last executing test programs: 3.228185234s ago: executing program 4 (id=336): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000000)="1080001cab6f", 0x6, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 2.333605951s ago: executing program 3 (id=357): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400000ffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0) 2.297334376s ago: executing program 4 (id=358): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0x0, 0x0}, 0x10) 2.175745849s ago: executing program 4 (id=360): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) 2.023273344s ago: executing program 3 (id=363): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x401c5820, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYRES16=r2], 0x398}}, 0x0) 1.969497749s ago: executing program 4 (id=364): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/169, 0xa9}], 0x4}, 0x10000) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r9, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r9, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) pselect6(0xffec, &(0x7f00000000c0)={0x0, 0x0, 0x800000000, 0x57}, 0x0, 0x0, 0x0, 0x0) 1.870316986s ago: executing program 1 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.817614448s ago: executing program 3 (id=367): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r2}, 0xc) 1.680690003s ago: executing program 1 (id=370): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.601602855s ago: executing program 3 (id=371): unshare(0x22020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x20) 1.589699535s ago: executing program 0 (id=372): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x22020600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x20) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r0) 1.511730433s ago: executing program 3 (id=373): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xfff}, 0x1c) sendto$packet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x20008801, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x10000001}}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 1.37772549s ago: executing program 0 (id=374): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 1.377287438s ago: executing program 3 (id=376): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}, 0x1}, 0x18) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="1dbcaf41a40e7f8d47", 0x9}], 0x1) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 1.348884216s ago: executing program 0 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.229269109s ago: executing program 2 (id=378): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x200, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x1b8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x19c, 0x6, [@m_connmark={0xe8, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xb5, 0x6, "66396e732cf67237ec3e6deb3cdd98afb5d7465f7216458787740deb0484fa741dbd36d46b06b305a251343916f1ef19fff72d91867113b81b948ac75af8d4ce22f05e23720a87c296c4ba3fc75c8e024f643a379ad5c9e77c23662129848e71cda8466ea0345a65bac7ea6f3414a819cf00b7d89763328bed647992b255302153be56d955b342f23e90084b9573da9d0ad540fef909542aaa2005ee7fb2a0232802a27630a6f44e463d68c8457f711b6c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0xb0, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0x75, 0x6, "ca8fd735f4c425bd44291fa86781920ab90ff95c64e3d33704248d0546950f6c3113358c2551981c52f5a6dd8a3891697d8ab8d8f56d15025dc3c339c95c2c879249dbbfa3c3f7576ea41a624c8db9b4a2896e26ced3361e33c793332fc709bb25bcdfc387325cb1fac53056bf925e890e"}, {0xc}, {0xc}}}]}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.105576474s ago: executing program 2 (id=379): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3f, 0xb, 0x0, 0x0, {0x3}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}]}, 0x2c}}, 0x0) 1.072939977s ago: executing program 4 (id=380): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='bbr\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) 976.212174ms ago: executing program 2 (id=381): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 865.639281ms ago: executing program 2 (id=382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) 825.350467ms ago: executing program 2 (id=383): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="500000009b12a55fe8b81b7ffcdbdf2563666e9a701685918ba27e"], 0x50}], 0x1, 0x0, 0x0, 0x4008000}, 0x4004801) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 658.856643ms ago: executing program 2 (id=384): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2], 0x48}}, 0x0) r6 = socket(0x10, 0x80803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r8, &(0x7f0000000040), 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x1c, r10, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES64=r0, @ANYRES32=r6], 0x1c}}, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000040)) recvmmsg(r6, &(0x7f0000001bc0)=[{{0x0, 0x700, 0x0}}], 0x7, 0x0, 0x0) unshare(0x22020600) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 409.619901ms ago: executing program 1 (id=385): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 385.148462ms ago: executing program 1 (id=386): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[{0x10}, {0x10, 0x110, 0xe}], 0x20}, 0x0) 315.800264ms ago: executing program 0 (id=387): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x10010, r0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004004) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x3e0, 0x0, 0xffffffff, 0x3e0, 0x3e0, 0x588, 0x588, 0xffffffff, 0x588, 0x588, 0x5, 0x0, {[{{@ipv6={@private2, @empty, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'veth0_to_bond\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6c, 0x8, 0x7, 0x49}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@rand_addr=0x64010101, @ipv4=@rand_addr=0x64010102, @port=0x4e21, @icmp_id=0x67}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0xffffffff, 0xff000000], [0xffffffff, 0xff0000ff, 0xff000000, 0xffffff00], 'ip6erspan0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x5c, 0x8, 0x6, 0x44}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x2}, {0x1, 0x4, 0x4}, 0x800, 0x2f}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev={0xfe, 0x80, '\x00', 0x3e}, [0xffffff00, 0xffffffff, 0xffffff00], [0x0, 0xff, 0xff000000, 0xffffff00], 'rose0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x84, 0x7f, 0x6, 0x13}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv4=@local, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0x7, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1c, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@loopback, @icmp_id=0x66, @gre_key=0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x78}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 241.474099ms ago: executing program 1 (id=388): syz_emit_ethernet(0x8a, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x11, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7c0bdce219d3ed7db7e2442316ed8f58"}, @mptcp=@synack={0x1e, 0x10, 0x3, 0x1, 0x0, 0x1, 0x6}, @fastopen={0x22, 0x2}, @sack={0x5, 0x12, [0x1, 0x9, 0xf, 0x597b]}, @eol, @generic={0x1, 0xa, "127ad53c7bcf6f29"}, @md5sig={0x13, 0x12, "12ffd8c9e15ec45a61b0b086fc8883b3"}]}}}}}}}, 0x0) 186.955937ms ago: executing program 0 (id=389): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x200, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x1b8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x19c, 0x6, [@m_connmark={0xe8, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xb5, 0x6, "66396e732cf67237ec3e6deb3cdd98afb5d7465f7216458787740deb0484fa741dbd36d46b06b305a251343916f1ef19fff72d91867113b81b948ac75af8d4ce22f05e23720a87c296c4ba3fc75c8e024f643a379ad5c9e77c23662129848e71cda8466ea0345a65bac7ea6f3414a819cf00b7d89763328bed647992b255302153be56d955b342f23e90084b9573da9d0ad540fef909542aaa2005ee7fb2a0232802a27630a6f44e463d68c8457f711b6c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0xb0, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0x75, 0x6, "ca8fd735f4c425bd44291fa86781920ab90ff95c64e3d33704248d0546950f6c3113358c2551981c52f5a6dd8a3891697d8ab8d8f56d15025dc3c339c95c2c879249dbbfa3c3f7576ea41a624c8db9b4a2896e26ced3361e33c793332fc709bb25bcdfc387325cb1fac53056bf925e890e"}, {0xc}, {0xc}}}]}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 125.971742ms ago: executing program 4 (id=390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 125.322596ms ago: executing program 1 (id=391): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002740)=@delchain={0x5c4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x588, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x2}}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x558, 0x7, [@m_mpls={0xb4, 0x1e, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x1ff, 0x0, 0x29c2, 0x7f}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xfc, 0x15, 0x0, 0x0, {{0x7}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffc01}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'security\x00', 0x63, 0xc, "f74fefd4940193941910a10b7b3c60639c9c5a"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4}}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x68, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x29, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xc8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x99, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x6c, 0x2, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 0 (id=392): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 54.423662][ T5837] cgroup: Unknown subsys name 'net' [ 54.616921][ T5837] cgroup: Unknown subsys name 'cpuset' [ 54.625050][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.960258][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.134396][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.142327][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.150693][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.173627][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.181654][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.183330][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.191100][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.204926][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.212125][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.212640][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.221232][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.237602][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.238671][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.252480][ T5864] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.253374][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.260820][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.273808][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.280258][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.281941][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.289626][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.295642][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.302443][ T5865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.310282][ T5868] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.317639][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.330356][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.338218][ T5868] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.345187][ T5164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.345740][ T5164] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.353344][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.361009][ T5164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.776200][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 58.832379][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 58.842512][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 58.892844][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 58.925156][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 59.026618][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.034576][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.041820][ T5850] bridge_slave_0: entered allmulticast mode [ 59.049122][ T5850] bridge_slave_0: entered promiscuous mode [ 59.057742][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.065206][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.072469][ T5850] bridge_slave_1: entered allmulticast mode [ 59.079282][ T5850] bridge_slave_1: entered promiscuous mode [ 59.151589][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.158825][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.166139][ T5847] bridge_slave_0: entered allmulticast mode [ 59.172637][ T5847] bridge_slave_0: entered promiscuous mode [ 59.207767][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.215067][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.222282][ T5847] bridge_slave_1: entered allmulticast mode [ 59.229557][ T5847] bridge_slave_1: entered promiscuous mode [ 59.250242][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.262056][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.288990][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.296314][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.303800][ T5849] bridge_slave_0: entered allmulticast mode [ 59.310333][ T5849] bridge_slave_0: entered promiscuous mode [ 59.331995][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.339304][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.347150][ T5857] bridge_slave_0: entered allmulticast mode [ 59.354048][ T5857] bridge_slave_0: entered promiscuous mode [ 59.387163][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.394414][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.401596][ T5849] bridge_slave_1: entered allmulticast mode [ 59.409018][ T5849] bridge_slave_1: entered promiscuous mode [ 59.418873][ T5850] team0: Port device team_slave_0 added [ 59.427125][ T5850] team0: Port device team_slave_1 added [ 59.432986][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.440343][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.447605][ T5857] bridge_slave_1: entered allmulticast mode [ 59.454168][ T5857] bridge_slave_1: entered promiscuous mode [ 59.462181][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.474030][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.483317][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.490463][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.497798][ T5856] bridge_slave_0: entered allmulticast mode [ 59.504710][ T5856] bridge_slave_0: entered promiscuous mode [ 59.556641][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.564052][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.571154][ T5856] bridge_slave_1: entered allmulticast mode [ 59.577935][ T5856] bridge_slave_1: entered promiscuous mode [ 59.596201][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.607683][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.633457][ T5847] team0: Port device team_slave_0 added [ 59.649831][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.675635][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.682597][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.709016][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.722657][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.736476][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.747050][ T5847] team0: Port device team_slave_1 added [ 59.754742][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.766640][ T5849] team0: Port device team_slave_0 added [ 59.780417][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.787648][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.814071][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.848017][ T5849] team0: Port device team_slave_1 added [ 59.884081][ T5857] team0: Port device team_slave_0 added [ 59.905644][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.912629][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.941489][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.958490][ T5856] team0: Port device team_slave_0 added [ 59.966911][ T5856] team0: Port device team_slave_1 added [ 59.983942][ T5857] team0: Port device team_slave_1 added [ 59.990028][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.997265][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.023568][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.035085][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.042047][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.068379][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.109668][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.117000][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.143584][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.158757][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.165766][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.191687][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.207385][ T5850] hsr_slave_0: entered promiscuous mode [ 60.213912][ T5850] hsr_slave_1: entered promiscuous mode [ 60.234615][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.241572][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.268024][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.280566][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.288432][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.315104][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.327511][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.334884][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.360881][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.384104][ T54] Bluetooth: hci2: command tx timeout [ 60.384111][ T5863] Bluetooth: hci1: command tx timeout [ 60.384506][ T5863] Bluetooth: hci3: command tx timeout [ 60.390044][ T54] Bluetooth: hci0: command tx timeout [ 60.422105][ T5849] hsr_slave_0: entered promiscuous mode [ 60.428336][ T5849] hsr_slave_1: entered promiscuous mode [ 60.436447][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.444530][ T5849] Cannot create hsr debugfs directory [ 60.463528][ T54] Bluetooth: hci4: command tx timeout [ 60.525581][ T5847] hsr_slave_0: entered promiscuous mode [ 60.531642][ T5847] hsr_slave_1: entered promiscuous mode [ 60.538222][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.545976][ T5847] Cannot create hsr debugfs directory [ 60.556189][ T5857] hsr_slave_0: entered promiscuous mode [ 60.562905][ T5857] hsr_slave_1: entered promiscuous mode [ 60.568996][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.576600][ T5857] Cannot create hsr debugfs directory [ 60.608473][ T5856] hsr_slave_0: entered promiscuous mode [ 60.615257][ T5856] hsr_slave_1: entered promiscuous mode [ 60.621239][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.628868][ T5856] Cannot create hsr debugfs directory [ 60.936094][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.958035][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.973084][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.987515][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.011016][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.021095][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.034927][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.045033][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.099331][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.109132][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.119318][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.140030][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.212866][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.222179][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.231793][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.243049][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.340359][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.350559][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.369086][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.402115][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.417548][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.438976][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.488790][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.499277][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.511913][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.531607][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.552471][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.559726][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.571833][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.578954][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.591210][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.598359][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.631834][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.641984][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.666116][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.673239][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.688090][ T193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.695215][ T193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.722571][ T193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.729673][ T193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.759409][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.766526][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.779587][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.786665][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.825724][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.872518][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.899877][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.910912][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.975026][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.044425][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.051570][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.101140][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.108780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.231032][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.342739][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.356888][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.367451][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.400850][ T5850] veth0_vlan: entered promiscuous mode [ 62.441465][ T5850] veth1_vlan: entered promiscuous mode [ 62.464316][ T54] Bluetooth: hci0: command tx timeout [ 62.464745][ T5863] Bluetooth: hci2: command tx timeout [ 62.469764][ T54] Bluetooth: hci1: command tx timeout [ 62.475686][ T5853] Bluetooth: hci3: command tx timeout [ 62.502905][ T5847] veth0_vlan: entered promiscuous mode [ 62.545946][ T5853] Bluetooth: hci4: command tx timeout [ 62.553075][ T5849] veth0_vlan: entered promiscuous mode [ 62.565010][ T5849] veth1_vlan: entered promiscuous mode [ 62.586119][ T5847] veth1_vlan: entered promiscuous mode [ 62.593069][ T5856] veth0_vlan: entered promiscuous mode [ 62.609007][ T5850] veth0_macvtap: entered promiscuous mode [ 62.617877][ T5850] veth1_macvtap: entered promiscuous mode [ 62.644010][ T5856] veth1_vlan: entered promiscuous mode [ 62.652513][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.663841][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.679826][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.706662][ T5849] veth0_macvtap: entered promiscuous mode [ 62.717040][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.727264][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.737476][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.746784][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.771271][ T5849] veth1_macvtap: entered promiscuous mode [ 62.789039][ T5847] veth0_macvtap: entered promiscuous mode [ 62.814919][ T5856] veth0_macvtap: entered promiscuous mode [ 62.830529][ T5847] veth1_macvtap: entered promiscuous mode [ 62.845179][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.857099][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.869457][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.881631][ T5856] veth1_macvtap: entered promiscuous mode [ 62.897502][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.909566][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.922575][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.941059][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.969213][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.979566][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.990188][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.001131][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.022117][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.031788][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.048706][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.057631][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.092817][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.103770][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.115440][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.126060][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.137027][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.152309][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.161314][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.171008][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.180092][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.205210][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.215859][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.225959][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.236449][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.246567][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.257990][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.270013][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.300469][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.308467][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.308513][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.308526][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.308540][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.308550][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.308563][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.309450][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.320450][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.341333][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.395092][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.404435][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.413640][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.488239][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.489105][ T5857] veth0_vlan: entered promiscuous mode [ 63.502512][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.560954][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.570890][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.592077][ T5857] veth1_vlan: entered promiscuous mode [ 63.604852][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.608681][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.636675][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.725625][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.736350][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.762225][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.766826][ T5857] veth0_macvtap: entered promiscuous mode [ 63.782582][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.822588][ T5935] pim6reg1: entered promiscuous mode [ 63.831722][ T5935] pim6reg1: entered allmulticast mode [ 63.864542][ T5857] veth1_macvtap: entered promiscuous mode [ 63.891640][ T5914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.905056][ T5914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.957987][ T5937] pim6reg1: entered promiscuous mode [ 63.974437][ T5937] pim6reg1: entered allmulticast mode [ 63.991154][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.999442][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.035309][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.056638][ T5940] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.058525][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.083546][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.101093][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.111051][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.130154][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.141498][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.152399][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.164136][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.193296][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.201013][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.227060][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.253469][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.264126][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.305027][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.322034][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.334982][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.345083][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.355687][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.377190][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.408387][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.443596][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.452355][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.490756][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.546064][ T5853] Bluetooth: hci3: command tx timeout [ 64.546087][ T54] Bluetooth: hci2: command tx timeout [ 64.551523][ T5853] Bluetooth: hci0: command tx timeout [ 64.558303][ T54] Bluetooth: hci1: command tx timeout [ 64.624055][ T54] Bluetooth: hci4: command tx timeout [ 64.701479][ T5951] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 64.741801][ T5951] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10'. [ 65.070744][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.093226][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.179339][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.233721][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.244415][ T5962] Illegal XDP return value 4294967274 on prog (id 11) dev N/A, expect packet loss! [ 65.564351][ T5970] Zero length message leads to an empty skb [ 66.628394][ T5863] Bluetooth: hci3: command tx timeout [ 66.628434][ T5853] Bluetooth: hci0: command tx timeout [ 66.633911][ T5863] Bluetooth: hci2: command tx timeout [ 66.646033][ T54] Bluetooth: hci1: command tx timeout [ 66.713553][ T5863] Bluetooth: hci4: command tx timeout [ 67.259796][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.42'. [ 67.364555][ T6029] syz.0.45[6029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.364656][ T6029] syz.0.45[6029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.417131][ T6029] syz.0.45[6029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.729389][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'. [ 67.781993][ T6039] netlink: 'syz.3.49': attribute type 4 has an invalid length. [ 67.804891][ T6039] netlink: 17 bytes leftover after parsing attributes in process `syz.3.49'. [ 69.100434][ T6087] xt_hashlimit: size too large, truncated to 1048576 [ 70.386367][ T6117] pim6reg1: entered promiscuous mode [ 70.391930][ T6117] pim6reg1: entered allmulticast mode [ 70.863734][ T6124] netlink: 'syz.1.87': attribute type 29 has an invalid length. [ 70.872910][ T6124] netlink: 'syz.1.87': attribute type 29 has an invalid length. [ 71.122924][ T6134] wg1: entered promiscuous mode [ 71.140489][ T6134] wg1: entered allmulticast mode [ 71.540958][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 71.544087][ T6152] netlink: 'syz.3.99': attribute type 29 has an invalid length. [ 71.600455][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.600813][ T6152] netlink: 'syz.3.99': attribute type 29 has an invalid length. [ 71.607932][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.912994][ T6185] ip6tnl1: entered promiscuous mode [ 74.330838][ T6230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.334273][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 74.685265][ T6251] netlink: 104 bytes leftover after parsing attributes in process `syz.1.145'. [ 75.091800][ T6267] xt_bpf: check failed: parse error [ 75.614986][ T6298] netlink: 'syz.0.166': attribute type 29 has an invalid length. [ 75.654413][ T6298] netlink: 'syz.0.166': attribute type 29 has an invalid length. [ 76.521615][ T6328] netlink: 'syz.1.181': attribute type 29 has an invalid length. [ 76.578800][ T6333] netlink: 'syz.1.181': attribute type 29 has an invalid length. [ 76.867129][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.875450][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.912861][ T6341] bridge0: entered allmulticast mode [ 76.968143][ T6346] bridge_slave_1: left allmulticast mode [ 76.993666][ T6346] bridge_slave_1: left promiscuous mode [ 77.011013][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.034803][ T117] cfg80211: failed to load regulatory.db [ 77.069568][ T6346] bridge_slave_0: left allmulticast mode [ 77.082812][ T6346] bridge_slave_0: left promiscuous mode [ 77.096267][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.244904][ T6347] pim6reg1: entered promiscuous mode [ 77.250271][ T6347] pim6reg1: entered allmulticast mode [ 77.907424][ T6376] pim6reg1: entered promiscuous mode [ 77.926427][ T6376] pim6reg1: entered allmulticast mode [ 78.311603][ T6397] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 78.329889][ T6395] xt_bpf: check failed: parse error [ 78.336543][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 78.929761][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.221'. [ 79.479004][ T6441] vlan2: entered promiscuous mode [ 79.763414][ T6455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.236'. [ 79.792745][ T6455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.236'. [ 79.834399][ T6455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.236'. [ 79.883438][ T6461] netlink: 'syz.4.240': attribute type 29 has an invalid length. [ 79.914125][ T6461] netlink: 'syz.4.240': attribute type 29 has an invalid length. [ 80.054864][ T6470] syz.3.245 uses obsolete (PF_INET,SOCK_PACKET) [ 80.424199][ T6488] netlink: 144 bytes leftover after parsing attributes in process `syz.4.251'. [ 80.601526][ T6496] batman_adv: batadv0: Adding interface: dummy0 [ 80.611549][ T6496] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.657344][ T6496] batman_adv: batadv0: Interface activated: dummy0 [ 80.682383][ T6498] pim6reg: entered allmulticast mode [ 80.748584][ T6499] batadv0: mtu less than device minimum [ 80.764966][ T6499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.777858][ T6499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.790455][ T6499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.801951][ T6499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.813704][ T6499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.825150][ T6499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.836589][ T6499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.848021][ T6499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.859452][ T6499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.125783][ T6504] netlink: 'syz.4.258': attribute type 4 has an invalid length. [ 81.150392][ T6504] netlink: 17 bytes leftover after parsing attributes in process `syz.4.258'. [ 81.591236][ T6523] netlink: 88 bytes leftover after parsing attributes in process `syz.1.266'. [ 81.813608][ T6523] netlink: 48 bytes leftover after parsing attributes in process `syz.1.266'. [ 82.099270][ T6543] hsr0: entered promiscuous mode [ 82.641924][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.287'. [ 82.660179][ T6565] netlink: 'syz.0.286': attribute type 29 has an invalid length. [ 82.678747][ T6563] v: renamed from veth1_virt_wifi (while UP) [ 82.705899][ T6565] netlink: 'syz.0.286': attribute type 29 has an invalid length. [ 83.487248][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 83.496363][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 84.663796][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.329'. [ 84.906020][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 85.296742][ T6691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.343'. [ 85.609507][ T6707] netlink: 884 bytes leftover after parsing attributes in process `syz.3.349'. [ 85.747790][ T6715] tipc: Enabling of bearer rejected, failed to enable media [ 85.928001][ T6719] vlan2: entered promiscuous mode [ 85.948286][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'. [ 86.181785][ T6736] netlink: 884 bytes leftover after parsing attributes in process `syz.3.363'. [ 87.070359][ T6771] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 87.552034][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 87.584779][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.600221][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.624781][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.632200][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.101265][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803504ec00: rx timeout, send abort [ 88.113379][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803504ec00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 88.127973][ C0] ------------[ cut here ]------------ [ 88.133506][ C0] refcount_t: underflow; use-after-free. [ 88.139630][ C0] WARNING: CPU: 0 PID: 6800 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 88.149146][ C0] Modules linked in: [ 88.153141][ C0] CPU: 0 UID: 0 PID: 6800 Comm: syz-executor Not tainted 6.12.0-syzkaller-10687-ga9ab02ed97c6 #0 [ 88.163694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.167668][ T6802] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 88.173798][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 88.173840][ C0] Code: a0 13 61 8c e8 a7 85 95 fc 90 0f 0b 90 90 eb 99 e8 8b e0 d4 fc c6 05 8c 6c 47 0b 01 90 48 c7 c7 00 14 61 8c e8 87 85 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 e0 d4 fc c6 05 66 6c 47 0b 01 90 [ 88.173856][ C0] RSP: 0018:ffffc900000076a0 EFLAGS: 00010246 [ 88.173875][ C0] RAX: 84b7f2dd2c2d3100 RBX: ffff88802ef419a4 RCX: ffff8880278bbc00 [ 88.173891][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.173903][ C0] RBP: 0000000000000003 R08: ffffffff81568c22 R09: 1ffff92000000e70 [ 88.173923][ C0] R10: dffffc0000000000 R11: fffff52000000e71 R12: ffff88803504ec68 [ 88.173937][ C0] R13: ffff88802ef419a4 R14: 1ffff11006a09d98 R15: ffff88803504ec00 [ 88.173953][ C0] FS: 000055556febe500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 88.173970][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.173985][ C0] CR2: 00007f06c1c2a1a4 CR3: 0000000031bde000 CR4: 00000000003526f0 [ 88.174010][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.174023][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.174038][ C0] Call Trace: [ 88.174046][ C0] [ 88.174055][ C0] ? __warn+0x168/0x4e0 [ 88.174085][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 88.310529][ C0] ? report_bug+0x2b3/0x500 [ 88.315110][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 88.320697][ C0] ? handle_bug+0x60/0x90 [ 88.325103][ C0] ? exc_invalid_op+0x1a/0x50 [ 88.329811][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 88.334932][ C0] ? __warn_printk+0x292/0x360 [ 88.339740][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 88.345376][ C0] j1939_session_put+0x1ed/0x440 [ 88.350359][ C0] j1939_tp_recv+0x92a/0x1050 [ 88.355123][ C0] j1939_can_recv+0x732/0xb20 [ 88.359839][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 88.365110][ C0] ? __lock_acquire+0x1397/0x2100 [ 88.370169][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 88.375449][ C0] can_rcv_filter+0x359/0x7f0 [ 88.380170][ C0] can_receive+0x327/0x480 [ 88.384663][ C0] ? can_receive+0x1c9/0x480 [ 88.389286][ C0] can_rcv+0x144/0x260 [ 88.393447][ C0] ? __pfx_can_rcv+0x10/0x10 [ 88.398060][ C0] __netif_receive_skb+0x2e0/0x650 [ 88.403260][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 88.408311][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 88.414013][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.420014][ C0] ? __pfx_lock_release+0x10/0x10 [ 88.425112][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 88.430269][ C0] process_backlog+0x662/0x15b0 [ 88.435222][ C0] ? process_backlog+0x33b/0x15b0 [ 88.440289][ C0] ? __pfx_process_backlog+0x10/0x10 [ 88.445652][ C0] ? __phys_addr+0xba/0x170 [ 88.450193][ C0] ? net_rx_action+0x66d/0x1240 [ 88.455146][ C0] __napi_poll+0xcb/0x490 [ 88.459507][ C0] net_rx_action+0x89b/0x1240 [ 88.464280][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 88.469425][ C0] ? __run_timer_base+0x178/0x8e0 [ 88.472397][ T6804] tipc: Started in network mode [ 88.474516][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 88.474582][ C0] handle_softirqs+0x2c5/0x980 [ 88.474617][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 88.492394][ T6804] tipc: Node identity de09ccc7c89c, cluster identity 4711 [ 88.494680][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 88.494717][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 88.494745][ C0] __irq_exit_rcu+0xf7/0x220 [ 88.494772][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 88.494803][ C0] irq_exit_rcu+0x9/0x30 [ 88.494827][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 88.494856][ C0] [ 88.494865][ C0] [ 88.494874][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.494898][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 88.494920][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d d4 ed 9d 0c 48 89 de 5b e9 c3 cc 5e 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 d4 03 00 65 8b 15 30 f0 [ 88.494937][ C0] RSP: 0018:ffffc90003107d60 EFLAGS: 00000293 [ 88.494958][ C0] RAX: ffffffff847113fa RBX: 0000000000000000 RCX: ffff8880278bbc00 [ 88.494981][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.494995][ C0] RBP: 0000000000000000 R08: ffffffff84711461 R09: 1ffffffff203c696 [ 88.495011][ C0] R10: dffffc0000000000 R11: fffffbfff203c697 R12: 0000000000000000 [ 88.495027][ C0] R13: ffff888058b68180 R14: ffff88805406e620 R15: ffff8880612648d0 [ 88.495051][ C0] ? security_inode_symlink+0x111/0x330 [ 88.495076][ C0] ? security_inode_symlink+0xaa/0x330 [ 88.495105][ C0] security_inode_symlink+0xb4/0x330 [ 88.495133][ C0] vfs_symlink+0xba/0x2e0 [ 88.495163][ C0] do_symlinkat+0x222/0x3a0 [ 88.495197][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 88.495227][ C0] ? getname_flags+0x1e3/0x540 [ 88.495260][ C0] __x64_sys_symlinkat+0x95/0xb0 [ 88.495287][ C0] do_syscall_64+0xf3/0x230 [ 88.529317][ T6804] tipc: Enabled bearer , priority 0 [ 88.532669][ C0] ? clear_bhb_loop+0x35/0x90 [ 88.532707][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.532732][ C0] RIP: 0033:0x7f06c1b7f497 [ 88.634954][ T6807] tipc: Resetting bearer [ 88.637270][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.708259][ C0] RSP: 002b:00007ffc3b27ea98 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 88.716797][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f06c1b7f497 [ 88.724873][ C0] RDX: 00007f06c1bf5090 RSI: 00000000ffffff9c RDI: 00007ffc3b27eb20 [ 88.732875][ C0] RBP: 00007ffc3b27eacc R08: 0000000000000013 R09: 00007ffc3b27e7e7 [ 88.740966][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 88.749039][ C0] R13: 000000000001578f R14: 0000000000015440 R15: 00007ffc3b27eb20 [ 88.757136][ C0] [ 88.760179][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.767466][ C0] CPU: 0 UID: 0 PID: 6800 Comm: syz-executor Not tainted 6.12.0-syzkaller-10687-ga9ab02ed97c6 #0 [ 88.777963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.788009][ C0] Call Trace: [ 88.791281][ C0] [ 88.794122][ C0] dump_stack_lvl+0x241/0x360 [ 88.798802][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.804002][ C0] ? __pfx__printk+0x10/0x10 [ 88.808605][ C0] ? vscnprintf+0x5d/0x90 [ 88.812950][ C0] panic+0x349/0x880 [ 88.816855][ C0] ? __warn+0x177/0x4e0 [ 88.821008][ C0] ? __pfx_panic+0x10/0x10 [ 88.825437][ C0] __warn+0x34b/0x4e0 [ 88.829415][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 88.835052][ C0] report_bug+0x2b3/0x500 [ 88.839382][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 88.844932][ C0] handle_bug+0x60/0x90 [ 88.849088][ C0] exc_invalid_op+0x1a/0x50 [ 88.853587][ C0] asm_exc_invalid_op+0x1a/0x20 [ 88.858431][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 88.864594][ C0] Code: a0 13 61 8c e8 a7 85 95 fc 90 0f 0b 90 90 eb 99 e8 8b e0 d4 fc c6 05 8c 6c 47 0b 01 90 48 c7 c7 00 14 61 8c e8 87 85 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 e0 d4 fc c6 05 66 6c 47 0b 01 90 [ 88.884201][ C0] RSP: 0018:ffffc900000076a0 EFLAGS: 00010246 [ 88.890268][ C0] RAX: 84b7f2dd2c2d3100 RBX: ffff88802ef419a4 RCX: ffff8880278bbc00 [ 88.898234][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.906200][ C0] RBP: 0000000000000003 R08: ffffffff81568c22 R09: 1ffff92000000e70 [ 88.914171][ C0] R10: dffffc0000000000 R11: fffff52000000e71 R12: ffff88803504ec68 [ 88.922137][ C0] R13: ffff88802ef419a4 R14: 1ffff11006a09d98 R15: ffff88803504ec00 [ 88.930111][ C0] ? __warn_printk+0x292/0x360 [ 88.934885][ C0] j1939_session_put+0x1ed/0x440 [ 88.939829][ C0] j1939_tp_recv+0x92a/0x1050 [ 88.944507][ C0] j1939_can_recv+0x732/0xb20 [ 88.949187][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 88.954386][ C0] ? __lock_acquire+0x1397/0x2100 [ 88.959411][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 88.964605][ C0] can_rcv_filter+0x359/0x7f0 [ 88.969285][ C0] can_receive+0x327/0x480 [ 88.973697][ C0] ? can_receive+0x1c9/0x480 [ 88.978283][ C0] can_rcv+0x144/0x260 [ 88.982347][ C0] ? __pfx_can_rcv+0x10/0x10 [ 88.986935][ C0] __netif_receive_skb+0x2e0/0x650 [ 88.992048][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 88.997069][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 89.002695][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.008674][ C0] ? __pfx_lock_release+0x10/0x10 [ 89.013709][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 89.018835][ C0] process_backlog+0x662/0x15b0 [ 89.023692][ C0] ? process_backlog+0x33b/0x15b0 [ 89.028719][ C0] ? __pfx_process_backlog+0x10/0x10 [ 89.034001][ C0] ? __phys_addr+0xba/0x170 [ 89.038502][ C0] ? net_rx_action+0x66d/0x1240 [ 89.043356][ C0] __napi_poll+0xcb/0x490 [ 89.047686][ C0] net_rx_action+0x89b/0x1240 [ 89.052378][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 89.057485][ C0] ? __run_timer_base+0x178/0x8e0 [ 89.062501][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 89.068151][ C0] handle_softirqs+0x2c5/0x980 [ 89.072924][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 89.077689][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 89.082973][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 89.088171][ C0] __irq_exit_rcu+0xf7/0x220 [ 89.092760][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 89.097968][ C0] irq_exit_rcu+0x9/0x30 [ 89.102215][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 89.107852][ C0] [ 89.110778][ C0] [ 89.113785][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.119784][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 89.125859][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d d4 ed 9d 0c 48 89 de 5b e9 c3 cc 5e 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 d4 03 00 65 8b 15 30 f0 [ 89.146075][ C0] RSP: 0018:ffffc90003107d60 EFLAGS: 00000293 [ 89.152143][ C0] RAX: ffffffff847113fa RBX: 0000000000000000 RCX: ffff8880278bbc00 [ 89.160111][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.168077][ C0] RBP: 0000000000000000 R08: ffffffff84711461 R09: 1ffffffff203c696 [ 89.176040][ C0] R10: dffffc0000000000 R11: fffffbfff203c697 R12: 0000000000000000 [ 89.184007][ C0] R13: ffff888058b68180 R14: ffff88805406e620 R15: ffff8880612648d0 [ 89.191980][ C0] ? security_inode_symlink+0x111/0x330 [ 89.197524][ C0] ? security_inode_symlink+0xaa/0x330 [ 89.202988][ C0] security_inode_symlink+0xb4/0x330 [ 89.208275][ C0] vfs_symlink+0xba/0x2e0 [ 89.212609][ C0] do_symlinkat+0x222/0x3a0 [ 89.217382][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 89.222411][ C0] ? getname_flags+0x1e3/0x540 [ 89.227179][ C0] __x64_sys_symlinkat+0x95/0xb0 [ 89.232120][ C0] do_syscall_64+0xf3/0x230 [ 89.236621][ C0] ? clear_bhb_loop+0x35/0x90 [ 89.241309][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.247198][ C0] RIP: 0033:0x7f06c1b7f497 [ 89.251606][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.271231][ C0] RSP: 002b:00007ffc3b27ea98 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 89.279661][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f06c1b7f497 [ 89.287638][ C0] RDX: 00007f06c1bf5090 RSI: 00000000ffffff9c RDI: 00007ffc3b27eb20 [ 89.295615][ C0] RBP: 00007ffc3b27eacc R08: 0000000000000013 R09: 00007ffc3b27e7e7 [ 89.303601][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 89.311591][ C0] R13: 000000000001578f R14: 0000000000015440 R15: 00007ffc3b27eb20 [ 89.319599][ C0] [ 89.322799][ C0] Kernel Offset: disabled [ 89.327153][ C0] Rebooting in 86400 seconds..