last executing test programs: 1m9.882067923s ago: executing program 0 (id=20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0xdc}, 0x1, 0x0, 0x0, 0x400800d}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) sendto$packet(r3, &(0x7f0000000380)='\x00', 0x1, 0x800, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m9.458881933s ago: executing program 1 (id=965): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) shutdown(r1, 0x1) recvmmsg(r1, 0x0, 0x0, 0x40000121, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x1024}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="a905000000007464000100000000000000e5c06434a8b726a5533f209cb2e3ab550c2087", 0x24}], 0x1}}], 0x1, 0x40000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) 57.970335409s ago: executing program 1 (id=965): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) shutdown(r1, 0x1) recvmmsg(r1, 0x0, 0x0, 0x40000121, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x1024}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="a905000000007464000100000000000000e5c06434a8b726a5533f209cb2e3ab550c2087", 0x24}], 0x1}}], 0x1, 0x40000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) 57.326437343s ago: executing program 0 (id=20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0xdc}, 0x1, 0x0, 0x0, 0x400800d}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) sendto$packet(r3, &(0x7f0000000380)='\x00', 0x1, 0x800, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 43.452192864s ago: executing program 1 (id=965): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) shutdown(r1, 0x1) recvmmsg(r1, 0x0, 0x0, 0x40000121, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x1024}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="a905000000007464000100000000000000e5c06434a8b726a5533f209cb2e3ab550c2087", 0x24}], 0x1}}], 0x1, 0x40000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) 43.451994555s ago: executing program 0 (id=20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0xdc}, 0x1, 0x0, 0x0, 0x400800d}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) sendto$packet(r3, &(0x7f0000000380)='\x00', 0x1, 0x800, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 33.327803178s ago: executing program 1 (id=965): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) shutdown(r1, 0x1) recvmmsg(r1, 0x0, 0x0, 0x40000121, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x1024}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="a905000000007464000100000000000000e5c06434a8b726a5533f209cb2e3ab550c2087", 0x24}], 0x1}}], 0x1, 0x40000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) 32.220347884s ago: executing program 0 (id=20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0xdc}, 0x1, 0x0, 0x0, 0x400800d}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) sendto$packet(r3, &(0x7f0000000380)='\x00', 0x1, 0x800, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 21.848011454s ago: executing program 1 (id=965): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) shutdown(r1, 0x1) recvmmsg(r1, 0x0, 0x0, 0x40000121, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x1024}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="a905000000007464000100000000000000e5c06434a8b726a5533f209cb2e3ab550c2087", 0x24}], 0x1}}], 0x1, 0x40000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) 20.650644938s ago: executing program 0 (id=20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0xdc}, 0x1, 0x0, 0x0, 0x400800d}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) sendto$packet(r3, &(0x7f0000000380)='\x00', 0x1, 0x800, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 11.775803211s ago: executing program 1 (id=965): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) shutdown(r1, 0x1) recvmmsg(r1, 0x0, 0x0, 0x40000121, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x1024}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="a905000000007464000100000000000000e5c06434a8b726a5533f209cb2e3ab550c2087", 0x24}], 0x1}}], 0x1, 0x40000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) 9.348867653s ago: executing program 0 (id=20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0xdc}, 0x1, 0x0, 0x0, 0x400800d}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) sendto$packet(r3, &(0x7f0000000380)='\x00', 0x1, 0x800, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.082249888s ago: executing program 2 (id=1741): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x200000000000000}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 1.893069007s ago: executing program 2 (id=1744): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000000000000611161000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, r1, 0xe, 0x0, 0xffffffffffffffff, @void, @value}, 0x14) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) 1.7107692s ago: executing program 2 (id=1745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000030803000000000000000000f7ffffff050003003a0000000600024000080000140004"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000140)={0x0, 0xffffff6d, &(0x7f0000000080), 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r5, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) 1.489087511s ago: executing program 2 (id=1748): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2}, @address_request={0x11, 0x2, 0x0, 0x3}}}}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2b, 0x0, &(0x7f00000064c0)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x2}, 0x1c) 1.364428747s ago: executing program 3 (id=1749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000001c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000380)=@ringbuf={{}, {}, {}, [@kfunc, @generic, @map_idx, @ringbuf_query, @printk={@s}, @jmp, @map_fd]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.1924195s ago: executing program 3 (id=1751): syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000d39279baf322c02e00"/28], 0x50) (async, rerun: 64) listen(r0, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x0, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000240000000000800014000e6"], 0xe0}}, 0x0) (async, rerun: 64) r6 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) (async) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, &(0x7f0000000400)) (async, rerun: 64) r7 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000fc3f1400e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f0000000180), 0x20000000}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r8, &(0x7f0000000180), 0x0}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900010073797a300000000028000480080002400000000008000140000000050400040076657468315f746f5f62617461647600090003"], 0xa4}}, 0x0) listen(r7, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000002ff537fb0000000000284802"], 0x48) 1.076052276s ago: executing program 4 (id=1752): r0 = socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = accept(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x80) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x10, 0x0, 0x100, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x4801000000000000}, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) accept(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x80) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x10, 0x0, 0x100, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x4801000000000000}, 0x0) (async) 1.046950894s ago: executing program 3 (id=1753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}}, 0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, r2, 0x100, 0x0, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x5c}}, 0x0) 888.381067ms ago: executing program 4 (id=1754): r0 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000029000000000000000000df251600000008004200", @ANYRES32=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) gettid() (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000029000000000000000000df251600000008004200", @ANYRES32=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) (async) 887.300206ms ago: executing program 3 (id=1755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="e7ae2c803d7b93531db93119b39754c642b0d48f3ff430d554ee184e2822de49f4439447d8ffcdb914b8bce5c39b600da164d43ecaf5e2b834e765674e744123d28aa4feb41bb8de591323", 0x4b}, {&(0x7f0000000240)="072e756dc797302f67497e9929e30a5102b07643f1182d7372077b7ddf6fa794f0b4f7230c8c6eef1a98da1a62b24005eb78ec72cbc7f79aecb4d47b77e2b8b0d58fcd34b48b131d34afa9f22a0f006084d780f7de69f85993010dcdc2e8d7e7e571d30d05437573af182537c55cc61e9a458f074d6d70b807336ef6cd3db10ddc3ba7344deaedb6b28b4c7c20f6731192cf9f2a72851472ca7cd15b0427e8872940409e4ae50222223ec6b6d4bae854ee75385399db6f79884b86f31360158f45b58674f5a69f613ded1bd72d5e3eff8f8cad54bd27788c4cc0ddc89be41712bfe62928310c18d256833e18ec", 0xed}], 0x2}], 0x1, 0x0) 790.799365ms ago: executing program 4 (id=1756): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x300000000000000}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 748.782679ms ago: executing program 3 (id=1757): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088a8000081"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x739d, 0x0, 0x20}, 0x28) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x2f5}, {&(0x7f0000000bc0)="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", 0x25a}, {&(0x7f0000000fc0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abb8998e9bf03114784", 0x31}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=ANY=[@ANYBLOB="94000000000801010000000000000000000000002c000480080007400000000a0800054000000004080001400000072508000740000100000800064000000000050003001100000005000300840000001c000480080001400000000708000140000000f808000140000000050900010073797a3000000000060002"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x40030) socket$nl_generic(0x10, 0x3, 0x10) 533.873544ms ago: executing program 4 (id=1758): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001780)="8a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0x3f}}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000019078ac1e0001ac1414aa0387907803000000450000000000fffc002f0000000000006baf60140428c3e1bbb568f8c435c5e176303e13e864e518961be173eafe5e704d"], 0x0) 396.201444ms ago: executing program 4 (id=1759): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000400)={0x4f, "d8caccf4001071d66c155bdd71dc52a9c4b47841a49ba10800122c69bcafaa2abcf78cba7b368261cd17d076acd9901017641abe8e4567f086a593375808de1171cf0e3b925065d214119e421276f0addd81f4987f74a18ff76e563c2b6c9d55ffca4df6280c4059c5c23a440b40937aaa5c066b35150fb074cd4bf934e7ca87"}) r3 = accept(r0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) connect$ax25(r3, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 385.251899ms ago: executing program 2 (id=1760): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="1c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)='Y', 0x1}], 0x1}}], 0x2, 0x0) socketpair(0x11, 0x5, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000014c0)=ANY=[@ANYBLOB="202300001300000126bd7000fddbdf2525262f094e214e220800000000000000020000000900000000000000050000000600000009000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2320}}, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYRES8, @ANYRES8=r4, @ANYRESHEX=r5, @ANYRESOCT=r1, @ANYBLOB="a98a1f3f60216f78fdb71394b034453eb55e99722d856e2e141875c90a960bdb42f99140ee241dbda6b45742e9d81d89efa42faead396c6d07526ec5afd765d862fbbbd02deb9d579da79d3b6d0a63087fc29ad4c1baf9d322607339af18a8b94fcedd2add08aef1304a6f26a18893a9ccf93868d0f4eead6415e5bee3d72632d663c4fda4d63b0c8dd0105a79e72042c15e08ad3876299e7c0c23779dd56cd375ec3c9f3e8b32975f14f07fdc2eaf9ba29c3be46d3b75e24462", @ANYRESHEX=r3, @ANYBLOB="06410d91881cd203608543b10b", @ANYRES8=r5], 0x2c}}, 0x20008000) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000000)=0xfe000000, 0x4) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000340)=0x2, 0xffffffffffffff4f) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x3, 0x0, @remote, 0x2}], 0x1c) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtclass={0x58, 0x28, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {0x10, 0xa}, {0xfff3, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @TCA_RATE={0x6, 0x5, {0xb5, 0x80}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_mq={0x7}]}, 0x58}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4$alg(r10, 0x0, 0x0, 0x80800) r11 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100010000002c00018014000300fc00000000000000000000000000000014000400fe8800000000000000000000000000013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400000000000000000000000000000000013c0002800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb140004"], 0xc8}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$inet(r11, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="a4", 0x1}, {&(0x7f0000000340)='l', 0x1}], 0x2}}], 0x7fffefff, 0x0) 277.671972ms ago: executing program 3 (id=1761): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) (async) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) socket$kcm(0x2, 0x2, 0x0) (async) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x870bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff31}, {0x5}}]}, 0x58}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="180000000800000000000000", @ANYRES32, @ANYBLOB="e000541d786a8c5a070529a6da95ac1e2c8711f1e65549fb576ff7629e946cbada3a8061292e49420ceffb78c85b1ef411ad1c6eeb6eadf9166a560badd0398c74ce23dc2b7f97a3b7b658ba9f7a8be9a0d0a439e1e04aaf44ec65dfd6c4e8573332e7951f21389089f7ea0c1b118f4efef38c19ef74acefb598b8fa36b3e4dd44d0bb2e51929d5cff6b2c61516b13a13c444a0f3f27b225d416ba7ec279bbd77f1cb5ae1be28d49ad5956e64edde91656b8c233b78db5988c5dc2f6abc0340717bde57329b7e7dce3e34b829c91cd426727f9498a59a274ed6e0d59a2f9a131724d8a81a1e5401b4bcaef0b19cdb0048e5b364dc8ff2494eb932ad0dcc2b7fd717107c03d3cc94d8e724f4688635ba55160a3f7523aba8b8897ce8b34ddf5d4d011264971d2648e48b91a6050e5434215d09cd02d9f3c8a235d8a42d6345d", @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="180000000800000000000000", @ANYRES32, @ANYBLOB="e000541d786a8c5a070529a6da95ac1e2c8711f1e65549fb576ff7629e946cbada3a8061292e49420ceffb78c85b1ef411ad1c6eeb6eadf9166a560badd0398c74ce23dc2b7f97a3b7b658ba9f7a8be9a0d0a439e1e04aaf44ec65dfd6c4e8573332e7951f21389089f7ea0c1b118f4efef38c19ef74acefb598b8fa36b3e4dd44d0bb2e51929d5cff6b2c61516b13a13c444a0f3f27b225d416ba7ec279bbd77f1cb5ae1be28d49ad5956e64edde91656b8c233b78db5988c5dc2f6abc0340717bde57329b7e7dce3e34b829c91cd426727f9498a59a274ed6e0d59a2f9a131724d8a81a1e5401b4bcaef0b19cdb0048e5b364dc8ff2494eb932ad0dcc2b7fd717107c03d3cc94d8e724f4688635ba55160a3f7523aba8b8897ce8b34ddf5d4d011264971d2648e48b91a6050e5434215d09cd02d9f3c8a235d8a42d6345d", @ANYRES64=0x0], 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640), 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0x270, 0x590, 0x0, 0x340, 0x270, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'team0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @empty, [], [], 'wg0\x00', 'caif0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'veth1_virt_wifi\x00', 'pimreg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast1, @private0, @ipv4, @local, @local, @local, @local, @private2, @private2, @private1, @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) close(r1) 73.040656ms ago: executing program 2 (id=1762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401}, 0x14}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r2, @ANYBLOB="140006"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x50904) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 0s ago: executing program 4 (id=1763): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1d5d6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe2c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9a3359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069d532749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b87cf6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a57f810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604f8e86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): ique to avoid problems! [ 192.647676][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.678284][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.704494][T10169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.726707][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.744862][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.760394][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.779727][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.796021][T10169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.837761][T10442] xt_TCPMSS: Only works on TCP SYN packets [ 192.861686][T10153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.874240][T10169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.884214][T10169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.904519][T10169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.926996][T10169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.011827][T10448] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.031063][T10446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1325'. [ 193.129223][T10153] veth0_vlan: entered promiscuous mode [ 193.185135][T10153] veth1_vlan: entered promiscuous mode [ 193.210471][T10153] veth0_macvtap: entered promiscuous mode [ 193.219765][T10153] veth1_macvtap: entered promiscuous mode [ 193.227827][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.235833][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.236040][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.255419][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.265762][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.276406][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.278187][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.286840][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.293745][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.304992][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.323656][T10153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.349494][T10462] netlink: 'syz.3.1329': attribute type 11 has an invalid length. [ 193.381556][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.387311][T10462] netlink: 'syz.3.1329': attribute type 11 has an invalid length. [ 193.397462][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.436506][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.451635][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.461830][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.478367][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.495853][T10153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.555752][T10153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.591595][T10153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.612626][T10153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.623137][T10153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.752929][T10471] 0· (unregistering): left promiscuous mode [ 193.923639][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.945391][T10479] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 193.955029][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.005874][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.029525][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.250699][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257828][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.503111][T10508] __nla_validate_parse: 6 callbacks suppressed [ 194.503130][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 194.713030][ T1156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.973824][ T1156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.348849][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.358306][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.366104][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.376470][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.385174][ T5152] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.392932][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.411500][ T1156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.437213][T10512] lo speed is unknown, defaulting to 1000 [ 195.475787][ T1156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.583240][T10512] chnl_net:caif_netlink_parms(): no params data found [ 195.626063][ T1156] bridge_slave_1: left allmulticast mode [ 195.631844][ T1156] bridge_slave_1: left promiscuous mode [ 195.637628][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.652390][ T1156] bridge_slave_0: left allmulticast mode [ 195.659110][ T1156] bridge_slave_0: left promiscuous mode [ 195.664762][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.969653][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.981331][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.992985][ T1156] bond0 (unregistering): Released all slaves [ 196.058350][T10512] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.065467][T10512] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.072955][T10512] bridge_slave_0: entered allmulticast mode [ 196.080447][T10512] bridge_slave_0: entered promiscuous mode [ 196.124877][T10512] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.132486][T10512] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.140328][T10512] bridge_slave_1: entered allmulticast mode [ 196.146984][T10512] bridge_slave_1: entered promiscuous mode [ 196.189444][T10512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.223480][T10512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.251956][T10512] team0: Port device team_slave_0 added [ 196.261224][T10512] team0: Port device team_slave_1 added [ 196.280141][ T1156] hsr_slave_0: left promiscuous mode [ 196.285897][ T1156] hsr_slave_1: left promiscuous mode [ 196.291755][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.303208][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.311180][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.320976][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.339715][ T1156] veth1_macvtap: left promiscuous mode [ 196.345863][ T1156] veth0_macvtap: left promiscuous mode [ 196.351924][ T1156] veth1_vlan: left promiscuous mode [ 196.358131][ T1156] veth0_vlan: left promiscuous mode [ 196.568892][T10522] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 196.608768][T10522] set match dimension is over the limit! [ 196.615362][T10527] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.675483][T10527] netlink: 5304 bytes leftover after parsing attributes in process `syz.4.1349'. [ 196.918031][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.932346][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.940902][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.960978][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.990051][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 196.998563][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.097027][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 197.145717][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 197.447953][ T5152] Bluetooth: hci0: command tx timeout [ 197.674814][T10512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.706803][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.752956][T10512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.796130][T10512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.811240][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.899501][T10512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.956314][T10557] lo speed is unknown, defaulting to 1000 [ 198.001372][T10536] lo speed is unknown, defaulting to 1000 [ 198.083969][T10512] hsr_slave_0: entered promiscuous mode [ 198.102787][T10512] hsr_slave_1: entered promiscuous mode [ 198.116877][T10512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.147074][T10512] Cannot create hsr debugfs directory [ 198.525874][T10536] chnl_net:caif_netlink_parms(): no params data found [ 198.697842][T10584] FAULT_INJECTION: forcing a failure. [ 198.697842][T10584] name failslab, interval 1, probability 0, space 0, times 0 [ 198.711048][T10584] CPU: 1 UID: 0 PID: 10584 Comm: syz.3.1361 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 198.721855][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 198.731942][T10584] Call Trace: [ 198.735245][T10584] [ 198.738207][T10584] dump_stack_lvl+0x241/0x360 [ 198.742964][T10584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.748199][T10584] ? __pfx__printk+0x10/0x10 [ 198.752823][T10584] ? fs_reclaim_acquire+0x93/0x130 [ 198.757990][T10584] ? __pfx___might_resched+0x10/0x10 [ 198.763312][T10584] should_fail_ex+0x3b0/0x4e0 [ 198.768022][T10584] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 198.773783][T10584] should_failslab+0xac/0x100 [ 198.778495][T10584] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 198.784243][T10584] __kmalloc_noprof+0xd8/0x400 [ 198.789045][T10584] tomoyo_realpath_from_path+0xcf/0x5e0 [ 198.794645][T10584] tomoyo_path_number_perm+0x23a/0x880 [ 198.800145][T10584] ? tomoyo_path_number_perm+0x208/0x880 [ 198.806061][T10584] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 198.812181][T10584] ? __fget_files+0x29/0x470 [ 198.816809][T10584] ? __fget_files+0x3f3/0x470 [ 198.821522][T10584] security_file_ioctl+0xc6/0x2a0 [ 198.826569][T10584] __se_sys_ioctl+0x47/0x170 [ 198.831188][T10584] do_syscall_64+0xf3/0x230 [ 198.835725][T10584] ? clear_bhb_loop+0x35/0x90 [ 198.840438][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.846358][T10584] RIP: 0033:0x7fdb9d57e819 [ 198.850809][T10584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.870434][T10584] RSP: 002b:00007fdb9e322038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.878882][T10584] RAX: ffffffffffffffda RBX: 00007fdb9d735fa0 RCX: 00007fdb9d57e819 [ 198.886890][T10584] RDX: 0000000020000900 RSI: 00000000000089f0 RDI: 000000000000000f [ 198.894885][T10584] RBP: 00007fdb9e322090 R08: 0000000000000000 R09: 0000000000000000 [ 198.902880][T10584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.910875][T10584] R13: 0000000000000000 R14: 00007fdb9d735fa0 R15: 00007ffc075b7158 [ 198.918893][T10584] [ 198.936810][T10584] ERROR: Out of memory at tomoyo_realpath_from_path. [ 198.980777][ T1156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.052698][ T5152] Bluetooth: hci4: command tx timeout [ 199.138211][ T1156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.239029][T10536] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.246150][T10536] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.277286][T10536] bridge_slave_0: entered allmulticast mode [ 199.299205][T10536] bridge_slave_0: entered promiscuous mode [ 199.398489][ T1156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.468284][T10536] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.475410][T10536] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.496545][T10536] bridge_slave_1: entered allmulticast mode [ 199.515205][T10536] bridge_slave_1: entered promiscuous mode [ 199.526992][ T5152] Bluetooth: hci0: command tx timeout [ 199.735444][ T1156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.020441][T10623] FAULT_INJECTION: forcing a failure. [ 200.020441][T10623] name failslab, interval 1, probability 0, space 0, times 0 [ 200.022551][T10536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.045973][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.3.1374 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 200.056790][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 200.064858][T10536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.066852][T10623] Call Trace: [ 200.066874][T10623] [ 200.066884][T10623] dump_stack_lvl+0x241/0x360 [ 200.086863][T10623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.092110][T10623] ? __pfx__printk+0x10/0x10 [ 200.096840][T10623] ? fs_reclaim_acquire+0x93/0x130 [ 200.101997][T10623] ? __pfx___might_resched+0x10/0x10 [ 200.107335][T10623] ? dynamic_dname+0x141/0x1b0 [ 200.112159][T10623] should_fail_ex+0x3b0/0x4e0 [ 200.116883][T10623] ? tomoyo_encode+0x26f/0x540 [ 200.121694][T10623] should_failslab+0xac/0x100 [ 200.126425][T10623] ? tomoyo_encode+0x26f/0x540 [ 200.131234][T10623] __kmalloc_noprof+0xd8/0x400 [ 200.136048][T10623] tomoyo_encode+0x26f/0x540 [ 200.140682][T10623] ? __pfx_sockfs_dname+0x10/0x10 [ 200.145734][T10623] tomoyo_realpath_from_path+0x59e/0x5e0 [ 200.151415][T10623] tomoyo_path_number_perm+0x23a/0x880 [ 200.156911][T10623] ? tomoyo_path_number_perm+0x208/0x880 [ 200.162572][T10623] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.168622][T10623] ? __fget_files+0x29/0x470 [ 200.173242][T10623] ? __fget_files+0x3f3/0x470 [ 200.177950][T10623] security_file_ioctl+0xc6/0x2a0 [ 200.183003][T10623] __se_sys_ioctl+0x47/0x170 [ 200.187626][T10623] do_syscall_64+0xf3/0x230 [ 200.192151][T10623] ? clear_bhb_loop+0x35/0x90 [ 200.196840][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.202736][T10623] RIP: 0033:0x7fdb9d57e819 [ 200.207172][T10623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.226790][T10623] RSP: 002b:00007fdb9e322038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.235233][T10623] RAX: ffffffffffffffda RBX: 00007fdb9d735fa0 RCX: 00007fdb9d57e819 [ 200.243209][T10623] RDX: 0000000020000900 RSI: 00000000000089f0 RDI: 000000000000000f [ 200.251205][T10623] RBP: 00007fdb9e322090 R08: 0000000000000000 R09: 0000000000000000 [ 200.259177][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.267147][T10623] R13: 0000000000000000 R14: 00007fdb9d735fa0 R15: 00007ffc075b7158 [ 200.275131][T10623] [ 200.289008][T10623] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.290563][T10628] : renamed from ipvlan1 [ 200.341690][T10536] team0: Port device team_slave_0 added [ 200.384591][T10536] team0: Port device team_slave_1 added [ 200.480806][T10536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.507178][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.578045][T10536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.616423][ T1156] bridge_slave_1: left allmulticast mode [ 200.634213][ T1156] bridge_slave_1: left promiscuous mode [ 200.665301][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.705551][ T1156] bridge_slave_0: left allmulticast mode [ 200.707525][T10644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1381'. [ 200.717455][ T1156] bridge_slave_0: left promiscuous mode [ 200.738846][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.068244][T10653] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1382'. [ 201.078156][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.096310][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.107553][ T1156] bond0 (unregistering): Released all slaves [ 201.118610][T10639] netlink: 'syz.2.1378': attribute type 2 has an invalid length. [ 201.127746][ T5152] Bluetooth: hci4: command tx timeout [ 201.135816][T10536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.143603][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.171354][T10536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.402021][T10536] hsr_slave_0: entered promiscuous mode [ 201.418866][T10536] hsr_slave_1: entered promiscuous mode [ 201.434843][T10536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.455742][T10536] Cannot create hsr debugfs directory [ 201.468983][T10663] sock: sock_set_timeout: `syz.4.1385' (pid 10663) tries to set negative timeout [ 201.607077][ T5152] Bluetooth: hci0: command tx timeout [ 201.743830][ T1156] hsr_slave_0: left promiscuous mode [ 201.767591][ T1156] hsr_slave_1: left promiscuous mode [ 201.787746][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.795184][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.817980][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.825407][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.840846][T10678] FAULT_INJECTION: forcing a failure. [ 201.840846][T10678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.867507][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.3.1389 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 201.878306][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 201.888381][T10678] Call Trace: [ 201.891682][T10678] [ 201.894634][T10678] dump_stack_lvl+0x241/0x360 [ 201.899344][T10678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.904572][T10678] ? __pfx__printk+0x10/0x10 [ 201.909185][T10678] ? __pfx_lock_release+0x10/0x10 [ 201.914250][T10678] should_fail_ex+0x3b0/0x4e0 [ 201.914518][ T1156] veth1_macvtap: left promiscuous mode [ 201.918938][T10678] _copy_from_user+0x2f/0xc0 [ 201.918978][T10678] get_user_ifreq+0xc3/0x200 [ 201.925362][ T1156] veth0_macvtap: left promiscuous mode [ 201.929019][T10678] sock_ioctl+0x793/0x8e0 [ 201.929058][T10678] ? __pfx_sock_ioctl+0x10/0x10 [ 201.944196][ T1156] veth1_vlan: left promiscuous mode [ 201.948259][T10678] ? __fget_files+0x3f3/0x470 [ 201.948294][T10678] ? __pfx_sock_ioctl+0x10/0x10 [ 201.953684][ T1156] veth0_vlan: left promiscuous mode [ 201.958150][T10678] __se_sys_ioctl+0xf9/0x170 [ 201.958176][T10678] do_syscall_64+0xf3/0x230 [ 201.977347][T10678] ? clear_bhb_loop+0x35/0x90 [ 201.982049][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.988031][T10678] RIP: 0033:0x7fdb9d57e819 [ 201.992443][T10678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.012054][T10678] RSP: 002b:00007fdb9e322038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.020473][T10678] RAX: ffffffffffffffda RBX: 00007fdb9d735fa0 RCX: 00007fdb9d57e819 [ 202.028446][T10678] RDX: 0000000020000900 RSI: 00000000000089f0 RDI: 000000000000000f [ 202.036421][T10678] RBP: 00007fdb9e322090 R08: 0000000000000000 R09: 0000000000000000 [ 202.044387][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.052357][T10678] R13: 0000000000000000 R14: 00007fdb9d735fa0 R15: 00007ffc075b7158 [ 202.060431][T10678] [ 202.195369][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 202.221212][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 202.534986][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 202.573258][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 202.920360][T10512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.945686][T10675] netlink: 'syz.4.1390': attribute type 10 has an invalid length. [ 202.960847][T10675] team0: Device veth0_macvtap failed to register rx_handler [ 203.050202][T10512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.069212][T10512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.099027][T10512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.114343][T10691] FAULT_INJECTION: forcing a failure. [ 203.114343][T10691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.134032][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'. [ 203.166639][T10691] CPU: 0 UID: 0 PID: 10691 Comm: syz.2.1393 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 203.177431][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 203.187502][T10691] Call Trace: [ 203.190800][T10691] [ 203.193748][T10691] dump_stack_lvl+0x241/0x360 [ 203.194506][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 203.198442][T10691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.198475][T10691] ? __pfx__printk+0x10/0x10 [ 203.198502][T10691] ? __pfx_lock_release+0x10/0x10 [ 203.218070][ T5152] Bluetooth: hci4: command tx timeout [ 203.222121][T10691] should_fail_ex+0x3b0/0x4e0 [ 203.232278][T10691] _copy_from_user+0x2f/0xc0 [ 203.236895][T10691] copy_msghdr_from_user+0xae/0x680 [ 203.242101][T10691] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 203.247919][T10691] __sys_sendmsg+0x22d/0x380 [ 203.252514][T10691] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.257636][T10691] ? __pfx_vfs_write+0x10/0x10 [ 203.262415][T10691] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.268748][T10691] ? do_syscall_64+0x100/0x230 [ 203.273519][T10691] ? do_syscall_64+0xb6/0x230 [ 203.278217][T10691] do_syscall_64+0xf3/0x230 [ 203.282730][T10691] ? clear_bhb_loop+0x35/0x90 [ 203.287407][T10691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.293321][T10691] RIP: 0033:0x7f24aa17e819 [ 203.297734][T10691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.317343][T10691] RSP: 002b:00007f24aafe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.325762][T10691] RAX: ffffffffffffffda RBX: 00007f24aa335fa0 RCX: 00007f24aa17e819 [ 203.333737][T10691] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 203.341717][T10691] RBP: 00007f24aafe3090 R08: 0000000000000000 R09: 0000000000000000 [ 203.349777][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.357834][T10691] R13: 0000000000000000 R14: 00007f24aa335fa0 R15: 00007ffdadebd0a8 [ 203.365815][T10691] [ 203.621603][T10512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.668136][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 203.687443][ T5152] Bluetooth: hci0: command tx timeout [ 203.734401][T10512] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.768880][T10710] FAULT_INJECTION: forcing a failure. [ 203.768880][T10710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.784324][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.791474][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.805286][T10710] CPU: 1 UID: 0 PID: 10710 Comm: syz.4.1401 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 203.816089][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 203.826172][T10710] Call Trace: [ 203.829473][T10710] [ 203.832429][T10710] dump_stack_lvl+0x241/0x360 [ 203.837142][T10710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.842376][T10710] ? __pfx__printk+0x10/0x10 [ 203.847002][T10710] ? __pfx_lock_release+0x10/0x10 [ 203.852067][T10710] should_fail_ex+0x3b0/0x4e0 [ 203.856772][T10710] _copy_from_user+0x2f/0xc0 [ 203.861400][T10710] get_user_ifreq+0xc3/0x200 [ 203.866025][T10710] sock_ioctl+0x793/0x8e0 [ 203.870391][T10710] ? __pfx_sock_ioctl+0x10/0x10 [ 203.875266][T10710] ? __fget_files+0x3f3/0x470 [ 203.879963][T10710] ? __pfx_sock_ioctl+0x10/0x10 [ 203.884847][T10710] __se_sys_ioctl+0xf9/0x170 [ 203.889462][T10710] do_syscall_64+0xf3/0x230 [ 203.894006][T10710] ? clear_bhb_loop+0x35/0x90 [ 203.898715][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.904656][T10710] RIP: 0033:0x7ff7b197e819 [ 203.909080][T10710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.928681][T10710] RSP: 002b:00007ff7b26f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.937091][T10710] RAX: ffffffffffffffda RBX: 00007ff7b1b35fa0 RCX: 00007ff7b197e819 [ 203.945056][T10710] RDX: 0000000020000900 RSI: 00000000000089f0 RDI: 000000000000000f [ 203.953040][T10710] RBP: 00007ff7b26f0090 R08: 0000000000000000 R09: 0000000000000000 [ 203.961031][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.969011][T10710] R13: 0000000000000000 R14: 00007ff7b1b35fa0 R15: 00007ffea76436a8 [ 203.976999][T10710] [ 203.988840][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.996055][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.021698][T10714] netlink: 'syz.3.1402': attribute type 1 has an invalid length. [ 204.034155][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1402'. [ 204.055890][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1402'. [ 204.310397][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 204.522679][T10738] FAULT_INJECTION: forcing a failure. [ 204.522679][T10738] name failslab, interval 1, probability 0, space 0, times 0 [ 204.536313][T10738] CPU: 0 UID: 0 PID: 10738 Comm: syz.2.1408 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 204.547105][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 204.557181][T10738] Call Trace: [ 204.560572][T10738] [ 204.563540][T10738] dump_stack_lvl+0x241/0x360 [ 204.568253][T10738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.573506][T10738] ? __pfx__printk+0x10/0x10 [ 204.578137][T10738] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 204.584141][T10738] ? __pfx___might_resched+0x10/0x10 [ 204.589468][T10738] should_fail_ex+0x3b0/0x4e0 [ 204.594270][T10738] should_failslab+0xac/0x100 [ 204.598978][T10738] ? __alloc_skb+0x1c3/0x440 [ 204.603633][T10738] kmem_cache_alloc_node_noprof+0x71/0x320 [ 204.609464][T10738] __alloc_skb+0x1c3/0x440 [ 204.613895][T10738] ? __pfx___alloc_skb+0x10/0x10 [ 204.618834][T10738] ? netlink_autobind+0xd6/0x2f0 [ 204.623797][T10738] ? netlink_autobind+0x2b0/0x2f0 [ 204.628829][T10738] netlink_sendmsg+0x638/0xcb0 [ 204.633601][T10738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.638903][T10738] ? aa_sock_msg_perm+0x91/0x160 [ 204.643872][T10738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.649169][T10738] __sock_sendmsg+0x221/0x270 [ 204.653844][T10738] ____sys_sendmsg+0x52a/0x7e0 [ 204.658615][T10738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.663912][T10738] __sys_sendmsg+0x292/0x380 [ 204.668561][T10738] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.673709][T10738] ? __pfx_vfs_write+0x10/0x10 [ 204.678493][T10738] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.684825][T10738] ? do_syscall_64+0x100/0x230 [ 204.689602][T10738] ? do_syscall_64+0xb6/0x230 [ 204.694311][T10738] do_syscall_64+0xf3/0x230 [ 204.698831][T10738] ? clear_bhb_loop+0x35/0x90 [ 204.703525][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.709438][T10738] RIP: 0033:0x7f24aa17e819 [ 204.713887][T10738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.733576][T10738] RSP: 002b:00007f24aafe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.742024][T10738] RAX: ffffffffffffffda RBX: 00007f24aa335fa0 RCX: 00007f24aa17e819 [ 204.750021][T10738] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 204.757992][T10738] RBP: 00007f24aafe3090 R08: 0000000000000000 R09: 0000000000000000 [ 204.765961][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.773925][T10738] R13: 0000000000000000 R14: 00007f24aa335fa0 R15: 00007ffdadebd0a8 [ 204.781905][T10738] [ 204.807786][T10734] hsr_slave_1 (unregistering): left promiscuous mode [ 204.859492][T10512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.914134][T10536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.979825][T10536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.992552][T10536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.019485][T10536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.089133][T10512] veth0_vlan: entered promiscuous mode [ 205.132215][T10512] veth1_vlan: entered promiscuous mode [ 205.204940][T10512] veth0_macvtap: entered promiscuous mode [ 205.233668][T10512] veth1_macvtap: entered promiscuous mode [ 205.250465][T10754] FAULT_INJECTION: forcing a failure. [ 205.250465][T10754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.288905][ T5152] Bluetooth: hci4: command tx timeout [ 205.295280][T10754] CPU: 0 UID: 0 PID: 10754 Comm: syz.3.1414 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 205.306083][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 205.308850][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.316138][T10754] Call Trace: [ 205.316149][T10754] [ 205.327297][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.329797][T10754] dump_stack_lvl+0x241/0x360 [ 205.332723][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.342502][T10754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.342531][T10754] ? __pfx__printk+0x10/0x10 [ 205.367381][T10754] ? snprintf+0xda/0x120 [ 205.371659][T10754] should_fail_ex+0x3b0/0x4e0 [ 205.376341][T10754] _copy_to_user+0x31/0xb0 [ 205.380757][T10754] simple_read_from_buffer+0xca/0x150 [ 205.386144][T10754] proc_fail_nth_read+0x1e9/0x250 [ 205.391175][T10754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.396723][T10754] ? rw_verify_area+0x55e/0x6f0 [ 205.401589][T10754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.407138][T10754] vfs_read+0x1fc/0xb70 [ 205.411296][T10754] ? fdget_pos+0x24e/0x320 [ 205.415712][T10754] ? __pfx_vfs_read+0x10/0x10 [ 205.420383][T10754] ? dev_load+0x21/0x1f0 [ 205.424639][T10754] ? __fget_files+0x3f3/0x470 [ 205.429321][T10754] ? fdget_pos+0x24e/0x320 [ 205.433755][T10754] ksys_read+0x183/0x2b0 [ 205.437998][T10754] ? __pfx_ksys_read+0x10/0x10 [ 205.442759][T10754] ? do_syscall_64+0x100/0x230 [ 205.447551][T10754] ? do_syscall_64+0xb6/0x230 [ 205.452235][T10754] do_syscall_64+0xf3/0x230 [ 205.456741][T10754] ? clear_bhb_loop+0x35/0x90 [ 205.461441][T10754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.467427][T10754] RIP: 0033:0x7fdb9d57d25c [ 205.471843][T10754] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 205.491469][T10754] RSP: 002b:00007fdb9e322030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.499887][T10754] RAX: ffffffffffffffda RBX: 00007fdb9d735fa0 RCX: 00007fdb9d57d25c [ 205.507861][T10754] RDX: 000000000000000f RSI: 00007fdb9e3220a0 RDI: 0000000000000012 [ 205.515833][T10754] RBP: 00007fdb9e322090 R08: 0000000000000000 R09: 0000000000000000 [ 205.523821][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.531883][T10754] R13: 0000000000000000 R14: 00007fdb9d735fa0 R15: 00007ffc075b7158 [ 205.539965][T10754] [ 205.543177][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.555667][T10512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.565201][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.575798][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.585974][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.597347][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.620736][T10512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.669696][T10536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.679258][T10512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.707162][T10512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.715895][T10512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.757177][T10512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.814417][T10766] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 205.865259][T10766] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 205.873284][T10766] : (slave wlan1): Enslaving as an active interface with an up link [ 205.930828][T10536] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.989485][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.996672][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.047112][T10772] __nla_validate_parse: 5 callbacks suppressed [ 206.047130][T10772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1422'. [ 206.088091][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.097614][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.136193][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.143355][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.207748][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.215655][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.309770][T10536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.392768][T10786] netlink: 'syz.3.1425': attribute type 9 has an invalid length. [ 206.457380][T10786] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1425'. [ 206.605491][T10536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.717981][T10536] veth0_vlan: entered promiscuous mode [ 206.759947][T10536] veth1_vlan: entered promiscuous mode [ 206.830487][T10536] veth0_macvtap: entered promiscuous mode [ 206.864991][T10536] veth1_macvtap: entered promiscuous mode [ 206.902236][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.919126][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.928025][T10807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1431'. [ 206.929780][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.957946][T10810] FAULT_INJECTION: forcing a failure. [ 206.957946][T10810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.972620][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.983172][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.995216][T10810] CPU: 0 UID: 0 PID: 10810 Comm: syz.2.1432 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 207.004517][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.005990][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 207.006008][T10810] Call Trace: [ 207.006017][T10810] [ 207.006028][T10810] dump_stack_lvl+0x241/0x360 [ 207.018725][T10536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.025880][T10810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.025915][T10810] ? __pfx__printk+0x10/0x10 [ 207.033382][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.036785][T10810] ? __pfx_lock_release+0x10/0x10 [ 207.036833][T10810] should_fail_ex+0x3b0/0x4e0 [ 207.044187][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.049280][T10810] _copy_from_iter+0x21f/0x1e70 [ 207.049316][T10810] ? __virt_addr_valid+0x183/0x530 [ 207.049342][T10810] ? __pfx_lock_release+0x10/0x10 [ 207.049383][T10810] ? __alloc_skb+0x28f/0x440 [ 207.049410][T10810] ? __pfx__copy_from_iter+0x10/0x10 [ 207.049443][T10810] ? __virt_addr_valid+0x183/0x530 [ 207.049466][T10810] ? __virt_addr_valid+0x183/0x530 [ 207.049487][T10810] ? __virt_addr_valid+0x45f/0x530 [ 207.049512][T10810] ? __check_object_size+0x48e/0x900 [ 207.049546][T10810] netlink_sendmsg+0x73d/0xcb0 [ 207.049586][T10810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.049618][T10810] ? aa_sock_msg_perm+0x91/0x160 [ 207.049652][T10810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.049677][T10810] __sock_sendmsg+0x221/0x270 [ 207.049703][T10810] ____sys_sendmsg+0x52a/0x7e0 [ 207.049742][T10810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.049788][T10810] __sys_sendmsg+0x292/0x380 [ 207.049833][T10810] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.049878][T10810] ? __pfx_vfs_write+0x10/0x10 [ 207.049924][T10810] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.049957][T10810] ? do_syscall_64+0x100/0x230 [ 207.049988][T10810] ? do_syscall_64+0xb6/0x230 [ 207.050017][T10810] do_syscall_64+0xf3/0x230 [ 207.050044][T10810] ? clear_bhb_loop+0x35/0x90 [ 207.050074][T10810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.050099][T10810] RIP: 0033:0x7f24aa17e819 [ 207.066198][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.070106][T10810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.070129][T10810] RSP: 002b:00007f24aafe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.070156][T10810] RAX: ffffffffffffffda RBX: 00007f24aa335fa0 RCX: 00007f24aa17e819 [ 207.074932][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.084797][T10810] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 207.084813][T10810] RBP: 00007f24aafe3090 R08: 0000000000000000 R09: 0000000000000000 [ 207.084826][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.084845][T10810] R13: 0000000000000000 R14: 00007f24aa335fa0 R15: 00007ffdadebd0a8 [ 207.084896][T10810] [ 207.332058][T10814] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1433'. [ 207.377218][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.392512][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.418215][T10536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.440312][T10813] netem: incorrect ge model size [ 207.455779][T10813] netem: change failed [ 207.486433][T10536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.526576][T10536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.551492][T10536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.568945][T10536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.719513][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.737609][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.891814][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.992231][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.033980][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.465482][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.543913][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.638845][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.755013][ T52] bridge_slave_1: left allmulticast mode [ 208.775464][ T52] bridge_slave_1: left promiscuous mode [ 208.787119][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.818904][ T52] bridge_slave_0: left allmulticast mode [ 208.824581][ T52] bridge_slave_0: left promiscuous mode [ 208.850149][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.980817][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.995945][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.004138][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.014037][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.023486][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.031235][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.242274][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.254520][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.265280][ T52] bond0 (unregistering): Released all slaves [ 209.299054][T10838] lo speed is unknown, defaulting to 1000 [ 209.488478][T10838] chnl_net:caif_netlink_parms(): no params data found [ 209.522948][ T52] hsr_slave_0: left promiscuous mode [ 209.530385][ T52] hsr_slave_1: left promiscuous mode [ 209.536236][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.549388][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.559842][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.567464][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.585038][ T52] veth1_macvtap: left promiscuous mode [ 209.591201][ T52] veth0_macvtap: left promiscuous mode [ 209.597669][ T52] veth1_vlan: left promiscuous mode [ 209.602955][ T52] veth0_vlan: left promiscuous mode [ 209.982330][ T52] team0 (unregistering): Port device team_slave_1 removed [ 210.021843][ T52] team0 (unregistering): Port device team_slave_0 removed [ 210.585842][T10856] tipc: Enabling of bearer rejected, media not registered [ 210.722209][T10868] FAULT_INJECTION: forcing a failure. [ 210.722209][T10868] name failslab, interval 1, probability 0, space 0, times 0 [ 210.746535][T10868] CPU: 1 UID: 0 PID: 10868 Comm: syz.2.1444 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 210.757331][T10868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 210.767580][T10868] Call Trace: [ 210.770878][T10868] [ 210.773835][T10868] dump_stack_lvl+0x241/0x360 [ 210.778546][T10868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.783790][T10868] ? __pfx__printk+0x10/0x10 [ 210.788417][T10868] ? ref_tracker_alloc+0x332/0x490 [ 210.793607][T10868] should_fail_ex+0x3b0/0x4e0 [ 210.798317][T10868] ? skb_clone+0x20c/0x390 [ 210.802768][T10868] should_failslab+0xac/0x100 [ 210.807501][T10868] ? skb_clone+0x20c/0x390 [ 210.812026][T10868] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 210.817471][T10868] skb_clone+0x20c/0x390 [ 210.821763][T10868] __netlink_deliver_tap+0x3cc/0x7c0 [ 210.827087][T10868] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.832312][T10868] netlink_deliver_tap+0x19d/0x1b0 [ 210.837452][T10868] netlink_unicast+0x7c4/0x990 [ 210.842246][T10868] ? __pfx_netlink_unicast+0x10/0x10 [ 210.847582][T10868] ? __virt_addr_valid+0x183/0x530 [ 210.852731][T10868] ? __check_object_size+0x48e/0x900 [ 210.858054][T10868] netlink_sendmsg+0x8e4/0xcb0 [ 210.862867][T10868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.868188][T10868] ? aa_sock_msg_perm+0x91/0x160 [ 210.873163][T10868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.878473][T10868] __sock_sendmsg+0x221/0x270 [ 210.883185][T10868] ____sys_sendmsg+0x52a/0x7e0 [ 210.887996][T10868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.893353][T10868] __sys_sendmsg+0x292/0x380 [ 210.897992][T10868] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.903155][T10868] ? __pfx_vfs_write+0x10/0x10 [ 210.907975][T10868] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.914333][T10868] ? do_syscall_64+0x100/0x230 [ 210.919177][T10868] ? do_syscall_64+0xb6/0x230 [ 210.923897][T10868] do_syscall_64+0xf3/0x230 [ 210.928434][T10868] ? clear_bhb_loop+0x35/0x90 [ 210.933149][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.939065][T10868] RIP: 0033:0x7f24aa17e819 [ 210.943543][T10868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.963175][T10868] RSP: 002b:00007f24aafe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.971621][T10868] RAX: ffffffffffffffda RBX: 00007f24aa335fa0 RCX: 00007f24aa17e819 [ 210.978030][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.979594][T10868] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 210.979613][T10868] RBP: 00007f24aafe3090 R08: 0000000000000000 R09: 0000000000000000 [ 210.989024][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.994581][T10868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.003623][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.009454][T10868] R13: 0000000000000000 R14: 00007f24aa335fa0 R15: 00007ffdadebd0a8 [ 211.009489][T10868] [ 211.044211][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 211.057478][ T5152] Bluetooth: hci0: command tx timeout [ 211.064301][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.081140][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.104085][T10838] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.107545][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.128979][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.146096][T10838] bridge_slave_0: entered allmulticast mode [ 211.154140][T10838] bridge_slave_0: entered promiscuous mode [ 211.162192][T10838] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.173207][T10838] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.180993][T10838] bridge_slave_1: entered allmulticast mode [ 211.193181][T10838] bridge_slave_1: entered promiscuous mode [ 211.280413][T10885] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1448'. [ 211.349536][T10838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.380082][T10838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.495567][T10869] lo speed is unknown, defaulting to 1000 [ 211.508546][T10838] team0: Port device team_slave_0 added [ 211.520881][T10838] team0: Port device team_slave_1 added [ 211.533506][T10901] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1453'. [ 211.648922][T10838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.677304][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.708465][T10838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.760824][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.775922][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 211.801409][T10838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.810339][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.844548][T10838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.915391][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.079793][T10922] FAULT_INJECTION: forcing a failure. [ 212.079793][T10922] name failslab, interval 1, probability 0, space 0, times 0 [ 212.094276][T10922] CPU: 0 UID: 0 PID: 10922 Comm: syz.2.1461 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 212.096366][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 212.105079][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 212.105097][T10922] Call Trace: [ 212.105106][T10922] [ 212.105116][T10922] dump_stack_lvl+0x241/0x360 [ 212.105153][T10922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.105181][T10922] ? __pfx__printk+0x10/0x10 [ 212.105210][T10922] ? __kmalloc_noprof+0xb0/0x400 [ 212.105239][T10922] ? __pfx___might_resched+0x10/0x10 [ 212.105271][T10922] should_fail_ex+0x3b0/0x4e0 [ 212.105296][T10922] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 212.105330][T10922] should_failslab+0xac/0x100 [ 212.105356][T10922] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 212.105387][T10922] __kmalloc_noprof+0xd8/0x400 [ 212.105413][T10922] ? apparmor_capable+0x13b/0x1b0 [ 212.105455][T10922] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 212.105491][T10922] genl_rcv_msg+0x802/0xec0 [ 212.105518][T10922] ? mark_lock+0x9a/0x360 [ 212.105546][T10922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.105601][T10922] ? __pfx_lock_acquire+0x10/0x10 [ 212.105632][T10922] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 212.105652][T10922] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 212.105690][T10922] ? __pfx_nl80211_post_doit+0x10/0x10 [ 212.105712][T10922] ? __pfx___might_resched+0x10/0x10 [ 212.105750][T10922] netlink_rcv_skb+0x1e3/0x430 [ 212.105777][T10922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.105809][T10922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.105846][T10922] ? __netlink_deliver_tap+0x77e/0x7c0 [ 212.105904][T10922] genl_rcv+0x28/0x40 [ 212.105934][T10922] netlink_unicast+0x7f6/0x990 [ 212.105968][T10922] ? __pfx_netlink_unicast+0x10/0x10 [ 212.105990][T10922] ? __virt_addr_valid+0x183/0x530 [ 212.106017][T10922] ? __check_object_size+0x48e/0x900 [ 212.106050][T10922] netlink_sendmsg+0x8e4/0xcb0 [ 212.106090][T10922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.106123][T10922] ? aa_sock_msg_perm+0x91/0x160 [ 212.106157][T10922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.106195][T10922] __sock_sendmsg+0x221/0x270 [ 212.106220][T10922] ____sys_sendmsg+0x52a/0x7e0 [ 212.106257][T10922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.106302][T10922] __sys_sendmsg+0x292/0x380 [ 212.106333][T10922] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.106373][T10922] ? __pfx_vfs_write+0x10/0x10 [ 212.106422][T10922] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.106455][T10922] ? do_syscall_64+0x100/0x230 [ 212.106485][T10922] ? do_syscall_64+0xb6/0x230 [ 212.162482][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 212.167217][T10922] do_syscall_64+0xf3/0x230 [ 212.167251][T10922] ? clear_bhb_loop+0x35/0x90 [ 212.362393][T10922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.368321][T10922] RIP: 0033:0x7f24aa17e819 [ 212.372738][T10922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.392352][T10922] RSP: 002b:00007f24aafe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.400794][T10922] RAX: ffffffffffffffda RBX: 00007f24aa335fa0 RCX: 00007f24aa17e819 [ 212.408778][T10922] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 212.416752][T10922] RBP: 00007f24aafe3090 R08: 0000000000000000 R09: 0000000000000000 [ 212.424736][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.432716][T10922] R13: 0000000000000000 R14: 00007f24aa335fa0 R15: 00007ffdadebd0a8 [ 212.440728][T10922] [ 212.506554][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.556692][T10838] hsr_slave_0: entered promiscuous mode [ 212.586320][T10838] hsr_slave_1: entered promiscuous mode [ 212.604315][T10838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.631792][T10838] Cannot create hsr debugfs directory [ 212.753596][T10939] netlink: 'syz.4.1466': attribute type 1 has an invalid length. [ 212.772945][T10939] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1466'. [ 212.786322][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.924728][T10948] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1470'. [ 212.936460][T10951] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1470'. [ 213.095231][T10869] chnl_net:caif_netlink_parms(): no params data found [ 213.148061][ T5845] Bluetooth: hci0: command tx timeout [ 213.173001][ T52] bridge_slave_1: left allmulticast mode [ 213.179378][ T52] bridge_slave_1: left promiscuous mode [ 213.185068][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.194829][ T52] bridge_slave_0: left allmulticast mode [ 213.201339][ T52] bridge_slave_0: left promiscuous mode [ 213.208656][ T5845] Bluetooth: hci4: command tx timeout [ 213.214805][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.439396][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 213.613742][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.629859][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.640951][ T52] bond0 (unregistering): Released all slaves [ 213.666015][T10961] netlink: 'syz.2.1472': attribute type 4 has an invalid length. [ 213.676303][T10972] FAULT_INJECTION: forcing a failure. [ 213.676303][T10972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.692873][T10972] CPU: 1 UID: 0 PID: 10972 Comm: syz.4.1476 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 213.703759][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 213.713860][T10972] Call Trace: [ 213.717163][T10972] [ 213.720124][T10972] dump_stack_lvl+0x241/0x360 [ 213.724833][T10972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.730056][T10972] ? __pfx__printk+0x10/0x10 [ 213.734663][T10972] ? snprintf+0xda/0x120 [ 213.738923][T10972] should_fail_ex+0x3b0/0x4e0 [ 213.743612][T10972] _copy_to_user+0x31/0xb0 [ 213.748032][T10972] simple_read_from_buffer+0xca/0x150 [ 213.753428][T10972] proc_fail_nth_read+0x1e9/0x250 [ 213.758466][T10972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.764020][T10972] ? rw_verify_area+0x55e/0x6f0 [ 213.768885][T10972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.774447][T10972] vfs_read+0x1fc/0xb70 [ 213.778641][T10972] ? fdget_pos+0x24e/0x320 [ 213.783068][T10972] ? __pfx_vfs_read+0x10/0x10 [ 213.787754][T10972] ? __fget_files+0x3f3/0x470 [ 213.792441][T10972] ? fdget_pos+0x24e/0x320 [ 213.796873][T10972] ksys_read+0x183/0x2b0 [ 213.801124][T10972] ? __pfx_ksys_read+0x10/0x10 [ 213.805918][T10972] ? do_syscall_64+0x100/0x230 [ 213.810695][T10972] ? do_syscall_64+0xb6/0x230 [ 213.815384][T10972] do_syscall_64+0xf3/0x230 [ 213.819906][T10972] ? clear_bhb_loop+0x35/0x90 [ 213.824592][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.830499][T10972] RIP: 0033:0x7ff7b197d25c [ 213.835002][T10972] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 213.854611][T10972] RSP: 002b:00007ff7b26f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.863050][T10972] RAX: ffffffffffffffda RBX: 00007ff7b1b35fa0 RCX: 00007ff7b197d25c [ 213.871027][T10972] RDX: 000000000000000f RSI: 00007ff7b26f00a0 RDI: 0000000000000005 [ 213.879001][T10972] RBP: 00007ff7b26f0090 R08: 0000000000000000 R09: 0000000000000000 [ 213.886982][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.894960][T10972] R13: 0000000000000000 R14: 00007ff7b1b35fa0 R15: 00007ffea76436a8 [ 213.902948][T10972] [ 213.938249][T10869] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.945554][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.996040][T10869] bridge_slave_0: entered allmulticast mode [ 214.018446][T10869] bridge_slave_0: entered promiscuous mode [ 214.132397][T10869] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.148236][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.155524][T10869] bridge_slave_1: entered allmulticast mode [ 214.163339][T10869] bridge_slave_1: entered promiscuous mode [ 214.368626][T10869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.439828][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 214.458732][T10869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.613212][ T52] hsr_slave_0: left promiscuous mode [ 214.627873][ T52] hsr_slave_1: left promiscuous mode [ 214.638197][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.645624][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.662182][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.670506][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.700373][ T52] veth1_macvtap: left promiscuous mode [ 214.706678][ T52] veth0_macvtap: left promiscuous mode [ 214.713853][ T52] veth1_vlan: left promiscuous mode [ 214.726105][ T52] veth0_vlan: left promiscuous mode [ 215.156088][ T52] team0 (unregistering): Port device team_slave_1 removed [ 215.192822][ T52] team0 (unregistering): Port device team_slave_0 removed [ 215.207842][ T5845] Bluetooth: hci0: command tx timeout [ 215.287364][ T5845] Bluetooth: hci4: command tx timeout [ 215.634233][T10869] team0: Port device team_slave_0 added [ 215.658911][T10869] team0: Port device team_slave_1 added [ 215.720190][T10869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.736398][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.806526][T10869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.830253][T10838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.864112][T10838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.866187][T11030] openvswitch: netlink: Actions may not be safe on all matching packets [ 215.883403][T10869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.895961][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.923863][T10869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.939661][T10838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.988000][T10838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.059897][T10869] hsr_slave_0: entered promiscuous mode [ 216.073771][T10869] hsr_slave_1: entered promiscuous mode [ 216.087410][T10869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.095176][T10869] Cannot create hsr debugfs directory [ 216.356522][T10838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.423643][T10838] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.445428][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.452617][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.500181][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.507295][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.532218][T11049] netlink: 'syz.2.1500': attribute type 10 has an invalid length. [ 216.780826][T10869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.801383][T10869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.848162][T10869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.895894][T10869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.075053][T10838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.120699][T11078] netlink: 'syz.2.1506': attribute type 5 has an invalid length. [ 217.169356][T10869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.181563][T10838] veth0_vlan: entered promiscuous mode [ 217.189111][T11082] netlink: 'syz.2.1506': attribute type 5 has an invalid length. [ 217.206567][T10838] veth1_vlan: entered promiscuous mode [ 217.264762][T10869] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.288485][ T5845] Bluetooth: hci0: command tx timeout [ 217.295124][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.302308][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.314120][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.321364][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.332832][T10838] veth0_macvtap: entered promiscuous mode [ 217.351270][T11084] __nla_validate_parse: 2 callbacks suppressed [ 217.351286][T11084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1508'. [ 217.371945][ T5845] Bluetooth: hci4: command tx timeout [ 217.386093][T10838] veth1_macvtap: entered promiscuous mode [ 217.434995][T11084] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1508'. [ 217.449826][T11084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1508'. [ 217.474925][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.512233][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.548732][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.574163][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.589047][T10838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.623700][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.653454][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.684106][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.714223][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.726453][T10838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.765963][T10838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.786015][T10838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.808293][T10838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.836272][T10838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.950291][T10869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.987561][T10869] veth0_vlan: entered promiscuous mode [ 218.020447][T10869] veth1_vlan: entered promiscuous mode [ 218.037251][T11104] netlink: 'syz.4.1515': attribute type 2 has an invalid length. [ 218.062608][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.071254][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.095446][T11108] veth0_to_hsr: invalid flags given to default FDB implementation [ 218.188901][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.205090][T10869] veth0_macvtap: entered promiscuous mode [ 218.225217][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.261129][T10869] veth1_macvtap: entered promiscuous mode [ 218.330130][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.366260][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.400837][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.420972][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.440996][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.453024][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.466592][T10869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.504744][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.517868][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.528627][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.539595][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.549488][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.560570][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.592648][T10869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.667575][T11133] xt_NFQUEUE: number of total queues is 0 [ 218.720558][T10869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.747239][T10869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.756082][T10869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.773236][T10869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.907757][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1525'. [ 218.920504][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.936183][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.969430][T11145] bridge0: port 3(erspan0) entered blocking state [ 218.987224][T11145] bridge0: port 3(erspan0) entered disabled state [ 218.997491][T11145] erspan0: entered allmulticast mode [ 219.012869][T11145] erspan0: entered promiscuous mode [ 219.072862][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.086427][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.105371][T11151] netlink: 'syz.2.1529': attribute type 2 has an invalid length. [ 219.127532][T11151] netlink: 'syz.2.1529': attribute type 8 has an invalid length. [ 219.135303][T11151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1529'. [ 219.297448][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'. [ 219.330074][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.723058][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.121590][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.184495][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.413977][ T35] bridge_slave_1: left allmulticast mode [ 220.421439][ T35] bridge_slave_1: left promiscuous mode [ 220.437406][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.496150][ T35] bridge_slave_0: left allmulticast mode [ 220.515757][ T35] bridge_slave_0: left promiscuous mode [ 220.523246][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.731252][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.748733][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.756430][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.768112][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.775699][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.791607][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.976244][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.993367][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.004510][ T35] bond0 (unregistering): Released all slaves [ 221.016237][T11169] delete_channel: no stack [ 221.044949][T11177] lo speed is unknown, defaulting to 1000 [ 221.260396][ T35] hsr_slave_0: left promiscuous mode [ 221.266374][ T35] hsr_slave_1: left promiscuous mode [ 221.281539][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.289240][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.299049][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.306456][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.328811][ T35] veth1_macvtap: left promiscuous mode [ 221.334325][ T35] veth0_macvtap: left promiscuous mode [ 221.340415][ T35] veth1_vlan: left promiscuous mode [ 221.345709][ T35] veth0_vlan: left promiscuous mode [ 221.740581][ T35] team0 (unregistering): Port device team_slave_1 removed [ 221.776217][ T35] team0 (unregistering): Port device team_slave_0 removed [ 222.194141][T11177] chnl_net:caif_netlink_parms(): no params data found [ 222.418646][T11177] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.441548][T11177] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.467898][T11177] bridge_slave_0: entered allmulticast mode [ 222.492191][T11177] bridge_slave_0: entered promiscuous mode [ 222.521619][T11177] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.543418][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.546311][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.568917][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.576723][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.584907][T11177] bridge_slave_1: entered allmulticast mode [ 222.608413][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.628356][T11177] bridge_slave_1: entered promiscuous mode [ 222.634413][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.642622][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.656650][T11209] Unsupported ieee802154 address type: 0 [ 222.703423][T11177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.717252][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1543'. [ 222.756165][T11177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.804062][T11177] team0: Port device team_slave_0 added [ 222.848330][T11177] team0: Port device team_slave_1 added [ 222.886489][T11203] lo speed is unknown, defaulting to 1000 [ 222.898933][ T5845] Bluetooth: hci0: command tx timeout [ 222.916232][T11177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.929882][T11177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.958410][T11177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.988998][T11177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.006250][T11177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.088568][T11177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.245362][T11231] SET target dimension over the limit! [ 223.358582][T11177] hsr_slave_0: entered promiscuous mode [ 223.378518][T11235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1551'. [ 223.388737][T11177] hsr_slave_1: entered promiscuous mode [ 223.406143][T11177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.430418][T11177] Cannot create hsr debugfs directory [ 223.521993][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.710841][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.792041][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1558'. [ 223.817338][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1558'. [ 223.850566][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.967158][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.989576][T11261] bridge_slave_0: left allmulticast mode [ 223.995468][T11261] bridge_slave_0: left promiscuous mode [ 224.001472][T11261] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.015753][T11261] bridge_slave_1: left allmulticast mode [ 224.025574][T11261] bridge_slave_1: left promiscuous mode [ 224.035020][T11261] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.052266][T11261] : (slave bond_slave_1): Releasing backup interface [ 224.064079][T11261] bond_slave_1: left promiscuous mode [ 224.091477][T11261] team0: Port device team_slave_0 removed [ 224.105106][T11261] team0: Port device team_slave_1 removed [ 224.112671][T11261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.120530][T11261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.130028][T11261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.138343][T11261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.151480][T11261] : (slave wlan1): Releasing backup interface [ 224.159099][T11261] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 224.204974][T11265] team0: Mode changed to "random" [ 224.250529][T11203] chnl_net:caif_netlink_parms(): no params data found [ 224.410789][ T35] bridge_slave_1: left allmulticast mode [ 224.416482][ T35] bridge_slave_1: left promiscuous mode [ 224.445655][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.465800][ T35] bridge_slave_0: left allmulticast mode [ 224.477444][ T35] bridge_slave_0: left promiscuous mode [ 224.493517][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.664431][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 224.727215][ T5845] Bluetooth: hci4: command tx timeout [ 224.872650][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.884431][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.895450][ T35] bond0 (unregistering): Released all slaves [ 224.960796][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.979858][ T5845] Bluetooth: hci0: command tx timeout [ 224.991925][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.037152][T11203] bridge_slave_0: entered allmulticast mode [ 225.044406][T11203] bridge_slave_0: entered promiscuous mode [ 225.095138][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.104640][T11296] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1569'. [ 225.113864][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.124976][T11203] bridge_slave_1: entered allmulticast mode [ 225.144515][T11203] bridge_slave_1: entered promiscuous mode [ 225.259945][T11203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.314936][T11302] ipt_REJECT: ECHOREPLY no longer supported. [ 225.322773][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 225.339831][T11203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.359705][T11305] ipt_REJECT: ECHOREPLY no longer supported. [ 225.482644][ T35] hsr_slave_0: left promiscuous mode [ 225.500473][ T35] hsr_slave_1: left promiscuous mode [ 225.507629][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.515089][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.538291][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.545721][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.614177][ T35] veth1_macvtap: left promiscuous mode [ 225.634030][ T35] veth0_macvtap: left promiscuous mode [ 225.641225][ T35] veth1_vlan: left promiscuous mode [ 225.657509][ T35] veth0_vlan: left promiscuous mode [ 225.674779][T11326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1577'. [ 226.111858][ T35] team0 (unregistering): Port device team_slave_1 removed [ 226.154818][ T35] team0 (unregistering): Port device team_slave_0 removed [ 226.566234][T11203] team0: Port device team_slave_0 added [ 226.573137][T11321] netlink: 'syz.3.1575': attribute type 10 has an invalid length. [ 226.592509][T11321] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 226.601598][T11321] : (slave wlan1): Enslaving as an active interface with an up link [ 226.618898][T11203] team0: Port device team_slave_1 added [ 226.753921][T11203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.778062][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.817421][ T5845] Bluetooth: hci4: command tx timeout [ 226.821275][T11203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.860045][T11203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.871159][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.898521][T11203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.941320][T11342] netlink: 'syz.2.1581': attribute type 13 has an invalid length. [ 226.952143][T11342] veth0_macvtap: left promiscuous mode [ 226.997225][T11342] macvtap0: entered allmulticast mode [ 227.031021][T11342] macvtap0: refused to change device tx_queue_len [ 227.047917][ T5845] Bluetooth: hci0: command tx timeout [ 227.089034][T11177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.128000][T11177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.168679][T11203] hsr_slave_0: entered promiscuous mode [ 227.189686][T11203] hsr_slave_1: entered promiscuous mode [ 227.197694][T11203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.207073][T11203] Cannot create hsr debugfs directory [ 227.214374][T11177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.240246][T11177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.473844][T11356] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 227.485295][T11356] team0: Device ipvlan0 is already an upper device of the team interface [ 227.550922][T11359] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 227.577047][T11359] team0: Device ipvlan0 is already an upper device of the team interface [ 227.655087][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1587'. [ 227.667413][T11356] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 227.765104][T11177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.797429][T11373] netlink: 'syz.4.1590': attribute type 4 has an invalid length. [ 227.822588][T11177] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.839846][T11367] netlink: 'syz.4.1590': attribute type 4 has an invalid length. [ 227.877860][T11371] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1591'. [ 227.892310][ T5891] lo speed is unknown, defaulting to 1000 [ 227.906638][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.913780][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.930117][T11371] syzkaller0: entered allmulticast mode [ 227.985311][T11378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.015243][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.022429][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.109591][T11378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.128247][T11382] netlink: 31464 bytes leftover after parsing attributes in process `syz.2.1593'. [ 228.249146][T11378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.268896][T11203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.289055][T11203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.289825][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 228.340387][T11378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.367703][T11203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.377856][T11203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.472799][T11378] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.513713][T11378] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.575050][T11378] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.593956][T11391] lo speed is unknown, defaulting to 1000 [ 228.615534][T11378] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.759045][T11203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.833883][T11203] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.855162][ T5894] IPVS: starting estimator thread 0... [ 228.870170][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.877315][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.890737][T11177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.913623][ T5845] Bluetooth: hci4: command tx timeout [ 228.930342][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.937476][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.001940][T11400] IPVS: using max 18 ests per chain, 43200 per kthread [ 229.012135][T11203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.069857][T11177] veth0_vlan: entered promiscuous mode [ 229.101611][T11177] veth1_vlan: entered promiscuous mode [ 229.127682][ T5845] Bluetooth: hci0: command tx timeout [ 229.200315][T11177] veth0_macvtap: entered promiscuous mode [ 229.246696][T11177] veth1_macvtap: entered promiscuous mode [ 229.277922][T11177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.292148][T11177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.303428][T11177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.313282][T11177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.325287][T11177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.336334][T11177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.348412][T11177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.357752][T11177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.366472][T11177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.375504][T11177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.569307][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.578045][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.641420][T11429] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.660197][T11429] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.677336][T11429] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.695903][T11429] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.716477][T11429] geneve3: entered promiscuous mode [ 229.736408][T11429] geneve3: entered allmulticast mode [ 229.765240][T11203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.862175][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.884072][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.002174][T11203] veth0_vlan: entered promiscuous mode [ 230.003854][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 230.040451][T11203] veth1_vlan: entered promiscuous mode [ 230.125685][T11203] veth0_macvtap: entered promiscuous mode [ 230.149884][T11203] veth1_macvtap: entered promiscuous mode [ 230.193411][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.216266][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.238270][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.263676][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.288597][T11203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.348591][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.382813][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.407508][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.421246][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.438746][T11203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.467497][T11203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.476373][T11203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.486021][T11203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.498424][T11203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.720285][ T139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.891180][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.925553][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.933823][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.947009][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.967193][ T5845] Bluetooth: hci4: command tx timeout [ 231.123043][ T139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.395951][ T139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.482300][ T139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.565421][ T139] bridge_slave_1: left allmulticast mode [ 231.572322][ T139] bridge_slave_1: left promiscuous mode [ 231.578884][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.588972][ T139] bridge_slave_0: left allmulticast mode [ 231.594628][ T139] bridge_slave_0: left promiscuous mode [ 231.600750][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.909166][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 231.929577][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 232.160565][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.188498][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.210024][ T139] bond0 (unregistering): Released all slaves [ 232.248575][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.257447][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1618'. [ 232.276198][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.298015][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.322775][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.335957][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.345105][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.419782][T11476] lo speed is unknown, defaulting to 1000 [ 232.524257][ T139] hsr_slave_0: left promiscuous mode [ 232.530823][ T139] hsr_slave_1: left promiscuous mode [ 232.539445][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.547265][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.554938][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.562782][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.588048][ T139] veth1_macvtap: left promiscuous mode [ 232.594039][ T139] veth0_macvtap: left promiscuous mode [ 232.605690][ T139] veth1_vlan: left promiscuous mode [ 232.611497][ T139] veth0_vlan: left promiscuous mode [ 233.003035][ T139] team0 (unregistering): Port device team_slave_1 removed [ 233.040357][ T139] team0 (unregistering): Port device team_slave_0 removed [ 233.452439][T11476] chnl_net:caif_netlink_parms(): no params data found [ 233.566614][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.574108][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.587003][T11476] bridge_slave_0: entered allmulticast mode [ 233.594139][T11476] bridge_slave_0: entered promiscuous mode [ 233.602933][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.610779][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.618623][T11476] bridge_slave_1: entered allmulticast mode [ 233.625830][T11476] bridge_slave_1: entered promiscuous mode [ 233.654867][T11476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.667801][T11476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.703523][T11476] team0: Port device team_slave_0 added [ 233.712608][T11476] team0: Port device team_slave_1 added [ 233.748824][T11476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.756153][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.841253][T11476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.856967][T11487] openvswitch: netlink: Message has 1 unknown bytes. [ 233.863691][T11487] openvswitch: netlink: Actions may not be safe on all matching packets [ 233.879732][T11476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.898614][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.926321][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 233.953633][T11476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.134368][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.144258][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.158099][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.166567][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.177519][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 234.181919][ T139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.200075][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.296548][ T139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.325086][T11476] hsr_slave_0: entered promiscuous mode [ 234.333216][T11476] hsr_slave_1: entered promiscuous mode [ 234.341161][T11476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.350798][T11476] Cannot create hsr debugfs directory [ 234.383741][ T139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.409497][ T5842] Bluetooth: hci0: command tx timeout [ 234.513211][ T139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.527716][T11493] lo speed is unknown, defaulting to 1000 [ 234.603883][T11508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1626'. [ 234.991814][ T139] bridge_slave_1: left allmulticast mode [ 234.998522][ T139] bridge_slave_1: left promiscuous mode [ 235.004703][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.037433][ T139] bridge_slave_0: left allmulticast mode [ 235.043125][ T139] bridge_slave_0: left promiscuous mode [ 235.073299][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.190843][T11528] sctp: [Deprecated]: syz.2.1630 (pid 11528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.190843][T11528] Use struct sctp_sack_info instead [ 235.211045][T11528] sctp: [Deprecated]: syz.2.1630 (pid 11528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.211045][T11528] Use struct sctp_sack_info instead [ 235.471376][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.484364][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.495796][ T139] bond0 (unregistering): Released all slaves [ 235.546171][T11493] chnl_net:caif_netlink_parms(): no params data found [ 235.762265][T11493] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.771326][T11493] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.784369][T11493] bridge_slave_0: entered allmulticast mode [ 235.794787][T11493] bridge_slave_0: entered promiscuous mode [ 235.804605][T11534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1632'. [ 235.836574][ T139] hsr_slave_0: left promiscuous mode [ 235.843418][ T139] hsr_slave_1: left promiscuous mode [ 235.850374][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.861241][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.870434][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.879876][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.924837][ T139] veth1_macvtap: left promiscuous mode [ 235.933471][ T139] veth0_macvtap: left promiscuous mode [ 235.940427][ T139] veth1_vlan: left promiscuous mode [ 235.945759][ T139] veth0_vlan: left promiscuous mode [ 236.073917][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 236.248315][ T5842] Bluetooth: hci4: command tx timeout [ 236.487184][ T5842] Bluetooth: hci0: command tx timeout [ 236.506986][ T139] team0 (unregistering): Port device team_slave_1 removed [ 236.548108][ T139] team0 (unregistering): Port device team_slave_0 removed [ 236.930630][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.938458][T11493] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.945593][T11493] bridge_slave_1: entered allmulticast mode [ 236.954605][T11493] bridge_slave_1: entered promiscuous mode [ 236.979956][T11476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.041880][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1634'. [ 237.132915][T11476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.163110][T11549] openvswitch: netlink: Actions may not be safe on all matching packets [ 237.180516][T11476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.239765][T11493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.261947][T11493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.291072][T11476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.392747][T11493] team0: Port device team_slave_0 added [ 237.431794][T11493] team0: Port device team_slave_1 added [ 237.591265][T11493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.608382][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.643798][T11493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.667994][T11493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.675071][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.708376][T11493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.865187][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1648'. [ 237.883258][T11493] hsr_slave_0: entered promiscuous mode [ 237.935337][T11493] hsr_slave_1: entered promiscuous mode [ 237.948626][T11493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.961985][T11493] Cannot create hsr debugfs directory [ 238.104370][T11476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.166482][T11476] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.288571][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.295739][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.319658][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.326836][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.327622][ T5842] Bluetooth: hci4: command tx timeout [ 238.385219][T11593] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1653'. [ 238.421601][T11596] netlink: 'syz.3.1653': attribute type 11 has an invalid length. [ 238.577991][ T5842] Bluetooth: hci0: command tx timeout [ 238.723249][T11605] netlink: 'syz.4.1656': attribute type 63 has an invalid length. [ 238.749465][T11605] netlink: 'syz.4.1656': attribute type 63 has an invalid length. [ 238.781190][ T8333] lo speed is unknown, defaulting to 1000 [ 238.830744][T11476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.887974][T11493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.912152][T11493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.948818][T11493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.974749][T11493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.121751][T11476] veth0_vlan: entered promiscuous mode [ 239.230005][T11476] veth1_vlan: entered promiscuous mode [ 239.283535][T11493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.331399][T11476] veth0_macvtap: entered promiscuous mode [ 239.376019][T11476] veth1_macvtap: entered promiscuous mode [ 239.395187][T11493] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.429702][T11476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.442338][T11476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.458086][T11476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.473607][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.480810][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.491544][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 239.503061][T11633] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1664'. [ 239.515714][T11476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.528479][T11476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.541027][T11476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.566529][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.573716][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.619631][T11476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.641100][T11476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.661873][T11476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.680182][T11476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.868701][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.891598][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.930430][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.952954][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.968134][T11642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1668'. [ 240.240817][T11493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.407693][ T5845] Bluetooth: hci4: command tx timeout [ 240.492304][T11493] veth0_vlan: entered promiscuous mode [ 240.520023][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 240.547672][T11493] veth1_vlan: entered promiscuous mode [ 240.606251][T11493] veth0_macvtap: entered promiscuous mode [ 240.621369][T11493] veth1_macvtap: entered promiscuous mode [ 240.664231][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 240.796650][ T3016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.841264][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.868192][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.897458][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.927550][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.948684][T11493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.970954][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.997598][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.017619][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.037068][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.059015][T11493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.090209][T11493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.107510][T11493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.116235][T11493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.135983][T11493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.203962][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.215911][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.246300][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.255051][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.314486][ T3016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.586578][ T3016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.682349][ T3016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.772189][ T3016] bridge_slave_1: left allmulticast mode [ 241.778020][ T3016] bridge_slave_1: left promiscuous mode [ 241.783705][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.792662][ T3016] bridge_slave_0: left allmulticast mode [ 241.798830][ T3016] bridge_slave_0: left promiscuous mode [ 241.804539][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.277936][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.288347][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.301096][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.310131][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.318839][ T5152] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.327907][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.410247][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.422940][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.434491][ T3016] bond0 (unregistering): Released all slaves [ 242.455046][T11690] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.463912][T11690] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.472281][T11690] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.480548][T11690] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.489150][ T5152] Bluetooth: hci4: command 0x0419 tx timeout [ 242.740397][T11705] bridge0: left allmulticast mode [ 242.761477][T11694] lo speed is unknown, defaulting to 1000 [ 242.798726][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 242.945153][T11705] netlink: 'syz.4.1687': attribute type 9 has an invalid length. [ 242.953475][T11705] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1687'. [ 242.962964][T11705] openvswitch: netlink: Port 134218868 exceeds max allowable 65535 [ 242.974346][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1687'. [ 243.095395][ T3016] hsr_slave_0: left promiscuous mode [ 243.114642][ T3016] hsr_slave_1: left promiscuous mode [ 243.125414][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.145403][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.156506][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.174316][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.231541][ T3016] veth1_macvtap: left promiscuous mode [ 243.246017][ T3016] veth0_macvtap: left promiscuous mode [ 243.253316][ T3016] veth1_vlan: left promiscuous mode [ 243.267094][ T3016] veth0_vlan: left promiscuous mode [ 243.845062][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 243.904248][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 244.379054][T11694] chnl_net:caif_netlink_parms(): no params data found [ 244.409470][ T5842] Bluetooth: hci0: command tx timeout [ 244.519825][T11694] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.542813][T11694] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.550504][T11694] bridge_slave_0: entered allmulticast mode [ 244.558315][T11694] bridge_slave_0: entered promiscuous mode [ 244.565994][T11694] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.573585][T11694] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.582026][T11694] bridge_slave_1: entered allmulticast mode [ 244.589792][T11694] bridge_slave_1: entered promiscuous mode [ 244.615678][T11694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.629966][T11694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.677987][T11694] team0: Port device team_slave_0 added [ 244.686620][T11694] team0: Port device team_slave_1 added [ 244.711097][T11694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.718988][T11694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.745458][T11694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.760079][T11694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.767912][T11694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.796228][T11694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.838636][T11694] hsr_slave_0: entered promiscuous mode [ 244.844982][T11694] hsr_slave_1: entered promiscuous mode [ 244.851266][T11694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.859707][T11694] Cannot create hsr debugfs directory [ 244.904131][ T3016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.977910][ T3016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.063796][ T3016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.229687][T11740] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.1697'. [ 245.249284][T11740] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1697'. [ 245.257590][ T3016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.575109][ T3016] bridge_slave_1: left allmulticast mode [ 245.587934][ T3016] bridge_slave_1: left promiscuous mode [ 245.609716][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.714683][ T3016] bridge_slave_0: left allmulticast mode [ 245.721834][ T3016] bridge_slave_0: left promiscuous mode [ 245.729682][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.739187][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.747718][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.777457][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.785807][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.797808][ T5152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 245.808158][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.099833][T11772] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 246.107992][T11772] netlink: 1136 bytes leftover after parsing attributes in process `syz.3.1705'. [ 246.119025][T11772] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1705'. [ 246.128051][T11772] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 246.135978][T11772] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.1705'. [ 246.462639][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.475447][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.487336][ T5152] Bluetooth: hci0: command tx timeout [ 246.488819][ T3016] bond0 (unregistering): Released all slaves [ 246.724513][T11754] lo speed is unknown, defaulting to 1000 [ 246.761363][T11789] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 246.810357][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.828588][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.836673][T11694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.973971][T11694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.052133][T11694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.079832][T11694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.122524][ T3016] hsr_slave_0: left promiscuous mode [ 247.141084][ T3016] hsr_slave_1: left promiscuous mode [ 247.152553][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.160512][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.178353][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.185805][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.226420][ T3016] veth1_macvtap: left promiscuous mode [ 247.253552][ T3016] veth0_macvtap: left promiscuous mode [ 247.260387][ T3016] veth1_vlan: left promiscuous mode [ 247.265735][ T3016] veth0_vlan: left promiscuous mode [ 247.796634][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 247.836319][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 247.847691][ T5152] Bluetooth: hci4: command tx timeout [ 248.352512][T11754] chnl_net:caif_netlink_parms(): no params data found [ 248.567224][ T5152] Bluetooth: hci0: command tx timeout [ 248.696343][T11694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.826721][T11754] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.845244][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.865220][T11754] bridge_slave_0: entered allmulticast mode [ 248.878342][T11754] bridge_slave_0: entered promiscuous mode [ 248.898236][T11754] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.905379][T11754] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.922355][T11754] bridge_slave_1: entered allmulticast mode [ 248.942671][T11754] bridge_slave_1: entered promiscuous mode [ 249.001095][T11694] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.101092][T11754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.120802][T11754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.133556][T11851] netlink: 'syz.3.1725': attribute type 32 has an invalid length. [ 249.145773][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 249.189560][T11851] (unnamed net_device) (uninitialized): option coupled_control: invalid value (255) [ 249.303926][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.311147][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.321701][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.328884][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.361021][T11851] netlink: 'syz.3.1725': attribute type 5 has an invalid length. [ 249.373282][T11754] team0: Port device team_slave_0 added [ 249.419795][T11754] team0: Port device team_slave_1 added [ 249.544459][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 249.553663][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1728'. [ 249.553692][T11863] netlink: 'syz.2.1728': attribute type 1 has an invalid length. [ 249.553708][T11863] netlink: 'syz.2.1728': attribute type 1 has an invalid length. [ 249.553724][T11863] netlink: 'syz.2.1728': attribute type 2 has an invalid length. [ 249.553750][T11863] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1728'. [ 249.607762][T11867] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 249.621994][T11754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.629237][T11754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.663836][T11754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.681497][T11754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.696959][T11754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.786379][T11754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.804342][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1731'. [ 249.935423][ T5152] Bluetooth: hci4: command tx timeout [ 250.070035][T11754] hsr_slave_0: entered promiscuous mode [ 250.092963][T11754] hsr_slave_1: entered promiscuous mode [ 250.106142][T11754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.127870][T11754] Cannot create hsr debugfs directory [ 250.133630][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.134492][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.140120][T11883] ip6tnl3: entered promiscuous mode [ 250.153148][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.167340][T11883] ip6tnl3: entered allmulticast mode [ 250.215012][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.215694][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.248277][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.288401][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.316612][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.356676][T11896] Bluetooth: MGMT ver 1.23 [ 250.374668][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.377907][T11892] syz.4.1736[11892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.536677][T11694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.597598][T11694] veth0_vlan: entered promiscuous mode [ 250.610645][T11694] veth1_vlan: entered promiscuous mode [ 250.616588][T11903] __nla_validate_parse: 3 callbacks suppressed [ 250.616603][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 250.635736][T11694] veth0_macvtap: entered promiscuous mode [ 250.645830][T11694] veth1_macvtap: entered promiscuous mode [ 250.660743][ T5842] Bluetooth: hci0: command tx timeout [ 250.660920][T11694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.677683][T11694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.689621][T11694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.706552][T11694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.718025][T11694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.730374][T11694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.740623][T11694] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.750244][T11694] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.759602][T11694] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.768940][T11694] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.835327][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1743'. [ 250.836430][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 250.861278][T11910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1745'. [ 250.967224][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.975371][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.056344][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.078203][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.193971][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 251.251360][T11754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.289475][T11754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.313161][T11754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.329177][T11922] netlink: 'syz.4.1750': attribute type 2 has an invalid length. [ 251.340300][T11754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.541171][T11754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.581760][T11754] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.608869][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.616051][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.647676][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.654873][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.751614][T11754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.953229][T11950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1757'. [ 252.008564][ T5842] Bluetooth: hci4: command tx timeout [ 252.152157][T11754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.201446][T11754] veth0_vlan: entered promiscuous mode [ 252.213738][T11754] veth1_vlan: entered promiscuous mode [ 252.241208][T11754] veth0_macvtap: entered promiscuous mode [ 252.250615][T11754] veth1_macvtap: entered promiscuous mode [ 252.267344][T11754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.278237][T11754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.288326][T11754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.299074][T11754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.311398][T11754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.321481][T11754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.332079][T11754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.342276][T11754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.353012][T11754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.364897][T11957] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1759'. [ 252.368986][T11754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.385033][T11754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.393842][T11754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.402839][T11754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.412669][T11754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.438955][ T5152] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 252.517660][T11961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1761'. [ 252.519660][T11700] ================================================================== [ 252.534721][T11700] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 252.541214][T11964] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 252.542892][T11700] Read of size 8 at addr ffff88802e615308 by task kbnepd bnep0/11700 [ 252.558689][T11700] [ 252.561065][T11700] CPU: 0 UID: 0 PID: 11700 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 252.572043][T11700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 252.582158][T11700] Call Trace: [ 252.585458][T11700] [ 252.588408][T11700] dump_stack_lvl+0x241/0x360 [ 252.593120][T11700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.598352][T11700] ? __pfx__printk+0x10/0x10 [ 252.602975][T11700] ? _printk+0xd5/0x120 [ 252.607170][T11700] ? __virt_addr_valid+0x183/0x530 [ 252.612313][T11700] ? __virt_addr_valid+0x183/0x530 [ 252.617453][T11700] print_report+0x169/0x550 [ 252.622049][T11700] ? __virt_addr_valid+0x183/0x530 [ 252.627170][T11700] ? __virt_addr_valid+0x183/0x530 [ 252.632314][T11700] ? __virt_addr_valid+0x45f/0x530 [ 252.637467][T11700] ? __phys_addr+0xba/0x170 [ 252.642001][T11700] ? device_for_each_child+0xbb/0x1b0 [ 252.647396][T11700] kasan_report+0x143/0x180 [ 252.651916][T11700] ? device_for_each_child+0xbb/0x1b0 [ 252.657315][T11700] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 252.662785][T11700] device_for_each_child+0xbb/0x1b0 [ 252.668007][T11700] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.674345][T11700] ? __pfx_device_for_each_child+0x10/0x10 [ 252.680167][T11700] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.685404][T11700] ? lockdep_hardirqs_on+0x99/0x150 [ 252.690660][T11700] pm_runtime_set_memalloc_noio+0x114/0x260 [ 252.696560][T11700] netdev_unregister_kobject+0x178/0x250 [ 252.702198][T11700] unregister_netdevice_many_notify+0x1851/0x1da0 [ 252.708642][T11700] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 252.715432][T11700] ? do_raw_spin_unlock+0x13c/0x8b0 [ 252.720680][T11700] ? __mutex_lock+0x52a/0xd70 [ 252.725363][T11700] unregister_netdevice_queue+0x303/0x370 [ 252.731099][T11700] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 252.737370][T11700] ? down_write+0x18c/0x220 [ 252.741891][T11700] ? __pfx_down_write+0x10/0x10 [ 252.746760][T11700] unregister_netdev+0x1c/0x30 [ 252.751539][T11700] bnep_session+0x2e0e/0x3000 [ 252.756231][T11700] ? __pfx_bnep_session+0x10/0x10 [ 252.761259][T11700] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 252.767158][T11700] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 252.773508][T11700] ? __pfx_woken_wake_function+0x10/0x10 [ 252.779168][T11700] ? __kthread_parkme+0x169/0x1d0 [ 252.784226][T11700] ? __pfx_bnep_session+0x10/0x10 [ 252.789280][T11700] kthread+0x2f0/0x390 [ 252.793393][T11700] ? __pfx_bnep_session+0x10/0x10 [ 252.798429][T11700] ? __pfx_kthread+0x10/0x10 [ 252.803020][T11700] ret_from_fork+0x4b/0x80 [ 252.807458][T11700] ? __pfx_kthread+0x10/0x10 [ 252.812067][T11700] ret_from_fork_asm+0x1a/0x30 [ 252.816844][T11700] [ 252.819875][T11700] [ 252.822218][T11700] Allocated by task 11694: [ 252.826647][T11700] kasan_save_track+0x3f/0x80 [ 252.831351][T11700] __kasan_kmalloc+0x98/0xb0 [ 252.835968][T11700] __kmalloc_noprof+0x1fc/0x400 [ 252.840849][T11700] hci_alloc_dev_priv+0x27/0x2030 [ 252.845880][T11700] vhci_create_device+0x116/0x6a0 [ 252.850902][T11700] vhci_write+0x3cf/0x490 [ 252.855241][T11700] vfs_write+0xaeb/0xd30 [ 252.859516][T11700] ksys_write+0x183/0x2b0 [ 252.863843][T11700] do_syscall_64+0xf3/0x230 [ 252.868362][T11700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.874270][T11700] [ 252.876604][T11700] Freed by task 11694: [ 252.880675][T11700] kasan_save_track+0x3f/0x80 [ 252.885371][T11700] kasan_save_free_info+0x40/0x50 [ 252.890421][T11700] __kasan_slab_free+0x59/0x70 [ 252.895185][T11700] kfree+0x1a0/0x440 [ 252.899084][T11700] hci_release_dev+0x1525/0x16b0 [ 252.904032][T11700] bt_host_release+0x83/0x90 [ 252.908663][T11700] device_release+0x99/0x1c0 [ 252.913257][T11700] kobject_put+0x22f/0x480 [ 252.917685][T11700] vhci_release+0x88/0xd0 [ 252.922027][T11700] __fput+0x23f/0x880 [ 252.926014][T11700] task_work_run+0x24f/0x310 [ 252.930613][T11700] do_exit+0xa2f/0x28e0 [ 252.934789][T11700] do_group_exit+0x207/0x2c0 [ 252.939409][T11700] __x64_sys_exit_group+0x3f/0x40 [ 252.944467][T11700] x64_sys_call+0x2634/0x2640 [ 252.949167][T11700] do_syscall_64+0xf3/0x230 [ 252.953686][T11700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.959580][T11700] [ 252.961899][T11700] Last potentially related work creation: [ 252.967604][T11700] kasan_save_stack+0x3f/0x60 [ 252.972282][T11700] __kasan_record_aux_stack+0xac/0xc0 [ 252.977674][T11700] insert_work+0x3e/0x330 [ 252.982062][T11700] __queue_work+0xb66/0xf50 [ 252.986590][T11700] queue_work_on+0x1c2/0x380 [ 252.991201][T11700] process_scheduled_works+0xa63/0x1850 [ 252.996764][T11700] worker_thread+0x870/0xd30 [ 253.001371][T11700] kthread+0x2f0/0x390 [ 253.005474][T11700] ret_from_fork+0x4b/0x80 [ 253.009896][T11700] ret_from_fork_asm+0x1a/0x30 [ 253.014666][T11700] [ 253.016987][T11700] Second to last potentially related work creation: [ 253.023562][T11700] kasan_save_stack+0x3f/0x60 [ 253.028248][T11700] __kasan_record_aux_stack+0xac/0xc0 [ 253.033651][T11700] insert_work+0x3e/0x330 [ 253.038007][T11700] __queue_work+0xc8b/0xf50 [ 253.042531][T11700] call_timer_fn+0x18e/0x650 [ 253.047126][T11700] __run_timer_base+0x695/0x8e0 [ 253.051983][T11700] run_timer_softirq+0xb7/0x170 [ 253.056865][T11700] handle_softirqs+0x2c5/0x980 [ 253.061659][T11700] __irq_exit_rcu+0xf4/0x1c0 [ 253.066279][T11700] irq_exit_rcu+0x9/0x30 [ 253.070527][T11700] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 253.076166][T11700] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 253.082169][T11700] [ 253.084506][T11700] The buggy address belongs to the object at ffff88802e614000 [ 253.084506][T11700] which belongs to the cache kmalloc-8k of size 8192 [ 253.098574][T11700] The buggy address is located 4872 bytes inside of [ 253.098574][T11700] freed 8192-byte region [ffff88802e614000, ffff88802e616000) [ 253.112631][T11700] [ 253.114978][T11700] The buggy address belongs to the physical page: [ 253.121409][T11700] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e610 [ 253.130187][T11700] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 253.138706][T11700] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 253.146267][T11700] page_type: f5(slab) [ 253.150259][T11700] raw: 00fff00000000040 ffff88801ac42280 ffffea0001a49000 dead000000000002 [ 253.158856][T11700] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 253.167450][T11700] head: 00fff00000000040 ffff88801ac42280 ffffea0001a49000 dead000000000002 [ 253.176138][T11700] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 253.184819][T11700] head: 00fff00000000003 ffffea0000b98401 ffffffffffffffff 0000000000000000 [ 253.193500][T11700] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 253.202175][T11700] page dumped because: kasan: bad access detected [ 253.208602][T11700] page_owner tracks the page as allocated [ 253.214307][T11700] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6375, tgid 6374 (syz.3.130), ts 80724521740, free_ts 80499797096 [ 253.235414][T11700] post_alloc_hook+0x1f3/0x230 [ 253.240214][T11700] get_page_from_freelist+0x3649/0x3790 [ 253.245775][T11700] __alloc_pages_noprof+0x292/0x710 [ 253.250974][T11700] alloc_pages_mpol_noprof+0x3e8/0x680 [ 253.256435][T11700] alloc_slab_page+0x6a/0x140 [ 253.261126][T11700] allocate_slab+0x5a/0x2f0 [ 253.265643][T11700] ___slab_alloc+0xcd1/0x14b0 [ 253.270350][T11700] __slab_alloc+0x58/0xa0 [ 253.274684][T11700] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 253.281116][T11700] krealloc_noprof+0x88/0x120 [ 253.285817][T11700] copy_verifier_state+0x9d5/0x1020 [ 253.291046][T11700] push_stack+0x1a7/0x4e0 [ 253.295398][T11700] check_cond_jmp_op+0x2171/0x4020 [ 253.300511][T11700] do_check+0x96d5/0xfeb0 [ 253.304851][T11700] do_check_common+0x14bd/0x1dd0 [ 253.309791][T11700] bpf_check+0x18cde/0x1e710 [ 253.314381][T11700] page last free pid 5846 tgid 5846 stack trace: [ 253.320701][T11700] free_unref_page+0xdf9/0x1140 [ 253.325560][T11700] __put_partials+0xeb/0x130 [ 253.330168][T11700] put_cpu_partial+0x17c/0x250 [ 253.334960][T11700] __slab_free+0x2ea/0x3d0 [ 253.339400][T11700] qlist_free_all+0x9a/0x140 [ 253.343999][T11700] kasan_quarantine_reduce+0x14f/0x170 [ 253.349458][T11700] __kasan_slab_alloc+0x23/0x80 [ 253.354306][T11700] kmem_cache_alloc_noprof+0x135/0x2a0 [ 253.359769][T11700] ptlock_alloc+0x20/0x70 [ 253.364112][T11700] pte_alloc_one+0xd3/0x610 [ 253.368620][T11700] __pte_alloc+0x79/0x3c0 [ 253.372951][T11700] copy_pmd_range+0x7d87/0x85f0 [ 253.377817][T11700] copy_page_range+0x99f/0xe90 [ 253.382614][T11700] copy_mm+0x1117/0x1e80 [ 253.386892][T11700] copy_process+0x1845/0x3d50 [ 253.391604][T11700] kernel_clone+0x226/0x8f0 [ 253.396133][T11700] [ 253.398451][T11700] Memory state around the buggy address: [ 253.404076][T11700] ffff88802e615200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.412133][T11700] ffff88802e615280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.420188][T11700] >ffff88802e615300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.428254][T11700] ^ [ 253.432593][T11700] ffff88802e615380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.440664][T11700] ffff88802e615400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.448720][T11700] ================================================================== [ 253.460282][T11700] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.467542][T11700] CPU: 0 UID: 0 PID: 11700 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 253.478500][T11700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 253.488565][T11700] Call Trace: [ 253.491848][T11700] [ 253.494782][T11700] dump_stack_lvl+0x241/0x360 [ 253.499466][T11700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.504668][T11700] ? __pfx__printk+0x10/0x10 [ 253.509285][T11700] ? preempt_schedule+0xe1/0xf0 [ 253.514148][T11700] ? vscnprintf+0x5d/0x90 [ 253.518523][T11700] panic+0x349/0x880 [ 253.522462][T11700] ? check_panic_on_warn+0x21/0xb0 [ 253.527602][T11700] ? __pfx_panic+0x10/0x10 [ 253.532049][T11700] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 253.538055][T11700] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 253.544403][T11700] ? print_report+0x502/0x550 [ 253.549104][T11700] check_panic_on_warn+0x86/0xb0 [ 253.554065][T11700] ? device_for_each_child+0xbb/0x1b0 [ 253.559441][T11700] end_report+0x77/0x160 [ 253.563689][T11700] kasan_report+0x154/0x180 [ 253.568215][T11700] ? device_for_each_child+0xbb/0x1b0 [ 253.573603][T11700] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 253.579066][T11700] device_for_each_child+0xbb/0x1b0 [ 253.584283][T11700] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.590626][T11700] ? __pfx_device_for_each_child+0x10/0x10 [ 253.596439][T11700] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.601635][T11700] ? lockdep_hardirqs_on+0x99/0x150 [ 253.606832][T11700] pm_runtime_set_memalloc_noio+0x114/0x260 [ 253.612730][T11700] netdev_unregister_kobject+0x178/0x250 [ 253.618369][T11700] unregister_netdevice_many_notify+0x1851/0x1da0 [ 253.624789][T11700] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 253.631552][T11700] ? do_raw_spin_unlock+0x13c/0x8b0 [ 253.636759][T11700] ? __mutex_lock+0x52a/0xd70 [ 253.641440][T11700] unregister_netdevice_queue+0x303/0x370 [ 253.647175][T11700] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 253.653415][T11700] ? down_write+0x18c/0x220 [ 253.657924][T11700] ? __pfx_down_write+0x10/0x10 [ 253.662782][T11700] unregister_netdev+0x1c/0x30 [ 253.667556][T11700] bnep_session+0x2e0e/0x3000 [ 253.672241][T11700] ? __pfx_bnep_session+0x10/0x10 [ 253.677259][T11700] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 253.683149][T11700] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 253.689491][T11700] ? __pfx_woken_wake_function+0x10/0x10 [ 253.695129][T11700] ? __kthread_parkme+0x169/0x1d0 [ 253.700172][T11700] ? __pfx_bnep_session+0x10/0x10 [ 253.705200][T11700] kthread+0x2f0/0x390 [ 253.709269][T11700] ? __pfx_bnep_session+0x10/0x10 [ 253.714290][T11700] ? __pfx_kthread+0x10/0x10 [ 253.718880][T11700] ret_from_fork+0x4b/0x80 [ 253.723309][T11700] ? __pfx_kthread+0x10/0x10 [ 253.727902][T11700] ret_from_fork_asm+0x1a/0x30 [ 253.732709][T11700] [ 253.736059][T11700] Kernel Offset: disabled [ 253.740378][T11700] Rebooting in 86400 seconds..