last executing test programs: 1m56.19601577s ago: executing program 2 (id=121): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x30}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000006b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000040), r7) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x30, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1m44.001748785s ago: executing program 2 (id=121): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x30}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000006b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000040), r7) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x30, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1m30.219305451s ago: executing program 2 (id=121): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x30}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000006b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000040), r7) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x30, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1m14.807646416s ago: executing program 2 (id=121): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x30}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000006b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000040), r7) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x30, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1m3.511549709s ago: executing program 2 (id=121): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x30}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000006b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000040), r7) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x30, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 52.00016617s ago: executing program 2 (id=121): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x30}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000006b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000040), r7) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x30, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1.920518086s ago: executing program 4 (id=1247): r0 = socket$inet(0x2, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="8b000400000000004800128008000100736974003c0002800500090029000000060010000b00000008000c000000008006000d000900000006000f0003040000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)}, 0x44000) 1.725585897s ago: executing program 4 (id=1252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071107d000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x9}}]}}}]}, 0x60}}, 0x0) 1.650040671s ago: executing program 0 (id=1253): r0 = socket$isdn(0x22, 0x2, 0x3) close(r0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="72a7a6988c6613c819104407a8c8b3eddfacd88ac2cb3849540103e8fc8a20d0d85ba6aae8f516f774f6f5dbc0c429b6956200199b5559e7e73fb21e7d822f83a392469d820321", 0x47}, {&(0x7f00000000c0)="211a66f6835ae57b0a6e33b233dfd27f107264a7302ff718fc7a9c333366e2df23c89ba2bf2e72952534d1fa5cbd19bee7b2f5990de7fe444cc1b1b496e44401c97b7fbd3be8c073f8d54a337b86da8f2300d069dc6d27565b2763e7fb9b3c4daef6f6a08cb95bd2d04ff8f3cf7c614b728c38ab18775f9602047f7489af4ca6e6b5f4192abfdec0e5af7ac4f3ebc806208a3ade80c8b5750d7bfedbc3edcee4c043c06d5ea365ddc272d8d0465257ac7e5d26f3733bc82242adc0bc555e88f2e04a0229f6ddc2272da300"/218, 0xda}, {&(0x7f00000001c0)="a1496640d3a98bcd44b8fa32da97374946ca05989195bf8735c72de01369dae3eb37756810ee560663707488e13fbb9f03669c9639b2f60054e47bbbe32aa867685e16a9ee930b5bf4e70d8c79458c2ee57a518e9fc92689c6edccab3b355b926bf1b75bc083fd055048698624714d73f8e464a85f09aa1c9f36e131bac3f0978822a418cbce95881d86d42cdda9c447423eb235530d4eef5245c6d406b44a30692baec718f140a215d96fe81e4ab8aaab2697a3db3b0525e4778691ce5ecf2ed56c87a006b361ded4c25bee668f9206ed", 0xd1}, {&(0x7f00000002c0)="043fa73788f797e814ffc92837c31be5f88e527b172b35794e72e8a1fa568792ea63ff292c33cd64109b1aef049865712fe2ef4509efb2d60b52a4aa3128ba394e1d74b3b7d11f3f205be0fcc38d3dad3f2a22259bfee03e241b12a397d91722419bb0223eadc5758bca3c45c0d43ff73ce39beb164c5871b0beeb6c911ef378aa082f61b5dccf4d3e97c30f5e691ee3d53d4c2aab2f05bdcc569b746ddcc263594f7a815f35c473f458248052cb63751ac4b0da4c974fdeab57f623fe6a02c7e1667154b7901cfa61afa321045bfc9ae748a65bd651891296b768e014ae2c784398ae7b8bd54c67be697d343186b5bba3aca4e1930c", 0xf6}], 0x4}, 0x20040850) 1.638939579s ago: executing program 3 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x1000, 0xfffffffd, 0x8000, 0x6a05, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0xf, 0x2, 0x23f, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x3d3b866cab67281, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x78, 0x0, 0x0, 0xff}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x4000080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000f00000000028800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.552102712s ago: executing program 0 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="a4000000100003040300"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000680012800b00010067656e65766500005800028014000700fe80000000000000000000000000000d050003000e00000008000b400000020005000900010000000800010003000000050008000100000008000b400000000908000b400000000c05000400990000000a000100aa"], 0xa4}}, 0x8004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x14, 0x0, 0x53) (async) setsockopt$inet6_mreq(r6, 0x29, 0x14, 0x0, 0x53) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000008500000073000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000008500000073000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1}, 0x18) r8 = socket$inet(0x2, 0xa, 0x3) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) (async) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x51) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x51) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="0053040400000070781f0000ffdbdf3f31000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="0053040400000070781f0000ffdbdf3f31000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = accept(r6, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f00000001c0)=0x80) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r10, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f0000000000)={0x8000000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f0000000000)={0x8000000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38002691031401002dbd7000ffdbdf250900020073797a3100000000cd7baff4080041007369770014003300687372300000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 1.497460764s ago: executing program 3 (id=1256): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'wg1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) splice(r0, &(0x7f0000000040)=0x4, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffffd, 0x5, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x6, 0x20}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000480)={r8, 0x3}, &(0x7f00000004c0)=0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r9) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000009e3a8d647d222cdfe124407567649f868576d294dfee165ad38", @ANYRES16=r10, @ANYBLOB="010027bd7000fddbdf25120000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x3c, r10, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000180)) 1.403032596s ago: executing program 4 (id=1257): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) recvmsg$unix(r2, &(0x7f0000000100)={&(0x7f00000002c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000540)=""/100, 0x64}, {&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f00000009c0)=""/202, 0xca}], 0x5, &(0x7f0000000ac0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x40000002) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000c00)=""/83, &(0x7f0000000940)=0x53) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x14, 0x20, 0x7, 0xff}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IIF={0x8, 0x3, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6048000}, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x70bd26, 0x0, {}, [@RTA_OIF={0x8}, @RTA_METRICS={0x4}, @RTA_IIF={0x8, 0x3, r12}]}, 0x30}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r14, 0x917, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r15 = socket$can_j1939(0x1d, 0x2, 0x7) r16 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r15, &(0x7f0000000100)={0x1d, r17, 0x1, {}, 0xff}, 0x18) setsockopt$sock_int(r15, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) write(r15, &(0x7f0000000700)="5d05203a26218a6234587a534af298b0905e06d5", 0x14) 1.33376517s ago: executing program 1 (id=1258): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18e1ffffffffffffff0000000700000081121000000000009500000000000000df7d166f0073612d2b1e2de04132d73532860c1f26ce3e812c5ddd5af2c06f630cba9d361107548771f1"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900efff72797a30000000000900020073797a3200000000380000001c0a05000000000000000000020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x6}, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x8807, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$inet6(r5, 0x0, &(0x7f00000000c0)) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000800)=""/4081, 0xff1}, {0x0}], 0x2, 0x5, 0x2) 1.299672749s ago: executing program 0 (id=1259): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001780)={0x0, 0x9005}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000080000b33e478f0fed9e81d1a1270000000000000000000000000000000000000000feffffff000000001e94f2056a0000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x10b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1.250002669s ago: executing program 3 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7f, 0x8, 0x8, 0x4, 0x7f}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x2000c040) 1.214510976s ago: executing program 1 (id=1261): r0 = socket$inet(0x2, 0x1, 0x1d9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff0908004514402c0063000003069078000000000a01010000044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="601000009078000303030800"], 0x0) 1.123840065s ago: executing program 3 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0xb, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x2e, 0xcf, 0x0, 0x5f, 0x0]}}, 0x0, 0x2b, 0x0, 0x6, 0xfffffff9, 0x10000, @value}, 0x28) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="94000000", @ANYRESHEX=r0, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6af40024"], 0x94}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x5, 0x20000002, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="7d1068a4", 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x884}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0xc6, 0x0, 0x80000001, 0x1, @local, @empty, 0x7, 0x8028, 0x401, 0x4000000}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="30040000", @ANYRES16=r1, @ANYBLOB="080029bd7000fbdbdf250f000000440009800800020007000000080002000700000008000100000040000800010007000000080002008c0000000800010002000000080002000300000008000200110a0000140001800d0001007564703a73797a32000000003c000280040004002c000380080002000500000008000200e0040000080002000300000008000100010000000800010008000000080001000700000300ff7f000008000300210000007400058008000100657468000700010069620000340002800800030009000000080002000800000008000100160000000800040009000000080003000008bb1f359b4080655100000700010069620000040002800c000280080002000008000008000100756470000c00028008000400010100004c000380080001000d000000080001000100000008000200050000000800020003000000080002000300000008000200f7ffffff080001009e620000080002000b0200000800030000000000440005801c000280080004000000008008000300a7233a5408000400090000001c0002800800040004000000080003002600000008000400010000000700010069620000b400018008000300010000000800010069623a000d0001007564703a73797a3100000000080003000c00000038000400200001000a004e2200000009fe8000000000000000000000000000bb02000000140002d5d4769b4dd63f71602108017c0002004e24ffffffff000000000000000044000400200001000a004e20fffffff9ff02000000000000000000000000000100000000200002000a004e24000007ffff020000000000000000000000000001040000000c0002830800040004000000b40106803f00040067dc0000000000000000000000000000000000000000000000000000000000001700000093f3f869c280a18e7031a45311745e0156b9373d73d08d000400050004000500040005004500040067636d28616573290000000000000000000060976337344d27ac0f00000000000000000000000000001d000000fc504dd8900823893601a252a6c379877291959a1d0d93c24439650b090000004800040067636d28616573290000000000000000000000000000000000000000000000002000000008e77c994e7b9171e61840013065d0a38fef26a76eac6c406c3e95b8c05e5eb5d1000300b868c0c3daf11730ecb198ad377b0d8a157a997f9394102c77f7f054658e92fe200dbe664f33e437b366588f690c7c2e42f3e2ebd6c61334e3a78160063a48a1bb1055a7496fde80470d36ab3052b852d800a757fa42321dd557bb71ed190d5fa6ec8e6dd68b34dcc76ac08d7cc5ad75930d60aa5476b21c758db4322aedde706cd500e62baabe20a5597103e58b776e3233b3bca194bb8dca0006bdef1f681df52c92b4668788c0e2cf712ba41c97c89c3d319696424166475d9d697099351471215accdb07237e3fd7c9d24e0134748a589557f74ad401306526b7ec297d3fd44bd546c45d1cc78c10eb2911807b323715cfd00ac9550c9be6faa3969adaeccfddb2d6401e"], 0x430}}, 0x40000) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r4, 0x0, 0xfce) ioctl$TUNSETLINK(r4, 0x400454cd, 0x134) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000002c0)=0x6) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000540)="30bcd5d7a93b9d70f7449917ca45924e957de05de35b4c301d50a786ed4e43b216e5ee4a9508ed2aaaf687c85da4587a5a01fba1b90ccae010dd9e47648147839613e864ea02a0882c01f32590c2d4bd267a55f33ea5522fb0135447bf5686c7be06e5c05afb49c009a172a9735d5a", 0x6f}], 0x2}, 0x44) 1.053106933s ago: executing program 0 (id=1263): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r1, 0x1, {0x0, 0x1, 0x4}, 0xff}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r5, @ANYBLOB="f8465e734581"], 0x20) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2000004, 0x81, 0x80, 0x20240, 0x1, 0x1, '\x00', r1, r5, 0x0, 0x1, 0x4, 0xa, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a40)={0x378, r7, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6fb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd39b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x798d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5e521ae00d440ec8c033c053c2f15ab40d199dfe"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e6fe00c9e81f57eb230e72934f55f3c0ffb10f2a972cb501edfb889c54"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xadf}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x700}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x811}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) (async) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r1, 0x1, {0x0, 0x1, 0x4}, 0xff}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r3}, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r5, @ANYBLOB="f8465e734581"], 0x20) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2000004, 0x81, 0x80, 0x20240, 0x1, 0x1, '\x00', r1, r5, 0x0, 0x1, 0x4, 0xa, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) (async) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a40)={0x378, r7, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6fb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd39b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x798d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5e521ae00d440ec8c033c053c2f15ab40d199dfe"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e6fe00c9e81f57eb230e72934f55f3c0ffb10f2a972cb501edfb889c54"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xadf}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x700}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x811}, 0x50) (async) 1.016014231s ago: executing program 1 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3, 0x8000000000, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x0, 0x1, 0x8000000, 0x7fffffff, 0xffffffffffffff00}, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x6) write(r4, &(0x7f0000003300)="ac", 0x1) write(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) (async) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) (async) pipe(&(0x7f0000000380)) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3, 0x8000000000, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x0, 0x1, 0x8000000, 0x7fffffff, 0xffffffffffffff00}, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) splice(r1, 0x0, r4, 0x0, 0x80, 0x6) (async) write(r4, &(0x7f0000003300)="ac", 0x1) (async) write(r3, 0x0, 0x0) (async) 930.430046ms ago: executing program 0 (id=1265): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) (async) sendfile(r3, r2, 0x0, 0x10000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYRES16=r0], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000006000e2b36eddde4", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000100"/28], 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x8, 0x54}, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x6, 0x738, @vifc_lcl_ifindex, @empty}, 0x10) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) 833.753304ms ago: executing program 1 (id=1266): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000580)="fe093007a036b825dbc02c3f6a3312e7", 0x10}], 0x1, 0x0, 0x0, 0x40010}], 0x1, 0x8001) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r1, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000580)="fe093007a036b825dbc02c3f6a3312e7", 0x10}], 0x1, 0x0, 0x0, 0x40010}], 0x1, 0x8001) (async) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) socket(0x10, 0x803, 0x0) (async) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) (async) getsockname$packet(r2, 0x0, &(0x7f0000000200)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 742.48271ms ago: executing program 1 (id=1267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000004c0), 0x6b, r2}, 0x38) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0x0, 0x5, 0x2400}, [@RTA_SRC={0x8, 0x2, @multicast1}]}, 0x24}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 637.157027ms ago: executing program 3 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0xd15, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000640)=@get={0x1, 0x0, 0x8001}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000041000869a60e900000006000000000000", @ANYRES32=0x0, @ANYBLOB="0101020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0xba01}, 0x810) 581.178812ms ago: executing program 1 (id=1269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e23, 0x1, @local, 0x4}], 0x2c) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x643e1014888a6265}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r13, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x7fff, 0x4e}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x5, 0x5, 0x2, 0x200, 0xfeff, 0x1000, 0x1ff, 0xca3, 0x3]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0x36, 0x1}, {0x2, 0x1}, {0x30, 0x1}, {0x0, 0x1}, {0x10, 0x1}, {0x36, 0x1}, {0x18}, {0x60}, {0x48}, {0x12, 0x1}, {0x3, 0x1}, {0x5}, {0x16}, {0x16}, {0x30}, {0x48, 0x1}, {0x21, 0x1}, {0xc, 0x1}, {0x9}, {0xb}, {0x1b}, {0x16, 0x1}, {0x12}, {0xb}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x30, 0x1}, {0x18, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004844}, 0x40000) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000011409"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) 438.542038ms ago: executing program 4 (id=1270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7, 0xf5, 0x31, 0x3cd}, {0x10, 0x9, 0x1}, {0x9, 0xf, 0xbc, 0x2}, {0x0, 0x6, 0x2}, {0x0, 0xf5, 0x9}, {0x9, 0x90}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x6b3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x1, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x1, 0x7f, 0xfffffffc, 0x8, 0x2, 0x7f, 0x0, 0x1, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10004, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x2, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x7, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x723, 0x0, 0xe, 0x9, 0x4, 0x6, 0x7, 0x1, 0xfffffbff, 0x7, 0x3, 0x8, 0x57, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x2, 0x64e8, 0xc, 0x82f, 0x2, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x0, 0x3, 0x1, {0xe, 0x2, 0x1, 0x2, 0xbbbc, 0x6}, {0x6, 0x1, 0x2, 0xdc2f, 0xfff9, 0xf}, 0x8, 0x0, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xffff, 0x6c57, 0x0, 0x2, 0x4, 0x7fff, 0x400, 0x1ff, 0x5518, 0x9, 0x200, 0x80010000, 0x1, 0x437, 0xdb0, 0x7a2357cd, 0xb05b, 0x2, 0x0, 0xffff, 0x1, 0x4, 0x3ff, 0x7f, 0x5, 0xfffff800, 0x0, 0x9, 0xffffff82, 0x4, 0x401, 0x5eb, 0xa, 0x1ff, 0x9fa, 0x5, 0x8e5, 0x5, 0x5, 0x0, 0x10, 0x80, 0x8001, 0xab, 0xffff1efb, 0x4, 0xfff, 0x2, 0x3, 0xc, 0x4, 0x1, 0x51, 0x3, 0x101, 0x2, 0x5, 0x3, 0x1, 0x2, 0xf6a6, 0x5, 0x5, 0xaf1c, 0xc8, 0x6, 0x40, 0x9, 0x986, 0x10000, 0xe, 0x6, 0x80, 0x245, 0x38b, 0x5, 0xffffff13, 0xc00000, 0x8, 0xd0bd, 0xfffffff8, 0x7, 0x5, 0xc3a, 0x7, 0x3, 0x80000000, 0x0, 0x8, 0x8, 0x7, 0x0, 0x861a, 0x9, 0x5, 0xc605, 0x8eb6, 0x401, 0x0, 0x0, 0x6, 0x1, 0x8, 0x1, 0x1ff, 0xb2d, 0x5, 0xb, 0x0, 0x0, 0xfffffeff, 0x5, 0x9, 0x8, 0xffff, 0x2dd9c5a4, 0x0, 0x9, 0x81, 0xffff, 0x8, 0x2, 0x7, 0x7, 0x5, 0x2, 0x4, 0x57, 0x6, 0x8, 0x5, 0x25, 0x3, 0xe8, 0x1000, 0x0, 0xfe6, 0x50, 0xd3, 0x12cd2b8b, 0x1, 0x9, 0x7f, 0x7, 0x2, 0xb72c, 0x0, 0x80, 0x93, 0x30, 0x7, 0x5, 0x6000000, 0x8, 0xfffffffa, 0x0, 0x5, 0x2, 0x8001, 0xffffffff, 0x6, 0x2, 0x4, 0x80000000, 0x3ff, 0xbd49, 0x8, 0x8, 0x3, 0x5, 0x7, 0x5, 0x2, 0xfffffff8, 0xa2db, 0x400, 0x4, 0x5, 0x0, 0x4, 0xf45, 0x9, 0xc, 0x7fff, 0x3, 0x2, 0x400, 0x501, 0xd, 0xbb, 0x2, 0x402, 0x3, 0x10, 0x10, 0x10, 0xfff, 0x0, 0x5, 0x6, 0x6a, 0x10, 0x8, 0xfffffff7, 0x4, 0x3, 0xff, 0xfffffff8, 0x6, 0xff, 0x79, 0x10000, 0x8, 0x8000000, 0x0, 0x1ff, 0xd5a9, 0xb, 0x6, 0x1, 0x6, 0x8, 0xffffffb0, 0x5, 0x4447, 0x1, 0x4, 0x7, 0x2, 0x6, 0x3, 0x8000, 0xffffff3e, 0xd7b, 0x3, 0x4, 0x4, 0xfd95, 0x6, 0x4, 0xb, 0xea, 0x385a9732, 0x81, 0xfd9, 0xffffffff, 0x97, 0x0, 0x2bb7, 0x2, 0x9c7, 0x7f, 0x78a6, 0x40004, 0x7]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x894}}, 0x0) 239.93434ms ago: executing program 4 (id=1271): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x67, 0x5, 0x7, 0xf8, 0x1, 0x7d, 0x7, 0x28, 0x9, 0x28, 0x81, 0x80, 0x5, 0xe}, 0xe) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r4], 0x50}}, 0x20008040) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r6}) 157.957278ms ago: executing program 3 (id=1272): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth0_virt_wifi\x00', @link_local}) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 14.09192ms ago: executing program 4 (id=1273): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x4e23, 0xfffe, 0x0, 0x80, 0x20}, {0x0, 0x0, 0xddcf, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@private=0xa010101}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) listen(r1, 0x2) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x81}, {0x20, 0x1, 0x2, 0x7}, {0x16, 0x7, 0x2, 0x800}]}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xb7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f00000003c0)="93ad4e83c6d3374928a53a4c975d601a7c8dbc85eb735a3eb4e0cd6f4a74038c5c467703bf88a1ac66d40476f4b4627fa88f6ad7a41daeab5aa18974269ba64af25a02f22b29a1bb51ca54343cd6311a31ff7aaa0df826c8cfbcf0b426f92d9a23", &(0x7f0000000180)=""/47, 0x4}, 0x20) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @null}, [@netrom, @default, @default, @bcast, @netrom, @bcast, @netrom, @null]}, &(0x7f0000000040)=0x48, 0x40000) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="ef4c", 0x2}], 0x1}}], 0x1, 0x20004888) 0s ago: executing program 0 (id=1274): socket$inet(0x2, 0x1, 0x1d9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff0908004514402c0063000003069078000000000a01010000044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="601000009078000303030800"], 0x0) kernel console output (not intermixed with test programs): red blocking state [ 349.076253][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.188033][ T6592] tipc: Started in network mode [ 349.193289][ T6592] tipc: Node identity , cluster identity 4711 [ 349.261744][ T5889] hid-generic 0005:16BF:0006.0001: unknown main item tag 0x0 [ 349.305093][ T5889] hid-generic 0005:16BF:0006.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 349.385238][ T5885] Bluetooth: hci0: command tx timeout [ 349.784253][ T6610] netlink: 156 bytes leftover after parsing attributes in process `syz.3.187'. [ 349.953132][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.126059][ T6419] veth0_vlan: entered promiscuous mode [ 350.154104][ T6419] veth1_vlan: entered promiscuous mode [ 350.274906][ T6419] veth0_macvtap: entered promiscuous mode [ 350.318255][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 350.339130][ T6419] veth1_macvtap: entered promiscuous mode [ 350.404002][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.462252][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.494162][ T6419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.523704][ T6419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.554147][ T6419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.563413][ T6419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.095147][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.129759][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.213891][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 351.250019][ T6151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.272869][ T6151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.284581][ T6647] netlink: 27 bytes leftover after parsing attributes in process `syz.3.200'. [ 351.411171][ T6650] bridge: RTM_NEWNEIGH with invalid ether address [ 351.468780][ T5885] Bluetooth: hci0: command tx timeout [ 351.605758][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 351.635014][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 351.673904][ T6662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 351.848177][ T6673] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 351.863530][ T6673] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.209'. [ 351.994017][ T6151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.123345][ T6151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.421681][ T6151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.483558][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 352.733769][ T6151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.135807][ T6151] bridge_slave_1: left allmulticast mode [ 353.152063][ T6151] bridge_slave_1: left promiscuous mode [ 353.176603][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.178524][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.198074][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.215152][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.245101][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.253366][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.295949][ T6151] bridge_slave_0: left allmulticast mode [ 353.318144][ T6151] bridge_slave_0: left promiscuous mode [ 353.354742][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.474013][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 353.512627][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 353.542873][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 354.325737][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.339209][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.353908][ T6151] bond0 (unregistering): Released all slaves [ 354.379534][ T6711] tipc: Started in network mode [ 354.385027][ T6711] tipc: Node identity ac14140f, cluster identity 4711 [ 354.392460][ T6711] tipc: New replicast peer: 255.255.255.255 [ 354.401271][ T6711] tipc: Enabled bearer , priority 10 [ 354.460059][ T6712] tipc: Enabling of bearer rejected, already enabled [ 354.505100][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 354.526143][ T6713] tipc: Disabling bearer [ 354.573284][ T6727] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 354.629468][ T6727] netlink: 224 bytes leftover after parsing attributes in process `syz.3.220'. [ 354.804258][ T6733] sctp: [Deprecated]: syz.4.222 (pid 6733) Use of int in max_burst socket option. [ 354.804258][ T6733] Use struct sctp_assoc_value instead [ 354.834708][ T6742] FAULT_INJECTION: forcing a failure. [ 354.834708][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 354.855987][ T6742] CPU: 1 UID: 0 PID: 6742 Comm: syz.0.224 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 354.856026][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.856044][ T6742] Call Trace: [ 354.856056][ T6742] [ 354.856068][ T6742] dump_stack_lvl+0x189/0x250 [ 354.856110][ T6742] ? __pfx____ratelimit+0x10/0x10 [ 354.856137][ T6742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.856170][ T6742] ? __pfx__printk+0x10/0x10 [ 354.856196][ T6742] ? __pfx___might_resched+0x10/0x10 [ 354.856228][ T6742] ? fs_reclaim_acquire+0x7d/0x100 [ 354.856255][ T6742] should_fail_ex+0x414/0x560 [ 354.856292][ T6742] should_failslab+0xa8/0x100 [ 354.856326][ T6742] __kmalloc_cache_noprof+0x70/0x3d0 [ 354.856356][ T6742] ? nl80211_set_qos_map+0x14a/0x6d0 [ 354.856384][ T6742] nl80211_set_qos_map+0x14a/0x6d0 [ 354.856414][ T6742] genl_family_rcv_msg_doit+0x212/0x300 [ 354.856449][ T6742] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 354.856491][ T6742] ? bpf_lsm_capable+0x9/0x20 [ 354.856523][ T6742] ? security_capable+0x7e/0x2e0 [ 354.856560][ T6742] genl_rcv_msg+0x60e/0x790 [ 354.856593][ T6742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.856614][ T6742] ? ref_tracker_free+0x63a/0x7d0 [ 354.856641][ T6742] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 354.856663][ T6742] ? __pfx_nl80211_set_qos_map+0x10/0x10 [ 354.856682][ T6742] ? __pfx_nl80211_post_doit+0x10/0x10 [ 354.856707][ T6742] ? __pfx_ref_tracker_free+0x10/0x10 [ 354.856757][ T6742] netlink_rcv_skb+0x205/0x470 [ 354.856792][ T6742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.856819][ T6742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.856871][ T6742] ? down_read+0x1ad/0x2e0 [ 354.856904][ T6742] genl_rcv+0x28/0x40 [ 354.856924][ T6742] netlink_unicast+0x758/0x8d0 [ 354.857002][ T6742] netlink_sendmsg+0x805/0xb30 [ 354.857048][ T6742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.857073][ T6742] ? aa_sock_msg_perm+0x94/0x160 [ 354.857102][ T6742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.857128][ T6742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.857148][ T6742] __sock_sendmsg+0x219/0x270 [ 354.857180][ T6742] ____sys_sendmsg+0x505/0x830 [ 354.857208][ T6742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.857236][ T6742] ? ___sys_sendmsg+0x205/0x2a0 [ 354.857263][ T6742] ___sys_sendmsg+0x21f/0x2a0 [ 354.857288][ T6742] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.857353][ T6742] ? __fget_files+0x2a/0x420 [ 354.857384][ T6742] ? __fget_files+0x3a0/0x420 [ 354.857428][ T6742] __x64_sys_sendmsg+0x19b/0x260 [ 354.857453][ T6742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.857484][ T6742] ? __pfx_ksys_write+0x10/0x10 [ 354.857520][ T6742] ? rcu_is_watching+0x15/0xb0 [ 354.857554][ T6742] ? do_syscall_64+0xbe/0x3b0 [ 354.857585][ T6742] do_syscall_64+0xfa/0x3b0 [ 354.857609][ T6742] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.857655][ T6742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.857676][ T6742] ? clear_bhb_loop+0x60/0xb0 [ 354.857702][ T6742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.857722][ T6742] RIP: 0033:0x7f347ed8e969 [ 354.857748][ T6742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.857765][ T6742] RSP: 002b:00007f347fccd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.857787][ T6742] RAX: ffffffffffffffda RBX: 00007f347efb5fa0 RCX: 00007f347ed8e969 [ 354.857802][ T6742] RDX: 0000000000000804 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 354.857815][ T6742] RBP: 00007f347fccd090 R08: 0000000000000000 R09: 0000000000000000 [ 354.857828][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.857839][ T6742] R13: 0000000000000000 R14: 00007f347efb5fa0 R15: 00007fff46998558 [ 354.857882][ T6742] [ 355.304667][ T5885] Bluetooth: hci0: command tx timeout [ 355.665231][ T6151] hsr_slave_0: left promiscuous mode [ 355.684769][ T6151] hsr_slave_1: left promiscuous mode [ 355.705661][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.725075][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.737561][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.749988][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.789433][ T6151] veth1_macvtap: left promiscuous mode [ 355.795516][ T6151] veth0_macvtap: left promiscuous mode [ 355.801312][ T6151] veth1_vlan: left promiscuous mode [ 355.809232][ T6151] veth0_vlan: left promiscuous mode [ 356.360519][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 356.401885][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 356.540032][ T6768] delete_channel: no stack [ 356.913057][ T6770] tipc: Enabling of bearer rejected, failed to enable media [ 357.007848][ T6786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 357.095906][ T6792] FAULT_INJECTION: forcing a failure. [ 357.095906][ T6792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.127736][ T6792] CPU: 0 UID: 0 PID: 6792 Comm: syz.0.237 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 357.127782][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.127793][ T6792] Call Trace: [ 357.127801][ T6792] [ 357.127810][ T6792] dump_stack_lvl+0x189/0x250 [ 357.127848][ T6792] ? __pfx____ratelimit+0x10/0x10 [ 357.127872][ T6792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.127900][ T6792] ? __pfx__printk+0x10/0x10 [ 357.127934][ T6792] should_fail_ex+0x414/0x560 [ 357.127964][ T6792] _copy_to_user+0x31/0xb0 [ 357.127987][ T6792] simple_read_from_buffer+0xe1/0x170 [ 357.128019][ T6792] proc_fail_nth_read+0x1df/0x250 [ 357.128043][ T6792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.128065][ T6792] ? rw_verify_area+0x258/0x650 [ 357.128088][ T6792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.128108][ T6792] vfs_read+0x200/0x980 [ 357.128137][ T6792] ? __pfx___mutex_lock+0x10/0x10 [ 357.128172][ T6792] ? __pfx_vfs_read+0x10/0x10 [ 357.128212][ T6792] ? __fget_files+0x2a/0x420 [ 357.128248][ T6792] ? __fget_files+0x3a0/0x420 [ 357.128275][ T6792] ? __fget_files+0x2a/0x420 [ 357.128339][ T6792] ksys_read+0x145/0x250 [ 357.128381][ T6792] ? __pfx_ksys_read+0x10/0x10 [ 357.128423][ T6792] ? rcu_is_watching+0x15/0xb0 [ 357.128477][ T6792] ? do_syscall_64+0xbe/0x3b0 [ 357.128539][ T6792] do_syscall_64+0xfa/0x3b0 [ 357.128566][ T6792] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.128595][ T6792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.128623][ T6792] ? clear_bhb_loop+0x60/0xb0 [ 357.128665][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.128689][ T6792] RIP: 0033:0x7f347ed8d37c [ 357.128715][ T6792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 357.128744][ T6792] RSP: 002b:00007f347fccd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.128772][ T6792] RAX: ffffffffffffffda RBX: 00007f347efb5fa0 RCX: 00007f347ed8d37c [ 357.128786][ T6792] RDX: 000000000000000f RSI: 00007f347fccd0a0 RDI: 0000000000000004 [ 357.128797][ T6792] RBP: 00007f347fccd090 R08: 0000000000000000 R09: 0000000000000000 [ 357.128813][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.128824][ T6792] R13: 0000000000000000 R14: 00007f347efb5fa0 R15: 00007fff46998558 [ 357.128882][ T6792] [ 357.385131][ T5885] Bluetooth: hci0: command tx timeout [ 357.479440][ T6802] sctp: [Deprecated]: syz.1.240 (pid 6802) Use of int in max_burst socket option. [ 357.479440][ T6802] Use struct sctp_assoc_value instead [ 357.659919][ T6803] geneve2: entered promiscuous mode [ 357.699188][ T6816] netlink: 'syz.4.242': attribute type 3 has an invalid length. [ 357.717146][ T6816] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.242'. [ 357.771721][ T6815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.243'. [ 357.916767][ T6708] chnl_net:caif_netlink_parms(): no params data found [ 358.080784][ T6829] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.080891][ T89] IPVS: starting estimator thread 0... [ 358.098373][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.246'. [ 358.184634][ T6835] IPVS: using max 27 ests per chain, 64800 per kthread [ 358.410508][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.424657][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.437615][ T6708] bridge_slave_0: entered allmulticast mode [ 358.456909][ T6708] bridge_slave_0: entered promiscuous mode [ 358.470366][ T6855] netlink: 18 bytes leftover after parsing attributes in process `syz.3.252'. [ 358.492267][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.519728][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.539155][ T6708] bridge_slave_1: entered allmulticast mode [ 358.561060][ T6708] bridge_slave_1: entered promiscuous mode [ 358.783848][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 358.805312][ T6867] vlan2: entered promiscuous mode [ 358.810435][ T6867] bond0: entered promiscuous mode [ 358.819976][ T6867] bond_slave_0: entered promiscuous mode [ 358.826760][ T6867] bond_slave_1: entered promiscuous mode [ 358.827280][ T6877] IPv6: Can't replace route, no match found [ 358.840302][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 358.856852][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 358.886686][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.966297][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.020512][ T6708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.057027][ T6708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.223135][ T6891] xt_TCPMSS: Only works on TCP SYN packets [ 359.231478][ T6708] team0: Port device team_slave_0 added [ 359.258082][ T6708] team0: Port device team_slave_1 added [ 359.318000][ T6894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.471991][ T5885] Bluetooth: hci0: command tx timeout [ 359.550375][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.550666][ T6908] netlink: 56 bytes leftover after parsing attributes in process `syz.4.266'. [ 359.564443][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.644308][ T6708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.667695][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.674888][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.715610][ T6908] netlink: 52 bytes leftover after parsing attributes in process `syz.4.266'. [ 359.730772][ T6708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.991464][ T6708] hsr_slave_0: entered promiscuous mode [ 360.020324][ T6708] hsr_slave_1: entered promiscuous mode [ 360.062826][ T6708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.098030][ T6708] Cannot create hsr debugfs directory [ 360.338303][ T6938] netlink: 32 bytes leftover after parsing attributes in process `syz.3.273'. [ 360.563672][ T6940] netlink: 104 bytes leftover after parsing attributes in process `syz.1.274'. [ 360.650168][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 360.738774][ T6941] netlink: 9 bytes leftover after parsing attributes in process `syz.1.274'. [ 360.739706][ T6940] netlink: 9 bytes leftover after parsing attributes in process `syz.1.274'. [ 360.799933][ T6941] gretap0: entered promiscuous mode [ 360.859927][ T6948] netlink: 'syz.0.277': attribute type 11 has an invalid length. [ 361.191207][ T6963] netlink: 'syz.1.281': attribute type 4 has an invalid length. [ 361.238952][ T6961] vlan4: entered promiscuous mode [ 361.244063][ T6961] bond0: entered promiscuous mode [ 361.266689][ T6961] bond_slave_0: entered promiscuous mode [ 361.272728][ T6961] bond_slave_1: entered promiscuous mode [ 361.548259][ T5885] Bluetooth: hci0: command tx timeout [ 361.709351][ T6987] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 361.803931][ T6987] geneve0: entered allmulticast mode [ 361.979269][ T6999] IPVS: length: 78 != 8 [ 362.298154][ T7005] 0·: renamed from hsr_slave_1 (while UP) [ 362.333478][ T7005] 0·: entered allmulticast mode [ 362.357120][ T7005] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 362.391352][ T6708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.502422][ T6708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.550413][ T6708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.575840][ T6708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.833370][ T6708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.882681][ T6708] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.902421][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.909698][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.955508][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.962717][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.194053][ T7041] vlan2: entered allmulticast mode [ 363.213064][ T7041] bridge0: port 3(vlan2) entered blocking state [ 363.220827][ T7041] bridge0: port 3(vlan2) entered disabled state [ 363.231504][ T7041] vlan2: entered promiscuous mode [ 363.237714][ T7041] bridge0: port 3(vlan2) entered blocking state [ 363.244505][ T7041] bridge0: port 3(vlan2) entered forwarding state [ 363.450890][ T7054] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 363.479690][ T7054] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.494348][ T7054] team0: entered promiscuous mode [ 363.502656][ T7054] team_slave_0: entered promiscuous mode [ 363.514834][ T7054] team_slave_1: entered promiscuous mode [ 363.528824][ T7054] bond0: (slave team0): Enslaving as an active interface with an up link [ 363.862390][ T6708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.868292][ T7072] netlink: 'syz.4.309': attribute type 2 has an invalid length. [ 363.888885][ T7072] __nla_validate_parse: 12 callbacks suppressed [ 363.888907][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 364.031788][ T6708] veth0_vlan: entered promiscuous mode [ 364.059577][ T7076] openvswitch: netlink: IP tunnel dst address not specified [ 364.062369][ T7078] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 364.071882][ T6708] veth1_vlan: entered promiscuous mode [ 364.081728][ T7078] netlink: 236 bytes leftover after parsing attributes in process `syz.1.310'. [ 364.091746][ T7078] NCSI netlink: No device for ifindex 813332851 [ 364.181031][ T6708] veth0_macvtap: entered promiscuous mode [ 364.213893][ T6708] veth1_macvtap: entered promiscuous mode [ 364.293599][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.323249][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.368731][ T6708] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.430996][ T6708] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.440789][ T6708] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.468501][ T6708] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.549926][ T7101] netlink: 'syz.4.319': attribute type 10 has an invalid length. [ 364.623509][ T7101] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.669721][ T7101] bond0: (slave team0): Enslaving as an active interface with an up link [ 364.802273][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.841521][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.911012][ T7119] netlink: 'syz.4.324': attribute type 5 has an invalid length. [ 364.929072][ T6151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.943355][ T7119] netlink: 980 bytes leftover after parsing attributes in process `syz.4.324'. [ 364.952466][ T6151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.000056][ T7122] Bluetooth: MGMT ver 1.23 [ 365.039832][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 365.386876][ T7140] bridge0: port 3(ipvlan0) entered blocking state [ 365.398984][ T7140] bridge0: port 3(ipvlan0) entered disabled state [ 365.407002][ T7140] ipvlan0: entered allmulticast mode [ 365.412462][ T7140] veth0_vlan: entered allmulticast mode [ 365.421312][ T7140] ipvlan0: left allmulticast mode [ 365.426856][ T7140] veth0_vlan: left allmulticast mode [ 365.436282][ T7148] netlink: 'syz.0.331': attribute type 1 has an invalid length. [ 365.576078][ T7143] bond2: (slave gretap1): making interface the new active one [ 365.619975][ T7143] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 365.852373][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 365.878242][ T7164] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.984215][ T7171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.035591][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 366.117048][ T7174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 366.607715][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.347'. [ 366.622118][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.347'. [ 366.682223][ T7199] tipc: Started in network mode [ 366.691596][ T7199] tipc: Node identity ac14140f, cluster identity 4711 [ 366.707431][ T7199] tipc: New replicast peer: 255.255.255.255 [ 366.718619][ T7199] tipc: Enabled bearer , priority 10 [ 366.730440][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.346'. [ 366.743282][ T7199] tipc: Disabling bearer [ 366.979517][ T7205] netlink: 'syz.1.349': attribute type 7 has an invalid length. [ 367.064628][ T5885] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 367.065130][ T5150] Bluetooth: hci0: command 0x0401 tx timeout [ 367.485971][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.640165][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.753708][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.930813][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.106836][ T7237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.217079][ T7245] vti0: entered promiscuous mode [ 368.279164][ T7237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.419357][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.431531][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.447414][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.461010][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.470697][ T7237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.482745][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.771297][ T7237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.850810][ T7252] pim6reg1: entered promiscuous mode [ 368.856952][ T7252] pim6reg1: entered allmulticast mode [ 368.952462][ T49] bridge_slave_1: left allmulticast mode [ 368.968858][ T49] bridge_slave_1: left promiscuous mode [ 368.979761][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.006227][ T49] bridge_slave_0: left allmulticast mode [ 369.013871][ T49] bridge_slave_0: left promiscuous mode [ 369.027533][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.452028][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.463472][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.475503][ T49] bond0 (unregistering): Released all slaves [ 369.606454][ T7237] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.640554][ T7237] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.823940][ T7237] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.937309][ T7285] IPVS: length: 78 != 8 [ 369.962915][ T7237] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.325623][ T49] hsr_slave_0: left promiscuous mode [ 370.340772][ T49] hsr_slave_1: left promiscuous mode [ 370.356515][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.364106][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.387080][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.398779][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.451652][ T49] veth1_macvtap: left promiscuous mode [ 370.460836][ T49] veth0_macvtap: left promiscuous mode [ 370.469241][ T49] veth1_vlan: left promiscuous mode [ 370.474980][ T49] veth0_vlan: left promiscuous mode [ 370.584832][ T5885] Bluetooth: hci0: command tx timeout [ 371.089092][ T49] team0 (unregistering): Port device team_slave_1 removed [ 371.130706][ T49] team0 (unregistering): Port device team_slave_0 removed [ 371.525234][ T7300] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 371.605478][ T7249] chnl_net:caif_netlink_parms(): no params data found [ 371.725040][ T7316] __nla_validate_parse: 3 callbacks suppressed [ 371.725061][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 371.760527][ T7316] netlink: 'syz.3.377': attribute type 7 has an invalid length. [ 371.768541][ T7316] netlink: 'syz.3.377': attribute type 8 has an invalid length. [ 371.787810][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 371.827429][ T7316] batadv_slave_1: entered promiscuous mode [ 372.045896][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 372.151246][ T7326] batadv_slave_0: entered promiscuous mode [ 372.193424][ T7326] batadv_slave_0: left promiscuous mode [ 372.283521][ T7334] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 372.408311][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.417240][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.424727][ T7249] bridge_slave_0: entered allmulticast mode [ 372.432977][ T7249] bridge_slave_0: entered promiscuous mode [ 372.439553][ T7344] netlink: 'syz.3.384': attribute type 16 has an invalid length. [ 372.454547][ T7344] netlink: 'syz.3.384': attribute type 17 has an invalid length. [ 372.482783][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.508349][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.608925][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.617015][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.624318][ T7249] bridge_slave_1: entered allmulticast mode [ 372.635900][ T7249] bridge_slave_1: entered promiscuous mode [ 372.664180][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.671420][ T7344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.680012][ T5885] Bluetooth: hci0: command tx timeout [ 372.686789][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.693948][ T7344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.856445][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.869748][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.020468][ T7363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.389'. [ 373.021310][ T7249] team0: Port device team_slave_0 added [ 373.102302][ T7249] team0: Port device team_slave_1 added [ 373.574024][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.588557][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.653549][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.789733][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.816364][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.862311][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.129391][ T7249] hsr_slave_0: entered promiscuous mode [ 374.145758][ T7249] hsr_slave_1: entered promiscuous mode [ 374.152798][ T7249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.166055][ T7249] Cannot create hsr debugfs directory [ 374.276951][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 374.300478][ T7404] x_tables: duplicate underflow at hook 2 [ 374.347415][ T7403] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 374.355581][ T7403] netlink: 'syz.0.400': attribute type 4 has an invalid length. [ 374.363402][ T7403] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.400'. [ 374.374693][ T7403] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 374.382514][ T7403] netlink: 'syz.0.400': attribute type 4 has an invalid length. [ 374.390994][ T7403] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.400'. [ 374.748846][ T5885] Bluetooth: hci0: command tx timeout [ 374.844052][ T7417] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 375.014041][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 375.555678][ T7445] block nbd0: server does not support multiple connections per device. [ 375.578769][ T7445] block nbd0: shutting down sockets [ 375.816422][ T7249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.851751][ T7249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.881808][ T7249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.916499][ T7249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.019896][ T7462] syzkaller1: entered promiscuous mode [ 376.037902][ T7462] syzkaller1: entered allmulticast mode [ 376.045462][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. [ 376.064315][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'. [ 376.216096][ T7249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.260314][ T7249] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.284333][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.291625][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.313590][ T7470] x_tables: duplicate underflow at hook 1 [ 376.323532][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.330832][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.792899][ T7487] tipc: Enabling of bearer rejected, failed to enable media [ 376.824798][ T5885] Bluetooth: hci0: command tx timeout [ 377.123502][ T7249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.218954][ T7506] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 377.231607][ T7506] __nla_validate_parse: 1 callbacks suppressed [ 377.231627][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 377.273232][ T7249] veth0_vlan: entered promiscuous mode [ 377.333279][ T7513] tipc: Enabling not permitted [ 377.342292][ T7513] tipc: Enabling of bearer rejected, failed to enable media [ 377.361780][ T7249] veth1_vlan: entered promiscuous mode [ 377.738493][ T7249] veth0_macvtap: entered promiscuous mode [ 377.759915][ T7249] veth1_macvtap: entered promiscuous mode [ 377.831879][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.874331][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.939293][ T7249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.960401][ T7249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.014670][ T7249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.026494][ T7249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.387077][ T7528] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 378.412526][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.438'. [ 378.572456][ T4602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.588766][ T4602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.777684][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.812102][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.260770][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'. [ 379.474653][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 379.483786][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 379.591921][ T7583] gre0: entered promiscuous mode [ 379.623546][ T7583] gre0: entered allmulticast mode [ 379.702362][ T3909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.858137][ T3909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.883211][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.893912][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.953269][ T3909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.046079][ T3909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.162947][ T3909] bridge_slave_1: left allmulticast mode [ 380.168939][ T3909] bridge_slave_1: left promiscuous mode [ 380.177897][ T3909] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.189056][ T3909] bridge_slave_0: left allmulticast mode [ 380.195215][ T3909] bridge_slave_0: left promiscuous mode [ 380.201110][ T3909] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.398649][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.452'. [ 380.876752][ T3909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.896957][ T3909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.903050][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.916111][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.919178][ T3909] bond0 (unregistering): Released all slaves [ 380.925885][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.939087][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.948337][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.120841][ T7608] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 381.186461][ T7611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.460'. [ 381.238578][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'. [ 381.267274][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 381.456388][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.464253][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.740071][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.977244][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.429034][ T7606] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.438383][ T7606] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.447694][ T7606] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.458753][ T7606] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.468323][ T7606] geneve2: left promiscuous mode [ 382.608349][ T7639] syzkaller1: entered promiscuous mode [ 382.613903][ T7639] syzkaller1: entered allmulticast mode [ 382.984331][ T7657] netlink: 'syz.3.469': attribute type 72 has an invalid length. [ 382.995671][ T5150] Bluetooth: hci0: command tx timeout [ 383.000077][ T7657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.469'. [ 383.181915][ T3909] hsr_slave_0: left promiscuous mode [ 383.198273][ T3909] hsr_slave_1: left promiscuous mode [ 383.205458][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.213185][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.257103][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.269999][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.310116][ T3909] veth1_macvtap: left promiscuous mode [ 383.316226][ T3909] veth0_macvtap: left promiscuous mode [ 383.322116][ T3909] veth1_vlan: left promiscuous mode [ 383.329588][ T3909] veth0_vlan: left promiscuous mode [ 383.343438][ T7670] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 383.373983][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 383.872590][ T3909] team0 (unregistering): Port device team_slave_1 removed [ 383.921629][ T3909] team0 (unregistering): Port device team_slave_0 removed [ 384.365175][ T7670] tipc: Started in network mode [ 384.370099][ T7670] tipc: Node identity , cluster identity 4711 [ 384.380148][ T7670] tipc: Failed to set node id, please configure manually [ 384.388515][ T7670] tipc: Enabling of bearer rejected, failed to enable media [ 384.575232][ T7680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.813908][ T7603] chnl_net:caif_netlink_parms(): no params data found [ 384.881948][ T7692] veth0_to_bridge: entered promiscuous mode [ 384.891922][ T7696] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 384.990651][ T7696] bond1: entered promiscuous mode [ 384.996509][ T7696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.005901][ T7693] veth1_macvtap: left promiscuous mode [ 385.064689][ T5150] Bluetooth: hci0: command tx timeout [ 385.100617][ T7701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.109627][ T7701] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 385.127315][ T7701] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 385.148296][ T7701] bond1: (slave ip6gre1): making interface the new active one [ 385.156598][ T7701] ip6gre1: entered promiscuous mode [ 385.164065][ T7701] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 385.173701][ T7691] veth0_to_bridge: left promiscuous mode [ 385.408483][ T7712] pim6reg: entered allmulticast mode [ 385.426947][ T7713] pim6reg: left allmulticast mode [ 385.516354][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.523777][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.533203][ T7603] bridge_slave_0: entered allmulticast mode [ 385.546928][ T7603] bridge_slave_0: entered promiscuous mode [ 385.585034][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.607363][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.625990][ T7603] bridge_slave_1: entered allmulticast mode [ 385.633975][ T7603] bridge_slave_1: entered promiscuous mode [ 385.710251][ T7718] netlink: 'syz.3.481': attribute type 72 has an invalid length. [ 385.720773][ T7719] netlink: 148 bytes leftover after parsing attributes in process `syz.0.482'. [ 385.724467][ T7718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.481'. [ 385.841881][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.912007][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.950436][ T7724] tipc: Failed to remove unknown binding: 66,1,1/0:2920326955/2920326957 [ 385.981368][ T7724] tipc: Failed to remove unknown binding: 66,1,1/0:2920326955/2920326957 [ 386.007461][ T7724] tipc: Failed to remove unknown binding: 66,1,1/0:2920326955/2920326957 [ 386.070609][ T7603] team0: Port device team_slave_0 added [ 386.115989][ T7603] team0: Port device team_slave_1 added [ 386.240545][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.257354][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.291474][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 386.301336][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.320737][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.490'. [ 386.321314][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 386.355518][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.367981][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.436854][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.587419][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 386.646955][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 386.663247][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.491'. [ 386.681928][ T7603] hsr_slave_0: entered promiscuous mode [ 386.690751][ T7603] hsr_slave_1: entered promiscuous mode [ 386.697528][ T7603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.721339][ T7603] Cannot create hsr debugfs directory [ 387.131176][ T7761] netlink: 'syz.3.495': attribute type 72 has an invalid length. [ 387.155321][ T5150] Bluetooth: hci0: command tx timeout [ 387.426323][ T7767] xt_TCPMSS: Only works on TCP SYN packets [ 387.453748][ T7769] netlink: 'syz.1.499': attribute type 2 has an invalid length. [ 387.673200][ T7773] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 387.711257][ T7603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.763960][ T7603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.812470][ T7603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.850516][ T7779] netlink: 'syz.0.503': attribute type 9 has an invalid length. [ 387.857663][ T7603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.865502][ T7779] netlink: 'syz.0.503': attribute type 7 has an invalid length. [ 387.873196][ T7779] netlink: 'syz.0.503': attribute type 8 has an invalid length. [ 388.052008][ T7785] __nla_validate_parse: 3 callbacks suppressed [ 388.052029][ T7785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.506'. [ 388.150743][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.231414][ T7789] batman_adv: batadv0: Adding interface: ip6gretap1 [ 388.238835][ T7789] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.278078][ T7789] batman_adv: batadv0: Interface activated: ip6gretap1 [ 388.316687][ T7798] tap0: tun_chr_ioctl cmd 2147767506 [ 388.367664][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 388.398261][ T7603] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.476088][ T7803] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 388.537171][ T3909] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.544473][ T3909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.580714][ T3909] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.587959][ T3909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.224553][ T5150] Bluetooth: hci0: command tx timeout [ 389.560836][ T7820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.516'. [ 389.579184][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 389.694120][ T7603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.738305][ T7826] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 3, id = 0 [ 389.846495][ T7830] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'. [ 389.987386][ T30] audit: type=1107 audit(1748927722.877:2): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÌE' [ 390.264964][ T7842] tipc: Enabling of bearer rejected, failed to enable media [ 390.282989][ T7843] netlink: 'syz.1.523': attribute type 7 has an invalid length. [ 390.310672][ T7844] block nbd0: Unsupported socket: shutdown callout must be supported. [ 390.415327][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.524'. [ 390.434786][ T6151] IPVS: dh: UDP 0.0.0.0:0 - no destination available [ 390.443721][ T7844] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 390.464769][ T7844] netlink: 'syz.0.524': attribute type 2 has an invalid length. [ 390.480390][ T7844] netlink: 'syz.0.524': attribute type 3 has an invalid length. [ 390.492379][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 390.504186][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.524'. [ 390.651106][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.726064][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 390.792196][ T7858] gretap0: entered promiscuous mode [ 390.812258][ T7858] macsec1: entered promiscuous mode [ 390.984230][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 391.254008][ T7603] veth0_vlan: entered promiscuous mode [ 391.329049][ T7603] veth1_vlan: entered promiscuous mode [ 391.659941][ T7603] veth0_macvtap: entered promiscuous mode [ 391.710233][ T7603] veth1_macvtap: entered promiscuous mode [ 391.813541][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.916939][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.937176][ T7603] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.972718][ T7603] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.001607][ T7603] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.044500][ T7603] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.353521][ T7908] team_slave_0: entered promiscuous mode [ 392.359522][ T7908] team_slave_1: entered promiscuous mode [ 392.391213][ T7908] macsec2: entered promiscuous mode [ 392.409141][ T7908] team0: entered promiscuous mode [ 392.415170][ T7908] bond1: entered promiscuous mode [ 392.429749][ T7908] team0: left promiscuous mode [ 392.464942][ T7908] bond1: left promiscuous mode [ 392.470543][ T7908] team_slave_0: left promiscuous mode [ 392.477477][ T7908] team_slave_1: left promiscuous mode [ 392.612065][ T7915] vlan3: entered promiscuous mode [ 392.622603][ T7915] vlan3: entered allmulticast mode [ 392.628272][ T7915] hsr_slave_1: entered allmulticast mode [ 392.716069][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.739830][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.816344][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.840299][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.267249][ T7940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.293180][ T7938] netlink: 'syz.3.550': attribute type 2 has an invalid length. [ 393.338996][ T1339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.407455][ T7938] þ: entered promiscuous mode [ 393.491428][ T1339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.583884][ T1339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.721946][ T1339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.038443][ T1339] bridge_slave_1: left allmulticast mode [ 394.044126][ T1339] bridge_slave_1: left promiscuous mode [ 394.049953][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.059560][ T1339] bridge_slave_0: left allmulticast mode [ 394.065713][ T1339] bridge_slave_0: left promiscuous mode [ 394.071555][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.264963][ C0] IPVS: dh: UDP 0.0.0.0:0 - no destination available [ 394.294663][ T7956] __nla_validate_parse: 5 callbacks suppressed [ 394.294685][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 394.876494][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.891859][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.904788][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.915414][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.928541][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.939999][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.949847][ T7985] delete_channel: no stack [ 394.978184][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.001449][ T1339] bond0 (unregistering): Released all slaves [ 395.509978][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.517930][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.085895][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.127660][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.210616][ T7961] 0·: left allmulticast mode [ 396.377847][ T7961] bridge1: left allmulticast mode [ 396.399581][ T7961] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 396.416181][ T7961] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.431288][ T7961] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.440593][ T7961] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.459174][ T7961] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.477195][ T7961] macsec1: left promiscuous mode [ 396.985731][ T5150] Bluetooth: hci0: command tx timeout [ 397.049687][ T8001] Bluetooth: MGMT ver 1.23 [ 397.131728][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 397.145799][ T8002] C: renamed from lo (while UP) [ 397.195433][ T8002] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 397.280806][ T1339] hsr_slave_0: left promiscuous mode [ 397.296860][ T1339] hsr_slave_1: left promiscuous mode [ 397.306986][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.322749][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.368605][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.394207][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.476503][ T1339] veth1_macvtap: left promiscuous mode [ 397.499285][ T1339] veth0_macvtap: left promiscuous mode [ 397.508901][ T1339] veth1_vlan: left promiscuous mode [ 397.521318][ T1339] veth0_vlan: left promiscuous mode [ 397.702339][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'. [ 398.553452][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 398.598118][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 399.065316][ T5150] Bluetooth: hci0: command tx timeout [ 399.511515][ T7982] chnl_net:caif_netlink_parms(): no params data found [ 399.934087][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.963824][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.994293][ T7982] bridge_slave_0: entered allmulticast mode [ 400.021546][ T7982] bridge_slave_0: entered promiscuous mode [ 400.038713][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.057093][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.080796][ T7982] bridge_slave_1: entered allmulticast mode [ 400.099306][ T7982] bridge_slave_1: entered promiscuous mode [ 400.350957][ T7982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.370660][ T7982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.421953][ T8102] batadv0: entered promiscuous mode [ 400.431259][ T8102] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 400.439451][ T8102] Cannot create hsr debugfs directory [ 400.448534][ T8102] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 400.461156][ T8102] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 400.479981][ T8102] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 400.492236][ T8102] batadv0: left promiscuous mode [ 400.544663][ T8112] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 400.553813][ T8112] netlink: 224 bytes leftover after parsing attributes in process `syz.4.584'. [ 400.623859][ T8105] xfrm1: entered promiscuous mode [ 400.629512][ T8105] xfrm1: entered allmulticast mode [ 400.645865][ T8110] batadv0: entered promiscuous mode [ 400.656483][ T8110] macsec0: entered allmulticast mode [ 400.661973][ T8110] batadv0: entered allmulticast mode [ 400.780481][ T7982] team0: Port device team_slave_0 added [ 400.799936][ T7982] team0: Port device team_slave_1 added [ 400.917140][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 400.936567][ T8101] netlink: 'syz.4.584': attribute type 2 has an invalid length. [ 400.945001][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 400.992610][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.000038][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.030636][ T7982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.052827][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.083038][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.120781][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 401.141484][ T7982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.148076][ T5150] Bluetooth: hci0: command tx timeout [ 401.160203][ T8131] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.590'. [ 401.184773][ T8131] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.590'. [ 401.809654][ T7982] hsr_slave_0: entered promiscuous mode [ 401.829940][ T7982] hsr_slave_1: entered promiscuous mode [ 401.856964][ T7982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.884137][ T7982] Cannot create hsr debugfs directory [ 402.460066][ T8163] syzkaller1: entered promiscuous mode [ 402.466231][ T8163] syzkaller1: entered allmulticast mode [ 402.487896][ T8183] bridge0: entered promiscuous mode [ 402.493213][ T8183] bridge0: entered allmulticast mode [ 402.527310][ T8189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.227929][ T5150] Bluetooth: hci0: command tx timeout [ 403.472665][ T8199] syz.1.604 (8199) used greatest stack depth: 20168 bytes left [ 403.769151][ T7982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.848686][ T7982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.961255][ T7982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.981758][ T8243] ipt_ECN: cannot use operation on non-tcp rule [ 404.037847][ T7982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 404.633913][ T7982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.801721][ T7982] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.965899][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.973163][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.060446][ T3909] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.067687][ T3909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.697556][ T8291] veth1: entered promiscuous mode [ 405.703182][ T8291] vlan4: entered promiscuous mode [ 406.012164][ T7982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.345512][ T8311] xt_time: unknown flags 0x4 [ 406.366299][ T8309] bridge_slave_0: left allmulticast mode [ 406.372770][ T8309] bridge_slave_0: left promiscuous mode [ 406.389730][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.426763][ T8313] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 406.443505][ T8309] bridge_slave_1: left allmulticast mode [ 406.476766][ T8309] bridge_slave_1: left promiscuous mode [ 406.493011][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.541300][ T8309] bond0: (slave bond_slave_0): Releasing backup interface [ 406.568197][ T8309] bond_slave_0: left promiscuous mode [ 406.637935][ T8309] bond0: (slave bond_slave_1): Releasing backup interface [ 406.675960][ T8309] bond_slave_1: left promiscuous mode [ 406.743079][ T8309] team0: Port device team_slave_0 removed [ 406.765673][ T8309] team0: Port device team_slave_1 removed [ 406.783926][ T8309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.813267][ T8309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.827949][ T8309] team0: Port device bond1 removed [ 406.836165][ T8309] bond2: (slave gretap1): Releasing active interface [ 406.846645][ T8309] batman_adv: batadv0: Removing interface: ip6gretap1 [ 406.898640][ T8313] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 406.920199][ T8313] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 406.953635][ T8321] syzkaller1: entered promiscuous mode [ 406.973668][ T8321] syzkaller1: entered allmulticast mode [ 407.042915][ T7982] veth0_vlan: entered promiscuous mode [ 407.257634][ T7982] veth1_vlan: entered promiscuous mode [ 407.462913][ T7982] veth0_macvtap: entered promiscuous mode [ 407.493724][ T7982] veth1_macvtap: entered promiscuous mode [ 407.518409][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.559181][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.612885][ T7982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.638581][ T7982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.657729][ T7982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.674994][ T7982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.697098][ T8332] netlink: 'syz.3.628': attribute type 10 has an invalid length. [ 407.953588][ T3909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.977310][ T3909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.047609][ T3909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.074745][ T3909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.385997][ T8368] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 408.408827][ T8368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.867436][ T3909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.991039][ T3909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.097930][ T3909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.163287][ T3909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.276468][ T3909] bridge_slave_1: left allmulticast mode [ 409.282139][ T3909] bridge_slave_1: left promiscuous mode [ 409.289080][ T3909] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.298560][ T3909] bridge_slave_0: left allmulticast mode [ 409.304212][ T3909] bridge_slave_0: left promiscuous mode [ 409.312326][ T3909] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.390969][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 410.400554][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 410.408560][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 410.417467][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.428623][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.795233][ T3909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.833389][ T3909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.855351][ T3909] bond0 (unregistering): Released all slaves [ 411.603824][ T3909] hsr_slave_0: left promiscuous mode [ 411.613761][ T3909] hsr_slave_1: left promiscuous mode [ 411.628810][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.641207][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.663322][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.671339][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.707094][ T3909] veth1_macvtap: left promiscuous mode [ 411.716970][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 411.726251][ T3909] veth0_macvtap: left promiscuous mode [ 411.732227][ T3909] veth1_vlan: left promiscuous mode [ 411.739123][ T3909] veth0_vlan: left promiscuous mode [ 412.281246][ T8466] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.664'. [ 412.514766][ T5150] Bluetooth: hci0: command tx timeout [ 412.535515][ T3909] team0 (unregistering): Port device team_slave_1 removed [ 412.582589][ T8470] No such timeout policy "syz0" [ 412.593253][ T3909] team0 (unregistering): Port device team_slave_0 removed [ 413.090275][ T8421] chnl_net:caif_netlink_parms(): no params data found [ 413.114106][ T8459] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 413.145050][ T8470] vlan0 speed is unknown, defaulting to 1000 [ 413.199871][ T8470] vlan0 speed is unknown, defaulting to 1000 [ 413.275202][ T8478] netlink: 'syz.4.667': attribute type 1 has an invalid length. [ 413.287394][ T8470] vlan0 speed is unknown, defaulting to 1000 [ 413.306024][ T8478] netlink: 'syz.4.667': attribute type 4 has an invalid length. [ 413.313746][ T8478] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.667'. [ 413.328265][ T8478] netlink: 'syz.4.667': attribute type 1 has an invalid length. [ 413.334702][ T8470] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 413.336542][ T8478] netlink: 224 bytes leftover after parsing attributes in process `syz.4.667'. [ 413.418335][ T8470] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 413.509665][ T8421] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.537857][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.570453][ T8421] bridge_slave_0: entered allmulticast mode [ 413.623107][ T8421] bridge_slave_0: entered promiscuous mode [ 413.726032][ T8421] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.733978][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.744643][ T8470] vlan0 speed is unknown, defaulting to 1000 [ 413.765087][ T8421] bridge_slave_1: entered allmulticast mode [ 413.772797][ T8421] bridge_slave_1: entered promiscuous mode [ 413.788625][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 413.813957][ T8470] vlan0 speed is unknown, defaulting to 1000 [ 413.816834][ T8496] netpci0: tun_chr_ioctl cmd 1074025672 [ 413.827882][ T8496] netpci0: ignored: set checksum disabled [ 413.870717][ T8470] vlan0 speed is unknown, defaulting to 1000 [ 413.879594][ T8470] vlan0 speed is unknown, defaulting to 1000 [ 413.952272][ T8470] vlan0 speed is unknown, defaulting to 1000 [ 413.975282][ T8421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.997862][ T8421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.028432][ T8470] vlan0 speed is unknown, defaulting to 1000 [ 414.074691][ T8499] vlan0 speed is unknown, defaulting to 1000 [ 414.185390][ T8421] team0: Port device team_slave_0 added [ 414.258203][ T8421] team0: Port device team_slave_1 added [ 414.414275][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.430646][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.467788][ T8421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.500519][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.509618][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.538024][ T8421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.585724][ T5150] Bluetooth: hci0: command tx timeout [ 414.744954][ T8421] hsr_slave_0: entered promiscuous mode [ 414.751439][ T8421] hsr_slave_1: entered promiscuous mode [ 414.758843][ T8421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.766478][ T8421] Cannot create hsr debugfs directory [ 415.192038][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 415.513429][ T8551] netlink: 92 bytes leftover after parsing attributes in process `syz.1.689'. [ 415.574871][ T8421] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 415.597754][ T8421] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 415.628191][ T8421] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 415.652981][ T8421] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 415.661109][ T8555] netlink: 68 bytes leftover after parsing attributes in process `syz.4.690'. [ 415.858400][ T8562] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 416.134108][ T8563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.147791][ T8563] batadv_slave_1 (unregistering): left promiscuous mode [ 416.406092][ T8421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.490576][ T8421] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.524964][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.532242][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.616379][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.623614][ T8047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.664575][ T5150] Bluetooth: hci0: command tx timeout [ 416.848687][ T8421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.152136][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'. [ 417.206393][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 417.301277][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 417.312212][ T8616] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 417.369717][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.410873][ T8620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.706'. [ 417.492057][ T8421] veth0_vlan: entered promiscuous mode [ 417.552368][ T8421] veth1_vlan: entered promiscuous mode [ 417.664228][ T8421] veth0_macvtap: entered promiscuous mode [ 417.701449][ T8421] veth1_macvtap: entered promiscuous mode [ 417.704619][ T8633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.711'. [ 417.759471][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.800178][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.838328][ T8421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.868756][ T8421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.895641][ T8421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.919581][ T8421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.942432][ T8637] netlink: 'syz.3.713': attribute type 6 has an invalid length. [ 418.111079][ T8642] vlan0 speed is unknown, defaulting to 1000 [ 418.200510][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.214249][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.241074][ T8651] x_tables: duplicate underflow at hook 3 [ 418.338299][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.374591][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.402290][ T8655] netlink: 'syz.3.721': attribute type 8 has an invalid length. [ 418.528989][ T8655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.578757][ T8663] FAULT_INJECTION: forcing a failure. [ 418.578757][ T8663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.592667][ T8663] CPU: 1 UID: 0 PID: 8663 Comm: syz.4.723 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 418.592696][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.592710][ T8663] Call Trace: [ 418.592719][ T8663] [ 418.592728][ T8663] dump_stack_lvl+0x189/0x250 [ 418.592772][ T8663] ? __pfx____ratelimit+0x10/0x10 [ 418.592802][ T8663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.592834][ T8663] ? __pfx__printk+0x10/0x10 [ 418.592858][ T8663] ? __might_fault+0xb0/0x130 [ 418.592903][ T8663] should_fail_ex+0x414/0x560 [ 418.592938][ T8663] _copy_from_iter+0x1db/0x16f0 [ 418.592975][ T8663] ? rcu_is_watching+0x15/0xb0 [ 418.593006][ T8663] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 418.593036][ T8663] ? __pfx__copy_from_iter+0x10/0x10 [ 418.593065][ T8663] ? __build_skb_around+0x257/0x3e0 [ 418.593100][ T8663] ? netlink_sendmsg+0x642/0xb30 [ 418.593117][ T8663] ? skb_put+0x11b/0x210 [ 418.593150][ T8663] netlink_sendmsg+0x6b2/0xb30 [ 418.593176][ T8663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.593197][ T8663] ? aa_sock_msg_perm+0x94/0x160 [ 418.593224][ T8663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.593259][ T8663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.593276][ T8663] __sock_sendmsg+0x219/0x270 [ 418.593349][ T8663] ____sys_sendmsg+0x505/0x830 [ 418.593376][ T8663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.593407][ T8663] ? import_iovec+0x74/0xa0 [ 418.593432][ T8663] ___sys_sendmsg+0x21f/0x2a0 [ 418.593454][ T8663] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.593512][ T8663] ? __fget_files+0x2a/0x420 [ 418.593544][ T8663] ? __fget_files+0x3a0/0x420 [ 418.593593][ T8663] __x64_sys_sendmsg+0x19b/0x260 [ 418.593621][ T8663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.593651][ T8663] ? __pfx_ksys_write+0x10/0x10 [ 418.593677][ T8663] ? rcu_is_watching+0x15/0xb0 [ 418.593715][ T8663] ? do_syscall_64+0xbe/0x3b0 [ 418.593747][ T8663] do_syscall_64+0xfa/0x3b0 [ 418.593771][ T8663] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.593794][ T8663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.593814][ T8663] ? clear_bhb_loop+0x60/0xb0 [ 418.593838][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.593856][ T8663] RIP: 0033:0x7fc55098e969 [ 418.593874][ T8663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.593889][ T8663] RSP: 002b:00007fc5517a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.593910][ T8663] RAX: ffffffffffffffda RBX: 00007fc550bb5fa0 RCX: 00007fc55098e969 [ 418.593924][ T8663] RDX: 0000000000000804 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 418.593936][ T8663] RBP: 00007fc5517a3090 R08: 0000000000000000 R09: 0000000000000000 [ 418.593947][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.593958][ T8663] R13: 0000000000000000 R14: 00007fc550bb5fa0 R15: 00007ffe038953d8 [ 418.593988][ T8663] [ 418.885247][ T5150] Bluetooth: hci0: command tx timeout [ 418.904791][ T8655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.924193][ T8655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.933167][ T8655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.091633][ T8670] tipc: Enabled bearer , priority 10 [ 419.350363][ T8678] hsr0: entered promiscuous mode [ 419.361624][ T8678] macvtap1: entered promiscuous mode [ 419.378620][ T8678] macvtap1: entered allmulticast mode [ 419.401216][ T8678] hsr0: entered allmulticast mode [ 419.412501][ T8678] hsr_slave_0: entered allmulticast mode [ 419.448406][ T8678] hsr0: left allmulticast mode [ 419.464089][ T8678] hsr_slave_0: left allmulticast mode [ 419.486366][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'. [ 419.758757][ T8696] netlink: 452 bytes leftover after parsing attributes in process `syz.3.734'. [ 420.010868][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.737'. [ 420.190301][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.207195][ T5977] tipc: Node number set to 2886997007 [ 420.340026][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.447218][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.524196][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.640959][ T36] bridge_slave_1: left allmulticast mode [ 420.647023][ T36] bridge_slave_1: left promiscuous mode [ 420.652770][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.662860][ T36] bridge_slave_0: left allmulticast mode [ 420.668856][ T36] bridge_slave_0: left promiscuous mode [ 420.676847][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.026440][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.044661][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.055572][ T36] bond0 (unregistering): Released all slaves [ 421.272568][ T8716] FAULT_INJECTION: forcing a failure. [ 421.272568][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.305243][ T8716] CPU: 0 UID: 0 PID: 8716 Comm: syz.4.741 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 421.305276][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.305289][ T8716] Call Trace: [ 421.305298][ T8716] [ 421.305308][ T8716] dump_stack_lvl+0x189/0x250 [ 421.305349][ T8716] ? __pfx____ratelimit+0x10/0x10 [ 421.305377][ T8716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.305409][ T8716] ? __pfx__printk+0x10/0x10 [ 421.305475][ T8716] ? __might_fault+0xb0/0x130 [ 421.305519][ T8716] should_fail_ex+0x414/0x560 [ 421.305554][ T8716] _copy_from_user+0x2d/0xb0 [ 421.305578][ T8716] __sys_bpf+0x1ed/0x860 [ 421.305609][ T8716] ? __pfx___sys_bpf+0x10/0x10 [ 421.305650][ T8716] ? ksys_write+0x22a/0x250 [ 421.305680][ T8716] ? __pfx_ksys_write+0x10/0x10 [ 421.305705][ T8716] ? rcu_is_watching+0x15/0xb0 [ 421.305745][ T8716] __x64_sys_bpf+0x7c/0x90 [ 421.305769][ T8716] do_syscall_64+0xfa/0x3b0 [ 421.305794][ T8716] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.305819][ T8716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.305840][ T8716] ? clear_bhb_loop+0x60/0xb0 [ 421.305866][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.305886][ T8716] RIP: 0033:0x7fc55098e969 [ 421.305905][ T8716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.305922][ T8716] RSP: 002b:00007fc5517a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.305946][ T8716] RAX: ffffffffffffffda RBX: 00007fc550bb5fa0 RCX: 00007fc55098e969 [ 421.305961][ T8716] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000008 [ 421.305975][ T8716] RBP: 00007fc5517a3090 R08: 0000000000000000 R09: 0000000000000000 [ 421.305988][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.306001][ T8716] R13: 0000000000000000 R14: 00007fc550bb5fa0 R15: 00007ffe038953d8 [ 421.306042][ T8716] [ 421.780107][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'. [ 421.797494][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 421.863300][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.874189][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.891266][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.902831][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.911129][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.993905][ T36] hsr_slave_0: left promiscuous mode [ 422.001887][ T36] hsr_slave_1: left promiscuous mode [ 422.008729][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.016497][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.028724][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.036403][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.067036][ T36] veth1_macvtap: left promiscuous mode [ 422.072662][ T36] veth0_macvtap: left promiscuous mode [ 422.078611][ T36] veth1_vlan: left promiscuous mode [ 422.096843][ T36] veth0_vlan: left promiscuous mode [ 422.418861][ T8743] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.766811][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 422.870355][ T36] team0 (unregistering): Port device team_slave_1 removed [ 422.910658][ T36] team0 (unregistering): Port device team_slave_0 removed [ 422.921248][ T8756] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 422.937512][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.752'. [ 423.353507][ T8729] vlan0 speed is unknown, defaulting to 1000 [ 423.385496][ T8755] tipc: Enabling of bearer rejected, failed to enable media [ 423.415262][ T8756] geneve0: left allmulticast mode [ 423.442264][ T8756] team0: Port device geneve0 added [ 423.475987][ T8758] FAULT_INJECTION: forcing a failure. [ 423.475987][ T8758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.519150][ T8758] CPU: 1 UID: 0 PID: 8758 Comm: syz.1.753 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 423.519186][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.519200][ T8758] Call Trace: [ 423.519209][ T8758] [ 423.519219][ T8758] dump_stack_lvl+0x189/0x250 [ 423.519262][ T8758] ? __pfx____ratelimit+0x10/0x10 [ 423.519288][ T8758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.519322][ T8758] ? __pfx__printk+0x10/0x10 [ 423.519360][ T8758] should_fail_ex+0x414/0x560 [ 423.519394][ T8758] _copy_to_user+0x31/0xb0 [ 423.519419][ T8758] simple_read_from_buffer+0xe1/0x170 [ 423.519504][ T8758] proc_fail_nth_read+0x1df/0x250 [ 423.519532][ T8758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.519559][ T8758] ? rw_verify_area+0x258/0x650 [ 423.519586][ T8758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.519610][ T8758] vfs_read+0x200/0x980 [ 423.519643][ T8758] ? __pfx___mutex_lock+0x10/0x10 [ 423.519676][ T8758] ? __pfx_vfs_read+0x10/0x10 [ 423.519704][ T8758] ? __fget_files+0x2a/0x420 [ 423.519741][ T8758] ? __fget_files+0x3a0/0x420 [ 423.519771][ T8758] ? __fget_files+0x2a/0x420 [ 423.519814][ T8758] ksys_read+0x145/0x250 [ 423.519853][ T8758] ? __pfx_ksys_read+0x10/0x10 [ 423.519878][ T8758] ? rcu_is_watching+0x15/0xb0 [ 423.519940][ T8758] ? do_syscall_64+0xbe/0x3b0 [ 423.519972][ T8758] do_syscall_64+0xfa/0x3b0 [ 423.519997][ T8758] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.520022][ T8758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.520040][ T8758] ? clear_bhb_loop+0x60/0xb0 [ 423.520062][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.520080][ T8758] RIP: 0033:0x7f425038d37c [ 423.520096][ T8758] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 423.520111][ T8758] RSP: 002b:00007f4251200030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.520131][ T8758] RAX: ffffffffffffffda RBX: 00007f42505b5fa0 RCX: 00007f425038d37c [ 423.520144][ T8758] RDX: 000000000000000f RSI: 00007f42512000a0 RDI: 0000000000000005 [ 423.520155][ T8758] RBP: 00007f4251200090 R08: 0000000000000000 R09: 0000000000000000 [ 423.520166][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.520176][ T8758] R13: 0000000000000000 R14: 00007f42505b5fa0 R15: 00007fff003160f8 [ 423.520203][ T8758] [ 423.946598][ T5150] Bluetooth: hci0: command tx timeout [ 424.140885][ T8777] syz.0.759 (8777) used obsolete PPPIOCDETACH ioctl [ 424.332845][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 424.398849][ T8729] chnl_net:caif_netlink_parms(): no params data found [ 424.466103][ T8795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.879706][ T8817] Cannot find add_set index 2 as target [ 424.918907][ T8811] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.767'. [ 425.018848][ T8729] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.035415][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.042888][ T8729] bridge_slave_0: entered allmulticast mode [ 425.087461][ T8729] bridge_slave_0: entered promiscuous mode [ 425.122226][ T8821] netlink: 136 bytes leftover after parsing attributes in process `syz.3.772'. [ 425.152810][ T8821] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 425.198786][ T8729] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.211249][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.220063][ T8729] bridge_slave_1: entered allmulticast mode [ 425.228328][ T8729] bridge_slave_1: entered promiscuous mode [ 425.389207][ T8729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.438368][ T8729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.472303][ T8833] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 425.481141][ T8835] vcan1: entered allmulticast mode [ 425.623748][ T8729] team0: Port device team_slave_0 added [ 425.701231][ T8729] team0: Port device team_slave_1 added [ 425.710935][ T8848] netlink: 'syz.4.780': attribute type 58 has an invalid length. [ 425.886708][ T8729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.893737][ T8729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.900438][ T8851] sctp: [Deprecated]: syz.3.781 (pid 8851) Use of int in maxseg socket option. [ 425.900438][ T8851] Use struct sctp_assoc_value instead [ 425.989523][ T8729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.011164][ T8857] !: renamed from dummy0 [ 426.012555][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 426.038080][ T8729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.045269][ T8729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.071260][ T5150] Bluetooth: hci0: command tx timeout [ 426.172560][ T8729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.222690][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 426.422323][ T8729] hsr_slave_0: entered promiscuous mode [ 426.437605][ T8729] hsr_slave_1: entered promiscuous mode [ 426.444064][ T8729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.464098][ T8729] Cannot create hsr debugfs directory [ 426.806651][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.791'. [ 427.048209][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.793'. [ 427.073402][ T8901] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 427.152829][ T8901] ip6erspan0: entered promiscuous mode [ 427.258363][ T8908] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 427.304780][ T8908] netlink: 'syz.1.793': attribute type 4 has an invalid length. [ 427.328674][ T8908] netlink: 188 bytes leftover after parsing attributes in process `syz.1.793'. [ 427.508377][ T8915] netlink: 'syz.3.797': attribute type 12 has an invalid length. [ 427.543448][ T8915] Bluetooth: MGMT ver 1.23 [ 427.871324][ T8930] __nla_validate_parse: 12 callbacks suppressed [ 427.871346][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 427.981190][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 427.990275][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 428.007636][ T8930] wireguard0: entered promiscuous mode [ 428.028400][ T8930] wireguard0: entered allmulticast mode [ 428.050472][ T8729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.099538][ T8729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.106969][ T5150] Bluetooth: hci0: command tx timeout [ 428.131709][ T8729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.170268][ T8729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 428.320330][ T8945] openvswitch: netlink: Flow key attr not present in new flow. [ 428.373388][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 428.476566][ T8952] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 428.484293][ T8952] netlink: 224 bytes leftover after parsing attributes in process `syz.4.809'. [ 428.521608][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.580073][ T8944] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 428.815843][ T8729] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.847520][ T3909] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.854811][ T3909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.880125][ T3909] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.887428][ T3909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.077448][ T8962] vlan0 speed is unknown, defaulting to 1000 [ 429.250192][ T8974] netlink: 'syz.0.815': attribute type 2 has an invalid length. [ 429.409925][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 429.502359][ T8985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 429.599763][ T8729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.749712][ T8729] veth0_vlan: entered promiscuous mode [ 429.950103][ T8729] veth1_vlan: entered promiscuous mode [ 430.123520][ T8729] veth0_macvtap: entered promiscuous mode [ 430.162531][ T8729] veth1_macvtap: entered promiscuous mode [ 430.184981][ T5150] Bluetooth: hci0: command tx timeout [ 430.228439][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.822'. [ 430.273018][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.317288][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.339028][ T8729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.364092][ T8729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.383944][ T8729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.392839][ T8729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.439684][ T9015] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.472986][ T9015] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.485651][ T9015] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.502907][ T9015] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.694085][ T7573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.722304][ T7573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.811913][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.831303][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.852669][ T9026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.826'. [ 431.086418][ T9027] vlan0 speed is unknown, defaulting to 1000 [ 431.327646][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 431.371661][ T9040] netlink: 'syz.3.832': attribute type 32 has an invalid length. [ 431.409454][ T9038] syzkaller0: entered promiscuous mode [ 431.415034][ T9038] syzkaller0: entered allmulticast mode [ 431.819528][ T9040] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 432.016685][ T7573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.929617][ T9060] __nla_validate_parse: 1 callbacks suppressed [ 432.929642][ T9060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.834'. [ 433.176115][ T9067] netlink: 'syz.4.837': attribute type 9 has an invalid length. [ 433.186524][ T9067] netlink: 'syz.4.837': attribute type 6 has an invalid length. [ 433.607573][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.618490][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.633863][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.646261][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.662309][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.412812][ T7573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.455887][ T9086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.841'. [ 434.488716][ T9086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.841'. [ 434.516203][ T9086] netlink: 11 bytes leftover after parsing attributes in process `syz.4.841'. [ 434.635502][ T7573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.681299][ T9088] bond0: (slave wlan1): Releasing backup interface [ 434.702776][ T9088] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 434.801928][ T9102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 434.834481][ T9102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 434.913590][ T7573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.949940][ T9097] 8021q: VLANs not supported on bond0 [ 434.975794][ T9104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.846'. [ 434.994561][ T9080] vlan0 speed is unknown, defaulting to 1000 [ 435.139731][ T9108] Bluetooth: MGMT ver 1.23 [ 435.146782][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 435.235091][ T9107] bridge7: entered promiscuous mode [ 435.240393][ T9107] bridge7: entered allmulticast mode [ 435.291158][ T9107] team0: Port device bridge7 added [ 435.618434][ T7573] bridge_slave_1: left allmulticast mode [ 435.631879][ T7573] bridge_slave_1: left promiscuous mode [ 435.651952][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.685770][ T7573] bridge_slave_0: left allmulticast mode [ 435.691488][ T7573] bridge_slave_0: left promiscuous mode [ 435.705819][ T5150] Bluetooth: hci0: command tx timeout [ 435.723680][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.771387][ T9120] netlink: 'syz.1.851': attribute type 4 has an invalid length. [ 436.015283][ T9136] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 436.387751][ T9149] openvswitch: netlink: Flow key attribute not present in set flow. [ 436.403580][ T9150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.580179][ T7573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.597897][ T7573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.609656][ T7573] bond0 (unregistering): Released all slaves [ 436.800047][ T9143] syzkaller1: entered promiscuous mode [ 436.807488][ T9143] syzkaller1: entered allmulticast mode [ 437.117387][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 437.288704][ T7573] hsr_slave_0: left promiscuous mode [ 437.321309][ T7573] hsr_slave_1: left promiscuous mode [ 437.335224][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.340729][ T9182] netlink: 56 bytes leftover after parsing attributes in process `syz.3.863'. [ 437.349790][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.363437][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.378922][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.439318][ T7573] veth1_macvtap: left promiscuous mode [ 437.450203][ T7573] veth0_macvtap: left promiscuous mode [ 437.458641][ T7573] veth1_vlan: left promiscuous mode [ 437.464223][ T7573] veth0_vlan: left promiscuous mode [ 437.784912][ T5150] Bluetooth: hci0: command tx timeout [ 438.467028][ T7573] team0 (unregistering): Port device team_slave_1 removed [ 438.541922][ T7573] team0 (unregistering): Port device team_slave_0 removed [ 439.497999][ T9194] dummy0: entered promiscuous mode [ 439.503829][ T9194] vlan4: entered promiscuous mode [ 439.570308][ T9195] vlan4: entered promiscuous mode [ 439.609809][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.627289][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.646775][ T9080] bridge_slave_0: entered allmulticast mode [ 439.680889][ T9080] bridge_slave_0: entered promiscuous mode [ 439.703112][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.725401][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.741940][ T9080] bridge_slave_1: entered allmulticast mode [ 439.750261][ T9080] bridge_slave_1: entered promiscuous mode [ 439.799037][ T9205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.869'. [ 439.866562][ T5150] Bluetooth: hci0: command tx timeout [ 439.973979][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.018252][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.163342][ T9080] team0: Port device team_slave_0 added [ 440.176226][ T9080] team0: Port device team_slave_1 added [ 440.466452][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.497372][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.559748][ T9080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.621811][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.641551][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.696530][ T9080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.989146][ T9080] hsr_slave_0: entered promiscuous mode [ 441.064024][ T9080] hsr_slave_1: entered promiscuous mode [ 441.078704][ T9080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.094216][ T9080] Cannot create hsr debugfs directory [ 441.321373][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.507666][ T9246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.596350][ T9246] bond2: entered promiscuous mode [ 441.618497][ T9251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.883'. [ 441.629022][ T9246] bond0: (slave bond2): Enslaving as an active interface with an up link [ 441.943009][ T9259] syzkaller1: entered promiscuous mode [ 441.952820][ T9259] syzkaller1: entered allmulticast mode [ 441.955253][ T5150] Bluetooth: hci0: command tx timeout [ 441.980427][ T9259] sctp: [Deprecated]: syz.3.886 (pid 9259) Use of int in maxseg socket option. [ 441.980427][ T9259] Use struct sctp_assoc_value instead [ 442.231079][ T9266] vlan0 speed is unknown, defaulting to 1000 [ 442.342291][ T9277] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 442.365724][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 442.741105][ T9281] vlan0 speed is unknown, defaulting to 1000 [ 442.783398][ T9080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.815663][ T9080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.895071][ T9080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.918648][ T9080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.097743][ T9274] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 443.546448][ T9294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.569258][ T9294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.598534][ T9294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.635207][ T9294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.674668][ T9294] geneve4: entered promiscuous mode [ 443.698884][ T9294] geneve4: entered allmulticast mode [ 443.806805][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.984056][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.058930][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.066224][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.084671][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.091924][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.953452][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.109033][ T9080] veth0_vlan: entered promiscuous mode [ 445.135927][ T9080] veth1_vlan: entered promiscuous mode [ 445.163370][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 445.186907][ T9333] netlink: 48 bytes leftover after parsing attributes in process `syz.4.901'. [ 445.196828][ T9333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.204190][ T9333] IPv6: NLM_F_CREATE should be set when creating new route [ 445.244612][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 445.275108][ T9080] veth0_macvtap: entered promiscuous mode [ 445.320782][ T9080] veth1_macvtap: entered promiscuous mode [ 445.372769][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.422908][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.452039][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 445.462765][ T9080] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.491838][ T9080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.518899][ T9080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.532131][ T9080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.589141][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.907'. [ 445.637457][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.907'. [ 445.763421][ T749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.772869][ T9356] Bluetooth: MGMT ver 1.23 [ 445.777492][ T749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.845774][ T9360] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 445.866284][ T749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.912309][ T749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.964807][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 445.990398][ T9365] netlink: 3 bytes leftover after parsing attributes in process `syz.0.911'. [ 446.009658][ T9360] bond3: entered promiscuous mode [ 446.016582][ T9360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.227497][ T9365] batadv1: entered promiscuous mode [ 446.232788][ T9365] batadv1: entered allmulticast mode [ 446.332468][ T9383] xt_limit: Overflow, try lower: 262144/524288 [ 446.347595][ T9385] xt_limit: Overflow, try lower: 262144/524288 [ 446.561836][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'. [ 446.675989][ T9393] netlink: 2 bytes leftover after parsing attributes in process `syz.4.921'. [ 447.540748][ T9436] netlink: 'syz.4.934': attribute type 9 has an invalid length. [ 447.855175][ T9448] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 447.882875][ T9450] sctp: [Deprecated]: syz.4.941 (pid 9450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.882875][ T9450] Use struct sctp_sack_info instead [ 447.969204][ T9452] netlink: 'syz.3.942': attribute type 5 has an invalid length. [ 447.997726][ T9457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.360825][ T9472] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 448.504757][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 448.514189][ T5881] Bluetooth: hci3: command 0x0406 tx timeout [ 448.520541][ T5883] Bluetooth: hci2: command 0x0406 tx timeout [ 448.873165][ T9486] syzkaller1: entered promiscuous mode [ 448.883149][ T9486] syzkaller1: entered allmulticast mode [ 449.325289][ T9507] raw_sendmsg: syz.0.960 forgot to set AF_INET. Fix it! [ 449.652862][ T9518] xt_hashlimit: size too large, truncated to 1048576 [ 449.660401][ T9518] xt_hashlimit: overflow, try lower: 3/0 [ 450.278603][ T9544] __nla_validate_parse: 29 callbacks suppressed [ 450.278627][ T9544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.971'. [ 450.455533][ T9546] vlan0 speed is unknown, defaulting to 1000 [ 450.869293][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.975'. [ 450.954108][ T9565] vlan0 speed is unknown, defaulting to 1000 [ 451.392057][ T9578] netlink: 76 bytes leftover after parsing attributes in process `syz.3.978'. [ 451.600123][ T9580] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 451.624154][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 451.659496][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 452.550150][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 453.645250][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.997'. [ 453.664784][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.997'. [ 453.913565][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 453.978692][ T30] audit: type=1800 audit(1748927786.867:3): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.997" name="cgroup.controllers" dev="tmpfs" ino=1429 res=0 errno=0 [ 454.037554][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 454.192790][ T9658] bridge_slave_1: left allmulticast mode [ 454.218005][ T9658] bridge_slave_1: left promiscuous mode [ 454.225716][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.253910][ T9658] bridge_slave_0: left allmulticast mode [ 454.260488][ T9658] bridge_slave_0: left promiscuous mode [ 454.294854][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.451294][ T9671] xt_hashlimit: size too large, truncated to 1048576 [ 454.678227][ T9682] netlink: 'syz.4.1004': attribute type 1 has an invalid length. [ 454.788209][ T9684] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 455.113028][ T9698] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3) [ 455.344715][ T9710] __nla_validate_parse: 4 callbacks suppressed [ 455.344784][ T9710] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1013'. [ 455.402224][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 455.435220][ T9710] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1013'. [ 455.508307][ T9710] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1013'. [ 455.552235][ T9718] geneve0: entered allmulticast mode [ 455.940172][ T9727] batadv_slave_1: entered promiscuous mode [ 455.941772][ T9729] netlink: 'syz.3.1022': attribute type 11 has an invalid length. [ 455.984583][ T9729] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1022'. [ 456.381929][ T9746] syz.0.1025 uses old SIOCAX25GETINFO [ 456.538997][ T9753] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 456.552776][ T9753] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1027'. [ 456.582468][ T9753] NCSI netlink: No device for ifindex 813332851 [ 456.605303][ T9753] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 456.737011][ T9726] batadv_slave_1: left promiscuous mode [ 456.851022][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 456.873942][ T9757] vlan0 speed is unknown, defaulting to 1000 [ 457.923913][ T9794] tipc: Started in network mode [ 457.939413][ T9794] tipc: Node identity 4, cluster identity 229 [ 457.955212][ T9794] tipc: Node number set to 4 [ 458.030564][ T9808] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1038'. [ 458.222886][ T9811] bridge4: entered allmulticast mode [ 458.300989][ T9811] netlink: 'syz.4.1041': attribute type 10 has an invalid length. [ 458.362760][ T9811] team0: Port device wlan1 added [ 458.380432][ T9822] netlink: 'syz.1.1043': attribute type 33 has an invalid length. [ 458.429342][ T9815] vlan0 speed is unknown, defaulting to 1000 [ 458.435984][ T9822] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1043'. [ 458.491439][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 458.664894][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 459.287258][ T9862] delete_channel: no stack [ 459.606951][ T9864] netlink: 'syz.4.1055': attribute type 13 has an invalid length. [ 459.679307][ T9864] tipc: Resetting bearer [ 459.988070][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.995743][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.238137][ T9864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.290597][ T9864] hsr0: left promiscuous mode [ 460.487166][ T9864] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.497613][ T9864] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.511628][ T9864] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.522080][ T9864] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.536664][ T9864] batadv0: left allmulticast mode [ 460.799816][ T9908] netlink: zone id is out of range [ 460.805402][ T9908] netlink: zone id is out of range [ 460.822019][ T9908] netlink: zone id is out of range [ 460.828329][ T9908] netlink: zone id is out of range [ 460.833700][ T9908] netlink: zone id is out of range [ 460.881930][ T9908] netlink: zone id is out of range [ 460.975939][ T9908] netlink: set zone limit has 4 unknown bytes [ 461.081497][ T9912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.206937][ T9912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.323800][ T9912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.447713][ T9931] C: renamed from lo [ 461.459048][ T9934] __nla_validate_parse: 46 callbacks suppressed [ 461.459071][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 461.704778][ T9931] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 461.806762][ T9912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.934004][ T9941] vlan0 speed is unknown, defaulting to 1000 [ 461.969671][ T9912] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.983195][ T9943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.996967][ T9943] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 462.035992][ T9912] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.065402][ T9943] netlink: 'syz.0.1071': attribute type 10 has an invalid length. [ 462.073351][ T9943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1071'. [ 462.112170][ T9943] !: entered promiscuous mode [ 462.121590][ T9943] bridge0: port 1(0!) entered blocking state [ 462.128716][ T9943] bridge0: port 1(0!) entered disabled state [ 462.135465][ T9943] !: entered allmulticast mode [ 462.159802][ T9912] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.212381][ T9912] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.592010][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 462.669362][ T9964] !: left allmulticast mode [ 462.681416][ T9941] netlink: 'syz.4.1072': attribute type 6 has an invalid length. [ 462.681650][ T9964] bridge0: port 1(0!) entered disabled state [ 462.885479][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1078'. [ 463.121598][ T9969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1078'. [ 463.140667][ T9969] nbd: device at index 64 is going down [ 463.355527][ T9985] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 463.507224][ T9984] vlan0 speed is unknown, defaulting to 1000 [ 463.673804][ T9991] netlink: 'syz.0.1084': attribute type 29 has an invalid length. [ 463.682966][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 463.842623][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 464.131461][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 464.482291][T10015] bond0: entered promiscuous mode [ 464.488184][T10015] bond_slave_0: entered promiscuous mode [ 464.494967][T10015] bond_slave_1: entered promiscuous mode [ 464.545556][T10017] vlan0 speed is unknown, defaulting to 1000 [ 464.602719][T10015] vlan0 speed is unknown, defaulting to 1000 [ 464.673841][T10020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1092'. [ 464.683803][T10020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1092'. [ 464.741276][T10022] hsr_slave_0: left promiscuous mode [ 464.759253][T10022] hsr_slave_1: left promiscuous mode [ 465.090468][T10029] openvswitch: netlink: IP tunnel dst address not specified [ 465.152487][T10029] netlink: 'syz.1.1096': attribute type 5 has an invalid length. [ 465.233772][T10029] tipc: Cannot configure node identity twice [ 465.247109][T10024] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 465.471870][T10040] pim6reg: entered allmulticast mode [ 465.582878][T10040] pim6reg: left allmulticast mode [ 465.583116][T10051] x_tables: ip_tables: osf match: only valid for protocol 6 [ 466.112722][T10062] netlink: 'syz.0.1104': attribute type 23 has an invalid length. [ 466.225380][T10072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.778503][T10101] netlink: 'syz.1.1116': attribute type 6 has an invalid length. [ 466.820983][T10103] vlan0 speed is unknown, defaulting to 1000 [ 466.963604][T10113] dvmrp0: entered allmulticast mode [ 467.150269][T10121] __nla_validate_parse: 8 callbacks suppressed [ 467.150292][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1122'. [ 467.687086][T10138] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 467.695770][T10138] nbd: error processing sock list [ 467.701140][T10138] block nbd0: shutting down sockets [ 467.725497][T10141] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 467.744944][T10141] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1126'. [ 467.889383][T10149] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.064609][T10155] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 468.212914][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 468.353219][T10165] netlink: 'syz.3.1134': attribute type 303 has an invalid length. [ 468.389906][T10165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1134'. [ 468.613543][T10171] batadv0: entered promiscuous mode [ 468.623839][T10171] macsec2: entered allmulticast mode [ 468.635227][T10171] batadv0: entered allmulticast mode [ 468.658697][T10171] batadv0: left allmulticast mode [ 468.664365][T10171] batadv0: left promiscuous mode [ 469.050205][T10175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1138'. [ 469.701573][T10181] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1139'. [ 469.806643][T10177] bridge_slave_0 (unregistering): left allmulticast mode [ 469.835046][T10177] bridge_slave_0 (unregistering): left promiscuous mode [ 469.854924][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.181072][T10179] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1139'. [ 470.405682][T10189] pim6reg: entered allmulticast mode [ 470.425704][T10185] pim6reg: left allmulticast mode [ 471.096603][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 471.181662][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056fc6c00: rx timeout, send abort [ 471.607913][T10228] netlink: 'syz.1.1149': attribute type 7 has an invalid length. [ 471.691822][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056fc6c00: abort rx timeout. Force session deactivation [ 471.800055][T10230] vlan0 speed is unknown, defaulting to 1000 [ 472.283494][T10241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.379456][T10240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.419832][T10244] xt_CT: No such helper "snmp" [ 472.532250][T10230] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1151'. [ 472.542693][T10230] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1151'. [ 473.193451][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 473.206207][T10267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1160'. [ 473.925685][T10267] vlan2: entered allmulticast mode [ 473.949031][T10267] syz_tun: entered allmulticast mode [ 474.026905][T10279] tc_dump_action: action bad kind [ 474.220538][T10289] 8021q: VLANs not supported on ip6gre0 [ 474.255344][T10289] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1169'. [ 474.571191][T10304] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 474.582354][T10304] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1170'. [ 474.826934][T10312] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 474.910982][T10315] xt_CT: No such helper "snmp" [ 474.934967][T10316] xt_CT: No such helper "snmp" [ 475.235315][T10331] $Hÿ: renamed from bond0 [ 475.318340][T10339] netlink: 'syz.1.1181': attribute type 4 has an invalid length. [ 475.375921][T10346] netlink: 'syz.1.1181': attribute type 4 has an invalid length. [ 475.398113][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 475.440887][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'. [ 475.770326][T10356] vlan0 speed is unknown, defaulting to 1000 [ 475.784106][T10347] delete_channel: no stack [ 475.870083][T10364] batadv0: entered promiscuous mode [ 475.876631][T10364] vlan2: entered promiscuous mode [ 475.924813][T10366] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 476.149618][T10378] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1191'. [ 476.207428][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 476.360451][T10386] !: left promiscuous mode [ 476.467331][T10386] geneve0: left allmulticast mode [ 476.550072][T10386] wireguard0: left promiscuous mode [ 476.555492][T10386] wireguard0: left allmulticast mode [ 476.579420][T10386] bridge7: left promiscuous mode [ 476.589282][T10386] bridge7: left allmulticast mode [ 476.607633][T10386] bond3: left promiscuous mode [ 476.622613][T10386] batadv1: left promiscuous mode [ 476.622741][T10394] sctp: [Deprecated]: syz.1.1197 (pid 10394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.622741][T10394] Use struct sctp_sack_info instead [ 476.628000][T10386] batadv1: left allmulticast mode [ 476.932807][T10402] A link change request failed with some changes committed already. Interface $Hÿ may have been left with an inconsistent configuration, please check. [ 476.982096][T10404] ieee802154 phy1 wpan1: encryption failed: -22 [ 477.064894][T10401] A link change request failed with some changes committed already. Interface $Hÿ may have been left with an inconsistent configuration, please check. [ 477.186803][T10412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.194139][T10412] IPv6: NLM_F_CREATE should be set when creating new route [ 477.201478][T10412] IPv6: NLM_F_CREATE should be set when creating new route [ 477.208790][T10412] IPv6: NLM_F_CREATE should be set when creating new route [ 477.598820][T10437] __nla_validate_parse: 9 callbacks suppressed [ 477.598844][T10437] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1208'. [ 477.625619][T10437] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 477.801071][T10441] pimreg: entered allmulticast mode [ 478.033162][ T30] audit: type=1800 audit(1748927810.917:4): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1216" name="memory.events" dev="tmpfs" ino=1597 res=0 errno=0 [ 478.292341][T10471] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 478.300369][T10471] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1219'. [ 478.302258][T10472] netlink: 'syz.3.1220': attribute type 5 has an invalid length. [ 478.320352][T10465] vlan0 speed is unknown, defaulting to 1000 [ 478.341235][T10472] ip6erspan0: entered promiscuous mode [ 478.361679][T10476] IPVS: set_ctl: invalid protocol: 61 224.0.0.1:20003 [ 479.461156][T10495] netlink: 'syz.1.1226': attribute type 1 has an invalid length. [ 479.564676][T10500] netlink: 'syz.3.1228': attribute type 4 has an invalid length. [ 480.330522][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 480.553715][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1235'. [ 480.667837][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 480.871464][T10539] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1238'. [ 481.101425][T10531] syz.0.1234 (10531) used greatest stack depth: 14680 bytes left [ 481.119535][T10546] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.248915][T10548] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1243'. [ 481.376248][T10550] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 481.426106][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1246'. [ 481.616568][T10562] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 481.644902][T10565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1247'. [ 481.682135][T10562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.699284][T10562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1248'. [ 481.775959][T10562] ip6erspan0: entered promiscuous mode [ 481.802203][T10562] bond3: (slave ip6erspan0): making interface the new active one [ 481.851866][T10562] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 481.923335][T10572] vlan0: entered allmulticast mode [ 481.938351][T10572] bond3: entered allmulticast mode [ 481.943667][T10572] ip6erspan0: entered allmulticast mode [ 481.959292][T10572] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 482.005827][T10575] netlink: 'syz.4.1252': attribute type 14 has an invalid length. [ 482.271361][T10595] 8021q: VLANs not supported on vxcan1 [ 482.604572][T10603] __nla_validate_parse: 3 callbacks suppressed [ 482.604595][T10603] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1262'. [ 482.642514][T10603] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 482.665473][T10603] team0: Port device syz_tun added [ 483.130887][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 483.314692][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1271'. [ 483.343842][T10638] netlink: 'syz.3.1272': attribute type 4 has an invalid length. [ 483.398045][T10638] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1272'. [ 483.418440][T10638] A link change request failed with some changes committed already. Interface $Hÿ may have been left with an inconsistent configuration, please check. [ 483.450957][T10638] netlink: 'syz.3.1272': attribute type 39 has an invalid length. [ 483.561906][ T7630] ================================================================== [ 483.570047][ T7630] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80 [ 483.577576][ T7630] Read of size 8 at addr ffff88805d5ddb20 by task kworker/1:13/7630 [ 483.585601][ T7630] [ 483.587952][ T7630] CPU: 1 UID: 0 PID: 7630 Comm: kworker/1:13 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 483.587982][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.587998][ T7630] Workqueue: events l2cap_chan_timeout [ 483.588084][ T7630] Call Trace: [ 483.588100][ T7630] [ 483.588110][ T7630] dump_stack_lvl+0x189/0x250 [ 483.588149][ T7630] ? __virt_addr_valid+0x1c8/0x5c0 [ 483.588179][ T7630] ? rcu_is_watching+0x15/0xb0 [ 483.588209][ T7630] ? __kasan_check_byte+0x12/0x40 [ 483.588242][ T7630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.588272][ T7630] ? rcu_is_watching+0x15/0xb0 [ 483.588318][ T7630] ? lock_release+0x4b/0x3e0 [ 483.588349][ T7630] ? __virt_addr_valid+0x1c8/0x5c0 [ 483.588369][ T7630] ? __virt_addr_valid+0x4a5/0x5c0 [ 483.588390][ T7630] print_report+0xd2/0x2b0 [ 483.588426][ T7630] ? __mutex_lock+0x738/0xe80 [ 483.588451][ T7630] kasan_report+0x118/0x150 [ 483.588482][ T7630] ? __mutex_lock+0x738/0xe80 [ 483.588511][ T7630] __mutex_lock+0x738/0xe80 [ 483.588537][ T7630] ? __mutex_lock+0x51b/0xe80 [ 483.588566][ T7630] ? l2cap_chan_timeout+0x63/0x390 [ 483.588590][ T7630] ? __pfx___mutex_lock+0x10/0x10 [ 483.588621][ T7630] ? process_scheduled_works+0x9ef/0x17b0 [ 483.588658][ T7630] l2cap_chan_timeout+0x63/0x390 [ 483.588680][ T7630] ? process_scheduled_works+0x9ef/0x17b0 [ 483.588710][ T7630] process_scheduled_works+0xae1/0x17b0 [ 483.588757][ T7630] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.588798][ T7630] worker_thread+0x8a0/0xda0 [ 483.588844][ T7630] kthread+0x70e/0x8a0 [ 483.588868][ T7630] ? __pfx_worker_thread+0x10/0x10 [ 483.588897][ T7630] ? __pfx_kthread+0x10/0x10 [ 483.588919][ T7630] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.588941][ T7630] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.588972][ T7630] ? __pfx_kthread+0x10/0x10 [ 483.588994][ T7630] ret_from_fork+0x3fc/0x770 [ 483.589025][ T7630] ? __pfx_ret_from_fork+0x10/0x10 [ 483.589055][ T7630] ? __switch_to_asm+0x39/0x70 [ 483.589075][ T7630] ? __switch_to_asm+0x33/0x70 [ 483.589102][ T7630] ? __pfx_kthread+0x10/0x10 [ 483.589124][ T7630] ret_from_fork_asm+0x1a/0x30 [ 483.589155][ T7630] [ 483.589163][ T7630] [ 483.799806][ T7630] Allocated by task 9295: [ 483.804198][ T7630] kasan_save_track+0x3e/0x80 [ 483.808900][ T7630] __kasan_kmalloc+0x93/0xb0 [ 483.813508][ T7630] __kmalloc_cache_noprof+0x230/0x3d0 [ 483.818892][ T7630] l2cap_conn_add+0xaa/0x8d0 [ 483.823503][ T7630] l2cap_chan_connect+0x6c8/0xe30 [ 483.828538][ T7630] l2cap_sock_connect+0x5c5/0x7a0 [ 483.833605][ T7630] kernel_connect+0x113/0x180 [ 483.838302][ T7630] rfcomm_dlc_open+0x8fe/0xed0 [ 483.843103][ T7630] rfcomm_sock_connect+0x2f7/0x610 [ 483.848231][ T7630] __sys_connect+0x313/0x440 [ 483.852851][ T7630] __x64_sys_connect+0x7a/0x90 [ 483.857636][ T7630] do_syscall_64+0xfa/0x3b0 [ 483.862149][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.868052][ T7630] [ 483.870586][ T7630] Freed by task 9080: [ 483.874895][ T7630] kasan_save_track+0x3e/0x80 [ 483.879798][ T7630] kasan_save_free_info+0x46/0x50 [ 483.884862][ T7630] __kasan_slab_free+0x62/0x70 [ 483.889639][ T7630] kfree+0x18e/0x440 [ 483.893570][ T7630] hci_conn_hash_flush+0x10a/0x230 [ 483.898718][ T7630] hci_dev_close_sync+0xaef/0x1330 [ 483.903864][ T7630] hci_unregister_dev+0x206/0x500 [ 483.908929][ T7630] vhci_release+0x80/0xd0 [ 483.913309][ T7630] __fput+0x44c/0xa70 [ 483.917321][ T7630] task_work_run+0x1d1/0x260 [ 483.921953][ T7630] do_exit+0x8d1/0x2550 [ 483.926122][ T7630] do_group_exit+0x21c/0x2d0 [ 483.930744][ T7630] __x64_sys_exit_group+0x3f/0x40 [ 483.935864][ T7630] x64_sys_call+0x21ba/0x21c0 [ 483.940576][ T7630] do_syscall_64+0xfa/0x3b0 [ 483.945097][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.950996][ T7630] [ 483.953325][ T7630] The buggy address belongs to the object at ffff88805d5dd800 [ 483.953325][ T7630] which belongs to the cache kmalloc-1k of size 1024 [ 483.967385][ T7630] The buggy address is located 800 bytes inside of [ 483.967385][ T7630] freed 1024-byte region [ffff88805d5dd800, ffff88805d5ddc00) [ 483.981283][ T7630] [ 483.983608][ T7630] The buggy address belongs to the physical page: [ 483.990066][ T7630] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805d5dc000 pfn:0x5d5d8 [ 484.000173][ T7630] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 484.008675][ T7630] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 484.017233][ T7630] page_type: f5(slab) [ 484.021309][ T7630] raw: 00fff00000000240 ffff88801a441dc0 ffff88801a440888 ffffea0001fe9410 [ 484.029898][ T7630] raw: ffff88805d5dc000 0000000000100009 00000000f5000000 0000000000000000 [ 484.038667][ T7630] head: 00fff00000000240 ffff88801a441dc0 ffff88801a440888 ffffea0001fe9410 [ 484.047440][ T7630] head: ffff88805d5dc000 0000000000100009 00000000f5000000 0000000000000000 [ 484.056124][ T7630] head: 00fff00000000003 ffffea0001757601 00000000ffffffff 00000000ffffffff [ 484.064810][ T7630] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 484.073488][ T7630] page dumped because: kasan: bad access detected [ 484.079993][ T7630] page_owner tracks the page as allocated [ 484.085709][ T7630] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6138, tgid 6138 (kworker/u8:5), ts 336597058176, free_ts 336565289723 [ 484.107303][ T7630] post_alloc_hook+0x240/0x2a0 [ 484.112099][ T7630] get_page_from_freelist+0x21e0/0x22c0 [ 484.117857][ T7630] __alloc_frozen_pages_noprof+0x181/0x370 [ 484.123690][ T7630] alloc_pages_mpol+0x232/0x4a0 [ 484.128566][ T7630] allocate_slab+0x8a/0x3b0 [ 484.133078][ T7630] ___slab_alloc+0xbfc/0x1480 [ 484.138118][ T7630] __kmalloc_noprof+0x305/0x4f0 [ 484.142988][ T7630] load_elf_phdrs+0x139/0x230 [ 484.147683][ T7630] load_elf_binary+0x920/0x2790 [ 484.152547][ T7630] bprm_execve+0x99c/0x1450 [ 484.157065][ T7630] kernel_execve+0x8f0/0x9f0 [ 484.161660][ T7630] call_usermodehelper_exec_async+0x210/0x360 [ 484.167798][ T7630] ret_from_fork+0x3fc/0x770 [ 484.172398][ T7630] ret_from_fork_asm+0x1a/0x30 [ 484.177168][ T7630] page last free pid 6132 tgid 6129 stack trace: [ 484.183489][ T7630] __free_frozen_pages+0xc6e/0xe50 [ 484.188597][ T7630] __put_partials+0x161/0x1c0 [ 484.193273][ T7630] put_cpu_partial+0x17c/0x250 [ 484.198042][ T7630] __slab_free+0x2f7/0x400 [ 484.202459][ T7630] qlist_free_all+0x97/0x140 [ 484.207057][ T7630] kasan_quarantine_reduce+0x148/0x160 [ 484.212532][ T7630] __kasan_slab_alloc+0x22/0x80 [ 484.217397][ T7630] __kmalloc_cache_noprof+0x1be/0x3d0 [ 484.222892][ T7630] bpf_raw_tp_link_attach+0x25f/0x6b0 [ 484.228470][ T7630] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 484.234080][ T7630] __sys_bpf+0x3cd/0x860 [ 484.238329][ T7630] __x64_sys_bpf+0x7c/0x90 [ 484.242746][ T7630] do_syscall_64+0xfa/0x3b0 [ 484.247259][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.253172][ T7630] [ 484.255502][ T7630] Memory state around the buggy address: [ 484.261144][ T7630] ffff88805d5dda00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 484.269233][ T7630] ffff88805d5dda80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 484.277355][ T7630] >ffff88805d5ddb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 484.285416][ T7630] ^ [ 484.290526][ T7630] ffff88805d5ddb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 484.298590][ T7630] ffff88805d5ddc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 484.306650][ T7630] ================================================================== [ 484.316128][ T7630] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 484.323375][ T7630] CPU: 1 UID: 0 PID: 7630 Comm: kworker/1:13 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 484.335186][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 484.345247][ T7630] Workqueue: events l2cap_chan_timeout [ 484.350733][ T7630] Call Trace: [ 484.354017][ T7630] [ 484.356961][ T7630] dump_stack_lvl+0x99/0x250 [ 484.361658][ T7630] ? __asan_memcpy+0x40/0x70 [ 484.366258][ T7630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.371476][ T7630] ? __pfx__printk+0x10/0x10 [ 484.376171][ T7630] panic+0x2db/0x790 [ 484.380353][ T7630] ? __pfx_panic+0x10/0x10 [ 484.384793][ T7630] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 484.390696][ T7630] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 484.396598][ T7630] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 484.403029][ T7630] ? print_memory_metadata+0x314/0x400 [ 484.408505][ T7630] ? __mutex_lock+0x738/0xe80 [ 484.413192][ T7630] check_panic_on_warn+0x89/0xb0 [ 484.418154][ T7630] ? __mutex_lock+0x738/0xe80 [ 484.422886][ T7630] end_report+0x78/0x160 [ 484.427150][ T7630] kasan_report+0x129/0x150 [ 484.431718][ T7630] ? __mutex_lock+0x738/0xe80 [ 484.436428][ T7630] __mutex_lock+0x738/0xe80 [ 484.440944][ T7630] ? __mutex_lock+0x51b/0xe80 [ 484.445719][ T7630] ? l2cap_chan_timeout+0x63/0x390 [ 484.450845][ T7630] ? __pfx___mutex_lock+0x10/0x10 [ 484.455880][ T7630] ? process_scheduled_works+0x9ef/0x17b0 [ 484.461618][ T7630] l2cap_chan_timeout+0x63/0x390 [ 484.466568][ T7630] ? process_scheduled_works+0x9ef/0x17b0 [ 484.472304][ T7630] process_scheduled_works+0xae1/0x17b0 [ 484.477878][ T7630] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.483882][ T7630] worker_thread+0x8a0/0xda0 [ 484.488503][ T7630] kthread+0x70e/0x8a0 [ 484.492665][ T7630] ? __pfx_worker_thread+0x10/0x10 [ 484.497787][ T7630] ? __pfx_kthread+0x10/0x10 [ 484.502410][ T7630] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.507615][ T7630] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.512906][ T7630] ? __pfx_kthread+0x10/0x10 [ 484.517499][ T7630] ret_from_fork+0x3fc/0x770 [ 484.522105][ T7630] ? __pfx_ret_from_fork+0x10/0x10 [ 484.527238][ T7630] ? __switch_to_asm+0x39/0x70 [ 484.532028][ T7630] ? __switch_to_asm+0x33/0x70 [ 484.536798][ T7630] ? __pfx_kthread+0x10/0x10 [ 484.541393][ T7630] ret_from_fork_asm+0x1a/0x30 [ 484.546169][ T7630] [ 484.549564][ T7630] Kernel Offset: disabled [ 484.553894][ T7630] Rebooting in 86400 seconds..