last executing test programs: 57.857751333s ago: executing program 0 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$kcm(0x29, 0x2, 0x0) (async) socket$inet6(0xa, 0x803, 0x6) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) (async) 47.006990093s ago: executing program 0 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$kcm(0x29, 0x2, 0x0) (async) socket$inet6(0xa, 0x803, 0x6) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) (async) 35.748004015s ago: executing program 0 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$kcm(0x29, 0x2, 0x0) (async) socket$inet6(0xa, 0x803, 0x6) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) (async) 22.817888495s ago: executing program 0 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$kcm(0x29, 0x2, 0x0) (async) socket$inet6(0xa, 0x803, 0x6) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) (async) 11.760845447s ago: executing program 0 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$kcm(0x29, 0x2, 0x0) (async) socket$inet6(0xa, 0x803, 0x6) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) (async) 2.234926271s ago: executing program 3 (id=2957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000060000f307000400e000000108000500ac1e00010f0007"], 0x34}, 0x2, 0x34005}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'wg2\x00', 0x400}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100687372002c000280050007000000000008000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="05000600000000000500030000000000"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000060000f307000400e000000108000500ac1e00010f0007"], 0x34}, 0x2, 0x34005}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'wg2\x00', 0x400}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100687372002c000280050007000000000008000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="05000600000000000500030000000000"], 0x58}}, 0x0) (async) 1.937980347s ago: executing program 3 (id=2962): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000b80)="da745502116f7ffad3799cc22bbf26d5ad3fb0579fc54bd68266f6bf416c1ca6538e59ff49d662f639") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000026c0)=@delchain={0x3c0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x380, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x374, 0x6, [@m_simple={0x154, 0x1f, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0xd, 0x3, '@-^[\xa5&,.\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x80000001, 0xfffffffffffffffe, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x10000000, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0xb9, 0x6, "bb56072c27c5e2984fb9b39740c7dea2e6372a168bf1fdb8ecb6019c9f5db834fcaca18620641b7aab2922f69d2f9b062f5ec4be8a5a603fe7236ffd67f60e9e007b34e0f9cb58fc8855dae5289e4e856559f64bc5a1c5683263937fdd088e5f34874e0d2d2273a7a09810d9042b32fb69223c74e88c41fda5268c22a3107d32ee49d3a99665178abfde24d27a872b23ece9d09c9560070a6e3cca383ccb4d1a6d7c302ab3ee820e67d26e78f72566a2f9765698d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x38, 0x3, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x78, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x1, 0xffffffffffffffff, 0x5, 0xfffffff2}}}]}, {0x19, 0x6, "3c4d628f307b84d62ea02c2a83d6801f55d9f79db5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_nat={0x16c, 0xc, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xff, 0x1, 0x8, 0x6}, @broadcast, @rand_addr=0x64010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x20000000, 0x1ff, 0x800}, @broadcast, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x2, 0x6, 0x5}, @empty, @multicast1, 0xff000000, 0x1}}]}, {0xc9, 0x6, "256c3eb62a3c42cccec027988ad7149d48e69552fccd245cb90ebe3ebe6f36a14b83b65bb651bed880b4bf769cb0b5b18dabcc7d7a108e10124a104ef74333b28537655fecc96352477fe91863d2bd9822da8b57752f8d22cb68e4c4a79e0bba55acd2df7f410043b083dc74a0d99332f2ace4931a9efd89f8b8628f63b4791715c76fbcd195be1b8852f5b1f1e7b1296b3dd78041c0da1131303d605504dce4f02686d6875be1f7027e6e45a30376aff6097249b0111683261e334758927ff3e22f0a847f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9d}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x3c0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000f8ffff0500000008000100"], 0x28}}, 0x4) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.829942505s ago: executing program 1 (id=2964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f00000002c0)=""/254, &(0x7f00000000c0)="358b335a4e2bb6411b8ab01a1458c512a5dc161f3cef7abd58ad24c75f413de5c7ad7f6d80810fcc1764f6b1f52707950b7a522089b45d3fde9130553817f45d67babc8df80460ed29ddfd9e7c672b9f257274677f0471d13338f89e127914d25db0b6af530833acb73277f63e1aea2a0017ddba490e01cd2d4fcfe4fa4e019c8208d4a474baf8b13e7845ed1b0dbd4dd6610261207b9a8d814923d622694259ef694bad76cf650e", &(0x7f0000000400)="22458094e8b2ec58bf5509e806676f3f536f3b9e11c7c9c1cf3350a90ad4780c51bbf48270072d50cda36f4e9abbbfcc37170ae5af0d59becae46f4755c635d52f151559503b60b1a42681eac2c3ae9760fa22b17423a8d311cf50977687b2bede376297a94010f4d01ae98ae55dd8f33c74411697847641827599b6ca0f8a004da9f268d09c3c8762e405be6bbd0d48c073cb125f3c29a28ab11fbd52f47b0b71902eae3426f6b66338bd5fdfb88c46d952066171154c6637801083ca", 0x6, r0, 0x4}, 0x38) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xfb}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xfb}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617", @ANYRES16=0x0, @ANYBLOB="1cf9"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], 0x0, 0x10, 0x2, @void, @value}, 0x94) 1.654962805s ago: executing program 3 (id=2965): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000cd0258"], 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500400000000061106a000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) getsockname(r3, 0x0, &(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x56, 0x80, 0x7, 0x5, 0xde, 0x102}) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000380)=""/184, 0x200000, 0x1c00, 0x4b, 0x1}, 0x20) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x2, @remote, 'lo\x00'}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000000206030000000000000000000000000005000100070000000900020073797a3100000000140007800800094000000c04080012400000000012000300686173683a6e65742c706f7274000000050004000000000016000300686173683a6e65742c706f72742c6e65740000009730e8c135f6bf0dfcb7f8357f5433412c81210ee86dad78c0b9c7806cbda3bffdceb75d8501b84c5d71826183f0c556bc872f452beef9f9a2a2bef4ec1595a08d04479daaaa0f6a2425b49a0e3597edcb4483e90ad804acec8126f5f4c6f8bd5376446b1db4025ef17aa089e7f5203f"], 0x70}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.582867148s ago: executing program 1 (id=2967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r2, 0x5, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x4}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x1f0, 0xe8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan1\x00', 'veth0_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001100)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000001080)=0xe8) sendmsg$nl_generic(r5, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x42, 0x300, 0x70bd2b, 0x25dfdbfd, {0x18}, [@typed={0x8, 0x12c, 0x0, 0x0, @uid=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44014) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb3abc322b6e64a8f3010018000000000000003c0000003c0000000a000000000000000000000200000000080000000000000a00aa00000500000000000008000000000000000001000085000000000800800001000000000000000000"], &(0x7f0000001400)=""/149, 0x5e, 0x95, 0x1, 0x0, 0x0, @void, @value}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000340)={r11}, &(0x7f0000000380)=0x8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r12, 0x0, 0x7}, 0x38) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f00000012c0), {[{{@ip={@loopback, @multicast2, 0x0, 0xffffffff, '\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0xff, 0x1, 0x40}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x400, 0x64, '\x00', {0x8bf}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0xaa97, '\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sendmmsg$inet6(r10, &(0x7f0000003980)=[{{&(0x7f0000001300)={0xa, 0x4e20, 0x400, @local, 0xd}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001800)="21127aa2b5390c01fcc0742d2fbd8588d26afc329709c687fb28c5f9354791d7f7ca316dc34f64c83c96ce264e035b036bd4dea7f24da6eb2c75fad177b72b269f5fa565917e8d8a6e3b8b2b7f8c94378238b96318bb2e038e1eb6e8e7e6afcc0b42320a0188159f8c98c71a4c279c906d43bc11421020aaff1536ca434b8ab9f93e64440015f56ad20ebefc8eda36494648bae926bb33371acb739318bc690b4ea3c2993629b930fbcd199d0d", 0xad}, {&(0x7f00000018c0)="c1a71a33cc26c7b1fba4bb60af419d281c4134accff082287325ee5547e4d15d4eba66520f62c54cc4c929319d8bf07fbfc9374596550888dd8a96e749a549e39a41aeaaccce51b87f721a4410eac78c7e54fb9be9d3af60d7d9b696c4170004ae4e6a278850f7a6855411eca00b7dd78c75795345d8d993828dc43b8560e938191d70296f0535a3386d26df3aa0f16e8a2efd763f9814c89a33d0164c90f282ee29e738ec8c67baafb5fa3fad7536c3a400691c822288d14478c06b2eb3", 0xbe}, {&(0x7f0000001980)="2baa2793fde867b0bf41e10cb6336ef4a52af1bd835fb81fdaf5fc00dbfc42399e8351e216ab8459ad365c15fc77b1b01f7755a4ad06ee77522b45df9a1e8559047850b68bf09853351bd9bc7ee9269df38cdedd85090cdd74f46f0e47556c64b3e5ce5f4003a56ef92d1ee57f0a6fdc70767ab89561c975ba3aa35f227939471cef2a933c4a72", 0x87}, {&(0x7f0000001a40)="f255335a31aedfec006668bdfb3b106d280e2ae37191f167b9f2a4e32c5aeb2f065076952f3cadfca96e10f72a2a75c715c78cfda61677a41a732115b828dcbec2864aaae972fdcf2249f94580e24a818be87201799e09e57d5524f6c71f683964ee593d149569cc9d71f98d637a23e329fd32fe082ea133002548a983fa0a71f6b2c08a3f0db8996e76f7c525fd7ee68fe468b99f42d34c1d3e636e8b2e1aab6db42b019ba1de0315cf6fa119bfe4d9b5e8a933f9ea6a839011d3b1940d2e3b132b8f6629c88b0e7ad8cb2b7d311b4f6700590f57695a05cfeefd", 0xdb}, {&(0x7f0000001340)="133e38bb99004eabc8f7e6e355abd6b32df6bcf81bc851b7965a9c36eccd7b95e84d", 0x22}, {&(0x7f0000001b40)="2ec7dd09b626544d6d46408f67e9e7e4f11cd9c913b8262d19b9a0f6711c6aac5200b3c69e36a974cc5751494077ea22d3e4eaa3000b0c345dbbf353a764a1b80bbd704ebc3a707baaf242bfc40868cf2d452b21a79cf09bb1c4f3fc8f9176b0fe80cd9aa4cf510485cea0d5fffe7bef5eec62ff9154ed69a013b88c1083347a0a8a7ea7f478d8ffdc2c10bf46f7569cf8a45d7ee10873ac9bfe93235e2130d5d644ce404a8cb6532c09bffe30f8fea6aef0c48916efa2372950cfb923862b1f6dd8fa538605b299", 0xc8}, {&(0x7f0000001c40)="cd9969c673d2ed5572b2a277c1", 0xd}, {&(0x7f0000001c80)}], 0x8, &(0x7f0000001d40)=[@dstopts_2292={{0x28, 0x29, 0x4, {0xc, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xa6}, @pad1, @ra={0x5, 0x2, 0xfffb}, @enc_lim]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xff}}, @hopopts_2292={{0x138, 0x29, 0x36, {0xff, 0x23, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xf7, 0x5, [0x7, 0x2, 0x6, 0x7fff, 0x0, 0x3]}}, @generic={0x7, 0xd3, "752ef706871af252d960785077baee20bc1eb11a3cc301dc2417210e04ae96ecd560259ebc5a229071345396733531dfb9cfdc5074111e9a9a5ea9ff65e593cb897fa2d8103221210222c26899edb70509ce82cc4101866ba12ca02b01b82c7d4815af4693314f754db3be9fb0ac1a4b71f9621f523bba435a902688e92f9ba474b2e220b829279c792d53ac4e5c1c9fff7fc44c2951b3dfa6eee029993de7305a2402e1c3d8d40ad749b18a26c0d9e36a8f86c46a15527d18ef44ea499da898e85d9f72b5ec69b8e4f5bffdd1fbd1e87209d4"}, @pad1, @jumbo, @ra={0x5, 0x2, 0x2}]}}}], 0x1b8}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f00)="7c772874ea153596ee6e395d0b6bcd2119640ec47fab7e77532283cd68463c5f41bf474a45affd53a56ee993bcc38158cfb6e2cf5c9087cc9de4012fb0230798fe2edfdaa538d0473c1e6736e3467d8f4a0e5ad5560f6bfd0b408c8228fa47c77348f5093e9a6ab534", 0x69}, {&(0x7f0000001f80)="1e31e443901bef916fbf5c33e344e0fac4cdd7ea9b6e46b18c49c891c7b27d2079d7a726f692b21c0ff28310a4357bba2171f8de0eb0271d43ebe513f28a4353318435179bc3b4a5446ea62cab2b882c5f45761be822f5105e88f753d6343c7a53b84532b69a1ca24b21d567de53ca98e29a88846b190617062fdfe72173ee77520ce3cb9122c4", 0x87}], 0x2}}, {{&(0x7f0000002080)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4}, 0x1c, &(0x7f00000031c0)=[{&(0x7f00000020c0)="a3be1d751babe1d8f49efaf49a857b062c2707b7f152f5cf0f39b87932ae489080b2b854eaf16fd71d3dae25b6fc391183a57d8a19476f6a09beef404d280e77771595cb4ac6e04f64c50d6eeb0de3aa257bdc0290203ebc05f74a6a5c530c23329616b516376b5d836ec9f2e80fd3eed2659c1876e713ad9c4b6bc9ae58cd3f5d9f52809f766380182223516389f745d515348afdc26cef2d4bc27ceceb4af88555ccd2d35c4549bde4b6c707d63f1a633091fbe111b71c6f8d973dfeb4f80c02b2848f03fed964060f6a5609c18614f89e3b9245badbbf265d61a72cb7c916bc176329", 0xe4}, {&(0x7f00000021c0)="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", 0x1000}], 0x2, &(0x7f0000003200)=[@rthdr={{0x58, 0x29, 0x39, {0x32, 0x8, 0x3, 0x77, 0x0, [@private2, @private2, @mcast2, @rand_addr=' \x01\x00']}}}, @rthdr={{0x78, 0x29, 0x39, {0x15, 0xc, 0x2, 0x4, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x21}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2f, 0xc, 0x0, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xc}}], 0x160}}, {{&(0x7f0000003380)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c, &(0x7f0000003480)=[{&(0x7f00000033c0)="8ceff0c1db8be165b2fcc295ee66486f11d763b9099786f79fa53aa80c9791f33582134f7f53716287d71a9f934ad51ca6d3f506c139a3c067a8ac9b0063f74f8d3255b6d5291cd309694771a2ddb8d2120544311505c4770099cea1eb25d64a056a0ca7cff8a21fe51775316c0acc9ff14dace80e6246f19ab345a734890816b109c3bceeee33c15cb0bc993d0a02b59f3cf44cb6f91d4b6b35df9c071cfe594bcbe7a8a2964acc05afb3c22a64", 0xae}], 0x1, &(0x7f00000034c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdrdstopts={{0xa8, 0x29, 0x37, {0x16, 0x11, '\x00', [@generic={0x6, 0x46, "1978d20ec861bf9bfc9a4c2815f4e7d9d8d2dfe5b4c209b700ddc1018bbefe6ddb16ea6161bca03fd40a588d6f31c5fb7868a1b595c46507d99b0da38970a00af6a292cdf2c8"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x80000000}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0xda28, [0x3]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @dstopts={{0x30, 0x29, 0x37, {0x4, 0x2, '\x00', [@ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @remote}]}}}, @rthdrdstopts={{0x138, 0x29, 0x37, {0x3b, 0x23, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x9, 0xfb, "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"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}], 0x270}}, {{&(0x7f0000003740)={0xa, 0x4e23, 0x3, @remote, 0x2}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000003780)}, {&(0x7f00000037c0)="08f3a1839571e71c8a76cbf0b6ec3260d915d227c52588134fac2ad249973cd849bf0735dd2a7db8c9bff37755c9a70cf5be4d34e3c019585b465fe41a010fe8e1566ebd560767e8eef005b111496737dab2bf0d5421a47f6d12122c624e7311d3560944287040ba1cb8732ce6544243b4c22375b964eec1d6710537c8ce4a2867494718a858aec2d21282a2531cc5dabed5a9a4c53667e19b5fcfb3404e5f6ae93881eb225b24af6d33cc4b97795834a5fac0d94df472cca32a59a253dddc4a", 0xc0}, {&(0x7f0000003880)="9e5d6bb390045d993ef1f5be48d58e6d1ac07eff1264abe9dfead8f12e5a70708685c5aae1ff33521c595151da65aaac4a1d6938488b269de207242681712e0aa8e7e1ed49760e8a30b062e6d89c2de9fc66785f1d58034a7323ec7f10cd5a64", 0x60}], 0x3, &(0x7f0000003940)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x2e, 0x4, 0x2, 0x2, 0x0, [@empty, @local]}}}], 0x38}}], 0x5, 0x80) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f0000003ac0)={r11, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x120, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x10c, 0x1, [@m_mirred={0x108, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xb}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x30000000}, 0x1}}]}, {0x9a, 0x6, "331fff38bd9194e6bbb1182da6850613934fe670090392283b8fb466a6a87d2e85850f94924b0b9637764c5c5bdbcddc43bef3a5ea6a985f027a6f0b17f9aadddd85f597f2f48eeea725c04c91ee74d8ac9c50619f4452e5bd518ae91f737c436377b08714644aaa26e5532dfaf84bc5b9a4e1fe677e1f78abdcde5d4c75f21bd00a520697db21e56f29ad5c7b42f9bfeb787686aaa6"}, {0xc}, {0xc}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.317792723s ago: executing program 4 (id=2968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x30}}, 0x0) 1.262945287s ago: executing program 3 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010300000000000000000200000000000000000000000800030006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70500003f635df23a4c0c1a4b0add250000000061ad223967ffc7ae93dcf987ccf85be69c000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="7957bc86ec06545e63fe8f979a161ce9ae7a6b23b3364c4a7c", 0x19}, {&(0x7f0000000280)="b8b72f9354a74b1bcb1681653e9d77abe02ac8a12a6d83bb8c6dc17c5a5e6085c7899665aec78031ba3d9d7bbed56d4eecba77a6d4803d349daa402876c2a36aca0f859db8bd98cdb466cd6e25715ebc74d32849e8", 0x55}, {&(0x7f0000000000)="8ac6b94c76932bcedfd2d858005520eab4137f9755c85ea7cea09473aa042883991b5a833a857ab1b1a7c78aa129417934474f8dd923507151134fdb79b38b54b8be584d9df4f4834af6a4ee4334a8a2f4d69a26ad45fe5bea90261a6edfbe7a0f75e08446", 0x65}], 0x3, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="cba8e356ff26bc83a7bffc9596cceee78122e1a5d2591b081d03efc2069735f6264cf49f4753d3b66c7eb8a742193eace31c5b2796a19553fd2d7efa55052c611c25712f58bdf29dac97", 0x4a}, {&(0x7f0000000400)="04413d0e5d6d1faac5b46dd8dd6de989e891bd57018893537afc00ddcd984b552668cf337c0abdf7989ca978c005a7ab78a7867c28a1e13a4cc581aeb75936ee86deafc2", 0x44}, {&(0x7f0000000180)="ab430418e794bf6e642fd544f8a20ba5141bc5082f3b41022a9cdcb7d9", 0x1d}, {&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="9b45feff5b1f036d619c4110b40404e577a9100f33760e67e10f9eacbcd1b24ee8b196a6dac6ebd40d5dc7d9db54f4c50a417674828b480fd3121639da454dc4f849a533494b1bfa4db014760a7c1d85225b4a72bd04736f33e74dbe8c0c6f64972bc564f7b84c29", 0x68}], 0x5, 0x0, 0x0, 0x20000800}}], 0x2, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x48400) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r7, 0x398037b3d3988ec5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x9, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.21545392s ago: executing program 2 (id=2970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010068bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="5800028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004"], 0x74}}, 0x110) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200ffffffff0800393a8f9b00f4ba5c2b7bddfa696bdd58d10200000000000000f206ce370132d74b39b988"]) 1.118434338s ago: executing program 4 (id=2971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000040), &(0x7f0000000740)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0x1, 0x5, 0x7ff, 0x5, 0x7fff}, @x25={0x2, 0x2, 0xb, "d455a9b8c35db8c5fe36c58a189e73aa56f1b495be0f211e2a27f23fb650c78d9b6c4ba168"}}, 0x32) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000040), &(0x7f0000000740)=r2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0x1, 0x5, 0x7ff, 0x5, 0x7fff}, @x25={0x2, 0x2, 0xb, "d455a9b8c35db8c5fe36c58a189e73aa56f1b495be0f211e2a27f23fb650c78d9b6c4ba168"}}, 0x32) (async) 972.876566ms ago: executing program 2 (id=2972): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x48001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x54583}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtaction={0x10c, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_police={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}]]}, {0xbc, 0x6, "f780c040e7b07b9f348a37cc6d10cf3af72ee23caeb02e0a1ee41e912ae91caabb57370e487487f19e291818cfdaad2df07be919afc744133be6fbb2333bda4c0933e313e2c33a4b0bfb90cfee7708e2d027b26516187e86b1fc2d7fa52dcadcdd8e80ae37ed5effebbbe4c2547ecef81e5ba3c92c22e7d00835cdedfb0d765f6789208eed7ac886e69c63d1a0991e0b38bc2700b138a8896db5759e6d2755f378db4d8eddd6e61d0733907c895d8e5144d6895cfd50c01c"}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x10c}}, 0x0) (async) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000280), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r9, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="c64370", 0x3}], 0x1}}], 0x1, 0x20004001) (async) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "5ea46c0a9c0681eb", "4504b7d19fed15d71df167d8f7fd6d2a", "0997d924", "c14972b171b8e63d"}, 0x28) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r11, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) 842.883672ms ago: executing program 2 (id=2973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xbb, @broadcast}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x58}}, 0x0) 780.833035ms ago: executing program 4 (id=2974): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000001}, 0x8) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000008a40), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f000000a840)={0x0, 0x0, &(0x7f000000a800)={&(0x7f000000a780)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000000833304ed40000001c00048005000300020000000500030002000000050003000200005e478bcc7500"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600053582c137153e37080c188002ac0f000300", 0x33fe0}], 0x1}, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80000) accept4$unix(r6, 0x0, &(0x7f0000000180), 0x0) 582.853781ms ago: executing program 1 (id=2975): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) (async) shutdown(r2, 0x1) (async) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async) r3 = socket(0x2a, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa080}, 0x20044810) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x2}}, 0x26) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1c, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0x7, 0x1, 0x1, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000440)='syzkaller\x00', 0x7a70, 0xa0, &(0x7f0000000480)=""/160, 0x40f00, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x2, 0x7, 0x3}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000580)=[{0x1, 0x1, 0x9, 0x1}, {0x1, 0x5, 0x1, 0x1}, {0x0, 0x3, 0x2, 0x6}, {0x0, 0x2, 0x10, 0x2e71345dc8d25792}, {0x0, 0x2ee8, 0x4, 0x2}, {0x0, 0x5, 0x5}, {0x0, 0x1, 0x3, 0x1}, {0x1, 0x3, 0x9, 0x9}, {0x5, 0x3, 0xb, 0xa}, {0x0, 0x2, 0xd, 0x8}], 0x10, 0xfffffffb, @void, @value}, 0x94) (async) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x5, 0x0, 0x20001f00) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 579.261142ms ago: executing program 4 (id=2976): r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f0000000040)="86a73f10766c3307bf3f51c99453a9450a9c52eed0725d67883f8f517cc42e6d657e49bfc6506add9b8af3022af046ba913508", 0x33, 0x20000000, &(0x7f0000000080)={0x11, 0x15, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) r1 = socket$inet6(0xa, 0x800, 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x890b, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) listen(r1, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001800)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x0, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r9, 0x7) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r10, 0x100) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000000)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f890093bcf80000200100008001ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x4b}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r12) 534.442159ms ago: executing program 2 (id=2977): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000101200000b000000080001000006001008001c00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r3], 0x2c}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001380)="4e3da610cc37335bd8f18b504c29adbbd1105eddeaf55bbf2eef1b892b016620054feb213df27e2723ab02d45e09f76ba1645539f09388a1cad52caf11941a204927b0d096240cff2591b785167f2d34f99df1d17aeaf5440dd4ff33f0c71a03d323a3e2a9cb7b28aea0bcbf6561dd400065bf9eb464b9e7b957ee78eeccabfe8dea57a3c1cffc7739ae61a972e8e7bb1e42823a06924caf923781adb2cbeaefa00af9c9782bb2380ff5e37966edcd00", 0xb0}, {&(0x7f0000000340)="301f7e23e9136ae41d5f000000920cfb0069b770e0ab1029ca3e650c7a99499ee18f0c11f049bc7cd20e200ab1a1d7e787275293e64ff0a2ec5dd96b76a6d81175cd7df1eb6af223764b5219f834b07101bbb3ccf9f6bf", 0x57}, {&(0x7f00000003c0)="36418a6de095cbb43fb254f5aa2d7da360552de3036c6c48fba744ad65bd378518b9c1413aa2444bb88579c51d1ac303e6dfbdf1a18bca22f6750000000000000000000000000000000000467cf2ae5b8bf6f4db5dd2a6090d6a2977da07e0e081bf6f3faf23533e5484b751e1ea67e466169180ee7217582ca01171068e2acacb194dae58c948630b68388928d09c0b615562a6e3ff6101f490c2d98aa77b1bee24fab0af06736505fc5341c666ec5c12c2addc233acaa9af725dacaae92457ba18b471c0e78f1951c9f42452af1e27d9c670c31da1b9b67ca0784fbd722d0f4b77d5afe874567004bf8a59109bca8bcd", 0x52}], 0x2}, 0x8000) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 64) listen(r0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000000), 0x4) (async) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) ppoll(&(0x7f0000000100)=[{r0, 0x10}], 0x1, &(0x7f0000000140), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r7 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) (async) recvmsg$unix(r7, &(0x7f0000001340)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000001280)=""/81, 0x51}], 0x4, &(0x7f0000001300)=[@cred={{0x1c}}], 0x20}, 0x21) 422.747229ms ago: executing program 1 (id=2978): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x80003, 0x0) (async) r2 = socket(0x10, 0x80003, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r3 = socket$inet(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000080), 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='\b\x00', 0x2}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @private}}}], 0x20}, 0x31c467c443849f7c) (async) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='\b\x00', 0x2}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @private}}}], 0x20}, 0x31c467c443849f7c) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000400", 0x33fe0}], 0x1}, 0x0) 352.338371ms ago: executing program 2 (id=2979): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000c3150000000000000000000000000000000000000000000000005a0cdcc967a1fc514d257bbf8c2be02be8fa34a2ee0ba5e16c561f4c0fe870f0d7d81ae14d20cfba5f9753a2a18112a70312407b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001180)='ext4_ext_handle_unwritten_extents\x00', r5, 0x0, 0x2167be07}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, r7, 0x1, 0x0, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000001c0), &(0x7f0000000340)=r4}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, &(0x7f00000006c0)={{r4}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x100, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000140)={r10, 0x6, 0x4, 0x83, 0x2, 0x7f}, 0x14) 340.239272ms ago: executing program 4 (id=2980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0x14, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x6, [@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @multicast, @empty, @multicast, @empty]}) 231.220535ms ago: executing program 3 (id=2981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x10}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket(0x26, 0x5, 0xffffffff) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f00000000c0)) close(r1) 206.591823ms ago: executing program 1 (id=2982): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000006c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x3c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x3, 0x7, {{0x16, 0x4, 0x2, 0x1, 0x58, 0x64, 0x0, 0x6, 0x29, 0x0, @local, @private=0xa010101, {[@cipso={0x86, 0x42, 0x2, [{0x2, 0xd, "ae8a32005fb1fc8d8727e4"}, {0x0, 0x8, "cb37df6941c7"}, {0x6, 0xe, "2eaa5c66b00bfd6e9aa0e2b7"}, {0x7, 0x7, "a56fb28520"}, {0x7, 0x3, 'G'}, {0x0, 0xf, "6417c031a6fccfa575dcf2e8e0"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x1, 0x20, 0x9, 0x6, {{0x2d, 0x4, 0x1, 0x12, 0xb4, 0x66, 0x0, 0x1, 0x29, 0x0, @broadcast, @local, {[@cipso={0x86, 0xc, 0x1, [{0x0, 0x6, "add2f834"}]}, @timestamp={0x44, 0x20, 0x94, 0x0, 0xf, [0x2, 0x81, 0x8, 0x6, 0x0, 0xf, 0x15c4e09a]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0xc2, 0x3, 0x0, [{@remote, 0x4}, {@loopback, 0x6}, {@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@multicast1, 0x4}, {@private=0xa010101, 0x3}, {@loopback, 0x3}, {@local, 0x1}, {@loopback, 0xfffffffb}]}, @noop, @timestamp={0x44, 0x20, 0x6b, 0x0, 0x1, [0x3ff000, 0x1, 0x1, 0x5, 0x1, 0xe, 0xb2]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delneigh={0x3c, 0x1d, 0x300, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, r5, 0x20, 0x8, 0x2}, [@NDA_PROTOCOL={0x5, 0xc, 0x82}, @NDA_PROTOCOL={0x5, 0xc, 0x1}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_IFINDEX={0x8, 0x8, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ppoll(&(0x7f0000000000)=[{r0, 0x2019}], 0x1, 0x0, 0x0, 0x0) 174.163969ms ago: executing program 2 (id=2983): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xcf41, 0x82}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x38015233d7eb5c23}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x810) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @private=0xa010102}, 0x10) r4 = accept$ax25(r0, &(0x7f0000000280)={{0x3, @rose}, [@bcast, @bcast, @remote, @default, @default, @netrom, @netrom, @null]}, &(0x7f0000000300)=0x48) close(r4) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/115, 0x73}, {&(0x7f00000006c0)=""/157, 0x9d}], 0x7, &(0x7f0000000800)=""/4096, 0x1000}, 0x20) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001840)=@req3={0xfffffff8, 0x5, 0xfffffff8, 0xff, 0x1, 0xfffffffc, 0x10000}, 0x1c) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000001880)) r6 = socket$netlink(0x10, 0x3, 0x7) syz_emit_ethernet(0x108, &(0x7f00000018c0)={@remote, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x2}}, {@llc={0x4, {@llc={0x4e, 0x4, "0131", "37a1aa789aa363c22d66b4461066d12774c114a14f50d46d8171340e4eb582a8e2794560f4d895c3cd8bab48cfb5f20e45f7ff7079262b05d418368f792a8ed003ad6d119497abb422330266e11f8d60019885e14e3d2522bb490d90e861fcdd34a1a50f0800875c978d29fa2d09aae771951649044d37800ee99ae0569892aa1fa12e104c2be0d6d350c596c0a804c41c0277ba362b30c086510c7952bda22ffa477dcea2dbeec61207eeaae13576680477700f963a4a3004a8a5504cd10017a9b5248b1f0102d2685eff68a27f8b68971410b84a1a5792b627ac9ee05b5379d92f0b4efce3ac31e831afcd1700"}}}}}, &(0x7f0000001a00)={0x0, 0x2, [0x2af, 0xb45, 0xd50, 0xd9f]}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000001a40)=0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000001a80)={0x6, {{0x2, 0x4e24, @loopback}}}, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001b40)={r6}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0), r0) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000001dc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c00)={0x164, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @mcast1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0xc004005}, 0x40004) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x20, 0x4, &(0x7f0000001e00)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd1e}], &(0x7f0000001e40)='syzkaller\x00', 0xfffffffa, 0x1, &(0x7f0000001e80)=""/1, 0x40f00, 0x19, '\x00', r3, @netfilter=0x2d, r0, 0x8, &(0x7f0000001ec0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001f00)={0x1, 0x4, 0x6, 0x5}, 0x10, 0x0, r0, 0x4, &(0x7f0000001f40)=[r0], &(0x7f0000001f80)=[{0x0, 0x5, 0xc, 0xa}, {0x2, 0x2, 0x6, 0x2}, {0x5, 0x5, 0xd, 0x9}, {0x3, 0x2, 0xf, 0x4}], 0x10, 0x1, @void, @value}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002080), 0xc0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000020c0)={'nicvf0\x00', @multicast}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000002280)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)={0xd8, 0x1403, 0x1, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8983, &(0x7f00000022c0)={0x7, 'veth0_to_bridge\x00', {0x6}, 0xff}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x60, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20004804) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x74, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8c1c}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp1\x00'}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4840}, 0x90) 83.067258ms ago: executing program 4 (id=2984): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) unshare(0x22020600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000780)="b7028d7289a1d9bfdb695ddc9d64f2453a5cb75176a5d19054ea56ef7a12fc122db35560019c5ebae4b96f7b62cc5c7df69da2e4f2e227d224881e6e6b3148e9018756b55a", 0x45}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000040)={0x24, @short}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 82.161588ms ago: executing program 3 (id=2985): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r2, @ANYBLOB="080004000001"], 0x44}}, 0x0) 9.175524ms ago: executing program 0 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$kcm(0x29, 0x2, 0x0) (async) socket$inet6(0xa, 0x803, 0x6) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000095", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) (async) 0s ago: executing program 1 (id=2986): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0900dbff02ff0a", 0x7) kernel console output (not intermixed with test programs): ][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.746865][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.754162][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.799938][T12507] wlan1 speed is unknown, defaulting to 1000 [ 242.909456][ T5851] Bluetooth: hci3: command tx timeout [ 243.128198][T12540] syz_tun: Device is already in use. [ 243.151511][T12541] syz_tun: Device is already in use. [ 243.389269][T12326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.573437][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2047'. [ 243.643160][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'. [ 243.813680][T12326] veth0_vlan: entered promiscuous mode [ 243.850470][T12326] veth1_vlan: entered promiscuous mode [ 243.983755][T12326] veth0_macvtap: entered promiscuous mode [ 244.051264][T12326] veth1_macvtap: entered promiscuous mode [ 244.123800][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.141794][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.155264][T12326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.200020][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.211033][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.226307][T12326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.256923][T12326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.266076][T12326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.276874][T12326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.286086][T12326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.476111][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.477269][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.483970][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.564520][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.620850][T12613] netlink: 'syz.2.2063': attribute type 11 has an invalid length. [ 244.631904][T12615] set match dimension is over the limit! [ 244.758911][T12615] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2061'. [ 245.233659][T12646] IPVS: set_ctl: invalid protocol: 16728 255.255.255.255:20001 [ 245.308432][T12648] netlink: 'syz.4.2072': attribute type 10 has an invalid length. [ 245.551510][T12652] batadv_slave_1: entered promiscuous mode [ 245.560581][T12652] batadv_slave_1: entered allmulticast mode [ 245.661741][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 245.697530][T12660] netlink: 'syz.4.2077': attribute type 3 has an invalid length. [ 245.714279][T12660] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2077'. [ 246.006427][ T5991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.041736][T12671] netlink: 'syz.3.2080': attribute type 21 has an invalid length. [ 246.055302][T12671] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2080'. [ 246.583568][ T5991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.761746][T12685] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 246.859399][ T5991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.079656][T12702] netlink: 'syz.3.2088': attribute type 9 has an invalid length. [ 247.088612][T12700] netlink: 'syz.1.2086': attribute type 3 has an invalid length. [ 247.105327][T12700] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 247.114559][T12702] __nla_validate_parse: 1 callbacks suppressed [ 247.114578][T12702] netlink: 69432 bytes leftover after parsing attributes in process `syz.3.2088'. [ 247.121164][ T5991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.134734][T12700] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2086'. [ 247.213801][T12699] openvswitch: netlink: Unknown nsh attribute 0 [ 247.280517][T12712] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 247.390791][ T5991] bridge_slave_1: left allmulticast mode [ 247.405209][ T5991] bridge_slave_1: left promiscuous mode [ 247.419330][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.433808][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.452786][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.463190][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.463642][ T5991] bridge_slave_0: left allmulticast mode [ 247.472925][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.486786][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.497423][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.502243][ T5991] bridge_slave_0: left promiscuous mode [ 247.524140][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.988676][ T5991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.011709][ T5991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.035986][ T5991] bond0 (unregistering): Released all slaves [ 248.059485][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 248.081529][T12730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2095'. [ 248.243600][T12733] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 248.377312][T12737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2097'. [ 248.583293][T12755] ΙΆΖ£0GC¦: entered promiscuous mode [ 248.685032][T12714] wlan1 speed is unknown, defaulting to 1000 [ 248.772656][T12762] syzkaller0: entered allmulticast mode [ 248.843887][T12760] syzkaller0 (unregistering): left allmulticast mode [ 248.922236][ T5991] hsr_slave_0: left promiscuous mode [ 248.972146][ T5991] hsr_slave_1: left promiscuous mode [ 249.000900][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.012121][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.032823][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.047924][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.098967][ T5991] veth1_macvtap: left promiscuous mode [ 249.105186][ T5991] veth0_macvtap: left promiscuous mode [ 249.111091][ T5991] veth1_vlan: left promiscuous mode [ 249.116658][ T5991] veth0_vlan: left promiscuous mode [ 249.547559][ T5851] Bluetooth: hci3: command tx timeout [ 249.760101][ T5991] team0 (unregistering): Port device team_slave_1 removed [ 249.818135][ T5991] team0 (unregistering): Port device team_slave_0 removed [ 250.250869][T12773] netlink: 'syz.3.2106': attribute type 10 has an invalid length. [ 250.259007][T12773] veth6: entered promiscuous mode [ 250.269151][T12773] veth6: entered allmulticast mode [ 250.278349][T12773] bond0: (slave veth6): Enslaving as an active interface with an up link [ 250.324514][T12792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2109'. [ 250.651984][T12714] chnl_net:caif_netlink_parms(): no params data found [ 250.729908][T12809] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20003 [ 250.858916][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2116'. [ 250.859498][T12714] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.880075][T12714] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.889717][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 250.900495][T12714] bridge_slave_0: entered allmulticast mode [ 250.910031][T12714] bridge_slave_0: entered promiscuous mode [ 250.915485][T12820] Cannot find set identified by id 0 to match [ 250.933534][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.948938][T12714] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.965142][T12714] bridge_slave_1: entered allmulticast mode [ 250.972150][T12714] bridge_slave_1: entered promiscuous mode [ 251.058646][T12822] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 251.063497][T12714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.088354][T12714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.137150][T12822] sctp: [Deprecated]: syz.1.2118 (pid 12822) Use of int in maxseg socket option. [ 251.137150][T12822] Use struct sctp_assoc_value instead [ 251.149292][T12714] team0: Port device team_slave_0 added [ 251.153350][T12822] netlink: 572 bytes leftover after parsing attributes in process `syz.1.2118'. [ 251.166970][T12822] netlink: 11904 bytes leftover after parsing attributes in process `syz.1.2118'. [ 251.176669][T12714] team0: Port device team_slave_1 added [ 251.232344][T12714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.239851][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.267806][T12714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.284831][T12714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.294007][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.326114][T12714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.507187][T12714] hsr_slave_0: entered promiscuous mode [ 251.519360][T12714] hsr_slave_1: entered promiscuous mode [ 251.529017][T12714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.543390][T12714] Cannot create hsr debugfs directory [ 251.627873][ T5851] Bluetooth: hci3: command tx timeout [ 251.912600][T12860] IPVS: Unknown mcast interface: vcan0 [ 251.934913][T12860] IPVS: Unknown mcast interface: vcan0 [ 252.287184][T12877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.351173][T12869] wlan1 speed is unknown, defaulting to 1000 [ 252.402515][T12714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.430891][T12714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.450448][T12714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.526984][T12714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.735757][T12714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.798291][T12714] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.827272][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.834478][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.844005][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.851217][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.120176][T12903] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 253.155118][T12906] __nla_validate_parse: 4 callbacks suppressed [ 253.155140][T12906] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.2142'. [ 253.181017][T12906] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 253.245606][T12714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.282073][T12714] veth0_vlan: entered promiscuous mode [ 253.296892][T12714] veth1_vlan: entered promiscuous mode [ 253.377373][T12714] veth0_macvtap: entered promiscuous mode [ 253.415567][T12714] veth1_macvtap: entered promiscuous mode [ 253.441383][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.458415][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.520931][T12714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.531659][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.542359][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.554779][T12714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.580995][T12714] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.590224][T12714] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.599127][T12714] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.608080][T12714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.633792][T12922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2146'. [ 253.656552][T12926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2148'. [ 253.675156][T12926] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 253.682652][T12926] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 253.708342][ T5851] Bluetooth: hci3: command tx timeout [ 253.898194][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.921545][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.984786][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2151'. [ 253.996966][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.026372][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.088482][T12950] openvswitch: netlink: EtherType 50a is less than min 600 [ 254.130189][T12950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2154'. [ 254.159047][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'. [ 254.550274][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2160'. [ 254.566273][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2160'. [ 254.674912][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 254.751338][T12981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2167'. [ 254.992958][T12995] bond4: entered promiscuous mode [ 255.008792][T12995] bond4: entered allmulticast mode [ 255.028323][T12995] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.342292][T13026] veth1: entered promiscuous mode [ 255.359901][T13026] veth1: left promiscuous mode [ 255.423489][T13030] netlink: 'syz.4.2179': attribute type 7 has an invalid length. [ 255.437473][T13030] netlink: 'syz.4.2179': attribute type 8 has an invalid length. [ 255.453066][T13030] erspan0: entered promiscuous mode [ 255.465883][T13030] batadv_slave_1: entered promiscuous mode [ 255.487947][T13030] gretap0: entered promiscuous mode [ 255.990497][ T5997] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.009749][T13051] team0: Mode changed to "random" [ 256.027521][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.259297][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.270953][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.281383][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.290166][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.298668][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 257.307005][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.391225][ T5997] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.421854][T13107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.505054][ T5997] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.540130][T13111] tipc: New replicast peer: 255.255.255.255 [ 257.551879][T13111] tipc: Enabled bearer , priority 10 [ 257.638971][ T5997] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.681803][T13119] netlink: 'syz.1.2205': attribute type 1 has an invalid length. [ 257.832207][ T5997] bridge_slave_1: left allmulticast mode [ 257.859853][ T5997] bridge_slave_1: left promiscuous mode [ 257.881077][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.906035][ T5997] bridge_slave_0: left allmulticast mode [ 257.924528][ T5997] bridge_slave_0: left promiscuous mode [ 257.942387][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.981682][T13135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.520104][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.532879][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.548480][ T5997] bond0 (unregistering): Released all slaves [ 258.559761][T13099] wlan1 speed is unknown, defaulting to 1000 [ 258.664734][ T5852] tipc: Node number set to 152109881 [ 258.866696][T13154] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 259.110654][T13099] chnl_net:caif_netlink_parms(): no params data found [ 259.323710][ T5997] hsr_slave_0: left promiscuous mode [ 259.344829][ T5997] hsr_slave_1: left promiscuous mode [ 259.362613][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.378297][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.391126][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.396863][ T5855] Bluetooth: hci3: command tx timeout [ 259.406372][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.488231][ T5997] veth1_macvtap: left promiscuous mode [ 259.493887][ T5997] veth0_macvtap: left promiscuous mode [ 259.514699][ T5997] veth1_vlan: left promiscuous mode [ 259.520201][ T5997] veth0_vlan: left promiscuous mode [ 260.325170][ T5997] team0 (unregistering): Port device team_slave_1 removed [ 260.382797][ T5997] team0 (unregistering): Port device team_slave_0 removed [ 261.004650][T13099] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.034586][T13099] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.045136][T13099] bridge_slave_0: entered allmulticast mode [ 261.066681][T13099] bridge_slave_0: entered promiscuous mode [ 261.082439][T13228] openvswitch: netlink: Actions may not be safe on all matching packets [ 261.092295][T13099] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.101419][T13227] __nla_validate_parse: 21 callbacks suppressed [ 261.101440][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 261.109832][T13099] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.132018][T13099] bridge_slave_1: entered allmulticast mode [ 261.140158][T13099] bridge_slave_1: entered promiscuous mode [ 261.387534][T13099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.400488][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 261.427221][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2239'. [ 261.439101][T13099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.464638][ T5855] Bluetooth: hci3: command tx timeout [ 261.585708][T13099] team0: Port device team_slave_0 added [ 261.607223][T13099] team0: Port device team_slave_1 added [ 261.660260][T13252] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2241'. [ 261.728207][T13099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.750928][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.814250][T13099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.844986][T13099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.852116][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.888706][T13099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.890302][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 261.971509][T13265] netlink: 'syz.3.2247': attribute type 4 has an invalid length. [ 262.012101][T13268] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 262.020061][T13268] netlink: 'syz.1.2250': attribute type 4 has an invalid length. [ 262.028003][T13268] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2250'. [ 262.037386][T13268] NCSI netlink: No device for ifindex 458760 [ 262.044451][T13268] xt_l2tp: missing protocol rule (udp|l2tpip) [ 262.135842][T13099] hsr_slave_0: entered promiscuous mode [ 262.152916][T13099] hsr_slave_1: entered promiscuous mode [ 262.176259][T13099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.190056][T13099] Cannot create hsr debugfs directory [ 262.349779][T13282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2254'. [ 262.472653][T13289] netlink: 'syz.3.2256': attribute type 10 has an invalid length. [ 262.692396][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2261'. [ 262.817739][T13302] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2260'. [ 262.887763][T13293] wlan1 speed is unknown, defaulting to 1000 [ 263.299770][T13099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.332489][T13099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.349569][T13099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.363190][T13099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.549570][ T5855] Bluetooth: hci3: command tx timeout [ 263.588980][T13099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.633267][T13099] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.677549][T13328] xt_limit: Overflow, try lower: 0/0 [ 263.687805][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.695008][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.713085][ T5899] IPVS: starting estimator thread 0... [ 263.764470][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.771606][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.817558][T13335] IPVS: using max 15 ests per chain, 36000 per kthread [ 263.987734][T13346] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2274'. [ 264.085525][T13354] ipt_REJECT: TCP_RESET invalid for non-tcp [ 264.201814][T13099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.367188][T13099] veth0_vlan: entered promiscuous mode [ 264.440561][T13099] veth1_vlan: entered promiscuous mode [ 264.527056][T13099] veth0_macvtap: entered promiscuous mode [ 264.560765][T13099] veth1_macvtap: entered promiscuous mode [ 264.609322][T13099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.644485][T13099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.676065][T13099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.716145][T13099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.743436][T13099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.788159][T13099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.899951][T13099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.920813][T13099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.961740][T13099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.995575][T13099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.275640][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.283537][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.385762][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.401195][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.644641][T13418] bridge0: port 3(batadv0) entered blocking state [ 265.685132][T13418] bridge0: port 3(batadv0) entered disabled state [ 265.691822][T13418] batadv0: entered allmulticast mode [ 265.734835][T13418] batadv0: entered promiscuous mode [ 266.105471][ T5991] batman_adv: batadv0: IGMP Querier appeared [ 266.111880][ T5991] batman_adv: batadv0: MLD Querier appeared [ 266.452043][T13436] netlink: 'syz.1.2298': attribute type 32 has an invalid length. [ 266.468713][T13436] __nla_validate_parse: 4 callbacks suppressed [ 266.468733][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 266.499194][T13436] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 266.781217][T13459] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.2303'. [ 266.805207][T13459] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.208932][T13482] No such timeout policy "syz0" [ 267.316787][T13490] netlink: set zone limit has 8 unknown bytes [ 267.319502][ T1155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.815478][ T1155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.884213][ T1155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.955592][ T1155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.062795][ T1155] bridge_slave_1: left allmulticast mode [ 268.073541][ T1155] bridge_slave_1: left promiscuous mode [ 268.080259][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.090166][ T1155] bridge_slave_0: left allmulticast mode [ 268.096372][ T1155] bridge_slave_0: left promiscuous mode [ 268.102334][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.384595][ T29] audit: type=1107 audit(1732117155.775:3): pid=13495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 268.392578][ T29] audit: type=1107 audit(1732117155.815:4): pid=13495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 268.690423][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.802768][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.812496][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.833698][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.853528][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.870115][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.970282][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.982915][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.999458][ T1155] bond0 (unregistering): Released all slaves [ 269.271911][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2317'. [ 269.357797][T13508] wlan1 speed is unknown, defaulting to 1000 [ 269.557456][T13527] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2322'. [ 269.650884][T13533] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 269.783739][T13538] xt_l2tp: invalid flags combination: c [ 269.816646][ T1155] hsr_slave_0: left promiscuous mode [ 269.824044][ T1155] hsr_slave_1: left promiscuous mode [ 269.831384][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.839619][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.848255][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.856584][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.881287][ T1155] veth1_macvtap: left promiscuous mode [ 269.887325][ T1155] veth0_macvtap: left promiscuous mode [ 269.892910][ T1155] veth1_vlan: left promiscuous mode [ 269.902466][ T1155] veth0_vlan: left promiscuous mode [ 270.283518][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 270.446777][T13544] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 270.589266][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 270.636604][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 270.918589][ T5855] Bluetooth: hci3: command tx timeout [ 271.278642][T13508] chnl_net:caif_netlink_parms(): no params data found [ 271.569447][T13508] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.577380][T13508] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.590427][T13508] bridge_slave_0: entered allmulticast mode [ 271.599001][T13508] bridge_slave_0: entered promiscuous mode [ 271.623840][T13508] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.632210][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.642382][T13508] bridge_slave_1: entered allmulticast mode [ 271.653947][T13508] bridge_slave_1: entered promiscuous mode [ 271.816144][T13567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2334'. [ 271.827077][T13570] netlink: 'syz.1.2332': attribute type 6 has an invalid length. [ 271.836279][T13572] netlink: 'syz.3.2335': attribute type 10 has an invalid length. [ 272.091120][T13583] sctp: [Deprecated]: syz.1.2339 (pid 13583) Use of int in max_burst socket option. [ 272.091120][T13583] Use struct sctp_assoc_value instead [ 272.135553][T13508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.156463][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 272.175195][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 272.292313][T13508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.383355][T13508] team0: Port device team_slave_0 added [ 272.402789][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2342'. [ 272.436196][T13508] team0: Port device team_slave_1 added [ 272.512874][T13508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.523331][T13508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.583074][T13508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.606721][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 272.626834][T13603] netlink: 'syz.1.2343': attribute type 1 has an invalid length. [ 272.627255][T13599] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 272.655614][T13599] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (2579) [ 272.671221][T13508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.684295][T13508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.743017][T13508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.819235][T13611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2348'. [ 272.869677][T13615] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2349'. [ 272.879301][T13610] xt_CT: No such helper "pptp" [ 272.922143][T13618] netlink: 'syz.4.2347': attribute type 5 has an invalid length. [ 272.938629][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 272.966477][T13508] hsr_slave_0: entered promiscuous mode [ 272.972292][T13615] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2349'. [ 272.985268][ T5855] Bluetooth: hci3: command tx timeout [ 273.010432][T13508] hsr_slave_1: entered promiscuous mode [ 273.017814][T13508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.025640][T13508] Cannot create hsr debugfs directory [ 273.360297][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'. [ 273.593494][T13653] netlink: 'syz.2.2357': attribute type 11 has an invalid length. [ 273.810443][T13508] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.843118][T13508] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.866124][T13508] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.889037][T13508] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.924810][T13665] geneve2: entered promiscuous mode [ 273.930124][T13665] geneve2: entered allmulticast mode [ 274.986342][ T5948] hid-generic 0005:0B57:0041.0001: item fetching failed at offset 0/1 [ 274.995772][ T5948] hid-generic 0005:0B57:0041.0001: probe with driver hid-generic failed with error -22 [ 275.065296][ T5855] Bluetooth: hci3: command tx timeout [ 275.363401][T13699] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 276.905350][T13508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.939532][T13508] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.962018][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.969267][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.990959][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.998195][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.124673][T13716] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 277.146610][ T5855] Bluetooth: hci3: command tx timeout [ 277.405791][T13508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.421742][T13728] __nla_validate_parse: 6 callbacks suppressed [ 277.421762][T13728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2378'. [ 277.547829][T13714] wlan1 speed is unknown, defaulting to 1000 [ 277.560922][T13508] veth0_vlan: entered promiscuous mode [ 277.671139][T13508] veth1_vlan: entered promiscuous mode [ 277.681332][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'. [ 277.845957][T13508] veth0_macvtap: entered promiscuous mode [ 277.893198][T13508] veth1_macvtap: entered promiscuous mode [ 277.995317][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.022445][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.047534][T13508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.071837][T13739] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 278.086370][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 278.104379][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2381'. [ 278.129196][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.149946][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.179337][T13508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.233912][T13508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.255189][T13508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.281868][T13508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.306385][T13508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.559850][T13751] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2386'. [ 278.582923][T13751] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 278.594952][T13751] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 278.704519][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.712401][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.890955][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.923105][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.132884][T13780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.169570][T13781] netlink: 'syz.1.2392': attribute type 1 has an invalid length. [ 279.178529][T13780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.219797][T13781] netlink: 'syz.1.2392': attribute type 3 has an invalid length. [ 279.280441][T13781] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2392'. [ 279.320165][T13781] NCSI netlink: No device for ifindex 0 [ 279.480549][T13795] netlink: 'syz.1.2396': attribute type 39 has an invalid length. [ 279.776492][T13809] openvswitch: netlink: Flow key attribute not present in set flow. [ 279.960325][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.018388][T13819] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 280.302095][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.527875][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.605605][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.669498][ T63] bridge_slave_1: left allmulticast mode [ 280.677144][ T63] bridge_slave_1: left promiscuous mode [ 280.682878][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.692294][ T63] bridge_slave_0: left allmulticast mode [ 280.714257][ T63] bridge_slave_0: left promiscuous mode [ 280.720013][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.194488][T13837] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 281.217232][T13844] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2406'. [ 281.232047][T13844] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2406'. [ 281.273226][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2409'. [ 281.427349][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.440606][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.458348][ T63] bond0 (unregistering): Released all slaves [ 281.486715][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.503518][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.528545][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.550537][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.626560][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.648790][T13859] openvswitch: netlink: EtherType 0 is less than min 600 [ 281.667846][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.688937][T13861] sock: sock_timestamping_bind_phc: sock not bind to device [ 281.939260][T13870] IPv6: sit4: Disabled Multicast RS [ 281.958911][T13875] netlink: 5304 bytes leftover after parsing attributes in process `syz.4.2416'. [ 281.981848][T13855] wlan1 speed is unknown, defaulting to 1000 [ 282.614357][T13908] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 282.629504][ T63] hsr_slave_0: left promiscuous mode [ 282.670089][ T63] hsr_slave_1: left promiscuous mode [ 282.690059][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.708508][T13914] Bluetooth: MGMT ver 1.23 [ 282.709991][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.726462][T13914] netlink: 'syz.4.2424': attribute type 9 has an invalid length. [ 282.736179][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.748006][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.754299][T13914] __nla_validate_parse: 1 callbacks suppressed [ 282.754320][T13914] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.2424'. [ 282.820076][ T63] veth1_macvtap: left promiscuous mode [ 282.834823][ T63] veth0_macvtap: left promiscuous mode [ 282.847659][ T63] veth1_vlan: left promiscuous mode [ 282.860300][ T63] veth0_vlan: left promiscuous mode [ 283.055781][T13925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2428'. [ 283.593641][ T63] team0 (unregistering): Port device team_slave_1 removed [ 283.663042][ T63] team0 (unregistering): Port device team_slave_0 removed [ 283.784997][ T5851] Bluetooth: hci3: command tx timeout [ 284.132766][T13936] netlink: 'syz.3.2431': attribute type 10 has an invalid length. [ 284.173885][T13936] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 284.204634][T13936] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 284.276118][T13936] team0: Port device netdevsim0 removed [ 284.302508][T13936] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 284.326232][T13855] chnl_net:caif_netlink_parms(): no params data found [ 284.593956][T13855] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.626981][T13855] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.639278][T13855] bridge_slave_0: entered allmulticast mode [ 284.659713][T13855] bridge_slave_0: entered promiscuous mode [ 284.691973][T13855] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.708568][T13855] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.710236][T13964] netlink: 'syz.1.2439': attribute type 12 has an invalid length. [ 284.736951][T13964] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2439'. [ 284.743260][T13855] bridge_slave_1: entered allmulticast mode [ 284.763503][T13855] bridge_slave_1: entered promiscuous mode [ 284.869550][T13855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.916569][T13855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.927723][T13964] netlink: 'syz.1.2439': attribute type 29 has an invalid length. [ 285.010048][T13855] team0: Port device team_slave_0 added [ 285.047086][T13855] team0: Port device team_slave_1 added [ 285.121367][T13855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.130498][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.172485][T13855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.240056][T13855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.254524][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.298232][T13855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.310708][T13978] netlink: 'syz.4.2442': attribute type 1 has an invalid length. [ 285.320043][T13978] openvswitch: netlink: Actions may not be safe on all matching packets [ 285.342314][T13976] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.568082][T13855] hsr_slave_0: entered promiscuous mode [ 285.615514][T13855] hsr_slave_1: entered promiscuous mode [ 285.760955][T13855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.770265][T13855] Cannot create hsr debugfs directory [ 285.864480][ T5851] Bluetooth: hci3: command tx timeout [ 285.935042][T14006] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2449'. [ 285.970697][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'. [ 286.075365][T14010] IPVS: set_ctl: invalid protocol: 3 10.1.1.2:20004 [ 286.273154][T14022] sctp: [Deprecated]: syz.4.2455 (pid 14022) Use of int in maxseg socket option. [ 286.273154][T14022] Use struct sctp_assoc_value instead [ 286.277807][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 286.518956][T14030] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 286.573545][T14036] syzkaller0: entered promiscuous mode [ 286.584006][T14036] syzkaller0: entered allmulticast mode [ 286.605565][T14040] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2459'. [ 286.612639][T14036] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 286.631274][T14040] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 286.635079][T14036] pimreg3: entered allmulticast mode [ 286.676090][T14036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2458'. [ 286.874416][T13855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.901126][T13855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.922173][T13855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.957543][T13855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 287.099635][T13855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.120152][T13855] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.137778][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.144995][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.169785][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.177036][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.268571][T14064] netlink: 'syz.1.2466': attribute type 12 has an invalid length. [ 287.281999][T14064] netlink: 'syz.1.2466': attribute type 11 has an invalid length. [ 287.299332][T14064] netlink: 'syz.1.2466': attribute type 11 has an invalid length. [ 287.309536][T14064] netlink: 'syz.1.2466': attribute type 11 has an invalid length. [ 287.320977][T14064] netlink: 'syz.1.2466': attribute type 11 has an invalid length. [ 287.330793][T14064] netlink: 'syz.1.2466': attribute type 11 has an invalid length. [ 287.338933][T14064] netlink: 'syz.1.2466': attribute type 4 has an invalid length. [ 287.351810][T14064] netlink: 'syz.1.2466': attribute type 5 has an invalid length. [ 287.370505][T14064] netlink: 196072 bytes leftover after parsing attributes in process `syz.1.2466'. [ 287.403469][T14064] netlink: 'syz.1.2466': attribute type 1 has an invalid length. [ 287.429458][T14064] netlink: 512 bytes leftover after parsing attributes in process `syz.1.2466'. [ 287.543694][T13855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.621212][T13855] veth0_vlan: entered promiscuous mode [ 287.654935][T13855] veth1_vlan: entered promiscuous mode [ 287.721093][T13855] veth0_macvtap: entered promiscuous mode [ 287.748563][T13855] veth1_macvtap: entered promiscuous mode [ 287.769560][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.789160][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.820889][T13855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.869185][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.914611][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.943486][T13855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.951786][ T5851] Bluetooth: hci3: command tx timeout [ 287.961793][T13855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.971533][T13855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.980778][T13855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.990781][T13855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.028204][T14095] ip6t_srh: unknown srh match flags 4001 [ 288.049807][T14094] netlink: 'syz.4.2473': attribute type 3 has an invalid length. [ 288.083724][T14094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2473'. [ 288.181515][T14102] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 288.216131][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.232377][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.299487][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.324506][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.588636][T14111] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2478'. [ 289.191408][T14144] netlink: 'syz.3.2491': attribute type 8 has an invalid length. [ 289.207972][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 289.544683][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2492'. [ 290.125663][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 290.239162][ T5993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.278534][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 290.298567][T14201] tipc: Started in network mode [ 290.304460][T14201] tipc: Node identity 3a2031333331320a, cluster identity 4711 [ 290.325747][T14201] tipc: Enabling of bearer rejected, failed to enable media [ 290.397341][T14197] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 291.327772][T14213] netlink: 'syz.2.2508': attribute type 5 has an invalid length. [ 291.596885][T14232] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2512'. [ 291.659007][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.669826][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.678392][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.721579][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.737246][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.758359][ T5993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.772093][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.070341][ T5993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.205701][ T5993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.380159][T14233] wlan1 speed is unknown, defaulting to 1000 [ 292.513667][T14278] tap0: tun_chr_ioctl cmd 1074025676 [ 292.527409][T14278] tap0: owner set to 0 [ 292.538579][ T5993] bridge_slave_1: left allmulticast mode [ 292.544545][ T5993] bridge_slave_1: left promiscuous mode [ 292.550383][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.561007][ T5993] bridge_slave_0: left allmulticast mode [ 292.567180][ T5993] bridge_slave_0: left promiscuous mode [ 292.573521][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.035591][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.050732][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.063276][ T5993] bond0 (unregistering): Released all slaves [ 293.143651][T14283] netlink: 'syz.2.2523': attribute type 4 has an invalid length. [ 293.222653][T14285] netlink: 'syz.2.2523': attribute type 4 has an invalid length. [ 293.239322][T14280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.320056][T14294] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2526'. [ 293.334650][T14293] netlink: 'syz.3.2526': attribute type 1 has an invalid length. [ 293.352333][T14293] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.511357][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2528'. [ 293.707691][T14233] chnl_net:caif_netlink_parms(): no params data found [ 293.728293][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2531'. [ 293.730707][T14312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2533'. [ 293.746827][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 293.774319][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 293.874557][ T5855] Bluetooth: hci3: command tx timeout [ 293.992710][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 294.170629][ T5993] hsr_slave_0: left promiscuous mode [ 294.180947][ T5993] hsr_slave_1: left promiscuous mode [ 294.190391][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.201655][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.212634][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.222078][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.262484][ T5993] veth1_macvtap: left promiscuous mode [ 294.268763][ T5993] veth0_macvtap: left promiscuous mode [ 294.276323][ T5993] veth1_vlan: left promiscuous mode [ 294.281903][ T5993] veth0_vlan: left promiscuous mode [ 294.330122][T14336] netlink: 'syz.3.2539': attribute type 9 has an invalid length. [ 294.350229][T14336] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2539'. [ 294.432297][T14338] netlink: 'syz.3.2540': attribute type 7 has an invalid length. [ 295.093756][T14350] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 295.102237][T14350] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 295.111892][T14350] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 295.120033][T14350] netlink: 'syz.1.2544': attribute type 2 has an invalid length. [ 295.128836][T14350] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2544'. [ 295.173883][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 295.243026][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 295.742750][T14233] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.750285][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.758822][T14233] bridge_slave_0: entered allmulticast mode [ 295.767362][T14233] bridge_slave_0: entered promiscuous mode [ 295.791206][T14338] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2540'. [ 295.814895][T14233] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.842616][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.858050][T14233] bridge_slave_1: entered allmulticast mode [ 295.865778][T14233] bridge_slave_1: entered promiscuous mode [ 295.944360][ T5855] Bluetooth: hci3: command tx timeout [ 296.020810][T14233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.087364][T14233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.251350][T14372] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 296.273411][T14233] team0: Port device team_slave_0 added [ 296.293204][T14233] team0: Port device team_slave_1 added [ 296.405808][T14233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.424473][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.460308][T14233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.511545][T14233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.529435][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.561148][T14233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.748775][T14233] hsr_slave_0: entered promiscuous mode [ 296.780855][T14233] hsr_slave_1: entered promiscuous mode [ 296.818485][T14233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.834553][T14233] Cannot create hsr debugfs directory [ 297.516680][T14233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 297.537980][T14233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 297.564536][T14233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 297.575828][T14233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.800914][T14233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.880950][T14233] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.928173][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.935463][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.997409][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.004634][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.034425][ T5855] Bluetooth: hci3: command tx timeout [ 298.477438][T14493] __nla_validate_parse: 5 callbacks suppressed [ 298.477460][T14493] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2582'. [ 298.680774][T14233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.791956][T14233] veth0_vlan: entered promiscuous mode [ 298.840468][T14233] veth1_vlan: entered promiscuous mode [ 298.895467][T14233] veth0_macvtap: entered promiscuous mode [ 298.907694][T14233] veth1_macvtap: entered promiscuous mode [ 298.948976][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.972044][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.000600][T14233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.019654][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.031343][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.046412][T14233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.054303][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2584'. [ 299.059034][T14233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.073212][T14233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.092343][T14233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.103116][T14233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.275508][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.283397][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.367528][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.394860][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.406694][T14511] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2586'. [ 299.956568][T14540] validate_nla: 1 callbacks suppressed [ 299.956590][T14540] netlink: 'syz.2.2595': attribute type 1 has an invalid length. [ 300.267787][T14557] netlink: 'syz.4.2600': attribute type 1 has an invalid length. [ 300.276129][T14557] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.2600'. [ 300.384755][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 300.404595][T14565] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2602'. [ 300.442139][T14567] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2604'. [ 300.454681][T14567] openvswitch: netlink: Actions may not be safe on all matching packets [ 300.565386][T14570] x_tables: duplicate entry at hook 2 [ 300.658256][T14577] netlink: 'syz.3.2609': attribute type 1 has an invalid length. [ 300.667216][T14577] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.2609'. [ 300.706361][T14575] openvswitch: netlink: Invalid VLAN frame [ 300.828679][T14582] IPVS: Unknown mcast interface: veth0_macvtap [ 301.031271][ T5985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.952909][ T5985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.137618][ T5985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.185111][T14610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2618'. [ 302.226221][T14608] netlink: 'syz.2.2616': attribute type 1 has an invalid length. [ 302.381167][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 302.518779][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.530167][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.539006][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.549415][ T5985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.563097][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.572620][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 302.580990][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.177865][T14624] wlan1 speed is unknown, defaulting to 1000 [ 303.483128][T14624] chnl_net:caif_netlink_parms(): no params data found [ 303.552116][ T5985] bridge_slave_1: left allmulticast mode [ 303.564468][ T5985] bridge_slave_1: left promiscuous mode [ 303.573701][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.625339][ T5985] bridge_slave_0: left allmulticast mode [ 303.635245][ T5985] bridge_slave_0: left promiscuous mode [ 303.652734][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.731350][T14655] IPv4: Oversized IP packet from 127.202.26.0 [ 304.283919][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.302049][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.313896][ T5985] bond0 (unregistering): Released all slaves [ 304.679663][ T5851] Bluetooth: hci3: command tx timeout [ 304.732903][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2634'. [ 304.765312][T14624] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.772627][T14624] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.781850][T14624] bridge_slave_0: entered allmulticast mode [ 304.792642][T14624] bridge_slave_0: entered promiscuous mode [ 304.802401][T14624] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.810022][T14624] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.820274][T14624] bridge_slave_1: entered allmulticast mode [ 304.831693][T14624] bridge_slave_1: entered promiscuous mode [ 304.844445][T14684] bridge4: entered promiscuous mode [ 304.849744][T14684] bridge4: entered allmulticast mode [ 305.011821][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2639'. [ 305.105967][T14624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.137885][T14624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.368220][T14624] team0: Port device team_slave_0 added [ 305.486998][T14624] team0: Port device team_slave_1 added [ 305.529364][ T5985] hsr_slave_0: left promiscuous mode [ 305.543356][ T5985] hsr_slave_1: left promiscuous mode [ 305.550591][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.561587][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.573757][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.581810][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.686270][ T5985] veth1_macvtap: left promiscuous mode [ 305.715063][ T5985] veth0_macvtap: left promiscuous mode [ 305.720771][ T5985] veth1_vlan: left promiscuous mode [ 305.732831][ T5985] veth0_vlan: left promiscuous mode [ 305.762837][T14730] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 306.283536][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 306.333727][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 306.744447][ T5851] Bluetooth: hci3: command tx timeout [ 306.857758][T14624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.872194][T14624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.940038][T14624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.972194][T14624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.989292][T14624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.072492][T14624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.299562][T14624] hsr_slave_0: entered promiscuous mode [ 307.345587][T14624] hsr_slave_1: entered promiscuous mode [ 307.375215][T14624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.392231][T14624] Cannot create hsr debugfs directory [ 307.625371][T14760] syzkaller1: entered promiscuous mode [ 307.633702][T14760] syzkaller1: entered allmulticast mode [ 308.135696][T14791] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2667'. [ 308.152449][T14793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'. [ 308.161053][T14791] netlink: 'syz.2.2667': attribute type 1 has an invalid length. [ 308.181352][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2667'. [ 308.315108][T14624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.339719][T14624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.353593][T14624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.366192][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 308.383559][T14624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.492807][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.511268][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.560746][T14624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.594883][T14624] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.614262][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.621515][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.652871][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.660118][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.730314][T14624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.752407][T14624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.813923][T14816] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 308.824840][ T5855] Bluetooth: hci3: command tx timeout [ 308.980656][T14624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.054528][T14624] veth0_vlan: entered promiscuous mode [ 309.089586][T14624] veth1_vlan: entered promiscuous mode [ 309.101605][T14828] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 309.170516][T14624] veth0_macvtap: entered promiscuous mode [ 309.196972][T14624] veth1_macvtap: entered promiscuous mode [ 309.233521][T14624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.261437][T14624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.273636][T14834] netlink: 'syz.3.2680': attribute type 7 has an invalid length. [ 309.283831][T14624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.314624][T14834] Κό: entered promiscuous mode [ 309.324927][T14624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.338064][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 309.348550][T14624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.361498][T14624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.385272][T14832] C: renamed from lo [ 309.392181][T14832] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 309.430380][T14624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.450982][T14624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.475659][T14624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.491840][T14624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.571469][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 309.627940][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 309.692532][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.742705][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.773372][ T5985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.783275][ T5985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.916453][T14859] vlan4: entered allmulticast mode [ 309.935309][T14859] bond0: entered allmulticast mode [ 309.951415][T14859] bond0: left allmulticast mode [ 310.065922][T14867] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2691'. [ 310.123510][T14867] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2691'. [ 310.143341][T14867] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2691'. [ 310.700807][T14900] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 310.718826][T14900] openvswitch: netlink: Actions may not be safe on all matching packets [ 310.814117][T14902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2703'. [ 310.852897][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'. [ 310.853911][T14908] tipc: Enabling of bearer rejected, failed to enable media [ 310.876545][T14908] netlink: 'syz.2.2705': attribute type 1 has an invalid length. [ 310.884676][T14908] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.2705'. [ 310.893940][T14908] netlink: 'syz.2.2705': attribute type 1 has an invalid length. [ 310.903463][T14908] netlink: 189 bytes leftover after parsing attributes in process `syz.2.2705'. [ 310.913753][ T5855] Bluetooth: hci3: command 0x0419 tx timeout [ 311.735629][T14951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2717'. [ 311.782320][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 312.268072][ T1155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.296916][T14975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2723'. [ 312.445269][ T1155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.497683][ T1155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.580204][ T1155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.651754][ T1155] bridge_slave_1: left allmulticast mode [ 312.657542][ T1155] bridge_slave_1: left promiscuous mode [ 312.663274][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.673679][ T1155] bridge_slave_0: left allmulticast mode [ 312.679848][ T1155] bridge_slave_0: left promiscuous mode [ 312.685860][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.109260][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.123257][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.135698][ T1155] bond0 (unregistering): Released all slaves [ 313.452983][ T1155] hsr_slave_0: left promiscuous mode [ 313.468212][ T1155] hsr_slave_1: left promiscuous mode [ 313.475873][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.483334][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.504794][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.512281][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.613120][ T1155] veth1_macvtap: left promiscuous mode [ 313.618993][ T1155] veth0_macvtap: left promiscuous mode [ 313.627514][ T1155] veth1_vlan: left promiscuous mode [ 313.633057][ T1155] veth0_vlan: left promiscuous mode [ 314.100827][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.114141][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.130524][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.138931][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.148673][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 314.157794][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.632034][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 314.703998][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 315.309656][T14987] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 315.525460][T14997] wlan1 speed is unknown, defaulting to 1000 [ 315.728329][T14997] chnl_net:caif_netlink_parms(): no params data found [ 315.743628][T15016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2732'. [ 316.027446][T14997] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.038007][T15022] netlink: 'syz.1.2733': attribute type 2 has an invalid length. [ 316.057819][T14997] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.073120][T15022] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2733'. [ 316.087443][T14997] bridge_slave_0: entered allmulticast mode [ 316.123989][T14997] bridge_slave_0: entered promiscuous mode [ 316.168377][T14997] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.184719][ T5855] Bluetooth: hci3: command tx timeout [ 316.204454][T14997] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.228995][T14997] bridge_slave_1: entered allmulticast mode [ 316.269141][T14997] bridge_slave_1: entered promiscuous mode [ 316.296585][T15038] sctp: [Deprecated]: syz.2.2738 (pid 15038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.296585][T15038] Use struct sctp_sack_info instead [ 316.332359][T15038] sctp: [Deprecated]: syz.2.2738 (pid 15038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.332359][T15038] Use struct sctp_sack_info instead [ 316.370333][T15036] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 316.412449][T14997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.449391][T15047] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2740'. [ 316.455391][T14997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.458948][T15038] sctp: [Deprecated]: syz.2.2738 (pid 15038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.458948][T15038] Use struct sctp_sack_info instead [ 316.535641][T15048] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.2738'. [ 316.598307][T14997] team0: Port device team_slave_0 added [ 316.605701][T15053] FAULT_INJECTION: forcing a failure. [ 316.605701][T15053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.632671][T15052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.641693][T15053] CPU: 0 UID: 0 PID: 15053 Comm: syz.3.2742 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 316.652540][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 316.662596][T15055] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2743'. [ 316.671590][T15053] Call Trace: [ 316.674916][T15053] [ 316.677885][T15053] dump_stack_lvl+0x241/0x360 [ 316.682607][T15053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.687822][T15053] ? __pfx__printk+0x10/0x10 [ 316.692428][T15053] ? __pfx_lock_release+0x10/0x10 [ 316.697496][T15053] should_fail_ex+0x3b0/0x4e0 [ 316.702305][T15053] _copy_from_iter+0x21f/0x1e70 [ 316.707222][T15053] ? __virt_addr_valid+0x183/0x530 [ 316.712351][T15053] ? __pfx_lock_release+0x10/0x10 [ 316.717426][T15053] ? __alloc_skb+0x28f/0x440 [ 316.722037][T15053] ? __pfx__copy_from_iter+0x10/0x10 [ 316.727349][T15053] ? __virt_addr_valid+0x183/0x530 [ 316.732559][T15053] ? __virt_addr_valid+0x183/0x530 [ 316.737690][T15053] ? __virt_addr_valid+0x45f/0x530 [ 316.742817][T15053] ? __check_object_size+0x48e/0x900 [ 316.748127][T15053] netlink_sendmsg+0x73d/0xcb0 [ 316.752921][T15053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.758226][T15053] ? aa_sock_msg_perm+0x91/0x160 [ 316.763207][T15053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.768516][T15053] __sock_sendmsg+0x221/0x270 [ 316.773208][T15053] ____sys_sendmsg+0x52a/0x7e0 [ 316.777991][T15053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.783324][T15053] __sys_sendmmsg+0x3ab/0x730 [ 316.788026][T15053] ? __pfx___sys_sendmmsg+0x10/0x10 [ 316.793252][T15053] ? __pfx_lock_release+0x10/0x10 [ 316.798306][T15053] ? kstrtouint_from_user+0x128/0x190 [ 316.803718][T15053] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 316.809628][T15053] ? ksys_write+0x229/0x2b0 [ 316.814150][T15053] ? __pfx_lock_release+0x10/0x10 [ 316.819229][T15053] ? vfs_write+0x730/0xd30 [ 316.823745][T15053] ? __mutex_unlock_slowpath+0x21d/0x750 [ 316.829459][T15053] ? __fget_files+0x3f3/0x470 [ 316.834194][T15053] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 316.840218][T15053] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.846607][T15053] ? do_syscall_64+0x100/0x230 [ 316.851397][T15053] __x64_sys_sendmmsg+0xa0/0xb0 [ 316.856350][T15053] do_syscall_64+0xf3/0x230 [ 316.860889][T15053] ? clear_bhb_loop+0x35/0x90 [ 316.865602][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.871601][T15053] RIP: 0033:0x7fd17377e819 [ 316.876038][T15053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.895659][T15053] RSP: 002b:00007fd1744ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 316.904102][T15053] RAX: ffffffffffffffda RBX: 00007fd173935fa0 RCX: 00007fd17377e819 [ 316.912093][T15053] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 316.920078][T15053] RBP: 00007fd1744ce090 R08: 0000000000000000 R09: 0000000000000000 [ 316.928063][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.936041][T15053] R13: 0000000000000000 R14: 00007fd173935fa0 R15: 00007fff7f0f6ea8 [ 316.944038][T15053] [ 316.951218][T15052] team0: Port device bond0 added [ 316.995428][T14997] team0: Port device team_slave_1 added [ 317.078683][T15055] Κό: entered promiscuous mode [ 317.106136][T14997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.113169][T14997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.147000][T14997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.161517][T14997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.169851][T14997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.202162][T14997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.243940][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 317.363066][T14997] hsr_slave_0: entered promiscuous mode [ 317.377837][T14997] hsr_slave_1: entered promiscuous mode [ 317.392523][T14997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.422650][T14997] Cannot create hsr debugfs directory [ 317.466506][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.516606][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 317.592168][T15087] netlink: 'syz.1.2751': attribute type 2 has an invalid length. [ 317.897594][T15098] FAULT_INJECTION: forcing a failure. [ 317.897594][T15098] name failslab, interval 1, probability 0, space 0, times 0 [ 317.911054][T15098] CPU: 1 UID: 0 PID: 15098 Comm: syz.1.2755 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 317.921874][T15098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 317.931968][T15098] Call Trace: [ 317.935279][T15098] [ 317.938250][T15098] dump_stack_lvl+0x241/0x360 [ 317.942991][T15098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.948256][T15098] ? __pfx__printk+0x10/0x10 [ 317.952892][T15098] ? ref_tracker_alloc+0x332/0x490 [ 317.958051][T15098] should_fail_ex+0x3b0/0x4e0 [ 317.962768][T15098] ? skb_clone+0x20c/0x390 [ 317.967240][T15098] should_failslab+0xac/0x100 [ 317.971966][T15098] ? skb_clone+0x20c/0x390 [ 317.976449][T15098] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 317.981860][T15098] skb_clone+0x20c/0x390 [ 317.986128][T15098] __netlink_deliver_tap+0x3cc/0x7c0 [ 317.991441][T15098] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.996657][T15098] netlink_deliver_tap+0x19d/0x1b0 [ 318.001782][T15098] netlink_unicast+0x7c4/0x990 [ 318.006603][T15098] ? __pfx_netlink_unicast+0x10/0x10 [ 318.011897][T15098] ? __virt_addr_valid+0x183/0x530 [ 318.017027][T15098] ? __check_object_size+0x48e/0x900 [ 318.022359][T15098] netlink_sendmsg+0x8e4/0xcb0 [ 318.027152][T15098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.032455][T15098] ? aa_sock_msg_perm+0x91/0x160 [ 318.037414][T15098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.042710][T15098] __sock_sendmsg+0x221/0x270 [ 318.047400][T15098] ____sys_sendmsg+0x52a/0x7e0 [ 318.052188][T15098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.057502][T15098] __sys_sendmmsg+0x3ab/0x730 [ 318.062201][T15098] ? __pfx___sys_sendmmsg+0x10/0x10 [ 318.067428][T15098] ? __pfx_lock_release+0x10/0x10 [ 318.072476][T15098] ? kstrtouint_from_user+0x128/0x190 [ 318.077886][T15098] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 318.083798][T15098] ? ksys_write+0x229/0x2b0 [ 318.088315][T15098] ? __pfx_lock_release+0x10/0x10 [ 318.093368][T15098] ? vfs_write+0x730/0xd30 [ 318.097804][T15098] ? __mutex_unlock_slowpath+0x21d/0x750 [ 318.103552][T15098] ? __fget_files+0x3f3/0x470 [ 318.108255][T15098] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.114267][T15098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.120626][T15098] ? do_syscall_64+0x100/0x230 [ 318.125410][T15098] __x64_sys_sendmmsg+0xa0/0xb0 [ 318.130367][T15098] do_syscall_64+0xf3/0x230 [ 318.134888][T15098] ? clear_bhb_loop+0x35/0x90 [ 318.139582][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.145489][T15098] RIP: 0033:0x7f38bb17e819 [ 318.149915][T15098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.169533][T15098] RSP: 002b:00007f38bbf02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 318.177966][T15098] RAX: ffffffffffffffda RBX: 00007f38bb335fa0 RCX: 00007f38bb17e819 [ 318.186035][T15098] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 318.194017][T15098] RBP: 00007f38bbf02090 R08: 0000000000000000 R09: 0000000000000000 [ 318.202009][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.209990][T15098] R13: 0000000000000000 R14: 00007f38bb335fa0 R15: 00007ffd6b8b3ab8 [ 318.217986][T15098] [ 318.269557][ T5855] Bluetooth: hci3: command tx timeout [ 318.484713][T15073] wlan1 speed is unknown, defaulting to 1000 [ 319.002521][T15125] netlink: 'syz.1.2762': attribute type 4 has an invalid length. [ 319.010769][T15125] netlink: 'syz.1.2762': attribute type 4 has an invalid length. [ 319.037760][T15125] netlink: 126012 bytes leftover after parsing attributes in process `syz.1.2762'. [ 320.344936][ T5855] Bluetooth: hci3: command tx timeout [ 321.010714][T15134] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.221414][T15140] netlink: 'syz.1.2768': attribute type 2 has an invalid length. [ 321.238123][T15140] netlink: 'syz.1.2768': attribute type 1 has an invalid length. [ 321.272326][T15143] FAULT_INJECTION: forcing a failure. [ 321.272326][T15143] name failslab, interval 1, probability 0, space 0, times 0 [ 321.279400][T15140] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2768'. [ 321.304288][T15143] CPU: 0 UID: 0 PID: 15143 Comm: syz.4.2767 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 321.315559][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 321.325667][T15143] Call Trace: [ 321.328958][T15143] [ 321.331903][T15143] dump_stack_lvl+0x241/0x360 [ 321.336609][T15143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.341824][T15143] ? __pfx__printk+0x10/0x10 [ 321.346439][T15143] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 321.352442][T15143] ? __pfx___might_resched+0x10/0x10 [ 321.357751][T15143] should_fail_ex+0x3b0/0x4e0 [ 321.362455][T15143] should_failslab+0xac/0x100 [ 321.367148][T15143] ? __alloc_skb+0x1c3/0x440 [ 321.371755][T15143] kmem_cache_alloc_node_noprof+0x71/0x320 [ 321.377586][T15143] __alloc_skb+0x1c3/0x440 [ 321.382021][T15143] ? __pfx___alloc_skb+0x10/0x10 [ 321.386978][T15143] ? netlink_ack_tlv_len+0x6e/0x200 [ 321.392201][T15143] netlink_ack+0x13f/0xa30 [ 321.396656][T15143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.402141][T15143] netlink_rcv_skb+0x262/0x430 [ 321.407007][T15143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.412512][T15143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.417867][T15143] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.423118][T15143] netlink_unicast+0x7f6/0x990 [ 321.427910][T15143] ? __pfx_netlink_unicast+0x10/0x10 [ 321.433209][T15143] ? __virt_addr_valid+0x183/0x530 [ 321.438339][T15143] ? __check_object_size+0x48e/0x900 [ 321.443646][T15143] netlink_sendmsg+0x8e4/0xcb0 [ 321.448464][T15143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.453777][T15143] ? aa_sock_msg_perm+0x91/0x160 [ 321.458743][T15143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.464043][T15143] __sock_sendmsg+0x221/0x270 [ 321.468745][T15143] ____sys_sendmsg+0x52a/0x7e0 [ 321.473536][T15143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.478874][T15143] __sys_sendmmsg+0x3ab/0x730 [ 321.483594][T15143] ? __pfx___sys_sendmmsg+0x10/0x10 [ 321.488832][T15143] ? __pfx_lock_release+0x10/0x10 [ 321.493905][T15143] ? kstrtouint_from_user+0x128/0x190 [ 321.499317][T15143] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 321.505230][T15143] ? ksys_write+0x229/0x2b0 [ 321.509744][T15143] ? __pfx_lock_release+0x10/0x10 [ 321.514795][T15143] ? vfs_write+0x730/0xd30 [ 321.519227][T15143] ? __mutex_unlock_slowpath+0x21d/0x750 [ 321.524885][T15143] ? __fget_files+0x3f3/0x470 [ 321.529610][T15143] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 321.535612][T15143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.541988][T15143] ? do_syscall_64+0x100/0x230 [ 321.546777][T15143] __x64_sys_sendmmsg+0xa0/0xb0 [ 321.551653][T15143] do_syscall_64+0xf3/0x230 [ 321.556176][T15143] ? clear_bhb_loop+0x35/0x90 [ 321.560874][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.566780][T15143] RIP: 0033:0x7f7fcb77e819 [ 321.571206][T15143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.590825][T15143] RSP: 002b:00007f7fcc5c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.599257][T15143] RAX: ffffffffffffffda RBX: 00007f7fcb935fa0 RCX: 00007f7fcb77e819 [ 321.607242][T15143] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 321.615225][T15143] RBP: 00007f7fcc5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 321.623205][T15143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.631185][T15143] R13: 0000000000000000 R14: 00007f7fcb935fa0 R15: 00007ffd29cf6848 [ 321.639181][T15143] [ 321.830786][T14997] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.863496][T15150] netlink: 'syz.1.2769': attribute type 1 has an invalid length. [ 321.882434][T15150] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2769'. [ 321.925606][T15151] netlink: 'syz.1.2769': attribute type 1 has an invalid length. [ 321.933612][T15151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2769'. [ 321.944962][T14997] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.977676][T14997] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.022889][T14997] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.052140][ T9] hid-generic 0005:0458:0009.0002: item fetching failed at offset 0/1 [ 322.062912][ T9] hid-generic 0005:0458:0009.0002: probe with driver hid-generic failed with error -22 [ 322.305595][T14997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.356787][T14997] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.390001][T14077] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.397215][T14077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.424308][ T5855] Bluetooth: hci3: command tx timeout [ 322.462034][T14077] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.469397][T14077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.726387][T15187] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 323.036402][T14997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.065045][T15201] lo: left promiscuous mode [ 323.070888][T15201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.114557][T15207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2788'. [ 323.210947][T14997] veth0_vlan: entered promiscuous mode [ 323.223254][T14997] veth1_vlan: entered promiscuous mode [ 323.282103][T14997] veth0_macvtap: entered promiscuous mode [ 323.299932][T15207] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2788'. [ 323.346836][T14997] veth1_macvtap: entered promiscuous mode [ 323.359806][T15215] dvmrp0: entered allmulticast mode [ 323.402913][T14997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.434641][T14997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.455806][T14997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.487752][T14997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.523719][T14997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.543338][T14997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.546703][T15226] netlink: 'syz.1.2792': attribute type 11 has an invalid length. [ 323.559815][T14997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.571312][T15226] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.2792'. [ 323.579572][T14997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.597960][T14997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.609798][T14997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.623003][T15229] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2794'. [ 323.795924][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.830925][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.884707][T14077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.908954][T14077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.853828][T15254] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.2800'. [ 325.348221][ T1155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.697173][ T1155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.729521][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.739244][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.750253][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.759945][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.769149][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.780072][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.912926][T15293] wlan1 speed is unknown, defaulting to 1000 [ 326.042047][ T1155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.090335][T15293] chnl_net:caif_netlink_parms(): no params data found [ 326.175505][ T1155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.213482][T15293] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.227313][T15293] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.237261][T15293] bridge_slave_0: entered allmulticast mode [ 326.244170][T15293] bridge_slave_0: entered promiscuous mode [ 326.252196][T15293] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.260296][T15293] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.268732][T15293] bridge_slave_1: entered allmulticast mode [ 326.276384][T15293] bridge_slave_1: entered promiscuous mode [ 326.312949][T15293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.327413][T15293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.379794][T15293] team0: Port device team_slave_0 added [ 326.389169][T15293] team0: Port device team_slave_1 added [ 326.433440][ T1155] bridge_slave_1: left allmulticast mode [ 326.439593][ T1155] bridge_slave_1: left promiscuous mode [ 326.451846][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.461118][ T1155] bridge_slave_0: left allmulticast mode [ 326.473387][ T1155] bridge_slave_0: left promiscuous mode [ 326.479619][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.079308][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.087860][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.090327][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.106767][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.116224][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.127643][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.137105][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 327.145861][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.162046][ T1155] bond0 (unregistering): Released all slaves [ 327.190166][T15293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.198043][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.224799][T15293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.238633][T15293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.246078][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.280448][T15293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.355696][T15307] FAULT_INJECTION: forcing a failure. [ 327.355696][T15307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.393882][T15307] CPU: 1 UID: 0 PID: 15307 Comm: syz.4.2813 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 327.404740][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 327.414929][T15307] Call Trace: [ 327.418326][T15307] [ 327.421278][T15307] dump_stack_lvl+0x241/0x360 [ 327.426008][T15307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.431268][T15307] ? __pfx__printk+0x10/0x10 [ 327.435923][T15307] ? __pfx_lock_release+0x10/0x10 [ 327.441014][T15307] should_fail_ex+0x3b0/0x4e0 [ 327.445757][T15307] _copy_from_user+0x2f/0xc0 [ 327.450408][T15307] copy_msghdr_from_user+0xae/0x680 [ 327.455663][T15307] ? __pfx___might_resched+0x10/0x10 [ 327.461003][T15307] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 327.466861][T15307] ? rcu_is_watching+0x15/0xb0 [ 327.471687][T15307] ? __might_fault+0xaa/0x120 [ 327.476430][T15307] __sys_sendmmsg+0x36d/0x730 [ 327.481160][T15307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 327.486388][T15307] ? __pfx_lock_release+0x10/0x10 [ 327.491534][T15307] ? kstrtouint_from_user+0x128/0x190 [ 327.496970][T15307] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 327.502922][T15307] ? ksys_write+0x229/0x2b0 [ 327.507471][T15307] ? __pfx_lock_release+0x10/0x10 [ 327.512545][T15307] ? vfs_write+0x730/0xd30 [ 327.516992][T15307] ? __mutex_unlock_slowpath+0x21d/0x750 [ 327.522684][T15307] ? __fget_files+0x3f3/0x470 [ 327.527423][T15307] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.533442][T15307] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.539795][T15307] ? do_syscall_64+0x100/0x230 [ 327.544585][T15307] __x64_sys_sendmmsg+0xa0/0xb0 [ 327.549480][T15307] do_syscall_64+0xf3/0x230 [ 327.554019][T15307] ? clear_bhb_loop+0x35/0x90 [ 327.558767][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.564686][T15307] RIP: 0033:0x7f7fcb77e819 [ 327.569118][T15307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.588742][T15307] RSP: 002b:00007f7fcc5c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.597180][T15307] RAX: ffffffffffffffda RBX: 00007f7fcb935fa0 RCX: 00007f7fcb77e819 [ 327.605180][T15307] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 327.613162][T15307] RBP: 00007f7fcc5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 327.621142][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.629122][T15307] R13: 0000000000000000 R14: 00007f7fcb935fa0 R15: 00007ffd29cf6848 [ 327.637139][T15307] [ 327.701006][T15293] hsr_slave_0: entered promiscuous mode [ 327.792938][T15293] hsr_slave_1: entered promiscuous mode [ 327.810321][T15293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.853880][T15293] Cannot create hsr debugfs directory [ 327.874653][ T5855] Bluetooth: hci1: command tx timeout [ 328.087192][T15312] wlan1 speed is unknown, defaulting to 1000 [ 328.205044][T15319] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 328.205426][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 328.648645][ T1155] hsr_slave_0: left promiscuous mode [ 328.704422][ T1155] hsr_slave_1: left promiscuous mode [ 328.719164][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.744771][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.772407][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.795866][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.862658][ T1155] veth1_macvtap: left promiscuous mode [ 328.878946][ T1155] veth0_macvtap: left promiscuous mode [ 328.890557][ T1155] veth1_vlan: left promiscuous mode [ 328.900018][ T1155] veth0_vlan: left promiscuous mode [ 329.055184][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 329.226829][ T5855] Bluetooth: hci3: command tx timeout [ 329.656250][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 329.703252][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 329.948889][ T5855] Bluetooth: hci1: command tx timeout [ 330.368679][T15293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.379771][T15293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.410909][T15312] chnl_net:caif_netlink_parms(): no params data found [ 330.427581][T15360] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 330.439601][T15360] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2825'. [ 330.491637][T15293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.524505][T15293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.769362][T15293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.781229][T15293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.826021][T15378] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2829'. [ 330.835426][T15378] netlink: 'syz.3.2829': attribute type 1 has an invalid length. [ 330.843199][T15378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2829'. [ 330.855717][T15378] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2829'. [ 330.946719][T15293] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.957294][T15293] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.979187][T15312] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.992308][T15312] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.008518][T15312] bridge_slave_0: entered allmulticast mode [ 331.018195][T15312] bridge_slave_0: entered promiscuous mode [ 331.042861][T15383] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2831'. [ 331.044532][T15312] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.070627][T15312] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.083639][T15312] bridge_slave_1: entered allmulticast mode [ 331.096272][T15312] bridge_slave_1: entered promiscuous mode [ 331.251161][T15312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.306668][ T5855] Bluetooth: hci3: command tx timeout [ 331.320872][T15312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.407173][T15395] netlink: 'syz.4.2835': attribute type 1 has an invalid length. [ 331.413980][T15312] team0: Port device team_slave_0 added [ 331.415440][T15395] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2835'. [ 331.415469][T15395] netlink: 'syz.4.2835': attribute type 1 has an invalid length. [ 331.496179][T15293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.522214][T15312] team0: Port device team_slave_1 added [ 331.557088][T15293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.610794][T15293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.643859][T15293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.661064][T15312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.676397][T15312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.716416][T15312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.743148][T15312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.760734][T15312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.807209][T15312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.912467][T15417] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 331.943631][T15417] netlink: 9356 bytes leftover after parsing attributes in process `syz.3.2842'. [ 331.955853][T15422] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 331.963436][T15422] IPVS: set_ctl: invalid protocol: 3119 0.0.0.0:0 [ 331.991400][T15312] hsr_slave_0: entered promiscuous mode [ 331.998586][T15417] netlink: 'syz.3.2842': attribute type 2 has an invalid length. [ 332.011211][T15312] hsr_slave_1: entered promiscuous mode [ 332.021334][T15312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.024445][ T5855] Bluetooth: hci1: command tx timeout [ 332.031348][T15417] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 332.044779][T15312] Cannot create hsr debugfs directory [ 332.258482][T15426] sctp: [Deprecated]: syz.4.2843 (pid 15426) Use of int in maxseg socket option. [ 332.258482][T15426] Use struct sctp_assoc_value instead [ 332.459818][T15293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.569391][T15293] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.609262][T15442] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.635162][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.642384][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.661700][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.668930][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.090781][T15312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.133550][T15312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.167769][T15312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.189924][T15312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.384949][ T5855] Bluetooth: hci3: command tx timeout [ 333.412110][T15293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.441387][T15312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.523653][T15312] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.533153][T15481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2857'. [ 333.565161][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.572365][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.626869][T14077] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.634031][T14077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.741859][T15293] veth0_vlan: entered promiscuous mode [ 333.810286][T15293] veth1_vlan: entered promiscuous mode [ 333.967096][T15293] veth0_macvtap: entered promiscuous mode [ 334.017146][T15293] veth1_macvtap: entered promiscuous mode [ 334.094647][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.106144][ T5855] Bluetooth: hci1: command tx timeout [ 334.124388][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.145309][T15293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.160840][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.171865][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.183919][T15293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.235765][T15293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.265561][T15293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.277992][T15293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.297424][T15293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.368060][T15312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.545877][T15312] veth0_vlan: entered promiscuous mode [ 334.610716][T15312] veth1_vlan: entered promiscuous mode [ 334.696449][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.714488][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.772842][T15515] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2865'. [ 334.788163][T15312] veth0_macvtap: entered promiscuous mode [ 334.799978][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.807612][T15312] veth1_macvtap: entered promiscuous mode [ 334.826031][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.878242][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.905316][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.917441][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.928655][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.962718][T15312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.005351][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.023815][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.035093][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.046268][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.059084][T15312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.094548][T15312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.103320][T15312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.147178][T15312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.174345][T15312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.263083][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'. [ 335.360374][T15529] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2868'. [ 335.377902][T15531] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2869'. [ 335.397543][T15531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2869'. [ 335.409066][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.418233][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.459391][T15531] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2869'. [ 335.464858][ T5855] Bluetooth: hci3: command tx timeout [ 335.546043][T14077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.574187][T14077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.731288][T15544] netlink: 'syz.4.2874': attribute type 1 has an invalid length. [ 336.085458][T15564] netlink: 'syz.2.2879': attribute type 8 has an invalid length. [ 336.323951][T14077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.520901][T14077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.940121][T14077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.076503][T14077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.179241][T14077] bridge_slave_1: left allmulticast mode [ 337.185465][T14077] bridge_slave_1: left promiscuous mode [ 337.191184][T14077] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.203181][T14077] bridge_slave_0: left allmulticast mode [ 337.209323][T14077] bridge_slave_0: left promiscuous mode [ 337.215377][T14077] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.627159][T14077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.639519][T14077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.651539][T14077] bond0 (unregistering): Released all slaves [ 338.195738][T14077] hsr_slave_0: left promiscuous mode [ 338.244789][T14077] hsr_slave_1: left promiscuous mode [ 338.306643][T14077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.324900][T14077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.342706][T14077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.363974][T14077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.452126][T14077] veth1_macvtap: left promiscuous mode [ 338.461870][T14077] veth0_macvtap: left promiscuous mode [ 338.469003][T14077] veth1_vlan: left promiscuous mode [ 338.475380][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.494572][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.504849][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.516862][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.562709][T14077] veth0_vlan: left promiscuous mode [ 338.629641][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.637206][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.245855][T14077] team0 (unregistering): Port device team_slave_1 removed [ 339.302847][T14077] team0 (unregistering): Port device team_slave_0 removed [ 340.048762][T15649] Cannot find set identified by id 0 to match [ 340.060071][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 340.074421][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 340.144207][T15625] wlan1 speed is unknown, defaulting to 1000 [ 340.425879][T15665] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 340.453407][T15663] sit0: entered promiscuous mode [ 340.492087][T15663] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 340.510127][T15663] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2899'. [ 340.619599][T15670] netlink: 'syz.1.2898': attribute type 1 has an invalid length. [ 340.637590][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2898'. [ 340.731366][T15625] chnl_net:caif_netlink_parms(): no params data found [ 340.744447][ T5851] Bluetooth: hci3: command tx timeout [ 340.971087][T15625] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.987074][T15625] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.013965][T15625] bridge_slave_0: entered allmulticast mode [ 341.038661][T15625] bridge_slave_0: entered promiscuous mode [ 341.047241][T15625] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.054558][T15625] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.061918][T15625] bridge_slave_1: entered allmulticast mode [ 341.069184][T15625] bridge_slave_1: entered promiscuous mode [ 341.178047][T15625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.212032][T15625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.327680][T15704] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 341.346395][T15625] team0: Port device team_slave_0 added [ 341.412525][T15625] team0: Port device team_slave_1 added [ 341.517978][T15625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.542496][T15625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.611535][T15625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.658477][T15625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.665412][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'. [ 341.683037][T15625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.780299][T15625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.176465][T15625] hsr_slave_0: entered promiscuous mode [ 342.200120][T15625] hsr_slave_1: entered promiscuous mode [ 342.217674][T15625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.238436][T15625] Cannot create hsr debugfs directory [ 342.443275][T15706] wlan1 speed is unknown, defaulting to 1000 [ 342.469052][T15738] bond0: entered promiscuous mode [ 342.486379][T15738] bond_slave_0: entered promiscuous mode [ 342.492263][T15738] bond_slave_1: entered promiscuous mode [ 342.528250][T15738] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 342.546026][T15738] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 342.795812][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2922'. [ 342.814728][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2922'. [ 342.830036][ T5851] Bluetooth: hci3: command tx timeout [ 342.845805][T15755] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2924'. [ 342.864489][T15755] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 342.898017][T15756] x_tables: duplicate underflow at hook 2 [ 342.908193][T15748] syz_tun: entered promiscuous mode [ 342.925174][T15748] batadv_slave_1: entered promiscuous mode [ 342.956873][T15748] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 342.976304][T15748] Cannot create hsr debugfs directory [ 343.222416][T15768] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2927'. [ 343.495271][T15777] xt_CT: No such helper "pptp" [ 343.662659][T15790] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 343.726055][T15790] tipc: Enabling of bearer rejected, failed to enable media [ 343.802911][T15625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.847928][T15625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.887687][T15625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.918357][T15625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.173835][T15625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.203579][T15625] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.217633][T15815] ipip0: entered promiscuous mode [ 344.255086][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.262258][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.345926][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.353090][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.393669][T15625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.404633][T15625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.528557][T15836] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2947'. [ 344.667264][T15625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.699956][T15842] IPv6: sit2: Disabled Multicast RS [ 344.818242][T15625] veth0_vlan: entered promiscuous mode [ 344.856247][T15625] veth1_vlan: entered promiscuous mode [ 344.904394][ T5855] Bluetooth: hci3: command tx timeout [ 344.936009][T15625] veth0_macvtap: entered promiscuous mode [ 344.965757][T15625] veth1_macvtap: entered promiscuous mode [ 345.005468][T15625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.016888][T15625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.029136][T15625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.041435][T15625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.063187][T15625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.101157][T15625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.152407][T15625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.184586][T15625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.198882][T15625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.218232][T15625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.239409][T15625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.250499][T15625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.260149][T15625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.269230][T15625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.463773][ T5992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.486110][ T5992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.535708][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.553315][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.814747][T15881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2957'. [ 345.981186][T15889] Cannot find add_set index 0 as target [ 346.074824][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2962'. [ 346.255434][T15872] wlan1 speed is unknown, defaulting to 1000 [ 346.259329][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 346.738153][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 346.998425][ T5855] Bluetooth: hci3: command 0x0419 tx timeout [ 347.017911][T15927] ipip0: entered promiscuous mode [ 347.152785][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2974'. [ 347.165028][T15930] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2974'. [ 347.573338][T15954] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2978'. [ 347.599925][T15954] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 347.798447][T15964] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2982'. [ 347.966430][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 348.000628][T15972] ipvlan2: entered allmulticast mode [ 348.023309][T15972] veth0_vlan: entered allmulticast mode [ 348.169703][ T5997] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.336334][ T5997] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.453356][ T5997] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.490162][T14195] ================================================================== [ 348.498284][T14195] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 348.506472][T14195] Read of size 8 at addr ffff888034931308 by task kbnepd bnep0/14195 [ 348.514551][T14195] [ 348.516899][T14195] CPU: 0 UID: 0 PID: 14195 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 348.527883][T14195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 348.537959][T14195] Call Trace: [ 348.541278][T14195] [ 348.544237][T14195] dump_stack_lvl+0x241/0x360 [ 348.548957][T14195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.554196][T14195] ? __pfx__printk+0x10/0x10 [ 348.558825][T14195] ? _printk+0xd5/0x120 [ 348.563019][T14195] ? __virt_addr_valid+0x183/0x530 [ 348.568433][T14195] ? __virt_addr_valid+0x183/0x530 [ 348.573593][T14195] print_report+0x169/0x550 [ 348.578136][T14195] ? __virt_addr_valid+0x183/0x530 [ 348.583279][T14195] ? __virt_addr_valid+0x183/0x530 [ 348.588430][T14195] ? __virt_addr_valid+0x45f/0x530 [ 348.593577][T14195] ? __phys_addr+0xba/0x170 [ 348.598113][T14195] ? device_for_each_child+0xbb/0x1b0 [ 348.603522][T14195] kasan_report+0x143/0x180 [ 348.608073][T14195] ? device_for_each_child+0xbb/0x1b0 [ 348.613485][T14195] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 348.618975][T14195] device_for_each_child+0xbb/0x1b0 [ 348.624306][T14195] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.630675][T14195] ? __pfx_device_for_each_child+0x10/0x10 [ 348.636523][T14195] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.641752][T14195] ? lockdep_hardirqs_on+0x99/0x150 [ 348.646983][T14195] pm_runtime_set_memalloc_noio+0x114/0x260 [ 348.653444][T14195] netdev_unregister_kobject+0x178/0x250 [ 348.659114][T14195] unregister_netdevice_many_notify+0x1851/0x1da0 [ 348.665580][T14195] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 348.672382][T14195] ? do_raw_spin_unlock+0x13c/0x8b0 [ 348.677623][T14195] ? __mutex_lock+0x52a/0xd70 [ 348.682337][T14195] unregister_netdevice_queue+0x303/0x370 [ 348.688089][T14195] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 348.694440][T14195] ? down_write+0x18c/0x220 [ 348.698975][T14195] ? __pfx_down_write+0x10/0x10 [ 348.703848][T14195] unregister_netdev+0x1c/0x30 [ 348.708625][T14195] bnep_session+0x2e0e/0x3000 [ 348.713324][T14195] ? __pfx_bnep_session+0x10/0x10 [ 348.718356][T14195] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 348.724263][T14195] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 348.730617][T14195] ? __pfx_woken_wake_function+0x10/0x10 [ 348.736272][T14195] ? __kthread_parkme+0x169/0x1d0 [ 348.741396][T14195] ? __pfx_bnep_session+0x10/0x10 [ 348.746430][T14195] kthread+0x2f0/0x390 [ 348.750506][T14195] ? __pfx_bnep_session+0x10/0x10 [ 348.755542][T14195] ? __pfx_kthread+0x10/0x10 [ 348.760137][T14195] ret_from_fork+0x4b/0x80 [ 348.764569][T14195] ? __pfx_kthread+0x10/0x10 [ 348.769178][T14195] ret_from_fork_asm+0x1a/0x30 [ 348.773982][T14195] [ 348.777003][T14195] [ 348.779327][T14195] Allocated by task 5858: [ 348.783649][T14195] kasan_save_track+0x3f/0x80 [ 348.788354][T14195] __kasan_kmalloc+0x98/0xb0 [ 348.792949][T14195] __kmalloc_noprof+0x1fc/0x400 [ 348.797812][T14195] hci_alloc_dev_priv+0x27/0x2030 [ 348.802850][T14195] vhci_create_device+0x116/0x6a0 [ 348.807880][T14195] vhci_write+0x3cf/0x490 [ 348.812222][T14195] vfs_write+0xaeb/0xd30 [ 348.816487][T14195] ksys_write+0x183/0x2b0 [ 348.820827][T14195] do_syscall_64+0xf3/0x230 [ 348.825361][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.831265][T14195] [ 348.833610][T14195] Freed by task 5858: [ 348.837595][T14195] kasan_save_track+0x3f/0x80 [ 348.842280][T14195] kasan_save_free_info+0x40/0x50 [ 348.847496][T14195] __kasan_slab_free+0x59/0x70 [ 348.852264][T14195] kfree+0x1a0/0x440 [ 348.856184][T14195] hci_release_dev+0x1525/0x16b0 [ 348.861138][T14195] bt_host_release+0x83/0x90 [ 348.865734][T14195] device_release+0x99/0x1c0 [ 348.870334][T14195] kobject_put+0x22f/0x480 [ 348.874764][T14195] vhci_release+0x88/0xd0 [ 348.879099][T14195] __fput+0x23f/0x880 [ 348.883090][T14195] task_work_run+0x24f/0x310 [ 348.887688][T14195] do_exit+0xa2f/0x28e0 [ 348.891856][T14195] do_group_exit+0x207/0x2c0 [ 348.896455][T14195] get_signal+0x16a3/0x1740 [ 348.900964][T14195] arch_do_signal_or_restart+0x96/0x860 [ 348.906524][T14195] syscall_exit_to_user_mode+0xc9/0x370 [ 348.912073][T14195] do_syscall_64+0x100/0x230 [ 348.916698][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.922597][T14195] [ 348.924923][T14195] Last potentially related work creation: [ 348.930731][T14195] kasan_save_stack+0x3f/0x60 [ 348.935413][T14195] __kasan_record_aux_stack+0xac/0xc0 [ 348.940885][T14195] insert_work+0x3e/0x330 [ 348.945222][T14195] __queue_work+0xc8b/0xf50 [ 348.949737][T14195] queue_work_on+0x1c2/0x380 [ 348.954337][T14195] hci_cmd_sync_submit+0x2c3/0x2f0 [ 348.959454][T14195] process_scheduled_works+0xa63/0x1850 [ 348.965013][T14195] worker_thread+0x870/0xd30 [ 348.969617][T14195] kthread+0x2f0/0x390 [ 348.973689][T14195] ret_from_fork+0x4b/0x80 [ 348.978119][T14195] ret_from_fork_asm+0x1a/0x30 [ 348.982895][T14195] [ 348.985224][T14195] Second to last potentially related work creation: [ 348.991803][T14195] kasan_save_stack+0x3f/0x60 [ 348.996486][T14195] __kasan_record_aux_stack+0xac/0xc0 [ 349.001871][T14195] insert_work+0x3e/0x330 [ 349.006213][T14195] __queue_work+0xb66/0xf50 [ 349.010729][T14195] queue_work_on+0x1c2/0x380 [ 349.015332][T14195] process_scheduled_works+0xa63/0x1850 [ 349.020887][T14195] worker_thread+0x870/0xd30 [ 349.025486][T14195] kthread+0x2f0/0x390 [ 349.029555][T14195] ret_from_fork+0x4b/0x80 [ 349.034088][T14195] ret_from_fork_asm+0x1a/0x30 [ 349.038959][T14195] [ 349.041315][T14195] The buggy address belongs to the object at ffff888034930000 [ 349.041315][T14195] which belongs to the cache kmalloc-8k of size 8192 [ 349.055387][T14195] The buggy address is located 4872 bytes inside of [ 349.055387][T14195] freed 8192-byte region [ffff888034930000, ffff888034932000) [ 349.069371][T14195] [ 349.071696][T14195] The buggy address belongs to the physical page: [ 349.078121][T14195] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34930 [ 349.086917][T14195] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 349.095418][T14195] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 349.103013][T14195] page_type: f5(slab) [ 349.107009][T14195] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 349.115596][T14195] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 349.124192][T14195] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 349.132872][T14195] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 349.141551][T14195] head: 00fff00000000003 ffffea0000d24c01 ffffffffffffffff 0000000000000000 [ 349.150230][T14195] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 349.158900][T14195] page dumped because: kasan: bad access detected [ 349.165322][T14195] page_owner tracks the page as allocated [ 349.171035][T14195] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5858, tgid 5858 (syz-executor), ts 73201480831, free_ts 73177651453 [ 349.192675][T14195] post_alloc_hook+0x1f3/0x230 [ 349.197499][T14195] get_page_from_freelist+0x3649/0x3790 [ 349.203055][T14195] __alloc_pages_noprof+0x292/0x710 [ 349.208263][T14195] alloc_pages_mpol_noprof+0x3e8/0x680 [ 349.214000][T14195] alloc_slab_page+0x6a/0x140 [ 349.218685][T14195] allocate_slab+0x5a/0x2f0 [ 349.223281][T14195] ___slab_alloc+0xcd1/0x14b0 [ 349.227970][T14195] __slab_alloc+0x58/0xa0 [ 349.232321][T14195] __kmalloc_noprof+0x25a/0x400 [ 349.237183][T14195] hci_alloc_dev_priv+0x27/0x2030 [ 349.242219][T14195] vhci_create_device+0x116/0x6a0 [ 349.247248][T14195] vhci_write+0x3cf/0x490 [ 349.251629][T14195] vfs_write+0xaeb/0xd30 [ 349.255900][T14195] ksys_write+0x183/0x2b0 [ 349.260248][T14195] do_syscall_64+0xf3/0x230 [ 349.264772][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.270675][T14195] page last free pid 5853 tgid 5853 stack trace: [ 349.277006][T14195] free_unref_page+0xdf9/0x1140 [ 349.281872][T14195] __put_partials+0xeb/0x130 [ 349.286475][T14195] put_cpu_partial+0x17c/0x250 [ 349.291241][T14195] __slab_free+0x2ea/0x3d0 [ 349.295664][T14195] qlist_free_all+0x9a/0x140 [ 349.300257][T14195] kasan_quarantine_reduce+0x14f/0x170 [ 349.305734][T14195] __kasan_slab_alloc+0x23/0x80 [ 349.310688][T14195] __kmalloc_node_noprof+0x1d2/0x440 [ 349.315989][T14195] __kvmalloc_node_noprof+0x72/0x190 [ 349.321291][T14195] seq_read_iter+0x20c/0xd70 [ 349.325891][T14195] vfs_read+0x991/0xb70 [ 349.330056][T14195] ksys_read+0x183/0x2b0 [ 349.334309][T14195] do_syscall_64+0xf3/0x230 [ 349.338836][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.344826][T14195] [ 349.347159][T14195] Memory state around the buggy address: [ 349.352786][T14195] ffff888034931200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.360848][T14195] ffff888034931280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.368937][T14195] >ffff888034931300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.377010][T14195] ^ [ 349.381342][T14195] ffff888034931380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.389403][T14195] ffff888034931400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.397476][T14195] ================================================================== [ 349.417961][T14195] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 349.425211][T14195] CPU: 0 UID: 0 PID: 14195 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 349.436177][T14195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 349.446268][T14195] Call Trace: [ 349.449574][T14195] [ 349.452540][T14195] dump_stack_lvl+0x241/0x360 [ 349.457265][T14195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.462505][T14195] ? __pfx__printk+0x10/0x10 [ 349.467130][T14195] ? preempt_schedule+0xe1/0xf0 [ 349.472031][T14195] ? vscnprintf+0x5d/0x90 [ 349.476392][T14195] panic+0x349/0x880 [ 349.480306][T14195] ? check_panic_on_warn+0x21/0xb0 [ 349.485440][T14195] ? __pfx_panic+0x10/0x10 [ 349.489957][T14195] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 349.495947][T14195] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.502284][T14195] ? print_report+0x502/0x550 [ 349.507002][T14195] check_panic_on_warn+0x86/0xb0 [ 349.511949][T14195] ? device_for_each_child+0xbb/0x1b0 [ 349.517338][T14195] end_report+0x77/0x160 [ 349.521591][T14195] kasan_report+0x154/0x180 [ 349.526116][T14195] ? device_for_each_child+0xbb/0x1b0 [ 349.531498][T14195] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 349.536978][T14195] device_for_each_child+0xbb/0x1b0 [ 349.542195][T14195] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.548551][T14195] ? __pfx_device_for_each_child+0x10/0x10 [ 349.554408][T14195] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.559617][T14195] ? lockdep_hardirqs_on+0x99/0x150 [ 349.564826][T14195] pm_runtime_set_memalloc_noio+0x114/0x260 [ 349.570743][T14195] netdev_unregister_kobject+0x178/0x250 [ 349.576400][T14195] unregister_netdevice_many_notify+0x1851/0x1da0 [ 349.582851][T14195] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 349.589639][T14195] ? do_raw_spin_unlock+0x13c/0x8b0 [ 349.594866][T14195] ? __mutex_lock+0x52a/0xd70 [ 349.599575][T14195] unregister_netdevice_queue+0x303/0x370 [ 349.605310][T14195] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 349.611586][T14195] ? down_write+0x18c/0x220 [ 349.616153][T14195] ? __pfx_down_write+0x10/0x10 [ 349.621033][T14195] unregister_netdev+0x1c/0x30 [ 349.625823][T14195] bnep_session+0x2e0e/0x3000 [ 349.630527][T14195] ? __pfx_bnep_session+0x10/0x10 [ 349.635564][T14195] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 349.641470][T14195] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.647808][T14195] ? __pfx_woken_wake_function+0x10/0x10 [ 349.653460][T14195] ? __kthread_parkme+0x169/0x1d0 [ 349.658521][T14195] ? __pfx_bnep_session+0x10/0x10 [ 349.663573][T14195] kthread+0x2f0/0x390 [ 349.667668][T14195] ? __pfx_bnep_session+0x10/0x10 [ 349.672720][T14195] ? __pfx_kthread+0x10/0x10 [ 349.677320][T14195] ret_from_fork+0x4b/0x80 [ 349.681752][T14195] ? __pfx_kthread+0x10/0x10 [ 349.686346][T14195] ret_from_fork_asm+0x1a/0x30 [ 349.691131][T14195] [ 349.694521][T14195] Kernel Offset: disabled [ 349.698846][T14195] Rebooting in 86400 seconds..