][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.981265][T13321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.059210][T10794] bridge_slave_1: left allmulticast mode [ 320.065017][T10794] bridge_slave_1: left promiscuous mode [ 320.071764][T10794] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.098229][T10794] bridge_slave_0: left allmulticast mode [ 320.109094][T10794] bridge_slave_0: left promiscuous mode [ 320.114897][T10794] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.419171][ T5840] Bluetooth: hci1: command tx timeout [ 320.527460][T10794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.538597][T10794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.555473][T10794] bond0 (unregistering): Released all slaves [ 320.567911][T13321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.575934][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.611033][T13321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.622790][T13377] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 320.669892][T13131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.677152][T13378] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 320.688369][T13379] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 320.842814][T13321] hsr_slave_0: entered promiscuous mode [ 320.852207][T13321] hsr_slave_1: entered promiscuous mode [ 320.861414][T13321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.869483][T13321] Cannot create hsr debugfs directory [ 320.869599][T10810] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.180904][T13131] veth0_vlan: entered promiscuous mode [ 321.202788][T13131] veth1_vlan: entered promiscuous mode [ 321.289297][T10794] hsr_slave_0: left promiscuous mode [ 321.296490][T10794] hsr_slave_1: left promiscuous mode [ 321.307708][T10794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.315702][T10794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.334328][T10794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.342179][T10794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.368788][T10794] veth1_macvtap: left promiscuous mode [ 321.374616][T10794] veth0_macvtap: left promiscuous mode [ 321.380786][T10794] veth1_vlan: left promiscuous mode [ 321.386324][T10794] veth0_vlan: left promiscuous mode [ 321.914668][T10794] team0 (unregistering): Port device team_slave_1 removed [ 322.000055][T10794] team0 (unregistering): Port device team_slave_0 removed [ 322.050873][T10795] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.429672][T13402] netlink: 'syz.4.2651': attribute type 29 has an invalid length. [ 322.449166][T13131] veth0_macvtap: entered promiscuous mode [ 322.499437][ T5840] Bluetooth: hci1: command tx timeout [ 322.530052][T13131] veth1_macvtap: entered promiscuous mode [ 322.777673][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.789277][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.810121][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.829220][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.842771][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.856595][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.893135][T13131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.966326][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.997460][T13423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.017691][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.028129][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.050208][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.075075][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.089252][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.120598][T13131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.146289][T13131] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.155568][T13131] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.165715][T13131] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.176935][T13131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.199879][T10810] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 323.366280][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.376028][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.448572][T10811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.458080][T13321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.469153][T10811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.489584][T13321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.507160][T13321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.521321][T13321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.688775][T13321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.733409][T13321] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.746068][T10794] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.753330][T10794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.777948][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.785283][T10811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.973675][T13436] netlink: 'syz.2.2663': attribute type 29 has an invalid length. [ 324.091284][T10810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.117499][T13440] netlink: 'syz.3.2664': attribute type 10 has an invalid length. [ 324.143332][T13438] netlink: 'syz.2.2663': attribute type 29 has an invalid length. [ 324.157605][T13436] netlink: 'syz.2.2663': attribute type 29 has an invalid length. [ 324.158876][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.175942][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.185306][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.196317][T13441] netlink: 'syz.2.2663': attribute type 29 has an invalid length. [ 324.204818][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.221661][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 324.231835][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.340425][T10811] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 324.352720][T10810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.422329][T13321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.477891][T10810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.572894][T10810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.589891][ T5840] Bluetooth: hci1: command tx timeout [ 324.611824][T13321] veth0_vlan: entered promiscuous mode [ 324.631220][T13321] veth1_vlan: entered promiscuous mode [ 324.716695][T10810] bridge_slave_1: left allmulticast mode [ 324.722587][T10810] bridge_slave_1: left promiscuous mode [ 324.728293][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.738379][T10810] bridge_slave_0: left allmulticast mode [ 324.744494][T10810] bridge_slave_0: left promiscuous mode [ 324.750687][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.077599][T10810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.088463][T10810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.102819][T10810] bond0 (unregistering): Released all slaves [ 325.176188][T13442] chnl_net:caif_netlink_parms(): no params data found [ 325.196706][T13321] veth0_macvtap: entered promiscuous mode [ 325.232046][T13321] veth1_macvtap: entered promiscuous mode [ 325.285684][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.297173][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.308475][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.320955][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.330976][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.341508][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.352403][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.362987][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.374122][T13321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.416166][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.426946][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.437102][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.447698][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.457600][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.468527][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.478705][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.489698][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.497199][T10794] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 325.500694][T13321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.548001][T13321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.575619][T13321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.594980][T13321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.604172][T13321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.616190][T13442] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.646174][T13442] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.660977][T13442] bridge_slave_0: entered allmulticast mode [ 325.667728][T13442] bridge_slave_0: entered promiscuous mode [ 325.676265][T13442] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.685587][T13442] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.695460][T13442] bridge_slave_1: entered allmulticast mode [ 325.702823][T13442] bridge_slave_1: entered promiscuous mode [ 325.731936][T10810] hsr_slave_0: left promiscuous mode [ 325.737797][T10810] hsr_slave_1: left promiscuous mode [ 325.746553][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.754336][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.767282][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.774854][T10810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.802103][T10810] veth1_macvtap: left promiscuous mode [ 325.807652][T10810] veth0_macvtap: left promiscuous mode [ 325.813796][T10810] veth1_vlan: left promiscuous mode [ 325.819266][T10810] veth0_vlan: left promiscuous mode [ 326.267451][ T5840] Bluetooth: hci3: command tx timeout [ 326.274953][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.306411][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.324431][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.350283][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.360953][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 326.385990][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.599817][T10810] team0 (unregistering): Port device team_slave_1 removed [ 326.610324][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 326.650580][T10810] team0 (unregistering): Port device team_slave_0 removed [ 326.659063][ T5833] Bluetooth: hci1: command tx timeout [ 327.075184][T13442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.086917][T13442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.109132][T13464] netlink: 'syz.3.2668': attribute type 29 has an invalid length. [ 327.208721][T13442] team0: Port device team_slave_0 added [ 327.266682][T13442] team0: Port device team_slave_1 added [ 327.344687][T13442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.351843][T13442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.387964][T13478] siw: device registration error -23 [ 327.395658][T13442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.453469][T13475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.464454][T13442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.474002][T13442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.505335][T13475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2670'. [ 327.525861][T13442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.656829][T13442] hsr_slave_0: entered promiscuous mode [ 327.679488][T13442] hsr_slave_1: entered promiscuous mode [ 327.686583][T13442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.695056][T13442] Cannot create hsr debugfs directory [ 327.731065][ T1136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.740379][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.748237][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.858701][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.900574][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.000572][T10810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.208593][T13442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.358152][ T5840] Bluetooth: hci3: command tx timeout [ 328.365766][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.380990][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.389761][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.398371][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.406302][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.413745][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.429155][ T5833] Bluetooth: hci4: command tx timeout [ 328.447936][T10810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.525931][T13442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.564060][T10810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.610874][T13442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.653838][T10810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.714803][T13442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.901014][T10794] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 328.915822][T10810] bridge_slave_1: left allmulticast mode [ 328.921865][T10810] bridge_slave_1: left promiscuous mode [ 328.927536][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.936571][T10810] bridge_slave_0: left allmulticast mode [ 328.942604][T10810] bridge_slave_0: left promiscuous mode [ 328.948321][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.562630][T10810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.580612][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.588539][T10810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.591339][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.605886][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.613522][T10810] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 329.614229][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.630438][T10810] bond0 (unregistering): Released all slaves [ 329.638299][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 329.643936][T10810] bond1 (unregistering): Released all slaves [ 329.651971][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.664083][T13442] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.704677][T13465] chnl_net:caif_netlink_parms(): no params data found [ 329.730274][T10810] tipc: Disabling bearer [ 329.736704][T10810] tipc: Disabling bearer [ 329.747797][T10810] tipc: Left network mode [ 329.747852][T13442] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.774792][T13442] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.803826][T13442] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.999356][T10794] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.036051][T13465] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.044738][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.052187][T13465] bridge_slave_0: entered allmulticast mode [ 330.059306][T13465] bridge_slave_0: entered promiscuous mode [ 330.084485][T13465] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.091902][T13465] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.110184][T13465] bridge_slave_1: entered allmulticast mode [ 330.124767][T13465] bridge_slave_1: entered promiscuous mode [ 330.196808][T13485] chnl_net:caif_netlink_parms(): no params data found [ 330.309510][T10810] hsr_slave_0: left promiscuous mode [ 330.316919][T10810] hsr_slave_1: left promiscuous mode [ 330.325722][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.342401][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.361898][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.369749][T10810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.403993][T10810] veth1_macvtap: left promiscuous mode [ 330.409694][T10810] veth0_macvtap: left promiscuous mode [ 330.415261][T10810] veth1_vlan: left promiscuous mode [ 330.419326][ T5842] Bluetooth: hci3: command tx timeout [ 330.426563][T10810] veth0_vlan: left promiscuous mode [ 330.499558][ T5842] Bluetooth: hci4: command tx timeout [ 330.499706][ T5840] Bluetooth: hci0: command tx timeout [ 330.604955][T10812] smc: removing ib device syz1 [ 330.838539][T10810] team0 (unregistering): Port device team_slave_1 removed [ 330.878466][T10810] team0 (unregistering): Port device team_slave_0 removed [ 331.150739][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 331.248351][T13465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.266183][T13465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.286891][T13506] FAULT_INJECTION: forcing a failure. [ 331.286891][T13506] name failslab, interval 1, probability 0, space 0, times 0 [ 331.299910][T13506] CPU: 1 UID: 0 PID: 13506 Comm: syz.3.2678 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 331.310700][T13506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 331.320765][T13506] Call Trace: [ 331.324061][T13506] [ 331.326999][T13506] dump_stack_lvl+0x241/0x360 [ 331.331702][T13506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.336903][T13506] ? __pfx__printk+0x10/0x10 [ 331.341513][T13506] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 331.346926][T13506] ? __pfx___might_resched+0x10/0x10 [ 331.352217][T13506] should_fail_ex+0x3b0/0x4e0 [ 331.356902][T13506] should_failslab+0xac/0x100 [ 331.361606][T13506] __kmalloc_node_noprof+0xe1/0x4d0 [ 331.366829][T13506] ? __kvmalloc_node_noprof+0x72/0x190 [ 331.372294][T13506] ? __pfx_vlan_setup+0x10/0x10 [ 331.377156][T13506] __kvmalloc_node_noprof+0x72/0x190 [ 331.382451][T13506] alloc_netdev_mqs+0xa4/0x1080 [ 331.387315][T13506] ? __pfx_vlan_setup+0x10/0x10 [ 331.392204][T13506] ? __pfx_snprintf+0x10/0x10 [ 331.396892][T13506] ? rcu_is_watching+0x15/0xb0 [ 331.401673][T13506] rtnl_create_link+0x2f9/0xc20 [ 331.406537][T13506] rtnl_newlink_create+0x210/0xa40 [ 331.411666][T13506] ? __pfx___mutex_lock+0x10/0x10 [ 331.416708][T13506] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 331.422358][T13506] ? ns_capable+0x8a/0xf0 [ 331.426702][T13506] rtnl_newlink+0x1c7e/0x2210 [ 331.431402][T13506] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.436474][T13506] ? __netlink_deliver_tap+0x56b/0x7f0 [ 331.441984][T13506] ? __pfx_validate_chain+0x10/0x10 [ 331.447217][T13506] ? __sock_sendmsg+0x221/0x270 [ 331.452100][T13506] ? ____sys_sendmsg+0x52a/0x7e0 [ 331.457095][T13506] ? __sys_sendmsg+0x269/0x350 [ 331.461886][T13506] ? do_syscall_64+0xf3/0x230 [ 331.466580][T13506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.472675][T13506] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 331.478669][T13506] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.485018][T13506] ? mark_lock+0x9a/0x360 [ 331.489368][T13506] ? __lock_acquire+0x1397/0x2100 [ 331.494438][T13506] ? __pfx_lock_release+0x10/0x10 [ 331.499479][T13506] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.504514][T13506] rtnetlink_rcv_msg+0x791/0xcf0 [ 331.509462][T13506] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 331.514595][T13506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.520074][T13506] ? ref_tracker_free+0x643/0x7e0 [ 331.525109][T13506] netlink_rcv_skb+0x1e3/0x430 [ 331.529887][T13506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.535354][T13506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.540659][T13506] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.545863][T13506] netlink_unicast+0x7f6/0x990 [ 331.550643][T13506] ? __pfx_netlink_unicast+0x10/0x10 [ 331.555934][T13506] ? __virt_addr_valid+0x45f/0x530 [ 331.561055][T13506] ? __phys_addr_symbol+0x2f/0x70 [ 331.566088][T13506] ? __check_object_size+0x47a/0x730 [ 331.571384][T13506] netlink_sendmsg+0x8e4/0xcb0 [ 331.576162][T13506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.581454][T13506] ? aa_sock_msg_perm+0x91/0x160 [ 331.586425][T13506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.591750][T13506] __sock_sendmsg+0x221/0x270 [ 331.596460][T13506] ____sys_sendmsg+0x52a/0x7e0 [ 331.601247][T13506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.606548][T13506] ? __fget_files+0x2a/0x410 [ 331.611155][T13506] ? __fget_files+0x2a/0x410 [ 331.615768][T13506] __sys_sendmsg+0x269/0x350 [ 331.620368][T13506] ? __pfx_lock_release+0x10/0x10 [ 331.625404][T13506] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.630537][T13506] ? __pfx_vfs_write+0x10/0x10 [ 331.635328][T13506] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.641666][T13506] ? do_syscall_64+0x100/0x230 [ 331.646446][T13506] ? do_syscall_64+0xb6/0x230 [ 331.651140][T13506] do_syscall_64+0xf3/0x230 [ 331.655675][T13506] ? clear_bhb_loop+0x35/0x90 [ 331.660362][T13506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.666270][T13506] RIP: 0033:0x7fa2a1d85d29 [ 331.670695][T13506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.690396][T13506] RSP: 002b:00007fa2a2c94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.698907][T13506] RAX: ffffffffffffffda RBX: 00007fa2a1f75fa0 RCX: 00007fa2a1d85d29 [ 331.706914][T13506] RDX: 0000000020000800 RSI: 0000000020000280 RDI: 0000000000000004 [ 331.714891][T13506] RBP: 00007fa2a2c94090 R08: 0000000000000000 R09: 0000000000000000 [ 331.722867][T13506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.730841][T13506] R13: 0000000000000000 R14: 00007fa2a1f75fa0 R15: 00007ffcae4f40d8 [ 331.738872][T13506] [ 331.759555][ T46] ================================================================== [ 331.767677][ T46] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 331.776477][ T46] Read of size 8 at addr ffff88805c4f02e8 by task kworker/1:1/46 [ 331.784197][ T46] [ 331.786517][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 331.797094][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 331.807150][ T46] Workqueue: events smc_ib_port_event_work [ 331.812968][ T46] Call Trace: [ 331.816249][ T46] [ 331.819210][ T46] dump_stack_lvl+0x241/0x360 [ 331.823901][ T46] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.829104][ T46] ? __pfx__printk+0x10/0x10 [ 331.833697][ T46] ? _printk+0xd5/0x120 [ 331.837944][ T46] ? __virt_addr_valid+0x183/0x530 [ 331.843088][ T46] ? __virt_addr_valid+0x183/0x530 [ 331.848207][ T46] print_report+0x169/0x550 [ 331.852715][ T46] ? __virt_addr_valid+0x183/0x530 [ 331.857845][ T46] ? __virt_addr_valid+0x183/0x530 [ 331.862970][ T46] ? __virt_addr_valid+0x45f/0x530 [ 331.868096][ T46] ? __phys_addr+0xba/0x170 [ 331.872607][ T46] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 331.878593][ T46] kasan_report+0x143/0x180 [ 331.883102][ T46] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 331.889089][ T46] __ethtool_get_link_ksettings+0x6e/0x190 [ 331.894900][ T46] ib_get_eth_speed+0x160/0x800 [ 331.899763][ T46] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 331.905144][ T46] ? rxe_query_port+0x4f/0x260 [ 331.909925][ T46] rxe_query_port+0x76/0x260 [ 331.914533][ T46] ib_query_port+0x166/0x7d0 [ 331.919128][ T46] smc_ib_port_event_work+0x14e/0xa50 [ 331.924507][ T46] ? process_scheduled_works+0x976/0x1840 [ 331.930227][ T46] process_scheduled_works+0xa66/0x1840 [ 331.935808][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.941811][ T46] ? assign_work+0x364/0x3d0 [ 331.946406][ T46] worker_thread+0x870/0xd30 [ 331.951000][ T46] ? __kthread_parkme+0x169/0x1d0 [ 331.956031][ T46] ? __pfx_worker_thread+0x10/0x10 [ 331.961156][ T46] kthread+0x2f0/0x390 [ 331.965230][ T46] ? __pfx_worker_thread+0x10/0x10 [ 331.970346][ T46] ? __pfx_kthread+0x10/0x10 [ 331.974941][ T46] ret_from_fork+0x4b/0x80 [ 331.979362][ T46] ? __pfx_kthread+0x10/0x10 [ 331.983954][ T46] ret_from_fork_asm+0x1a/0x30 [ 331.988735][ T46] [ 331.991753][ T46] [ 331.994085][ T46] Allocated by task 5826: [ 331.998406][ T46] kasan_save_track+0x3f/0x80 [ 332.003085][ T46] __kasan_kmalloc+0x98/0xb0 [ 332.007681][ T46] __kmalloc_node_noprof+0x290/0x4d0 [ 332.012977][ T46] __kvmalloc_node_noprof+0x72/0x190 [ 332.018262][ T46] alloc_netdev_mqs+0xa4/0x1080 [ 332.023117][ T46] rtnl_create_link+0x2f9/0xc20 [ 332.027974][ T46] rtnl_newlink_create+0x210/0xa40 [ 332.033096][ T46] rtnl_newlink+0x1c7e/0x2210 [ 332.037778][ T46] rtnetlink_rcv_msg+0x791/0xcf0 [ 332.042729][ T46] netlink_rcv_skb+0x1e3/0x430 [ 332.047490][ T46] netlink_unicast+0x7f6/0x990 [ 332.052261][ T46] netlink_sendmsg+0x8e4/0xcb0 [ 332.057046][ T46] __sock_sendmsg+0x221/0x270 [ 332.061729][ T46] __sys_sendto+0x363/0x4c0 [ 332.066230][ T46] __x64_sys_sendto+0xde/0x100 [ 332.071007][ T46] do_syscall_64+0xf3/0x230 [ 332.075520][ T46] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.081425][ T46] [ 332.083747][ T46] Freed by task 10810: [ 332.087806][ T46] kasan_save_track+0x3f/0x80 [ 332.092497][ T46] kasan_save_free_info+0x40/0x50 [ 332.097544][ T46] __kasan_slab_free+0x59/0x70 [ 332.102313][ T46] kfree+0x196/0x430 [ 332.106210][ T46] device_release+0x99/0x1c0 [ 332.110804][ T46] kobject_put+0x22f/0x480 [ 332.115230][ T46] netdev_run_todo+0xe79/0x1000 [ 332.120082][ T46] default_device_exit_batch+0xa24/0xaa0 [ 332.125719][ T46] cleanup_net+0x89d/0xd50 [ 332.130133][ T46] process_scheduled_works+0xa66/0x1840 [ 332.135677][ T46] worker_thread+0x870/0xd30 [ 332.140266][ T46] kthread+0x2f0/0x390 [ 332.144337][ T46] ret_from_fork+0x4b/0x80 [ 332.148751][ T46] ret_from_fork_asm+0x1a/0x30 [ 332.153519][ T46] [ 332.155864][ T46] The buggy address belongs to the object at ffff88805c4f0000 [ 332.155864][ T46] which belongs to the cache kmalloc-cg-4k of size 4096 [ 332.170190][ T46] The buggy address is located 744 bytes inside of [ 332.170190][ T46] freed 4096-byte region [ffff88805c4f0000, ffff88805c4f1000) [ 332.184092][ T46] [ 332.186420][ T46] The buggy address belongs to the physical page: [ 332.192853][ T46] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c4f0 [ 332.201614][ T46] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 332.210123][ T46] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 332.217734][ T46] page_type: f5(slab) [ 332.221724][ T46] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 332.230325][ T46] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 332.238912][ T46] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 332.247592][ T46] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 332.256282][ T46] head: 00fff00000000003 ffffea0001713c01 ffffffffffffffff 0000000000000000 [ 332.264962][ T46] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 332.273635][ T46] page dumped because: kasan: bad access detected [ 332.280073][ T46] page_owner tracks the page as allocated [ 332.285784][ T46] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 74274248430, free_ts 24471575995 [ 332.308908][ T46] post_alloc_hook+0x1f3/0x230 [ 332.313712][ T46] get_page_from_freelist+0x365c/0x37a0 [ 332.319266][ T46] __alloc_pages_noprof+0x292/0x710 [ 332.324463][ T46] alloc_pages_mpol_noprof+0x3e8/0x680 [ 332.329936][ T46] alloc_slab_page+0x6a/0x110 [ 332.334612][ T46] allocate_slab+0x5a/0x2b0 [ 332.339116][ T46] ___slab_alloc+0xc27/0x14a0 [ 332.343803][ T46] __slab_alloc+0x58/0xa0 [ 332.348136][ T46] __kmalloc_node_noprof+0x2ee/0x4d0 [ 332.353453][ T46] __kvmalloc_node_noprof+0x72/0x190 [ 332.358755][ T46] alloc_netdev_mqs+0xa4/0x1080 [ 332.363619][ T46] rtnl_create_link+0x2f9/0xc20 [ 332.368472][ T46] rtnl_newlink_create+0x210/0xa40 [ 332.373743][ T46] rtnl_newlink+0x1c7e/0x2210 [ 332.378432][ T46] rtnetlink_rcv_msg+0x791/0xcf0 [ 332.383378][ T46] netlink_rcv_skb+0x1e3/0x430 [ 332.388153][ T46] page last free pid 1 tgid 1 stack trace: [ 332.393966][ T46] free_unref_page+0xd3f/0x1010 [ 332.398832][ T46] free_contig_range+0x14c/0x430 [ 332.403781][ T46] destroy_args+0x92/0x910 [ 332.408210][ T46] debug_vm_pgtable+0x4be/0x550 [ 332.413070][ T46] do_one_initcall+0x248/0x870 [ 332.417861][ T46] do_initcall_level+0x157/0x210 [ 332.422820][ T46] do_initcalls+0x3f/0x80 [ 332.427187][ T46] kernel_init_freeable+0x435/0x5d0 [ 332.432392][ T46] kernel_init+0x1d/0x2b0 [ 332.436717][ T46] ret_from_fork+0x4b/0x80 [ 332.441136][ T46] ret_from_fork_asm+0x1a/0x30 [ 332.445899][ T46] [ 332.448216][ T46] Memory state around the buggy address: [ 332.453838][ T46] ffff88805c4f0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.462026][ T46] ffff88805c4f0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.470125][ T46] >ffff88805c4f0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.478199][ T46] ^ [ 332.485658][ T46] ffff88805c4f0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.493724][ T46] ffff88805c4f0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.501789][ T46] ================================================================== [ 332.543668][ T46] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 332.550919][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 332.561530][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 332.571605][ T46] Workqueue: events smc_ib_port_event_work [ 332.577446][ T46] Call Trace: [ 332.580740][ T46] [ 332.583684][ T46] dump_stack_lvl+0x241/0x360 [ 332.588392][ T46] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.593626][ T46] ? __pfx__printk+0x10/0x10 [ 332.598250][ T46] ? preempt_schedule+0xe1/0xf0 [ 332.603131][ T46] ? vscnprintf+0x5d/0x90 [ 332.607492][ T46] panic+0x349/0x880 [ 332.611417][ T46] ? check_panic_on_warn+0x21/0xb0 [ 332.616547][ T46] ? __pfx_panic+0x10/0x10 [ 332.620988][ T46] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 332.626987][ T46] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.633334][ T46] ? print_report+0x502/0x550 [ 332.638022][ T46] check_panic_on_warn+0x86/0xb0 [ 332.642982][ T46] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 332.648994][ T46] end_report+0x77/0x160 [ 332.653270][ T46] kasan_report+0x154/0x180 [ 332.657798][ T46] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 332.663836][ T46] __ethtool_get_link_ksettings+0x6e/0x190 [ 332.669734][ T46] ib_get_eth_speed+0x160/0x800 [ 332.674607][ T46] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 332.680013][ T46] ? rxe_query_port+0x4f/0x260 [ 332.684810][ T46] rxe_query_port+0x76/0x260 [ 332.689432][ T46] ib_query_port+0x166/0x7d0 [ 332.694047][ T46] smc_ib_port_event_work+0x14e/0xa50 [ 332.699427][ T46] ? process_scheduled_works+0x976/0x1840 [ 332.705149][ T46] process_scheduled_works+0xa66/0x1840 [ 332.710707][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.716685][ T46] ? assign_work+0x364/0x3d0 [ 332.721273][ T46] worker_thread+0x870/0xd30 [ 332.725881][ T46] ? __kthread_parkme+0x169/0x1d0 [ 332.730902][ T46] ? __pfx_worker_thread+0x10/0x10 [ 332.736010][ T46] kthread+0x2f0/0x390 [ 332.740091][ T46] ? __pfx_worker_thread+0x10/0x10 [ 332.745197][ T46] ? __pfx_kthread+0x10/0x10 [ 332.749785][ T46] ret_from_fork+0x4b/0x80 [ 332.754197][ T46] ? __pfx_kthread+0x10/0x10 [ 332.758782][ T46] ret_from_fork_asm+0x1a/0x30 [ 332.763545][ T46] [ 332.766895][ T46] Kernel Offset: disabled [ 332.771227][ T46] Rebooting in 86400 seconds..