last executing test programs: 1m6.849718082s ago: executing program 0 (id=107): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m5.950970382s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x0) listen(r0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}]}}]}, 0x40}}, 0x0) 55.293783835s ago: executing program 0 (id=107): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 53.537263931s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x0) listen(r0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}]}}]}, 0x40}}, 0x0) 43.322512582s ago: executing program 0 (id=107): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 42.39335898s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x0) listen(r0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}]}}]}, 0x40}}, 0x0) 28.382142281s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x0) listen(r0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}]}}]}, 0x40}}, 0x0) 27.705923685s ago: executing program 0 (id=107): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.48804132s ago: executing program 0 (id=107): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.261589171s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x0) listen(r0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}]}}]}, 0x40}}, 0x0) 5.029690102s ago: executing program 1 (id=870): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000e003000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="16aeaf4b0b3a855073904281b66d6cb748691f60e629e98ed9a008b6c35fe9de53feb9c698d78c9282c90571f4", 0x2d, 0x24044800, &(0x7f0000000140)={0xa, 0x4e23, 0x59c, @empty, 0x40}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fe41000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0131010000000000380012800e00010069703665727370416e000000240002801400050000000000000000c11922b84d754e9862581ac3fa896f2000000000000000000104001200050016cb41fb7b2b"], 0x58}}, 0x2004c000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4008040) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x200}) 4.750742654s ago: executing program 1 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001500)=ANY=[@ANYBLOB="a800000076000109000000000000000008000000", @ANYRES32, @ANYBLOB="8d000d"], 0xa8}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) mmap(&(0x7f000093c000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x8000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x8e13e000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'macvlan1\x00', &(0x7f0000000300)=@ethtool_coalesce={0xf, 0x7, 0x4, 0x2, 0x0, 0x9, 0x7fffffff, 0x6, 0x5, 0x3, 0x6, 0x5, 0xfffffff7, 0xb, 0x5, 0x2, 0xffff8b1e, 0x4, 0x0, 0x6, 0xd, 0x5, 0x6}}) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x12, r3, 0x6aef0000) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x50, 0x7, 0x6, 0x101, 0x0, 0x0, {0x14, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000200), &(0x7f0000000400)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4, 0x0, 0x800000002}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000020000000000000000008009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.579290878s ago: executing program 2 (id=877): r0 = socket(0x3, 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0xfffffffa) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendto$packet(r2, &(0x7f0000000680)="163c8f3f8a5d66571e583e7c88a8de0688a823e786dd55", 0x17, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r6, 0x200, 0x10000, &(0x7f0000000500)="f742d914", 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYRES64=r5, @ANYRES64=0x0, @ANYRES8, @ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="f6f6e874e669605ea8db39fb8a3c47ce1dd81786bd9de4bdf213353f2a6f7955656c4a0ccb8b87187d62f655c83e7c463a5ce609aa486f1d03d22b0ceaac582aca748723"], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x14, 0x1, 0x3d, 0x800000000}}], 0x14}}], 0x1, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="8500000008000000350000008400000085000000070000009500000000000000fed023d1d405000000c7d4012507000000c71adb05d72768b8242dd90d17e4c52505750482b009546a5f3f00573f31b53fd3e52bd87184446d165ae2939bbca322a415a98c885faad395f3e4e0635559362ed862ce7c69ad133037af3a000000000000000000000058c122dff93c54caec3751652d11fd4f66711918d3604b92666d60c88b658fe57bb5d365c5b89625385f230ba21f570635837c7bc74be573bfd68aaaf06d842085f84b96c4709e2c9449f0818f6fc5657572fb3e5bb8ff6f643e52f4964c62a70a011ede8b504c8a30381b8eff01d7615e1789bb4b3b7ef3668a98a785a80aa2d1ab149b9316091fb3025f0716799d8280acb3880a882f28dd3111e02c3b0b2818bf5bb902cc9c1666f5fdd2e43901ca4796f04db25c3df35cdfc17c54936202b45b7a09816aa76e8b9bbe24022007aae367025040e8b2255ced48a4b2db3f280dc6fd2f5374548c499ae74631f3be04e28d601369f9488fb074eb35540df5e053376ea29125d6bb916496b04b8e359c1edef91677414729967cffa736d7789c14e918b77518ee8e5d5aff9148be69267fff35"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x330, 0x370, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r10}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000003580)=ANY=[@ANYBLOB="18000000090000000000000000000000400000000000000095"], &(0x7f00000036c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.567996024s ago: executing program 1 (id=878): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x20000400) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x1403, 0x300, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x400c044) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) unshare(0x20400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.465108932s ago: executing program 2 (id=879): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 4.154314785s ago: executing program 2 (id=882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="029faf80000000e84d250000020000000000000600000000"], 0x10}, 0x1, 0x7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x51, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001f591ddbb6f6fbee37ff00040000000000fc84c41d3555", @ANYRES32=0x0, @ANYBLOB="04000000000000002c0012800b00010067726574617000001c0002800600180000000000060003000000000006000e00000000000500100007000000"], 0x54}}, 0x4040014) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xf7}]}}}]}, 0x44}}, 0x0) unshare(0x48000000) r12 = socket(0x1e, 0x1, 0x0) connect$tipc(r12, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) 4.019701633s ago: executing program 3 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000480)=0x40000, 0xffffffffffffff78) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x21eae}}, 0x20}}, 0x8004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x22, 0x3, 0x80000000}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_newaddr={0x2c, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800e10200000000000000000a800000ff030006"], 0x30}}, 0x10010) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000180)='ip6gretap0\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}, @IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x58}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}}, 0x24008004) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000f51f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000730000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000440)=0xa2) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x40, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x16}]}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x40}}, 0x40840) sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r11, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0x21, 0x34, @random="4dd55cd8db2e86ac4f7ee453d07dccf89cd5f37487ef5714468fd9acaf"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 3.951371809s ago: executing program 0 (id=107): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.744851575s ago: executing program 1 (id=884): syz_init_net_socket$x25(0x3, 0x5, 0x3) (async) r0 = syz_init_net_socket$x25(0x3, 0x5, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) (async) close(0x3) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e28, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="200000000000000029000000370000002f00000000000000c204000000070000200000000000000034000000360000007300000000000000c2040000000900001400000000000000290000000800000000000000000000001400000000000000290000003400000080000000000000001400000000000000290000000b000000000004010000000020000000000000002900000037000000080000000000000000010004010000e3170000000000000029000000040000002b0000000000000014"], 0xd8}}], 0x2, 0x0) (async) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e28, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="200000000000000029000000370000002f00000000000000c204000000070000200000000000000034000000360000007300000000000000c2040000000900001400000000000000290000000800000000000000000000001400000000000000290000003400000080000000000000001400000000000000290000000b000000000004010000000020000000000000002900000037000000080000000000000000010004010000e3170000000000000029000000040000002b0000000000000014"], 0xd8}}], 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x4000001, 0x25dfdbfc, {0xa, 0x20, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a001000", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000ffff0000000008000800810700"], 0x34}}, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000004600)=@filter={'filter\x00', 0xe, 0x7, 0x136, [0x0, 0x20003d40, 0x20004054, 0x20004330], 0x0, 0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="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"]}, 0x1ae) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x6, 'netpci0\x00'}) 2.740460323s ago: executing program 2 (id=885): r0 = epoll_create(0x9) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x4}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x1ff, 0x3, 0xc008, 0x50, 0xec, 0x1, 0x5, 0xfffffff7, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e21, 0x7fdcb26c, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, [0x261, 0x5b92dfd8, 0x35, 0x9, 0x8000000000000000, 0x4, 0x8000000000000, 0xb5c6, 0x3, 0x9, 0x9, 0xd, 0x5, 0x7fffffffffffffff, 0xc460]}, &(0x7f00000001c0)=0x100) r2 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000280)=0x80, 0x80000) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0)=@gcm_128={{0x304}, "ba567283c9d3b1f3", "b8b824862130edef047733729dd10940", "c90e7711", "37c8cf98498eb345"}, 0x28) listen(r2, 0xffff1221) shutdown(r2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', r3, 0x10, 0x1ddcde1c22d9ddf0, 0x6, 0x82, {{0xf, 0x4, 0x2, 0x0, 0x3c, 0x68, 0x0, 0x2, 0x2f, 0x0, @local, @multicast2, {[@end, @rr={0x7, 0x1f, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010102, @multicast2, @loopback]}, @generic={0x89, 0x7, "d6c7d5f020"}]}}}}}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={r4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'gretap0\x00', r5, 0x10, 0x80, 0xfffffffe, 0xffffade7, {{0xa, 0x4, 0x0, 0x7, 0x28, 0x67, 0x0, 0x4, 0x7b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x14, 0x79, 0x0, 0x6, [0x4, 0xffffff00, 0xb, 0x2]}]}}}}}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000044}, 0xa63e111b3a9f1484) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000640)) connect$ax25(r6, &(0x7f0000000740)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)='%pK \x00'}, 0x20) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r6) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, r10, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000ac0)={0x1, 0x8, 0x0, 0x3, 0x1, 0x0, [{0x4, 0xffffffff, 0x8, '\x00', 0x800}]}) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x2000, 0x0) ioctl$PPPIOCSACTIVE(r11, 0x40107446, &(0x7f0000000bc0)={0x3, &(0x7f0000000b80)=[{0x8, 0x7, 0x5, 0x1}, {0x5, 0x3, 0xdc, 0xfffffbff}, {0xd, 0x4, 0x3, 0x3}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) 2.738523504s ago: executing program 3 (id=886): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0xfff, 0x6, {{0xb, 0x4, 0x1, 0x17, 0x2c, 0x64, 0x0, 0x59, 0x29, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x17, 0x4, [@private=0xa010102, @remote, @private=0xa010100, @local, @local]}]}}}}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4, 0xffffffffffffffff}, 0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@float={0x4, 0x0, 0x0, 0x10, 0xc}, @var={0x2, 0x0, 0x0, 0xe, 0x1, 0x2}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @const={0xc, 0x0, 0x0, 0xa, 0x3}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x3}, @float={0x1, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0]}}, &(0x7f0000000680)=""/4096, 0x67, 0x1000, 0x1, 0xa060, 0x10000, @value}, 0x28) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{0x1, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)}, 0x20) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x3f, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x90000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x38}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x7ff, 0x5a, &(0x7f0000000500)=""/90, 0x41100, 0x55, '\x00', r7, 0x25, r8, 0x8, &(0x7f00000016c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x4, 0x3, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000018c0)=[r9, r4, r4, r10, r4, r11, r2], &(0x7f0000001900)=[{0x3, 0x3, 0x7, 0x3}, {0x5, 0x1, 0x4, 0x3}, {0x3, 0x2, 0xe, 0xc}], 0x10, 0x4, @void, @value}, 0x94) (async) r13 = socket$netlink(0x10, 0x3, 0x15) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c00)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1f, 0xb, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x966}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xd3e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000001a80)='GPL\x00', 0x40, 0x8d, &(0x7f0000001ac0)=""/141, 0x41100, 0x46, '\x00', r3, @fallback=0x1f, r8, 0x8, &(0x7f0000001b80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001bc0)={0x1, 0x6, 0xb, 0xfffffff7}, 0x10, r14, r12, 0x1, &(0x7f0000001c40)=[r9, r2, r2, r4, r6], &(0x7f0000001c80)=[{0x5, 0x5, 0x6, 0x1}], 0x10, 0x80000000, @void, @value}, 0x94) (async) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), r13) (async) r16 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e00)={0x0}, &(0x7f0000001e40)=0xc) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001e80)=0x0) (async) r19 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time_for_children\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f00)={0xb4, r15, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r16}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r17}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r18}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r19}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000001}, 0xc885) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000002040), r13) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000002080)='wg0\x00', 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000002100)=@buf={0x33, &(0x7f00000020c0)="2c3ac964433c3095745edb76072a2f3698b7e8267ed0ecd12e545dc78bfb5b5f1abb7d46821a880d0e5754db9fff875f0f7ea1"}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002140)={'team_slave_0\x00'}) ppoll(&(0x7f0000002180), 0x0, &(0x7f00000021c0)={0x0, 0x3938700}, &(0x7f0000002200)={[0x3e03]}, 0x8) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f0000002240)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000003280)={&(0x7f0000002280)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20000894}, 0x8080) 2.273254842s ago: executing program 3 (id=887): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.199943073s ago: executing program 2 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb904"], 0xfdef) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001007674690014000280080006000300000008000500ac1e0001"], 0x40}}, 0x0) 2.199500028s ago: executing program 1 (id=889): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x7862b000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32], 0x3c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (rerun: 32) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x31c, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_BSS_SELECT={0x34, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x9, 0x7f}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xff}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0xf5}}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="630e1452f37f"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xc}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "168d1afeccdf"}, @NL80211_ATTR_FILS_ERP_RRK={0x24, 0xfc, "67d4c6ea1d968a83d40913418bb94e42fe7f035996be8abb009f960066a0fabc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0xe6, 0xfa, "f8d66eee29ee705b6ba60e017730fab7e5f33a0a9d4ae694f57d4c3dc04d65112cdfc29580a1ad0311c38af70e9ee483760b51872de588fe64e72b3324ed98f8b98aa1c4abee19e14112ba8e6f69c1ed947e42a246b75dcb0d30d76f7148ada6a1215a45c685abed9cac10f903e78f09c50e70d01fff28df53f55e3430ca75ca7fe35f1e06b81857fca9aa40d76fe13f71ee55e715953ce045f2e2e98cf8b175b5b1d16efc064d99507b4b84db695b06541fe7bd33016f3d0a589baa3523be642aa49f94ba2b1ee2d3fb4a49b55d302cfaac9c39a450d801b738530b0c8826f63370"}, @NL80211_ATTR_FILS_ERP_REALM={0xa2, 0xfa, "099848abd3772b4ddef4ca56db7105499d0722871bf9ee9a97f28d93602ee6fe4cb2f99e5751c36c11cedac1095decf15c3a7a38b18f749bfc89f0503e9c1f1bb18a5ff2cd8dd3ac5fdbb603103d643ef83dc7cdb5b7511a33875907c225c0f3236b26aa1e3020acc1591af0ed99d6ae5797835f24e0311758240765339ed3bd6b0895f44e68f5b2cf0a4bec327a5f8bd1b678a0244890afa7b75c27277e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "7b12426189b8e53a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "cf6f9e73faeca63d0fb20ed723fdae37"}, @NL80211_ATTR_FILS_ERP_REALM={0xba, 0xfa, "b6aab7cf66d9cb9545f1f19b3f476ebeb3a871e9aee8d93ca40390e2e430b3ec1ed2ade070bd2b04f8d6379d466badd8997991dd633876d698970ffa283dc801b51484fbbaf991890c742fd08eb17c7c2b44d0e40a618729fdcd3f5445acfd7654ae9a2a5d47f7a4dbfe046ddedd6bddaeacb713502c11c40f4023ce26ff1fd1930391c9566e5eb009624b634c5e675f7b4d0476de5efb28ae444c1fd4b5304edb730e35a47b7b89bd83843b1318832f4744df5df542"}]]}, 0x31c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 2.188995761s ago: executing program 3 (id=890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000030301010000000000033800000000000350a896dbcfcc7559d2d3f364929d885c3c6fadf4e4ec93f1140cf3e3cef319d047be5ce96cee3022b4d86239031851ae97927a1da44c30e365be037c4dad52b34fe48a303a601a1e550d8398833608199dddc711ac4ee961aef42c0d02b14b37cda79cd1bbdd3e0f174b9ebdde55d942313e6c1ff5406e85a64a27b6"], 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000002030104000000000000000001000008080003400000000208000100b5000005080001000200002c08000440000000000800010001000800044000000006000000000000000000000000000000005de37cdb9f03495880603fa21d1907682b312284b3630ec7f6144abb04e2f2702efd61687dbe9cffadf13805836b9d0eb9f0b9119dd221981f7f8bf3"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x24000090) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x49, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) close(r0) 2.104374178s ago: executing program 3 (id=891): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbac}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x201004}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x4c}}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x9, 0x2, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xa8, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x80, 0xffa3, 0x9, 0xb, {{0xd, 0x4, 0x3, 0x1, 0x34, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x20, 0x44, 0x0, 0x6, [0x8001, 0x8000, 0x9, 0x15, 0xe, 0x7fffffff, 0x4]}]}}}}}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0x5, 0x5}, {0x4, 0x3}, {0xc, 0x4}, {0xe, 0x3}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x4}]}, {0x0, [0x5f, 0x61, 0x0]}}, &(0x7f0000000a00)=""/55, 0x61, 0x37, 0x1, 0x6, 0x0, @void, @value}, 0x28) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0xffffffffffffffff, 0x8, 0x18}, 0xc) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x4, 0x0, 0x8001, 0x82, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xa, @void, @value, @void, @value}, 0x50) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x4000, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x19, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x0, 0x8, 0x6, 0x8, 0x4, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0xbf, &(0x7f0000000800)=""/191, 0x41100, 0xc, '\x00', r11, 0x0, r12, 0x8, &(0x7f0000000a80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x5, 0x800, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r13, r14, 0xffffffffffffffff, r15], 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x7, '\x00', 0x0, r12, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) write(r12, &(0x7f0000000dc0)="ef1c13bc978d775f0c8f51f8e216", 0xe) bind$inet(r7, &(0x7f0000000e00)={0x2, 0x4e24, @multicast1}, 0x10) r16 = accept$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @local}, &(0x7f0000000e80)=0x1c) ioctl$sock_inet6_SIOCDELRT(r16, 0x890c, &(0x7f0000000ec0)={@empty, @remote, @private1, 0x4, 0x81, 0xc, 0x100, 0x3, 0x40008, r11}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000f40), r5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000f80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000001080)={0xfffffffffffffffe, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x60, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1.963798017s ago: executing program 3 (id=892): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}]}, 0x34}}, 0x80) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r8], 0xb4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012800e0001006970366772657461700000001400028006000e0064"], 0x48}}, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x400442c9, 0x200000f3) 1.849050366s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x0) listen(r0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}]}}]}, 0x40}}, 0x0) 63.503405ms ago: executing program 1 (id=893): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev}, {@in=@remote, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x7}}]}, 0x184}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb75}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x69}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c1}, 0x833afe5b23eac675) 0s ago: executing program 2 (id=894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="18401300"/16], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xff, &(0x7f0000000340)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x800}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) accept(r2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x108a4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffff5fa4, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "8d02cd81", "066580001e00"}, 0x38) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000007000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40000000000000079104800000000007b0af8ff0000000095007400000000007955f3e426a9bf35bc40acd3c5897e95"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="2a6b4ff2433baaa53c6de421e0d80c060c003ea1c26f8422b33af82fe7a62c7a57b3523a7fdc25318d2a5c7761755acb43ee9f1d8c5c620678f66b134174469fd0e67f126a5d3a8fd59da426e5b7c38059fbc22d01bde693346242c4ca938a6c1eeaffd3ae6f6c487df10031b0b8ad2f561174938cd0c26aea5e24563e0243a8d5b58272211988a5a2e952c01588058c6541a4fbe50ba354618fc0cebaf8b1403a7defaa72a6436b296d104c5d6f00"/184], 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000580)=0x2, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r8], 0xa4}, 0x1, 0x0, 0x0, 0x2c800}, 0x20000080) kernel console output (not intermixed with test programs): 82][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.655384][ T7899] bridge_slave_0: entered allmulticast mode [ 196.678612][ T7899] bridge_slave_0: entered promiscuous mode [ 196.758546][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.765708][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.807754][ T7899] bridge_slave_1: entered allmulticast mode [ 196.826737][ T7899] bridge_slave_1: entered promiscuous mode [ 196.898186][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.907712][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.915840][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.934588][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.944261][ T5865] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 196.955257][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.136856][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.180702][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.259246][ T11] hsr_slave_0: left promiscuous mode [ 197.266362][ T11] hsr_slave_1: left promiscuous mode [ 197.286736][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.307850][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.328606][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.336214][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.383621][ T11] veth1_macvtap: left promiscuous mode [ 197.391695][ T11] veth0_macvtap: left promiscuous mode [ 197.406094][ T11] veth1_vlan: left promiscuous mode [ 197.415154][ T11] veth0_vlan: left promiscuous mode [ 197.592862][ T5862] Bluetooth: hci0: command tx timeout [ 197.824023][ T7970] sctp: [Deprecated]: syz.2.494 (pid 7970) Use of int in max_burst socket option. [ 197.824023][ T7970] Use struct sctp_assoc_value instead [ 198.012540][ T7975] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.495'. [ 198.094362][ T11] team0 (unregistering): Port device team_slave_1 removed [ 198.135209][ T11] team0 (unregistering): Port device team_slave_0 removed [ 198.513188][ T7899] team0: Port device team_slave_0 added [ 198.521551][ T7899] team0: Port device team_slave_1 added [ 198.682116][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.713933][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.740409][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.762896][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.774593][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.801839][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.925710][ T7899] hsr_slave_0: entered promiscuous mode [ 198.935128][ T7899] hsr_slave_1: entered promiscuous mode [ 198.942014][ T7899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.956590][ T7899] Cannot create hsr debugfs directory [ 199.037962][ T5862] Bluetooth: hci1: command tx timeout [ 199.253476][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 199.489008][ T8007] netlink: 56 bytes leftover after parsing attributes in process `syz.1.503'. [ 199.499548][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.532301][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.503'. [ 199.562156][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.503'. [ 199.593632][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.623382][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.630999][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.654315][ T7937] bridge_slave_0: entered allmulticast mode [ 199.667904][ T5862] Bluetooth: hci0: command tx timeout [ 199.676525][ T7937] bridge_slave_0: entered promiscuous mode [ 199.733058][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.780642][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.804796][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.813422][ T7937] bridge_slave_1: entered allmulticast mode [ 199.829033][ T7937] bridge_slave_1: entered promiscuous mode [ 199.921883][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.968885][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.000164][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.167325][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 200.190379][ T8039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.510'. [ 200.248906][ T7937] team0: Port device team_slave_0 added [ 200.273556][ T7937] team0: Port device team_slave_1 added [ 200.420760][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.428556][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.498903][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.523283][ T7899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.570036][ T7899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.605934][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.613049][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.670817][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.713931][ T7899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.771989][ T7899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.782450][ T11] bridge_slave_1: left allmulticast mode [ 200.791752][ T11] bridge_slave_1: left promiscuous mode [ 200.798237][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.813978][ T11] bridge_slave_0: left allmulticast mode [ 200.820024][ T11] bridge_slave_0: left promiscuous mode [ 200.825702][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.111644][ T5862] Bluetooth: hci1: command tx timeout [ 201.145627][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.160550][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.170959][ T11] bond0 (unregistering): Released all slaves [ 201.286565][ T7937] hsr_slave_0: entered promiscuous mode [ 201.294485][ T7937] hsr_slave_1: entered promiscuous mode [ 201.309228][ T7937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.319160][ T7937] Cannot create hsr debugfs directory [ 201.747424][ T5862] Bluetooth: hci0: command tx timeout [ 201.866339][ T11] hsr_slave_0: left promiscuous mode [ 201.894714][ T11] hsr_slave_1: left promiscuous mode [ 201.902084][ T8072] FAULT_INJECTION: forcing a failure. [ 201.902084][ T8072] name failslab, interval 1, probability 0, space 0, times 0 [ 201.937147][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.944641][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.957544][ T8072] CPU: 1 UID: 0 PID: 8072 Comm: syz.1.519 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 201.968197][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 201.978310][ T8072] Call Trace: [ 201.981710][ T8072] [ 201.984673][ T8072] dump_stack_lvl+0x241/0x360 [ 201.989522][ T8072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.994781][ T8072] ? __pfx__printk+0x10/0x10 [ 201.999397][ T8072] ? __kmalloc_noprof+0xb0/0x400 [ 202.004369][ T8072] ? __pfx___might_resched+0x10/0x10 [ 202.009690][ T8072] should_fail_ex+0x3b0/0x4e0 [ 202.014462][ T8072] ? sock_kmalloc+0xd7/0x160 [ 202.019090][ T8072] should_failslab+0xac/0x100 [ 202.023801][ T8072] ? sock_kmalloc+0xd7/0x160 [ 202.028511][ T8072] __kmalloc_noprof+0xd8/0x400 [ 202.033318][ T8072] ? __might_fault+0xaa/0x120 [ 202.038040][ T8072] sock_kmalloc+0xd7/0x160 [ 202.042487][ T8072] ____sys_sendmsg+0x216/0x7e0 [ 202.047387][ T8072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.052722][ T8072] __sys_sendmmsg+0x3ab/0x730 [ 202.057451][ T8072] ? __pfx___sys_sendmmsg+0x10/0x10 [ 202.062709][ T8072] ? __pfx_lock_release+0x10/0x10 [ 202.067772][ T8072] ? kstrtouint_from_user+0x128/0x190 [ 202.073206][ T8072] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 202.079141][ T8072] ? ksys_write+0x229/0x2b0 [ 202.083677][ T8072] ? __pfx_lock_release+0x10/0x10 [ 202.088737][ T8072] ? vfs_write+0x730/0xd30 [ 202.093181][ T8072] ? __mutex_unlock_slowpath+0x21d/0x750 [ 202.098847][ T8072] ? __fget_files+0x3f3/0x470 [ 202.103569][ T8072] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.109599][ T8072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.115969][ T8072] ? do_syscall_64+0x100/0x230 [ 202.120791][ T8072] __x64_sys_sendmmsg+0xa0/0xb0 [ 202.125691][ T8072] do_syscall_64+0xf3/0x230 [ 202.130227][ T8072] ? clear_bhb_loop+0x35/0x90 [ 202.134936][ T8072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.140857][ T8072] RIP: 0033:0x7fa73237e719 [ 202.145301][ T8072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.164940][ T8072] RSP: 002b:00007fa733218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 202.173393][ T8072] RAX: ffffffffffffffda RBX: 00007fa732535f80 RCX: 00007fa73237e719 [ 202.181400][ T8072] RDX: 0000000000000001 RSI: 00000000200049c0 RDI: 0000000000000003 [ 202.189399][ T8072] RBP: 00007fa733218090 R08: 0000000000000000 R09: 0000000000000000 [ 202.197415][ T8072] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 202.205412][ T8072] R13: 0000000000000000 R14: 00007fa732535f80 R15: 00007fff754b1b18 [ 202.213429][ T8072] [ 202.218277][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.225749][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.397082][ T11] veth1_macvtap: left promiscuous mode [ 202.434147][ T11] veth0_macvtap: left promiscuous mode [ 202.449229][ T11] veth1_vlan: left promiscuous mode [ 202.454904][ T11] veth0_vlan: left promiscuous mode [ 203.015559][ T11] team0 (unregistering): Port device team_slave_1 removed [ 203.061713][ T11] team0 (unregistering): Port device team_slave_0 removed [ 203.189721][ T5862] Bluetooth: hci1: command tx timeout [ 203.426815][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.435204][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.514784][ T7899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.624553][ T8081] netlink: 'syz.2.522': attribute type 3 has an invalid length. [ 203.639949][ T8081] netlink: 'syz.2.522': attribute type 3 has an invalid length. [ 203.712794][ T7899] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.777538][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.784665][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.821062][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.828287][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.835755][ T5862] Bluetooth: hci0: command tx timeout [ 204.107003][ T7937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.144747][ T7937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.176041][ T7937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.186160][ T7937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.293605][ T8105] FAULT_INJECTION: forcing a failure. [ 204.293605][ T8105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.331965][ T8105] CPU: 0 UID: 0 PID: 8105 Comm: syz.3.530 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 204.342612][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 204.352698][ T8105] Call Trace: [ 204.356009][ T8105] [ 204.358971][ T8105] dump_stack_lvl+0x241/0x360 [ 204.363688][ T8105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.368929][ T8105] ? __pfx__printk+0x10/0x10 [ 204.373557][ T8105] ? __pfx_lock_release+0x10/0x10 [ 204.378623][ T8105] should_fail_ex+0x3b0/0x4e0 [ 204.383337][ T8105] _copy_from_user+0x2f/0xc0 [ 204.387963][ T8105] ____sys_sendmsg+0x2ef/0x7e0 [ 204.392771][ T8105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.398111][ T8105] __sys_sendmmsg+0x3ab/0x730 [ 204.400929][ T7899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.402812][ T8105] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.414795][ T8105] ? __pfx_lock_release+0x10/0x10 [ 204.419859][ T8105] ? kstrtouint_from_user+0x128/0x190 [ 204.425294][ T8105] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 204.431230][ T8105] ? ksys_write+0x229/0x2b0 [ 204.435766][ T8105] ? __pfx_lock_release+0x10/0x10 [ 204.440836][ T8105] ? vfs_write+0x730/0xd30 [ 204.445303][ T8105] ? __mutex_unlock_slowpath+0x21d/0x750 [ 204.449232][ T7899] veth0_vlan: entered promiscuous mode [ 204.450956][ T8105] ? __fget_files+0x3f3/0x470 [ 204.461117][ T8105] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 204.462911][ T7899] veth1_vlan: entered promiscuous mode [ 204.467125][ T8105] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.467160][ T8105] ? do_syscall_64+0x100/0x230 [ 204.467182][ T8105] __x64_sys_sendmmsg+0xa0/0xb0 [ 204.488570][ T8105] do_syscall_64+0xf3/0x230 [ 204.493088][ T8105] ? clear_bhb_loop+0x35/0x90 [ 204.497768][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.503677][ T8105] RIP: 0033:0x7ff49b17e719 [ 204.508105][ T8105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.527726][ T8105] RSP: 002b:00007ff49bf9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.536145][ T8105] RAX: ffffffffffffffda RBX: 00007ff49b335f80 RCX: 00007ff49b17e719 [ 204.544113][ T8105] RDX: 0000000000000001 RSI: 00000000200049c0 RDI: 0000000000000003 [ 204.552118][ T8105] RBP: 00007ff49bf9c090 R08: 0000000000000000 R09: 0000000000000000 [ 204.560086][ T8105] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 204.568143][ T8105] R13: 0000000000000000 R14: 00007ff49b335f80 R15: 00007ffd9be5bdf8 [ 204.576232][ T8105] [ 204.602963][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.619161][ T7937] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.666432][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.673603][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.713825][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.721108][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.743503][ T8111] vcan0: tx drop: invalid da for name 0x0000000000000005 [ 204.829365][ T7899] veth0_macvtap: entered promiscuous mode [ 204.842562][ T7899] veth1_macvtap: entered promiscuous mode [ 204.857383][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.868218][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.878178][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.888729][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.898967][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.909723][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.925863][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.971375][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.982111][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.002168][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.016482][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.029878][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.042147][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.054242][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.063219][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 205.102253][ T7899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.147464][ T7899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.156228][ T7899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.209313][ T7899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.267293][ T5862] Bluetooth: hci1: command tx timeout [ 205.413194][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.418843][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.433464][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.517903][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.538796][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.881841][ T8166] xt_l2tp: v2 tid > 0xffff: 150994944 [ 205.887330][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.542'. [ 205.914014][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 205.938060][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 205.964190][ T8166] netlink: 'syz.3.541': attribute type 15 has an invalid length. [ 206.073454][ T7937] veth0_vlan: entered promiscuous mode [ 206.098294][ T7937] veth1_vlan: entered promiscuous mode [ 206.152269][ T7937] veth0_macvtap: entered promiscuous mode [ 206.163001][ T7937] veth1_macvtap: entered promiscuous mode [ 206.188720][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.199483][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.210943][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.226171][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.246497][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.265053][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.275914][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.288454][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.299883][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.333372][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'. [ 206.334940][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.355986][ T8183] No such timeout policy "syz0" [ 206.361485][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.382817][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.394029][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.404821][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.415656][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.425765][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.465233][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.488265][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.579045][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.603609][ T7937] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.614023][ T7937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.614080][ T8189] netlink: 52 bytes leftover after parsing attributes in process `syz.1.548'. [ 206.623163][ T7937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.667041][ T7937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.709109][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.779118][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.814085][ T5110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.831133][ T5110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.853496][ T5110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.862662][ T5110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.983592][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.237606][ T8194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.550'. [ 207.519639][ T35] bridge_slave_1: left allmulticast mode [ 207.529557][ T35] bridge_slave_1: left promiscuous mode [ 207.536490][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.566690][ T8217] FAULT_INJECTION: forcing a failure. [ 207.566690][ T8217] name failslab, interval 1, probability 0, space 0, times 0 [ 207.595920][ T8217] CPU: 0 UID: 0 PID: 8217 Comm: syz.1.556 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 207.606565][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 207.616651][ T8217] Call Trace: [ 207.619958][ T8217] [ 207.622913][ T8217] dump_stack_lvl+0x241/0x360 [ 207.627693][ T8217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.630002][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.632988][ T8217] ? __pfx__printk+0x10/0x10 [ 207.633052][ T8217] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 207.644606][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.644820][ T8217] should_fail_ex+0x3b0/0x4e0 [ 207.651661][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.657086][ T8217] should_failslab+0xac/0x100 [ 207.657117][ T8217] ? sctp_add_bind_addr+0x89/0x3a0 [ 207.657137][ T8217] __kmalloc_cache_noprof+0x6c/0x2c0 [ 207.657159][ T8217] ? __pfx_sctp_get_port_local+0x10/0x10 [ 207.657185][ T8217] sctp_add_bind_addr+0x89/0x3a0 [ 207.657207][ T8217] sctp_do_bind+0x5d2/0x950 [ 207.657241][ T8217] sctp_connect_new_asoc+0x277/0x6c0 [ 207.657268][ T8217] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 207.657290][ T8217] ? sctp_sendmsg+0xbb9/0x3520 [ 207.657319][ T8217] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 207.657341][ T8217] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 207.657364][ T8217] sctp_sendmsg+0x219a/0x3520 [ 207.657402][ T8217] ? aa_sk_perm+0x96d/0xab0 [ 207.657423][ T8217] ? __pfx_sctp_sendmsg+0x10/0x10 [ 207.657452][ T8217] ? __pfx_aa_sk_perm+0x10/0x10 [ 207.657478][ T8217] ? inet_sendmsg+0x330/0x390 [ 207.657504][ T8217] __sock_sendmsg+0x1a6/0x270 [ 207.657529][ T8217] ____sys_sendmsg+0x52a/0x7e0 [ 207.657571][ T8217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.663748][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.669154][ T8217] __sys_sendmmsg+0x3ab/0x730 [ 207.669197][ T8217] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.675759][ T5865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.678948][ T8217] ? __pfx_lock_release+0x10/0x10 [ 207.678980][ T8217] ? kstrtouint_from_user+0x128/0x190 [ 207.679023][ T8217] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 207.684806][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.689883][ T8217] ? ksys_write+0x229/0x2b0 [ 207.689909][ T8217] ? __pfx_lock_release+0x10/0x10 [ 207.689941][ T8217] ? vfs_write+0x730/0xd30 [ 207.825723][ T8217] ? __mutex_unlock_slowpath+0x21d/0x750 [ 207.831367][ T8217] ? __fget_files+0x3f3/0x470 [ 207.836064][ T8217] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.842049][ T8217] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.848380][ T8217] ? do_syscall_64+0x100/0x230 [ 207.853144][ T8217] __x64_sys_sendmmsg+0xa0/0xb0 [ 207.857996][ T8217] do_syscall_64+0xf3/0x230 [ 207.862500][ T8217] ? clear_bhb_loop+0x35/0x90 [ 207.867185][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.873071][ T8217] RIP: 0033:0x7fa73237e719 [ 207.877484][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.897088][ T8217] RSP: 002b:00007fa733218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.905513][ T8217] RAX: ffffffffffffffda RBX: 00007fa732535f80 RCX: 00007fa73237e719 [ 207.913483][ T8217] RDX: 0000000000000001 RSI: 00000000200049c0 RDI: 0000000000000003 [ 207.921453][ T8217] RBP: 00007fa733218090 R08: 0000000000000000 R09: 0000000000000000 [ 207.929421][ T8217] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 207.937385][ T8217] R13: 0000000000000000 R14: 00007fa732535f80 R15: 00007fff754b1b18 [ 207.945365][ T8217] [ 207.978602][ T35] bridge_slave_0: left allmulticast mode [ 207.984307][ T35] bridge_slave_0: left promiscuous mode [ 207.990283][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.039625][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 208.059842][ T8226] netlink: 256 bytes leftover after parsing attributes in process `syz.3.557'. [ 208.433103][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.444334][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.454575][ T35] bond0 (unregistering): Released all slaves [ 208.711789][ T8219] chnl_net:caif_netlink_parms(): no params data found [ 208.783335][ T35] hsr_slave_0: left promiscuous mode [ 208.789353][ T35] hsr_slave_1: left promiscuous mode [ 208.795337][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.803430][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.811519][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.819168][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.835119][ T35] veth1_macvtap: left promiscuous mode [ 208.840869][ T35] veth0_macvtap: left promiscuous mode [ 208.846412][ T35] veth1_vlan: left promiscuous mode [ 208.851915][ T35] veth0_vlan: left promiscuous mode [ 209.128161][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.561'. [ 209.342894][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.359713][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.370635][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.388297][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.398722][ T5862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.406101][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.533052][ T35] team0 (unregistering): Port device team_slave_1 removed [ 209.571921][ T35] team0 (unregistering): Port device team_slave_0 removed [ 210.069895][ T5862] Bluetooth: hci0: command tx timeout [ 210.090501][ T8256] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 210.237812][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.245043][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.253736][ T8219] bridge_slave_0: entered allmulticast mode [ 210.273923][ T8219] bridge_slave_0: entered promiscuous mode [ 210.291937][ T8273] Bluetooth: MGMT ver 1.23 [ 210.319936][ T8273] __nla_validate_parse: 2 callbacks suppressed [ 210.319956][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 210.340937][ T8270] team0: Device vlan3 is already an upper device of the team interface [ 210.382731][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 210.425416][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.433500][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.441103][ T8219] bridge_slave_1: entered allmulticast mode [ 210.448554][ T8219] bridge_slave_1: entered promiscuous mode [ 210.470508][ T8276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.567'. [ 210.554334][ T8280] FAULT_INJECTION: forcing a failure. [ 210.554334][ T8280] name failslab, interval 1, probability 0, space 0, times 0 [ 210.577893][ T8219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.581884][ T8282] sctp: [Deprecated]: syz.2.569 (pid 8282) Use of int in maxseg socket option. [ 210.581884][ T8282] Use struct sctp_assoc_value instead [ 210.607352][ T8280] CPU: 0 UID: 0 PID: 8280 Comm: syz.1.568 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 210.617986][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 210.628078][ T8280] Call Trace: [ 210.631382][ T8280] [ 210.634342][ T8280] dump_stack_lvl+0x241/0x360 [ 210.639051][ T8280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.644287][ T8280] ? __pfx__printk+0x10/0x10 [ 210.648912][ T8280] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 210.654407][ T8280] ? __pfx___might_resched+0x10/0x10 [ 210.659723][ T8280] should_fail_ex+0x3b0/0x4e0 [ 210.664416][ T8280] should_failslab+0xac/0x100 [ 210.669105][ T8280] ? sctp_association_new+0x8a/0x2400 [ 210.674482][ T8280] __kmalloc_cache_noprof+0x6c/0x2c0 [ 210.679777][ T8280] sctp_association_new+0x8a/0x2400 [ 210.685018][ T8280] ? sctp_do_bind+0x679/0x950 [ 210.689710][ T8280] sctp_connect_new_asoc+0x2d8/0x6c0 [ 210.694995][ T8280] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 210.700800][ T8280] ? sctp_sendmsg+0xbb9/0x3520 [ 210.705566][ T8280] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 210.711397][ T8280] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 210.716982][ T8280] sctp_sendmsg+0x219a/0x3520 [ 210.721725][ T8280] ? aa_sk_perm+0x96d/0xab0 [ 210.726258][ T8280] ? __pfx_sctp_sendmsg+0x10/0x10 [ 210.731308][ T8280] ? __pfx_aa_sk_perm+0x10/0x10 [ 210.736182][ T8280] ? inet_sendmsg+0x330/0x390 [ 210.740958][ T8280] __sock_sendmsg+0x1a6/0x270 [ 210.745674][ T8280] ____sys_sendmsg+0x52a/0x7e0 [ 210.750477][ T8280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.755879][ T8280] __sys_sendmmsg+0x3ab/0x730 [ 210.760599][ T8280] ? __pfx___sys_sendmmsg+0x10/0x10 [ 210.765922][ T8280] ? __pfx_lock_release+0x10/0x10 [ 210.770962][ T8280] ? kstrtouint_from_user+0x128/0x190 [ 210.776373][ T8280] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 210.782363][ T8280] ? ksys_write+0x229/0x2b0 [ 210.786875][ T8280] ? __pfx_lock_release+0x10/0x10 [ 210.791913][ T8280] ? vfs_write+0x730/0xd30 [ 210.796361][ T8280] ? __mutex_unlock_slowpath+0x21d/0x750 [ 210.802008][ T8280] ? __fget_files+0x3f3/0x470 [ 210.806697][ T8280] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 210.812682][ T8280] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.819020][ T8280] ? do_syscall_64+0x100/0x230 [ 210.823791][ T8280] __x64_sys_sendmmsg+0xa0/0xb0 [ 210.828650][ T8280] do_syscall_64+0xf3/0x230 [ 210.833158][ T8280] ? clear_bhb_loop+0x35/0x90 [ 210.837844][ T8280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.843734][ T8280] RIP: 0033:0x7fa73237e719 [ 210.848144][ T8280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.867751][ T8280] RSP: 002b:00007fa733218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 210.876165][ T8280] RAX: ffffffffffffffda RBX: 00007fa732535f80 RCX: 00007fa73237e719 [ 210.884134][ T8280] RDX: 0000000000000001 RSI: 00000000200049c0 RDI: 0000000000000003 [ 210.892100][ T8280] RBP: 00007fa733218090 R08: 0000000000000000 R09: 0000000000000000 [ 210.900068][ T8280] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 210.908058][ T8280] R13: 0000000000000000 R14: 00007fa732535f80 R15: 00007fff754b1b18 [ 210.916054][ T8280] [ 210.924383][ T8219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.953355][ T8284] netlink: 'syz.3.570': attribute type 11 has an invalid length. [ 210.974826][ T8284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.570'. [ 211.090933][ T8219] team0: Port device team_slave_0 added [ 211.119309][ T8219] team0: Port device team_slave_1 added [ 211.245507][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.252827][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.279589][ T8219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.292723][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.299782][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.326116][ T8219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.415026][ T8261] chnl_net:caif_netlink_parms(): no params data found [ 211.427806][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 211.468229][ T8291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.573'. [ 211.498793][ T8306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'. [ 211.508029][ T5865] Bluetooth: hci1: command tx timeout [ 211.514733][ T8299] Cannot find del_set index 286 as target [ 211.526551][ T8219] hsr_slave_0: entered promiscuous mode [ 211.537968][ T8219] hsr_slave_1: entered promiscuous mode [ 211.544074][ T8219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.555405][ T8219] Cannot create hsr debugfs directory [ 211.720608][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.746681][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 211.820388][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.846273][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.854261][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.874287][ T8261] bridge_slave_0: entered allmulticast mode [ 211.884039][ T8261] bridge_slave_0: entered promiscuous mode [ 211.961076][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.980884][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.994667][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.003331][ T8261] bridge_slave_1: entered allmulticast mode [ 212.013979][ T8261] bridge_slave_1: entered promiscuous mode [ 212.062806][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.077991][ T8329] netlink: 'syz.3.581': attribute type 21 has an invalid length. [ 212.125452][ T8261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.147408][ T5865] Bluetooth: hci0: command tx timeout [ 212.176418][ T8261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.298080][ T8337] netlink: 'syz.1.582': attribute type 2 has an invalid length. [ 212.321510][ T8261] team0: Port device team_slave_0 added [ 212.331415][ T8261] team0: Port device team_slave_1 added [ 212.388411][ T5862] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 212.482157][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.498128][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.535960][ T8261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.593219][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.602795][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.607975][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 212.649581][ T8355] netlink: 48 bytes leftover after parsing attributes in process `syz.2.588'. [ 212.654534][ T8261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.706561][ T35] bridge_slave_1: left allmulticast mode [ 212.713218][ T35] bridge_slave_1: left promiscuous mode [ 212.719529][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.729533][ T35] bridge_slave_0: left allmulticast mode [ 212.749643][ T35] bridge_slave_0: left promiscuous mode [ 212.765680][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.853849][ T8362] xt_TCPMSS: Only works on TCP SYN packets [ 213.137083][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.148309][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.159226][ T35] bond0 (unregistering): Released all slaves [ 213.224295][ T8368] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.233303][ T8368] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.242263][ T8368] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.251342][ T8368] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.263357][ T8370] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.272731][ T8370] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.281952][ T8370] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.369406][ T8261] hsr_slave_0: entered promiscuous mode [ 213.377851][ T8261] hsr_slave_1: entered promiscuous mode [ 213.384377][ T8261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.411559][ T8261] Cannot create hsr debugfs directory [ 213.572249][ T8389] bond1: entered promiscuous mode [ 213.597254][ T5862] Bluetooth: hci1: command tx timeout [ 213.723832][ T8219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.805805][ T8219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.875816][ T8219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.893391][ T8219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.913883][ T35] hsr_slave_0: left promiscuous mode [ 213.922701][ T35] hsr_slave_1: left promiscuous mode [ 213.929913][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.938038][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.946669][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.954440][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.982918][ T35] veth1_macvtap: left promiscuous mode [ 213.989226][ T35] veth0_macvtap: left promiscuous mode [ 213.994785][ T35] veth1_vlan: left promiscuous mode [ 214.000571][ T35] veth0_vlan: left promiscuous mode [ 214.227521][ T5862] Bluetooth: hci0: command 0x040f tx timeout [ 214.402968][ T35] team0 (unregistering): Port device team_slave_1 removed [ 214.446615][ T35] team0 (unregistering): Port device team_slave_0 removed [ 215.058329][ T8219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.079328][ T8219] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.111034][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.118294][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.181208][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.188449][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.582979][ T8444] __nla_validate_parse: 8 callbacks suppressed [ 215.582997][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'. [ 215.623776][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'. [ 215.648015][ T8445] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 215.667581][ T5862] Bluetooth: hci1: command tx timeout [ 215.731683][ T8219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.752539][ T8444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.610'. [ 215.818481][ T8261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.862402][ T8261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.866574][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 215.882174][ T8261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.915611][ T8219] veth0_vlan: entered promiscuous mode [ 215.924203][ T8261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.978055][ T8219] veth1_vlan: entered promiscuous mode [ 216.023919][ T8456] netlink: 256 bytes leftover after parsing attributes in process `syz.1.615'. [ 216.104044][ T8219] veth0_macvtap: entered promiscuous mode [ 216.143970][ T8219] veth1_macvtap: entered promiscuous mode [ 216.161644][ T8458] syzkaller0: entered allmulticast mode [ 216.202232][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.227231][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.244365][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.256089][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.268337][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.279457][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.290912][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.307196][ T5862] Bluetooth: hci0: command 0x040f tx timeout [ 216.415471][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.447122][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.469927][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.480776][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.501318][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.530150][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.559488][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.600373][ T8219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.637069][ T8219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.645859][ T8219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.672778][ T8219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.690948][ T8261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.758803][ T8261] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.811517][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.818690][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.895390][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.902587][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.914038][ T8486] pimreg: entered allmulticast mode [ 216.945549][ T8490] pimreg: left allmulticast mode [ 217.017229][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 217.043745][ T8486] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 217.064842][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.090746][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.095890][ T8488] erspan1: entered allmulticast mode [ 217.269706][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.300258][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.416318][ T8511] netlink: 'syz.2.631': attribute type 21 has an invalid length. [ 217.425941][ T8511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.631'. [ 217.440700][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 217.504371][ T8515] netlink: 'syz.2.631': attribute type 5 has an invalid length. [ 217.520939][ T8261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.747226][ T5862] Bluetooth: hci1: command tx timeout [ 217.942876][ T8536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'. [ 217.968817][ T8536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'. [ 218.053102][ T8261] veth0_vlan: entered promiscuous mode [ 218.064778][ T8261] veth1_vlan: entered promiscuous mode [ 218.112256][ T8261] veth0_macvtap: entered promiscuous mode [ 218.122850][ T8261] veth1_macvtap: entered promiscuous mode [ 218.141375][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.152108][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.162817][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.175563][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.185537][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.197503][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.208115][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.218731][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.231553][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.246446][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.258448][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.269861][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.280938][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.291060][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.302201][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.312851][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.323785][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.334626][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.348700][ T8261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.358009][ T8261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.366710][ T8261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.375542][ T8261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.471143][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.576604][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.590435][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.614779][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.623864][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.854897][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.933431][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.005423][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.117962][ T11] bridge_slave_1: left allmulticast mode [ 219.124375][ T11] bridge_slave_1: left promiscuous mode [ 219.134326][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.143002][ T11] bridge_slave_0: left allmulticast mode [ 219.149205][ T11] bridge_slave_0: left promiscuous mode [ 219.154922][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.542399][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.552679][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.561411][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.581531][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.602526][ T5865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.611482][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.783348][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.794285][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.804434][ T11] bond0 (unregistering): Released all slaves [ 219.853849][ T8557] syzkaller0: entered promiscuous mode [ 219.866323][ T8557] syzkaller0: entered allmulticast mode [ 220.647731][ T8571] Bluetooth: MGMT ver 1.23 [ 220.667778][ T8569] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 220.698881][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'. [ 220.749308][ T8571] netlink: 'syz.2.644': attribute type 4 has an invalid length. [ 220.780945][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.801050][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.809406][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.824216][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.840173][ T5154] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.856624][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.883672][ T8580] netlink: 'syz.2.644': attribute type 4 has an invalid length. [ 221.667431][ T5154] Bluetooth: hci0: command tx timeout [ 221.952047][ T11] hsr_slave_0: left promiscuous mode [ 221.998353][ T11] hsr_slave_1: left promiscuous mode [ 222.006422][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.021317][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.030069][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.037846][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.054051][ T11] veth1_macvtap: left promiscuous mode [ 222.059758][ T11] veth0_macvtap: left promiscuous mode [ 222.065594][ T11] veth1_vlan: left promiscuous mode [ 222.071689][ T11] veth0_vlan: left promiscuous mode [ 222.458086][ T11] team0 (unregistering): Port device team_slave_1 removed [ 222.505612][ T11] team0 (unregistering): Port device team_slave_0 removed [ 222.715868][ T5865] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 222.948125][ T5865] Bluetooth: hci1: command tx timeout [ 222.981096][ T8591] netlink: 52 bytes leftover after parsing attributes in process `syz.1.650'. [ 223.022979][ T8601] netlink: 'syz.2.651': attribute type 2 has an invalid length. [ 223.205192][ T8611] Bluetooth: MGMT ver 1.23 [ 223.385740][ T8618] Cannot find add_set index 832 as target [ 223.512469][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 223.552786][ T8561] chnl_net:caif_netlink_parms(): no params data found [ 223.629777][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.644708][ T8629] netlink: 48 bytes leftover after parsing attributes in process `syz.3.656'. [ 223.749088][ T5865] Bluetooth: hci0: command 0x041b tx timeout [ 223.858623][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.905630][ T8646] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.979416][ T8648] IPVS: Scheduler module ip_vs_sip not found [ 224.026807][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.109512][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.127207][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.134468][ T8573] bridge_slave_0: entered allmulticast mode [ 224.167976][ T8573] bridge_slave_0: entered promiscuous mode [ 224.256415][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.272281][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.284810][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.292536][ T8573] bridge_slave_1: entered allmulticast mode [ 224.300403][ T8573] bridge_slave_1: entered promiscuous mode [ 224.322934][ T8664] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 224.371965][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.386360][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.405790][ T8561] bridge_slave_0: entered allmulticast mode [ 224.418033][ T8561] bridge_slave_0: entered promiscuous mode [ 224.452061][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.482021][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.497183][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.510658][ T8561] bridge_slave_1: entered allmulticast mode [ 224.521939][ T8673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.667'. [ 224.527956][ T8561] bridge_slave_1: entered promiscuous mode [ 224.569256][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.617364][ T8561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.698951][ T8677] netlink: 84 bytes leftover after parsing attributes in process `syz.1.669'. [ 224.714505][ T8561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.764077][ T8573] team0: Port device team_slave_0 added [ 224.890733][ T8573] team0: Port device team_slave_1 added [ 224.897207][ T11] bridge_slave_1: left allmulticast mode [ 224.902891][ T11] bridge_slave_1: left promiscuous mode [ 224.919025][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.929634][ T25] IPVS: starting estimator thread 0... [ 224.936824][ T11] bridge_slave_0: left allmulticast mode [ 224.949552][ T11] bridge_slave_0: left promiscuous mode [ 224.958163][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.017995][ T8688] IPVS: using max 23 ests per chain, 55200 per kthread [ 225.039107][ T5865] Bluetooth: hci1: command tx timeout [ 225.486116][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.496742][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.507625][ T11] bond0 (unregistering): Released all slaves [ 225.546074][ T8693] tipc: Started in network mode [ 225.551099][ T8693] tipc: Node identity ac1414aa, cluster identity 4711 [ 225.571188][ T8693] tipc: Enabling of bearer rejected, failed to enable media [ 225.690838][ T8561] team0: Port device team_slave_0 added [ 225.704244][ T8561] team0: Port device team_slave_1 added [ 225.710908][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.718400][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.745365][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.827622][ T5865] Bluetooth: hci0: command 0x041b tx timeout [ 227.110734][ T5865] Bluetooth: hci1: command tx timeout [ 227.381730][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.389086][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.415693][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.451017][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.465018][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.500566][ T8561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.620452][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.632126][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.662662][ T8561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.763147][ T8573] hsr_slave_0: entered promiscuous mode [ 227.793147][ T8573] hsr_slave_1: entered promiscuous mode [ 227.827963][ T8573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.835779][ T8573] Cannot create hsr debugfs directory [ 227.875702][ T8561] hsr_slave_0: entered promiscuous mode [ 227.907498][ T8561] hsr_slave_1: entered promiscuous mode [ 227.916972][ T5865] Bluetooth: hci0: command 0x041b tx timeout [ 227.926773][ T8561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.942802][ T8561] Cannot create hsr debugfs directory [ 228.021388][ T11] hsr_slave_0: left promiscuous mode [ 228.030993][ T11] hsr_slave_1: left promiscuous mode [ 228.038570][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.046049][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.058357][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.065923][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.123868][ T11] veth1_macvtap: left promiscuous mode [ 228.129754][ T11] veth0_macvtap: left promiscuous mode [ 228.135512][ T11] veth1_vlan: left promiscuous mode [ 228.141531][ T11] veth0_vlan: left promiscuous mode [ 228.223219][ T8738] trusted_key: syz.3.682 sent an empty control message without MSG_MORE. [ 228.590670][ T11] team0 (unregistering): Port device team_slave_1 removed [ 228.631440][ T11] team0 (unregistering): Port device team_slave_0 removed [ 228.995316][ T8724] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 229.003656][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 229.174328][ T8742] netlink: 52 bytes leftover after parsing attributes in process `syz.1.684'. [ 229.195342][ T5865] Bluetooth: hci1: command tx timeout [ 229.197338][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.684'. [ 229.228873][ T8743] netdevsim netdevsim3: Direct firmware load for . [ 229.228873][ T8743] failed with error -2 [ 229.239845][ T8743] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 229.239845][ T8743] [ 229.442675][ T8742] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.453491][ T8742] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.575412][ T8742] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.586116][ T8742] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.616606][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 229.630096][ T8746] netlink: 56 bytes leftover after parsing attributes in process `syz.2.685'. [ 229.680881][ T8742] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.691342][ T8742] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.853863][ T8573] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.869050][ T8573] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.884185][ T8573] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.895535][ T8573] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.956359][ T8742] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.966404][ T8742] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.991200][ T5865] Bluetooth: hci0: command 0x041b tx timeout [ 230.053253][ T8742] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.077091][ T8742] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.144373][ T8742] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.179757][ T8742] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.229131][ T8742] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.253356][ T8742] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.385140][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.447378][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 230.503231][ T8573] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.585243][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.592458][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.636363][ T8561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.659672][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.666848][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.688949][ T8561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.724730][ T8561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.801332][ T8561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.045582][ T8796] netlink: 'syz.1.704': attribute type 1 has an invalid length. [ 231.070141][ T8561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.079925][ T8796] netlink: 224 bytes leftover after parsing attributes in process `syz.1.704'. [ 231.111642][ T8798] IPv6: sit1: Disabled Multicast RS [ 231.129371][ T8561] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.178488][ T8796] veth0_vlan: entered allmulticast mode [ 231.224190][ T8804] veth0_vlan: left promiscuous mode [ 231.249927][ T8804] veth0_vlan: entered promiscuous mode [ 231.283273][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.290453][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.313188][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.320423][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.435612][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.880325][ T8561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.910142][ T8573] veth0_vlan: entered promiscuous mode [ 231.930964][ T8573] veth1_vlan: entered promiscuous mode [ 231.992033][ T8573] veth0_macvtap: entered promiscuous mode [ 232.016372][ T8573] veth1_macvtap: entered promiscuous mode [ 232.036268][ T8561] veth0_vlan: entered promiscuous mode [ 232.061152][ T8561] veth1_vlan: entered promiscuous mode [ 232.067027][ T5865] Bluetooth: hci0: command 0x041b tx timeout [ 232.088736][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.104655][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.125941][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.138408][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.167195][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.184180][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.196457][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.227235][ T1338] wlan1: Trigger new scan to find an IBSS to join [ 232.246158][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.263238][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.273777][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.285151][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.295301][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.305994][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.323173][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.349169][ T8573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.365129][ T8573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.375788][ T8573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.395182][ T8573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.414755][ T8561] veth0_macvtap: entered promiscuous mode [ 232.441925][ T8561] veth1_macvtap: entered promiscuous mode [ 232.524097][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.540974][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.555652][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.600915][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.611333][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.621996][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.632148][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.642654][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.653574][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.668463][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.679136][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.689057][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.690179][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 232.699662][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.699685][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.699702][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.699727][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.699741][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.701047][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.774210][ T8561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.783088][ T8561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.792185][ T8561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.801150][ T8561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.819401][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.829619][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.843121][ T8840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.723'. [ 232.911159][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.946308][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.993493][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.036997][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.086055][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.104447][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.394450][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.533506][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.616617][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.800651][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.952767][ T53] bridge_slave_1: left allmulticast mode [ 233.964080][ T53] bridge_slave_1: left promiscuous mode [ 233.973939][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.027796][ T53] bridge_slave_0: left allmulticast mode [ 234.033480][ T53] bridge_slave_0: left promiscuous mode [ 234.042112][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.242083][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.268607][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.276527][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.292029][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.303359][ T5154] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 234.313121][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.492487][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.503229][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.513501][ T53] bond0 (unregistering): Released all slaves [ 234.665572][ T8865] chnl_net:caif_netlink_parms(): no params data found [ 234.750514][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.762251][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.769564][ T8865] bridge_slave_0: entered allmulticast mode [ 234.776157][ T8865] bridge_slave_0: entered promiscuous mode [ 234.784864][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.792526][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.802840][ T8865] bridge_slave_1: entered allmulticast mode [ 234.810306][ T8865] bridge_slave_1: entered promiscuous mode [ 234.873427][ T53] hsr_slave_0: left promiscuous mode [ 234.886651][ T53] hsr_slave_1: left promiscuous mode [ 234.893032][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.903463][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.928081][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.943881][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.996133][ T53] veth1_macvtap: left promiscuous mode [ 235.005899][ T53] veth0_macvtap: left promiscuous mode [ 235.021145][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.032081][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.041055][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.050196][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.050607][ T53] veth1_vlan: left promiscuous mode [ 235.063524][ T5865] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.071069][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.091009][ T53] veth0_vlan: left promiscuous mode [ 235.490192][ T53] team0 (unregistering): Port device team_slave_1 removed [ 235.528174][ T53] team0 (unregistering): Port device team_slave_0 removed [ 235.905412][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.997565][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.104640][ T8865] team0: Port device team_slave_0 added [ 236.125029][ T8865] team0: Port device team_slave_1 added [ 236.182562][ T8894] tap0: tun_chr_ioctl cmd 1074025677 [ 236.197199][ T8894] tap0: linktype set to 0 [ 236.258660][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.280553][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.316488][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.371637][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.394290][ T5865] Bluetooth: hci0: command tx timeout [ 236.404774][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.424939][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.728'. [ 236.431873][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.481934][ T8906] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 236.551194][ T8865] hsr_slave_0: entered promiscuous mode [ 236.596189][ T8915] netlink: 96 bytes leftover after parsing attributes in process `syz.3.730'. [ 236.607172][ T8865] hsr_slave_1: entered promiscuous mode [ 236.621781][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 236.631510][ T8919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.731'. [ 236.650688][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.680824][ T8865] Cannot create hsr debugfs directory [ 236.825646][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'. [ 236.841160][ T8921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.732'. [ 236.854821][ T8881] chnl_net:caif_netlink_parms(): no params data found [ 236.970582][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.107578][ T8944] netlink: 165 bytes leftover after parsing attributes in process `syz.1.739'. [ 237.118674][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.192660][ T8949] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 237.195130][ T5865] Bluetooth: hci1: command tx timeout [ 237.214510][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.364739][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.535717][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.746'. [ 238.467979][ T5865] Bluetooth: hci0: command tx timeout [ 239.135233][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.142627][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.151417][ T8881] bridge_slave_0: entered allmulticast mode [ 239.159465][ T8881] bridge_slave_0: entered promiscuous mode [ 239.177806][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 239.215861][ T8971] wg2: entered promiscuous mode [ 239.233163][ T8971] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 239.267216][ T5865] Bluetooth: hci1: command tx timeout [ 239.296165][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.324913][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.357224][ T8881] bridge_slave_1: entered allmulticast mode [ 239.383671][ T8881] bridge_slave_1: entered promiscuous mode [ 239.583464][ T8989] FAULT_INJECTION: forcing a failure. [ 239.583464][ T8989] name failslab, interval 1, probability 0, space 0, times 0 [ 239.607042][ T8989] CPU: 1 UID: 0 PID: 8989 Comm: syz.3.754 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 239.617693][ T8989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 239.624877][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 239.627752][ T8989] Call Trace: [ 239.627822][ T8989] [ 239.627833][ T8989] dump_stack_lvl+0x241/0x360 [ 239.627865][ T8989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.627883][ T8989] ? __pfx__printk+0x10/0x10 [ 239.627912][ T8989] should_fail_ex+0x3b0/0x4e0 [ 239.627940][ T8989] should_failslab+0xac/0x100 [ 239.627960][ T8989] ? sctp_add_bind_addr+0x89/0x3a0 [ 239.627978][ T8989] __kmalloc_cache_noprof+0x6c/0x2c0 [ 239.628006][ T8989] sctp_add_bind_addr+0x89/0x3a0 [ 239.682054][ T8989] sctp_copy_local_addr_list+0x311/0x500 [ 239.687716][ T8989] ? sctp_copy_local_addr_list+0xab/0x500 [ 239.693457][ T8989] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 239.699647][ T8989] ? sctp_v4_is_any+0x35/0x60 [ 239.704360][ T8989] sctp_bind_addr_copy+0x176/0x3b0 [ 239.709476][ T8989] sctp_connect_new_asoc+0x2f3/0x6c0 [ 239.715192][ T8989] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 239.720996][ T8989] ? sctp_sendmsg+0xbb9/0x3520 [ 239.725756][ T8989] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 239.731557][ T8989] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 239.737115][ T8989] sctp_sendmsg+0x219a/0x3520 [ 239.741832][ T8989] ? aa_sk_perm+0x96d/0xab0 [ 239.746351][ T8989] ? __pfx_sctp_sendmsg+0x10/0x10 [ 239.751376][ T8989] ? __pfx_aa_sk_perm+0x10/0x10 [ 239.756244][ T8989] ? inet_sendmsg+0x330/0x390 [ 239.760917][ T8989] __sock_sendmsg+0x1a6/0x270 [ 239.765586][ T8989] ____sys_sendmsg+0x52a/0x7e0 [ 239.770363][ T8989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.775652][ T8989] __sys_sendmmsg+0x3ab/0x730 [ 239.780334][ T8989] ? __pfx___sys_sendmmsg+0x10/0x10 [ 239.785535][ T8989] ? __pfx_lock_release+0x10/0x10 [ 239.790550][ T8989] ? kstrtouint_from_user+0x128/0x190 [ 239.795957][ T8989] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 239.801881][ T8989] ? ksys_write+0x229/0x2b0 [ 239.806422][ T8989] ? __pfx_lock_release+0x10/0x10 [ 239.811486][ T8989] ? vfs_write+0x730/0xd30 [ 239.815937][ T8989] ? __mutex_unlock_slowpath+0x21d/0x750 [ 239.821612][ T8989] ? __fget_files+0x3f3/0x470 [ 239.826314][ T8989] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.832400][ T8989] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.838770][ T8989] ? do_syscall_64+0x100/0x230 [ 239.843568][ T8989] __x64_sys_sendmmsg+0xa0/0xb0 [ 239.848458][ T8989] do_syscall_64+0xf3/0x230 [ 239.853001][ T8989] ? clear_bhb_loop+0x35/0x90 [ 239.857717][ T8989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.863640][ T8989] RIP: 0033:0x7ff49b17e719 [ 239.868065][ T8989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.887713][ T8989] RSP: 002b:00007ff49bf9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 239.896131][ T8989] RAX: ffffffffffffffda RBX: 00007ff49b335f80 RCX: 00007ff49b17e719 [ 239.904103][ T8989] RDX: 0000000000000001 RSI: 00000000200049c0 RDI: 0000000000000003 [ 239.912077][ T8989] RBP: 00007ff49bf9c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.920053][ T8989] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 239.928028][ T8989] R13: 0000000000000000 R14: 00007ff49b335f80 R15: 00007ffd9be5bdf8 [ 239.936005][ T8989] [ 240.040320][ T8881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.134648][ T8881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.171498][ T53] bridge_slave_1: left allmulticast mode [ 240.182263][ T53] bridge_slave_1: left promiscuous mode [ 240.195048][ T9004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 240.205867][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.257783][ T53] bridge_slave_0: left allmulticast mode [ 240.263493][ T53] bridge_slave_0: left promiscuous mode [ 240.277614][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.491186][ T9018] netlink: 'syz.3.763': attribute type 6 has an invalid length. [ 240.547854][ T5865] Bluetooth: hci0: command 0x040f tx timeout [ 240.854483][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.866005][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.876701][ T53] bond0 (unregistering): Released all slaves [ 240.913445][ T9026] batadv0: entered promiscuous mode [ 240.923274][ T9026] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 240.931793][ T9026] batadv0: left promiscuous mode [ 241.003155][ T8881] team0: Port device team_slave_0 added [ 241.013014][ T8881] team0: Port device team_slave_1 added [ 241.113552][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.121509][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.149375][ T8881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.200940][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.223927][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.250660][ T8881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.333173][ T53] hsr_slave_0: left promiscuous mode [ 241.347919][ T5865] Bluetooth: hci1: command tx timeout [ 241.353422][ T53] hsr_slave_1: left promiscuous mode [ 241.381673][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.389906][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.405879][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.413781][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.439747][ T53] veth1_macvtap: left promiscuous mode [ 241.445481][ T53] veth0_macvtap: left promiscuous mode [ 241.451432][ T53] veth1_vlan: left promiscuous mode [ 241.457121][ T53] veth0_vlan: left promiscuous mode [ 241.874699][ T53] team0 (unregistering): Port device team_slave_1 removed [ 241.919988][ T53] team0 (unregistering): Port device team_slave_0 removed [ 242.332205][ T8865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.405856][ T8865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.442200][ T8865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.504580][ T8865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.539652][ T8881] hsr_slave_0: entered promiscuous mode [ 242.563765][ T8881] hsr_slave_1: entered promiscuous mode [ 242.578430][ T8881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.597890][ T8881] Cannot create hsr debugfs directory [ 242.603941][ T9050] __nla_validate_parse: 1 callbacks suppressed [ 242.603958][ T9050] netlink: 5556 bytes leftover after parsing attributes in process `syz.1.773'. [ 242.630210][ T5865] Bluetooth: hci0: command 0x040f tx timeout [ 242.778314][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.775'. [ 243.126744][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 243.145602][ T9072] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 243.378290][ T9083] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 243.429631][ T5865] Bluetooth: hci1: command tx timeout [ 243.554658][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.577282][ T8865] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.591581][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 243.604704][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.611863][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.619287][ T9091] netlink: 48 bytes leftover after parsing attributes in process `syz.1.785'. [ 243.685920][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.693098][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.740350][ T8881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.775151][ T8881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.799742][ T8881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.819861][ T8881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.015880][ T8881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.044551][ T8881] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.059391][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.066551][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.088710][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.096024][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.204956][ T8865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.485549][ T9132] FAULT_INJECTION: forcing a failure. [ 244.485549][ T9132] name failslab, interval 1, probability 0, space 0, times 0 [ 244.521194][ T9132] CPU: 1 UID: 0 PID: 9132 Comm: syz.3.795 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 244.531847][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 244.538255][ T8881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.541917][ T9132] Call Trace: [ 244.541929][ T9132] [ 244.554929][ T9132] dump_stack_lvl+0x241/0x360 [ 244.559645][ T9132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.564881][ T9132] ? __pfx__printk+0x10/0x10 [ 244.569518][ T9132] should_fail_ex+0x3b0/0x4e0 [ 244.574214][ T9132] should_failslab+0xac/0x100 [ 244.578950][ T9132] ? sctp_add_bind_addr+0x89/0x3a0 [ 244.584077][ T9132] __kmalloc_cache_noprof+0x6c/0x2c0 [ 244.589387][ T9132] sctp_add_bind_addr+0x89/0x3a0 [ 244.594341][ T9132] sctp_copy_local_addr_list+0x311/0x500 [ 244.599985][ T9132] ? sctp_copy_local_addr_list+0xab/0x500 [ 244.605703][ T9132] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 244.611872][ T9132] ? sctp_v4_is_any+0x35/0x60 [ 244.616550][ T9132] sctp_bind_addr_copy+0x176/0x3b0 [ 244.621665][ T9132] sctp_connect_new_asoc+0x2f3/0x6c0 [ 244.626955][ T9132] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 244.632767][ T9132] ? sctp_sendmsg+0xbb9/0x3520 [ 244.637536][ T9132] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 244.643338][ T9132] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 244.648880][ T9132] sctp_sendmsg+0x219a/0x3520 [ 244.653564][ T9132] ? aa_sk_perm+0x96d/0xab0 [ 244.658064][ T9132] ? __pfx_sctp_sendmsg+0x10/0x10 [ 244.663109][ T9132] ? __pfx_aa_sk_perm+0x10/0x10 [ 244.667964][ T9132] ? inet_sendmsg+0x330/0x390 [ 244.672646][ T9132] __sock_sendmsg+0x1a6/0x270 [ 244.677330][ T9132] ____sys_sendmsg+0x52a/0x7e0 [ 244.682105][ T9132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.687559][ T9132] __sys_sendmmsg+0x3ab/0x730 [ 244.692278][ T9132] ? __pfx___sys_sendmmsg+0x10/0x10 [ 244.697503][ T9132] ? __pfx_lock_release+0x10/0x10 [ 244.702531][ T9132] ? kstrtouint_from_user+0x128/0x190 [ 244.707924][ T9132] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 244.713817][ T9132] ? ksys_write+0x229/0x2b0 [ 244.718318][ T9132] ? __pfx_lock_release+0x10/0x10 [ 244.723444][ T9132] ? vfs_write+0x730/0xd30 [ 244.727871][ T9132] ? __mutex_unlock_slowpath+0x21d/0x750 [ 244.733516][ T9132] ? __fget_files+0x3f3/0x470 [ 244.738205][ T9132] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 244.744189][ T9132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.750651][ T9132] ? do_syscall_64+0x100/0x230 [ 244.755443][ T9132] __x64_sys_sendmmsg+0xa0/0xb0 [ 244.760316][ T9132] do_syscall_64+0xf3/0x230 [ 244.764831][ T9132] ? clear_bhb_loop+0x35/0x90 [ 244.769538][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.775456][ T9132] RIP: 0033:0x7ff49b17e719 [ 244.779881][ T9132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.799500][ T9132] RSP: 002b:00007ff49bf9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 244.807914][ T9132] RAX: ffffffffffffffda RBX: 00007ff49b335f80 RCX: 00007ff49b17e719 [ 244.815988][ T9132] RDX: 0000000000000001 RSI: 00000000200049c0 RDI: 0000000000000003 [ 244.823965][ T9132] RBP: 00007ff49bf9c090 R08: 0000000000000000 R09: 0000000000000000 [ 244.831936][ T9132] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 244.839901][ T9132] R13: 0000000000000000 R14: 00007ff49b335f80 R15: 00007ffd9be5bdf8 [ 244.847880][ T9132] [ 244.895329][ T5865] Bluetooth: hci0: command 0x040f tx timeout [ 244.949362][ T9137] netlink: 344 bytes leftover after parsing attributes in process `syz.2.796'. [ 244.968355][ T8881] veth0_vlan: entered promiscuous mode [ 244.979112][ T8865] veth0_vlan: entered promiscuous mode [ 244.990719][ T8865] veth1_vlan: entered promiscuous mode [ 245.006687][ T8881] veth1_vlan: entered promiscuous mode [ 245.041212][ T8865] veth0_macvtap: entered promiscuous mode [ 245.060842][ T8865] veth1_macvtap: entered promiscuous mode [ 245.067488][ T9137] netlink: 455 bytes leftover after parsing attributes in process `syz.2.796'. [ 245.103296][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.123580][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.135916][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.147154][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.157412][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.167979][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.182060][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.252714][ T8881] veth0_macvtap: entered promiscuous mode [ 245.266254][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.293526][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.308039][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.319126][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.329567][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.357321][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.382343][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.427421][ T8881] veth1_macvtap: entered promiscuous mode [ 245.442704][ T8865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.452285][ T8865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.462043][ T8865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.472516][ T8865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.502654][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.526046][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.537232][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.548162][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.558494][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.570002][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.580456][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.591413][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.603448][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.666079][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.687284][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.704876][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.718997][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.730769][ T9170] FAULT_INJECTION: forcing a failure. [ 245.730769][ T9170] name failslab, interval 1, probability 0, space 0, times 0 [ 245.743524][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.754321][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.764794][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.1.807 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 245.775420][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 245.785505][ T9170] Call Trace: [ 245.788812][ T9170] [ 245.791753][ T9170] dump_stack_lvl+0x241/0x360 [ 245.796433][ T9170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.801639][ T9170] ? __pfx__printk+0x10/0x10 [ 245.806283][ T9170] should_fail_ex+0x3b0/0x4e0 [ 245.810993][ T9170] should_failslab+0xac/0x100 [ 245.815698][ T9170] ? sctp_add_bind_addr+0x89/0x3a0 [ 245.820833][ T9170] __kmalloc_cache_noprof+0x6c/0x2c0 [ 245.826164][ T9170] sctp_add_bind_addr+0x89/0x3a0 [ 245.831136][ T9170] sctp_copy_local_addr_list+0x311/0x500 [ 245.836802][ T9170] ? sctp_copy_local_addr_list+0xab/0x500 [ 245.842553][ T9170] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 245.848740][ T9170] ? sctp_v4_is_any+0x35/0x60 [ 245.853506][ T9170] sctp_bind_addr_copy+0x176/0x3b0 [ 245.858697][ T9170] sctp_connect_new_asoc+0x2f3/0x6c0 [ 245.864023][ T9170] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 245.869862][ T9170] ? sctp_sendmsg+0xbb9/0x3520 [ 245.874676][ T9170] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 245.880581][ T9170] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 245.886153][ T9170] sctp_sendmsg+0x219a/0x3520 [ 245.890839][ T9170] ? aa_sk_perm+0x96d/0xab0 [ 245.895337][ T9170] ? __pfx_sctp_sendmsg+0x10/0x10 [ 245.900378][ T9170] ? __pfx_aa_sk_perm+0x10/0x10 [ 245.905245][ T9170] ? inet_sendmsg+0x330/0x390 [ 245.909922][ T9170] __sock_sendmsg+0x1a6/0x270 [ 245.914599][ T9170] ____sys_sendmsg+0x52a/0x7e0 [ 245.919395][ T9170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.924735][ T9170] __sys_sendmmsg+0x3ab/0x730 [ 245.929461][ T9170] ? __pfx___sys_sendmmsg+0x10/0x10 [ 245.934664][ T9170] ? __pfx_lock_release+0x10/0x10 [ 245.939713][ T9170] ? kstrtouint_from_user+0x128/0x190 [ 245.945124][ T9170] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 245.951022][ T9170] ? ksys_write+0x229/0x2b0 [ 245.955520][ T9170] ? __pfx_lock_release+0x10/0x10 [ 245.960564][ T9170] ? vfs_write+0x730/0xd30 [ 245.964978][ T9170] ? __mutex_unlock_slowpath+0x21d/0x750 [ 245.970612][ T9170] ? __fget_files+0x3f3/0x470 [ 245.975292][ T9170] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.981297][ T9170] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.987658][ T9170] ? do_syscall_64+0x100/0x230 [ 245.992442][ T9170] __x64_sys_sendmmsg+0xa0/0xb0 [ 245.997358][ T9170] do_syscall_64+0xf3/0x230 [ 246.001909][ T9170] ? clear_bhb_loop+0x35/0x90 [ 246.006603][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.012517][ T9170] RIP: 0033:0x7fa73237e719 [ 246.016940][ T9170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.036589][ T9170] RSP: 002b:00007fa733218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.045036][ T9170] RAX: ffffffffffffffda RBX: 00007fa732535f80 RCX: 00007fa73237e719 [ 246.053034][ T9170] RDX: 0000000000000001 RSI: 00000000200049c0 RDI: 0000000000000003 [ 246.061021][ T9170] RBP: 00007fa733218090 R08: 0000000000000000 R09: 0000000000000000 [ 246.069029][ T9170] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 246.077037][ T9170] R13: 0000000000000000 R14: 00007fa732535f80 R15: 00007fff754b1b18 [ 246.085068][ T9170] [ 246.092501][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.103340][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.114390][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.124917][ T8881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.134095][ T8881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.143067][ T8881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.152052][ T8881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.280494][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.322084][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.392932][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.401660][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.430018][ T9191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.468464][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.476330][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.498101][ T5110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.519929][ T5110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.903917][ T9211] tipc: Started in network mode [ 246.909847][ T9211] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 246.919239][ T9211] tipc: Enabling of bearer rejected, failed to enable media [ 247.370481][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.541963][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.769715][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.778859][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.786834][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.796588][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.807235][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.814601][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.917605][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 247.931611][ T9237] chnl_net:caif_netlink_parms(): no params data found [ 247.980377][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.988118][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.995342][ T9237] bridge_slave_0: entered allmulticast mode [ 248.013609][ T9237] bridge_slave_0: entered promiscuous mode [ 248.036149][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.050225][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.059929][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.069560][ T9237] bridge_slave_1: entered allmulticast mode [ 248.076170][ T9237] bridge_slave_1: entered promiscuous mode [ 248.100507][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.111915][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.139712][ T9237] team0: Port device team_slave_0 added [ 248.147421][ T9237] team0: Port device team_slave_1 added [ 248.171938][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.179452][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.206044][ T9237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.219171][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.226138][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.261682][ T9237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.290887][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.328708][ T9237] hsr_slave_0: entered promiscuous mode [ 248.334917][ T9237] hsr_slave_1: entered promiscuous mode [ 248.341198][ T9237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.349053][ T9237] Cannot create hsr debugfs directory [ 248.685043][ T53] bridge_slave_1: left allmulticast mode [ 248.702386][ T53] bridge_slave_1: left promiscuous mode [ 248.717156][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.746630][ T53] bridge_slave_0: left allmulticast mode [ 248.757109][ T53] bridge_slave_0: left promiscuous mode [ 248.762874][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.867841][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.888504][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.900146][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.908297][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.924252][ T9274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.828'. [ 248.935117][ T5862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 248.947171][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.346111][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.361669][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.372494][ T53] bond0 (unregistering): Released all slaves [ 249.503170][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 249.907133][ T5865] Bluetooth: hci0: command tx timeout [ 249.965726][ T53] hsr_slave_0: left promiscuous mode [ 249.972457][ T53] hsr_slave_1: left promiscuous mode [ 249.973212][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 249.988657][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.996255][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.012470][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.022117][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.057837][ T53] veth1_macvtap: left promiscuous mode [ 250.063492][ T53] veth0_macvtap: left promiscuous mode [ 250.074852][ T53] veth1_vlan: left promiscuous mode [ 250.080506][ T53] veth0_vlan: left promiscuous mode [ 250.111897][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 250.500565][ T53] team0 (unregistering): Port device team_slave_1 removed [ 250.544623][ T53] team0 (unregistering): Port device team_slave_0 removed [ 251.028084][ T5154] Bluetooth: hci1: command tx timeout [ 251.110393][ T9308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.119388][ T9308] bond0: (slave bond2): Enslaving as an active interface with an up link [ 251.195184][ T9237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.199036][ T9316] unsupported nla_type 40 [ 251.233295][ T9237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.283714][ T9237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.339908][ T9271] chnl_net:caif_netlink_parms(): no params data found [ 251.356224][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.843'. [ 251.380203][ T9237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.618391][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.633441][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.650398][ T9271] bridge_slave_0: entered allmulticast mode [ 251.661787][ T9347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.847'. [ 251.667897][ T9271] bridge_slave_0: entered promiscuous mode [ 251.715018][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.743403][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.770029][ T9271] bridge_slave_1: entered allmulticast mode [ 251.785760][ T9271] bridge_slave_1: entered promiscuous mode [ 251.861261][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.922028][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.935993][ T9357] netlink: 'syz.3.851': attribute type 6 has an invalid length. [ 251.954400][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.987326][ T5154] Bluetooth: hci0: command tx timeout [ 252.058932][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.095054][ T9271] team0: Port device team_slave_0 added [ 252.105075][ T9271] team0: Port device team_slave_1 added [ 252.156815][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.201926][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.215123][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.250100][ T9271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.274139][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.286047][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.314889][ T9271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.356389][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.421890][ T9271] hsr_slave_0: entered promiscuous mode [ 252.430116][ T9271] hsr_slave_1: entered promiscuous mode [ 252.436387][ T9271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.451932][ T9271] Cannot create hsr debugfs directory [ 252.556703][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.640666][ T53] bridge_slave_1: left allmulticast mode [ 252.646765][ T53] bridge_slave_1: left promiscuous mode [ 252.654939][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.664154][ T53] bridge_slave_0: left allmulticast mode [ 252.670715][ T53] bridge_slave_0: left promiscuous mode [ 252.676956][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.028082][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 253.034813][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 253.107679][ T5865] Bluetooth: hci1: command tx timeout [ 253.217233][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.240556][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.265094][ T53] bond0 (unregistering): Released all slaves [ 253.391324][ T9237] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.482088][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.856'. [ 253.613344][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.620548][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.774366][ T9237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.784882][ T9237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.803119][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.810340][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.836757][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 254.044872][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 254.073720][ T5865] Bluetooth: hci0: command tx timeout [ 254.141714][ T53] hsr_slave_0: left promiscuous mode [ 254.170035][ T53] hsr_slave_1: left promiscuous mode [ 254.190177][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.198048][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.216182][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.234561][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.280642][ T53] veth1_macvtap: left promiscuous mode [ 254.286561][ T53] veth0_macvtap: left promiscuous mode [ 254.300200][ T53] veth1_vlan: left promiscuous mode [ 254.305959][ T53] veth0_vlan: left promiscuous mode [ 254.313260][ T9400] netlink: 'syz.1.862': attribute type 39 has an invalid length. [ 254.865061][ T53] team0 (unregistering): Port device team_slave_1 removed [ 254.908465][ T53] team0 (unregistering): Port device team_slave_0 removed [ 255.191056][ T5865] Bluetooth: hci1: command tx timeout [ 255.549106][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.562791][ T9271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.590537][ T9271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.608658][ T9271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.632662][ T9271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.733924][ T9237] veth0_vlan: entered promiscuous mode [ 255.834381][ T9237] veth1_vlan: entered promiscuous mode [ 255.894423][ T9237] veth0_macvtap: entered promiscuous mode [ 255.912491][ T9237] veth1_macvtap: entered promiscuous mode [ 255.941944][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.990349][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.997818][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.868'. [ 256.010944][ T9423] netlink: 248 bytes leftover after parsing attributes in process `syz.2.868'. [ 256.016592][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.039122][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.052884][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.065001][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.085362][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.092064][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.102530][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.113203][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.125068][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.136030][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.147032][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.158208][ T5862] Bluetooth: hci0: command tx timeout [ 256.164329][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.174956][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.185203][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.196035][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.208149][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.223724][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.230925][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.257435][ T9237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.273243][ T9237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.290553][ T9237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.299941][ T9237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.309635][ T9427] FAULT_INJECTION: forcing a failure. [ 256.309635][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 256.332269][ T9427] CPU: 1 UID: 0 PID: 9427 Comm: syz.2.869 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 256.342911][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 256.352983][ T9427] Call Trace: [ 256.356259][ T9427] [ 256.359194][ T9427] dump_stack_lvl+0x241/0x360 [ 256.363879][ T9427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.369081][ T9427] ? __pfx__printk+0x10/0x10 [ 256.373680][ T9427] should_fail_ex+0x3b0/0x4e0 [ 256.378794][ T9427] should_failslab+0xac/0x100 [ 256.383470][ T9427] ? sctp_add_bind_addr+0x89/0x3a0 [ 256.388582][ T9427] __kmalloc_cache_noprof+0x6c/0x2c0 [ 256.393878][ T9427] sctp_add_bind_addr+0x89/0x3a0 [ 256.398845][ T9427] sctp_copy_local_addr_list+0x311/0x500 [ 256.404481][ T9427] ? sctp_copy_local_addr_list+0xab/0x500 [ 256.410205][ T9427] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 256.416358][ T9427] ? sctp_v4_is_any+0x35/0x60 [ 256.421034][ T9427] sctp_bind_addr_copy+0x176/0x3b0 [ 256.426147][ T9427] sctp_connect_new_asoc+0x2f3/0x6c0 [ 256.431976][ T9427] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 256.437794][ T9427] ? sctp_sendmsg+0xbb9/0x3520 [ 256.442577][ T9427] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 256.448393][ T9427] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 256.453945][ T9427] sctp_sendmsg+0x219a/0x3520 [ 256.458638][ T9427] ? aa_sk_perm+0x96d/0xab0 [ 256.463160][ T9427] ? __pfx_sctp_sendmsg+0x10/0x10 [ 256.468207][ T9427] ? __pfx_aa_sk_perm+0x10/0x10 [ 256.473074][ T9427] ? inet_sendmsg+0x330/0x390 [ 256.477772][ T9427] __sock_sendmsg+0x1a6/0x270 [ 256.482477][ T9427] ____sys_sendmsg+0x52a/0x7e0 [ 256.487290][ T9427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.492597][ T9427] __sys_sendmmsg+0x3ab/0x730 [ 256.497288][ T9427] ? __pfx___sys_sendmmsg+0x10/0x10 [ 256.502498][ T9427] ? __pfx_lock_release+0x10/0x10 [ 256.507526][ T9427] ? kstrtouint_from_user+0x128/0x190 [ 256.512915][ T9427] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 256.518823][ T9427] ? ksys_write+0x229/0x2b0 [ 256.523334][ T9427] ? __pfx_lock_release+0x10/0x10 [ 256.528407][ T9427] ? vfs_write+0x730/0xd30 [ 256.532839][ T9427] ? __mutex_unlock_slowpath+0x21d/0x750 [ 256.538480][ T9427] ? __fget_files+0x3f3/0x470 [ 256.543168][ T9427] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.549162][ T9427] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.555523][ T9427] ? do_syscall_64+0x100/0x230 [ 256.560288][ T9427] __x64_sys_sendmmsg+0xa0/0xb0 [ 256.565159][ T9427] do_syscall_64+0xf3/0x230 [ 256.569664][ T9427] ? clear_bhb_loop+0x35/0x90 [ 256.574342][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.580236][ T9427] RIP: 0033:0x7f71d317e719 [ 256.584664][ T9427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.604448][ T9427] RSP: 002b:00007f71d3f19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 256.612866][ T9427] RAX: ffffffffffffffda RBX: 00007f71d3335f80 RCX: 00007f71d317e719 [ 256.620834][ T9427] RDX: 0000000000000001 RSI: 00000000200049c0 RDI: 0000000000000003 [ 256.628802][ T9427] RBP: 00007f71d3f19090 R08: 0000000000000000 R09: 0000000000000000 [ 256.636770][ T9427] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 256.644740][ T9427] R13: 0000000000000000 R14: 00007f71d3335f80 R15: 00007ffded8d1f88 [ 256.652811][ T9427] [ 256.736774][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.743911][ T5110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.931942][ T9271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.950074][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 256.993615][ T9271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.132456][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.141084][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.268057][ T5862] Bluetooth: hci1: command tx timeout [ 257.300958][ T5110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.309475][ T5110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.366139][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 257.392466][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.405149][ T9459] netlink: 48 bytes leftover after parsing attributes in process `syz.2.879'. [ 257.424995][ T9462] netlink: 'syz.1.878': attribute type 4 has an invalid length. [ 257.639719][ T9473] netlink: 'syz.2.882': attribute type 4 has an invalid length. [ 257.681347][ T9473] netlink: 'syz.2.882': attribute type 4 has an invalid length. [ 257.696291][ T9473] netlink: 52 bytes leftover after parsing attributes in process `syz.2.882'. [ 257.782348][ T9477] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 257.880528][ T1338] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.919762][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.942032][ T9271] veth0_vlan: entered promiscuous mode [ 257.948097][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.975810][ T1338] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.992549][ T9477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 258.020258][ T9271] veth1_vlan: entered promiscuous mode [ 258.069767][ T9271] veth0_macvtap: entered promiscuous mode [ 258.086481][ T9271] veth1_macvtap: entered promiscuous mode [ 258.103715][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.114711][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.125366][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.136204][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.147700][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.158197][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.168497][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.179164][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.190214][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.200622][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.211818][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.222178][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.233021][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.243326][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.254319][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.264296][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.274948][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.285544][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.310701][ T1338] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.327953][ T9271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.337049][ T9271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.345928][ T9271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.354657][ T9271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.417465][ T1338] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.445141][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.453383][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.475977][ T5110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.483978][ T5110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.814995][ T1338] bridge_slave_1: left allmulticast mode [ 258.820769][ T1338] bridge_slave_1: left promiscuous mode [ 258.826439][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.836696][ T1338] bridge_slave_0: left allmulticast mode [ 258.842635][ T1338] bridge_slave_0: left promiscuous mode [ 258.848418][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.197468][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.215415][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.227020][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.244350][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.252980][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.268712][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.332675][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.344267][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.355688][ T1338] bond0 (unregistering): Released all slaves [ 259.362016][ T5862] Bluetooth: hci1: command 0x0407 tx timeout [ 259.582387][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.890'. [ 259.895102][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 261.353555][ T5865] Bluetooth: hci0: command tx timeout [ 261.406342][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.436560][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.453596][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.470935][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.479980][ T5862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 261.496397][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.606785][ T9514] vlan2: entered allmulticast mode [ 261.637800][ T9514] macvtap0: entered allmulticast mode [ 261.643207][ T9514] veth0_macvtap: entered allmulticast mode [ 261.687349][ T9514] macvtap0: left allmulticast mode [ 261.692523][ T9514] veth0_macvtap: left allmulticast mode [ 261.725134][ T9520] ------------[ cut here ]------------ [ 261.731027][ T9520] WARNING: CPU: 1 PID: 9520 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 261.740509][ T9520] Modules linked in: [ 261.744439][ T9520] CPU: 1 UID: 0 PID: 9520 Comm: syz.1.893 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 261.755104][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 261.765237][ T9520] RIP: 0010:sk_skb_reason_drop+0x87/0x380 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 261.771028][ T9520] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 0a 3f 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 ba 3a 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 e8 3e 08 f8 85 ed 0f 8e 49 [ 261.790713][ T9520] RSP: 0018:ffffc9000370f078 EFLAGS: 00010283 [ 261.796819][ T9520] RAX: ffffffff898caf56 RBX: 00000000fffbffea RCX: 0000000000040000 [ 261.804897][ T9520] RDX: ffffc90004da1000 RSI: 0000000000003db8 RDI: 0000000000003db9 [ 261.812963][ T9520] RBP: dffffc0000000000 R08: ffffffff898caf46 R09: 1ffff11005ef1584 [ 261.821024][ T9520] R10: dffffc0000000000 R11: ffffed1005ef1585 R12: dffffc0000000000 [ 261.829073][ T9520] R13: ffff88802f78ab40 R14: 00000000ffffffea R15: 0000000000000000 [ 261.837116][ T9520] FS: 00007fa7332186c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 261.846081][ T9520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.852769][ T9520] CR2: 00007f71d33062d8 CR3: 0000000032620000 CR4: 00000000003526f0 [ 261.860822][ T9520] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.868872][ T9520] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.876915][ T9520] Call Trace: [ 261.880220][ T9520] [ 261.883170][ T9520] ? __warn+0x168/0x4e0 [ 261.887481][ T9520] ? sk_skb_reason_drop+0x87/0x380 [ 261.892627][ T9520] ? report_bug+0x2b3/0x500 [ 261.897200][ T9520] ? sk_skb_reason_drop+0x87/0x380 [ 261.902448][ T9520] ? handle_bug+0x60/0x90 [ 261.906810][ T9520] ? exc_invalid_op+0x1a/0x50 [ 261.911591][ T9520] ? asm_exc_invalid_op+0x1a/0x20 [ 261.916694][ T9520] ? sk_skb_reason_drop+0x76/0x380 [ 261.921901][ T9520] ? sk_skb_reason_drop+0x86/0x380 [ 261.927090][ T9520] ? sk_skb_reason_drop+0x87/0x380 [ 261.932241][ T9520] ? sk_skb_reason_drop+0x86/0x380 [ 261.937422][ T9520] ? ip_rcv_finish_core+0x129f/0x1b50 [ 261.942842][ T9520] ip_rcv_finish_core+0xfde/0x1b50 [ 261.948036][ T9520] ip_sublist_rcv+0x3b1/0xab0 [ 261.952755][ T9520] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 261.958021][ T9520] ? skb_orphan+0xae/0xd0 [ 261.962383][ T9520] ? __pfx_ip_rcv_finish+0x10/0x10 [ 261.967560][ T9520] ip_list_rcv+0x42b/0x480 [ 261.972182][ T9520] ? __pfx_ip_list_rcv+0x10/0x10 [ 261.977183][ T9520] ? __pfx_ip_list_rcv+0x10/0x10 [ 261.982138][ T9520] __netif_receive_skb_list_core+0x94e/0x980 [ 261.988175][ T9520] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 261.994870][ T9520] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 262.001424][ T9520] ? read_tsc+0x9/0x20 [ 262.005512][ T9520] ? timekeeping_get_ns+0x2c0/0x420 [ 262.010773][ T9520] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 262.017134][ T9520] netif_receive_skb_list_internal+0xa51/0xe30 [ 262.023303][ T9520] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 262.029660][ T9520] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 262.036338][ T9520] ? __pfx_eth_type_trans+0x10/0x10 [ 262.041596][ T9520] ? __phys_addr+0xba/0x170 [ 262.046134][ T9520] ? build_skb_around+0x111/0x260 [ 262.051238][ T9520] ? __xdp_build_skb_from_frame+0x313/0x650 [ 262.057270][ T9520] netif_receive_skb_list+0x55/0x4b0 [ 262.062551][ T9520] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 262.068050][ T9520] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 262.073968][ T9520] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 262.079541][ T9520] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 262.085351][ T9520] ? synchronize_rcu+0x11b/0x360 [ 262.090330][ T9520] ? __pfx_synchronize_rcu+0x10/0x10 [ 262.095617][ T9520] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 262.101899][ T9520] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 262.107820][ T9520] ? _copy_from_user+0x99/0xc0 [ 262.112575][ T9520] ? bpf_test_init+0x15a/0x180 [ 262.117379][ T9520] ? xdp_convert_md_to_buff+0x5b/0x330 [ 262.122832][ T9520] bpf_prog_test_run_xdp+0x805/0x11e0 [ 262.128225][ T9520] ? __pfx_lock_release+0x10/0x10 [ 262.133264][ T9520] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.139117][ T9520] ? __fget_files+0x29/0x470 [ 262.143710][ T9520] ? fput+0x1a8/0x230 [ 262.147743][ T9520] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.153575][ T9520] bpf_prog_test_run+0x2e4/0x360 [ 262.158567][ T9520] __sys_bpf+0x48d/0x810 [ 262.162802][ T9520] ? __pfx___sys_bpf+0x10/0x10 [ 262.167583][ T9520] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.173562][ T9520] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.179913][ T9520] ? do_syscall_64+0x100/0x230 [ 262.184668][ T9520] __x64_sys_bpf+0x7c/0x90 [ 262.189100][ T9520] do_syscall_64+0xf3/0x230 [ 262.193612][ T9520] ? clear_bhb_loop+0x35/0x90 [ 262.198320][ T9520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.204210][ T9520] RIP: 0033:0x7fa73237e719 [ 262.208690][ T9520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.228322][ T9520] RSP: 002b:00007fa733218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.236741][ T9520] RAX: ffffffffffffffda RBX: 00007fa732535f80 RCX: 00007fa73237e719 [ 262.244739][ T9520] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 262.252732][ T9520] RBP: 00007fa7323f175e R08: 0000000000000000 R09: 0000000000000000 [ 262.260717][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.268883][ T9520] R13: 0000000000000000 R14: 00007fa732535f80 R15: 00007fff754b1b18 [ 262.277230][ T9520] [ 262.280249][ T9520] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.287513][ T9520] CPU: 1 UID: 0 PID: 9520 Comm: syz.1.893 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 262.298087][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 262.308243][ T9520] Call Trace: [ 262.311513][ T9520] [ 262.314431][ T9520] dump_stack_lvl+0x241/0x360 [ 262.319125][ T9520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.324316][ T9520] ? __pfx__printk+0x10/0x10 [ 262.328891][ T9520] ? _printk+0xd5/0x120 [ 262.333047][ T9520] ? __init_begin+0x41000/0x41000 [ 262.338079][ T9520] ? vscnprintf+0x5d/0x90 [ 262.342428][ T9520] panic+0x349/0x880 [ 262.346315][ T9520] ? __warn+0x177/0x4e0 [ 262.350466][ T9520] ? __pfx_panic+0x10/0x10 [ 262.354887][ T9520] ? show_trace_log_lvl+0x3b2/0x410 [ 262.360089][ T9520] __warn+0x34b/0x4e0 [ 262.364079][ T9520] ? sk_skb_reason_drop+0x87/0x380 [ 262.369644][ T9520] report_bug+0x2b3/0x500 [ 262.373960][ T9520] ? sk_skb_reason_drop+0x87/0x380 [ 262.379088][ T9520] handle_bug+0x60/0x90 [ 262.383231][ T9520] exc_invalid_op+0x1a/0x50 [ 262.387733][ T9520] asm_exc_invalid_op+0x1a/0x20 [ 262.392628][ T9520] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 262.398371][ T9520] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 0a 3f 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 ba 3a 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 e8 3e 08 f8 85 ed 0f 8e 49 [ 262.417976][ T9520] RSP: 0018:ffffc9000370f078 EFLAGS: 00010283 [ 262.424034][ T9520] RAX: ffffffff898caf56 RBX: 00000000fffbffea RCX: 0000000000040000 [ 262.431998][ T9520] RDX: ffffc90004da1000 RSI: 0000000000003db8 RDI: 0000000000003db9 [ 262.440046][ T9520] RBP: dffffc0000000000 R08: ffffffff898caf46 R09: 1ffff11005ef1584 [ 262.448014][ T9520] R10: dffffc0000000000 R11: ffffed1005ef1585 R12: dffffc0000000000 [ 262.456065][ T9520] R13: ffff88802f78ab40 R14: 00000000ffffffea R15: 0000000000000000 [ 262.464033][ T9520] ? sk_skb_reason_drop+0x76/0x380 [ 262.469144][ T9520] ? sk_skb_reason_drop+0x86/0x380 [ 262.474262][ T9520] ? sk_skb_reason_drop+0x86/0x380 [ 262.479374][ T9520] ? ip_rcv_finish_core+0x129f/0x1b50 [ 262.484735][ T9520] ip_rcv_finish_core+0xfde/0x1b50 [ 262.489855][ T9520] ip_sublist_rcv+0x3b1/0xab0 [ 262.494523][ T9520] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 262.499731][ T9520] ? skb_orphan+0xae/0xd0 [ 262.504052][ T9520] ? __pfx_ip_rcv_finish+0x10/0x10 [ 262.509153][ T9520] ip_list_rcv+0x42b/0x480 [ 262.513611][ T9520] ? __pfx_ip_list_rcv+0x10/0x10 [ 262.518536][ T9520] ? __pfx_ip_list_rcv+0x10/0x10 [ 262.523455][ T9520] __netif_receive_skb_list_core+0x94e/0x980 [ 262.529452][ T9520] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 262.536038][ T9520] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 262.542597][ T9520] ? read_tsc+0x9/0x20 [ 262.546691][ T9520] ? timekeeping_get_ns+0x2c0/0x420 [ 262.551903][ T9520] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 262.558238][ T9520] netif_receive_skb_list_internal+0xa51/0xe30 [ 262.564395][ T9520] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 262.570806][ T9520] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 262.577566][ T9520] ? __pfx_eth_type_trans+0x10/0x10 [ 262.582753][ T9520] ? __phys_addr+0xba/0x170 [ 262.587258][ T9520] ? build_skb_around+0x111/0x260 [ 262.592285][ T9520] ? __xdp_build_skb_from_frame+0x313/0x650 [ 262.598180][ T9520] netif_receive_skb_list+0x55/0x4b0 [ 262.603467][ T9520] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 262.608936][ T9520] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 262.614855][ T9520] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 262.620402][ T9520] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 262.626200][ T9520] ? synchronize_rcu+0x11b/0x360 [ 262.631134][ T9520] ? __pfx_synchronize_rcu+0x10/0x10 [ 262.636466][ T9520] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 262.642711][ T9520] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 262.648615][ T9520] ? _copy_from_user+0x99/0xc0 [ 262.653378][ T9520] ? bpf_test_init+0x15a/0x180 [ 262.658180][ T9520] ? xdp_convert_md_to_buff+0x5b/0x330 [ 262.663634][ T9520] bpf_prog_test_run_xdp+0x805/0x11e0 [ 262.669000][ T9520] ? __pfx_lock_release+0x10/0x10 [ 262.674045][ T9520] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.679860][ T9520] ? __fget_files+0x29/0x470 [ 262.684463][ T9520] ? fput+0x1a8/0x230 [ 262.688462][ T9520] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.694278][ T9520] bpf_prog_test_run+0x2e4/0x360 [ 262.699249][ T9520] __sys_bpf+0x48d/0x810 [ 262.703510][ T9520] ? __pfx___sys_bpf+0x10/0x10 [ 262.708286][ T9520] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.714259][ T9520] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.720577][ T9520] ? do_syscall_64+0x100/0x230 [ 262.725331][ T9520] __x64_sys_bpf+0x7c/0x90 [ 262.729739][ T9520] do_syscall_64+0xf3/0x230 [ 262.734241][ T9520] ? clear_bhb_loop+0x35/0x90 [ 262.738909][ T9520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.744790][ T9520] RIP: 0033:0x7fa73237e719 [ 262.749202][ T9520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.768820][ T9520] RSP: 002b:00007fa733218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.777233][ T9520] RAX: ffffffffffffffda RBX: 00007fa732535f80 RCX: 00007fa73237e719 [ 262.785211][ T9520] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 262.793200][ T9520] RBP: 00007fa7323f175e R08: 0000000000000000 R09: 0000000000000000 [ 262.801343][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.809304][ T9520] R13: 0000000000000000 R14: 00007fa732535f80 R15: 00007fff754b1b18 [ 262.817306][ T9520] [ 262.820657][ T9520] Kernel Offset: disabled [ 262.825058][ T9520] Rebooting in 86400 seconds..