last executing test programs: 53.140373151s ago: executing program 3 (id=709): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) unshare(0x22020400) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)='X', 0x1}, {0x0, 0x1f4}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x4}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) 44.530539183s ago: executing program 3 (id=709): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) unshare(0x22020400) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)='X', 0x1}, {0x0, 0x1f4}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x4}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) 34.648440349s ago: executing program 3 (id=709): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) unshare(0x22020400) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)='X', 0x1}, {0x0, 0x1f4}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x4}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) 23.19456697s ago: executing program 3 (id=709): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) unshare(0x22020400) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)='X', 0x1}, {0x0, 0x1f4}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x4}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) 13.51510621s ago: executing program 3 (id=709): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) unshare(0x22020400) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)='X', 0x1}, {0x0, 0x1f4}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x4}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) 3.456780841s ago: executing program 4 (id=1515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r3) sendmsg$nl_route_sched_retired(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@deltfilter={0x274, 0x2d, 0xc31, 0x7, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0xb, 0xc}, {0xa, 0xffe0}}, [@f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_POLICE={0x4}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xc}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}]}}, @f_rsvp={{0x9}, {0x20c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0xd, 0x8000}, {0x5, 0x8, 0x9}, 0x75, 0x76, 0x9}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf, 0x300000, 0x5de89713}, {0x3ff, 0x4, 0x41}, 0xc, 0x4, 0x18}}, @TCA_RSVP_ACT={0x1c0, 0x6, [@m_ife={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xa5, 0x6, "981fccf982dac8330d7b5b6b87e04f8ccf383f4964be586be3e66bc0808a445babe10c4d20687abd83e119ec3ac15ba420a6809e9873855130a2dad17c23bfe58670b73b965808e277e2471ac75998663020d140c7b243d6f1ddeae44edfabc7f4b25348e801cca1e688fa2b4f37ed00a6f5f38f5ab5c6321460dd73250ad2876d08b649b5a2db12e62b651c6c5a90aab24db3fda0d868abb45154374e65a6e21d"}, {0xc, 0x7, {0x1, 0x1}}, {0x40, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x2}]}, {0x0, 0x6, "cdc55659f10a248f9c543db8f85c7ea58150e4b9a4a8a6d54bc9514f6736a896e0c2042401bb1c49edcd"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2}}}}]}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x400d0}, 0x24008040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150025bd7000fedb06002500000005002e007f0000000a0001007770616e3000000005002b000200000008002c"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40004) 3.416646512s ago: executing program 1 (id=1516): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)={@ifindex, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x4}}}}}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100003eeffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0001000020010000300012800b0001006d61637365630000200002800c0004000200000100c28000050003000e"], 0x50}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 3.11360574s ago: executing program 3 (id=709): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) unshare(0x22020400) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)='X', 0x1}, {0x0, 0x1f4}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x4}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) 3.080506798s ago: executing program 2 (id=1520): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x1000, 0x0, 0x7, 0x0, 0xa, 0x5f288498, 0x8f32, r2}, &(0x7f0000000100)=0x20) r3 = socket(0x28, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500"], 0x4c}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) bind$can_j1939(r7, &(0x7f0000000300)={0x1d, r8, 0x1, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) sendmmsg$inet(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="242171e1bd6d0d2c6dce4311f29b5590a5a54f85a9578e7f1e154c9712177286d938496c622cb2247b298d0fdd1b187c064a8267ec4656927808914b9badba9575e865018823c71f4b8e20981da739f6980bb682faaf85e396a70521bbe1016267c2f3f11ea092dd90e6fc983204588e4cd5878bc6cc67ad9098c647a7f15e471ff4628729290b9a05dbbb4304f329c1fb222f61502237e77dbf21a9cb2f91fc55e6b9825a8b731ee714168b6fc748019801df25c1d6616bfc66d0d76baf391f503fe284e76db4842cb978625f5e427ba3ec464ef6db05dcd23f3ff0eeadaa", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000004b632a10dcf4e2007b8af8ff00000000bca2000200000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000950000000000002200"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYRESDEC=r3, @ANYRES16=r6, @ANYRES16=r2], 0x3c}}, 0x841) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00ac1414bb000000000000000000000000fe80000000000000003fcf190481a5e13de9e2"], 0x38}}, 0x0) r11 = socket(0xa, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12, @ANYBLOB="08001f0004"], 0x44}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x40}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES16=r0], 0x20}}, 0x20000000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x10}, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x50) 1.869381127s ago: executing program 0 (id=1521): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000340)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x3, 0xa, 0x2000, 0x3314, 0x8}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) (async) recvmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/193, 0xc1}], 0x2, &(0x7f0000000200)=""/220, 0xdc}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000001b0000000000001bbec3e3b641134d864c8356f03dd4510b330000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="beaa0000000000007910a8000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) (async) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) (async) sendmsg$inet6(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_emit_ethernet(0x56, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@canfd={0xd, {{0x2, 0x1}, 0x20, 0x1, 0x0, 0x0, "0954bafb035548609c7ad4c3506ee2aebf6cda0b55545e393d0266984a6f29703c1cb792bf38b7dc73252eeaec2882850653ccda1e2e4fae45a3ddf1b659cba0"}}}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 1.868752983s ago: executing program 1 (id=1522): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x40, 0x6, 0x3, 0x500, 0x1, 0xeb, '\x00', r5, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xb, @void, @value, @void, @value}, 0x50) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x70) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket(0x23, 0x5, 0x0) listen(r7, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000980)=0x59) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r8, 0x2, 0x5}, &(0x7f00000000c0)=0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x1}]}, 0x3c}}, 0x0) 1.85373423s ago: executing program 2 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r0, 0x0, 0x20000000, 0x2}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x14}], 0x1}, 0x0) (async) bind$rds(r4, &(0x7f00000000c0)={0xa}, 0x1c) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000a0601010000000d0000000001000000050001000700000014000880100007800900120073797ab2000000000900020073797a3200000000080009"], 0x44}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.853205286s ago: executing program 4 (id=1524): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000ebb0000305000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="51c7010000000000240012800b0001006d6163736563000014000280060002404e230000050003000800000008000500", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x11, 0x30, 0x0, &(0x7f0000000180)) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x38, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcfd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 1.69258195s ago: executing program 0 (id=1525): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x1, 0x1, 0x2, 0xcb, 0x0, [0x1c000000, 0x1ff, 0x1]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022100000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="1c0016801800018014000a000500000029dcf2250d61d5d175b7d414"], 0x58}}, 0x0) 1.691206796s ago: executing program 4 (id=1526): accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x12, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000080000000b000000ce080000", @ANYRES32, @ANYBLOB="0000000000e26200000000000a008000000000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007220000f80000b704000000000000850000000300000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) r3 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffe2, 0xfff2}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x10}}}, 0x24}}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d00), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fecb5beb", @ANYRES16=r7, @ANYBLOB="0100adbd7000fddbdf252800000005002b000100000005002e00000000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x80}]}]}]}}]}, 0x4c}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000000000000000001000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000001340)=ANY=[@ANYRESOCT=r2, @ANYRES16=r0, @ANYRES16=r6, @ANYRESOCT=0x0, @ANYRESHEX=r4, @ANYRES32=r4, @ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r9}, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000780)='netlink_extack\x00', r10}, 0x18) r11 = socket(0x10, 0x3, 0x0) (async) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r14 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r14, 0x10c, 0x5, &(0x7f00000003c0)=0x89ea, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x884, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x9, 0x4, 0x7, 0xfffffffe, 0x6, 0x3, 0x6, 0x8e56, 0xfffffffe, 0x2868, 0x3, 0x400, 0x1, 0x9, 0x297a, 0x3, 0x6, 0x8, 0x55d, 0x1, 0x76, 0x6, 0x4, 0x4, 0x547bbc9, 0x49e, 0x915, 0x3, 0x1, 0x200, 0x389, 0x7, 0x83, 0x6, 0x0, 0x100, 0x1, 0x8, 0x2ff3acbb, 0x10001, 0x9, 0xc1, 0x5, 0x2, 0x0, 0xffff, 0x6, 0x2, 0x6, 0xfffffffd, 0x9, 0x6, 0x9, 0x7, 0x1, 0x8000, 0x6, 0x9, 0x400, 0x3ff, 0x2, 0x2, 0xfff, 0x1, 0x5, 0x8694c2f1, 0x0, 0x101, 0x9, 0x5d, 0x9, 0x4, 0x1, 0xb, 0x9, 0x1, 0x7fff, 0x2, 0x2, 0xe, 0x7ff, 0xfffffffe, 0x5, 0x1, 0xfffffffa, 0x2, 0x9, 0x452, 0xfffffffb, 0x9, 0x3f1, 0x522, 0x1, 0x0, 0x2, 0xffff, 0x5831, 0x8, 0x2d, 0x4, 0x10000, 0x8, 0x1, 0x0, 0x6, 0x7, 0x0, 0x91, 0x2, 0x200, 0xfffff7fe, 0x2, 0x0, 0x10, 0x5, 0x3, 0xbf, 0x1, 0xfffffffc, 0x7f, 0x0, 0xf, 0x2, 0x1, 0x7, 0x590a, 0x7, 0x7ff, 0x4, 0x0, 0x5, 0x9, 0xbf, 0x8, 0xff, 0x7ff, 0x4, 0x80000000, 0xa6, 0x46d, 0x8, 0x9, 0x4, 0xffff, 0x8763, 0x8, 0x5, 0xb, 0x1, 0x9d56, 0xa, 0x10001, 0x8, 0x8, 0x10, 0x2, 0x96, 0x2, 0x3, 0x101, 0x9, 0x6, 0x33, 0x1, 0xfffffffd, 0x7, 0xc, 0x8001, 0x0, 0x8, 0x0, 0x1, 0x80, 0x43, 0x0, 0x2, 0x4, 0x3, 0x5, 0x0, 0x0, 0x0, 0xe, 0xfffff028, 0x1000, 0x6, 0x1, 0x2, 0x9, 0x6, 0x9, 0x0, 0x0, 0x2, 0x7, 0x1, 0x9, 0x5, 0x1, 0x4, 0x71248ec9, 0x7f, 0x8, 0x8, 0x83e8, 0x951, 0x9, 0x8, 0x5, 0x80000000, 0x7fffffff, 0x3, 0x0, 0x24e, 0x904, 0x3, 0x10000, 0x7, 0xa, 0x670, 0x5, 0x7f, 0x6, 0x9, 0xfffff466, 0x4, 0xffff, 0x1, 0x9, 0x2, 0x7, 0x8, 0x100, 0x8001, 0x4, 0x1ff, 0x46d6, 0x8, 0x80000000, 0x9, 0x0, 0x4, 0x5, 0x6, 0x5, 0x6, 0x8, 0x4, 0x3, 0xdfe, 0x5edb2ff7, 0x1, 0x80, 0x2, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x1446}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x884}}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 1.637935209s ago: executing program 2 (id=1527): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000600)={'nr0\x00', {0x2, 0x0, @loopback}}) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x2) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000040)="d8b9f8401afe974735380989fc", 0xd) (async) write(r1, &(0x7f0000000080)="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", 0xfc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x1, 0x8000, {{0x3e, 0x4, 0x1, 0x8, 0xf8, 0x64, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@timestamp={0x44, 0x10, 0x49, 0x0, 0xf, [0xfffffffc, 0x0, 0x10000]}, @ssrr={0x89, 0x7, 0xcb, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0xc1, [@dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}]}, @cipso={0x86, 0x2c, 0x3, [{0x6, 0x12, "46c79a407642b96650363c5d811166b5"}, {0x2, 0x8, "88e8ffcfee05"}, {0x0, 0xc, "10e447e3075fdecc0df4"}]}, @timestamp_addr={0x44, 0x4c, 0xe6, 0x1, 0x4, [{@empty, 0x4}, {@local}, {@broadcast, 0x9}, {@multicast1, 0x800000}, {@loopback, 0x9}, {@broadcast, 0xfffffff9}, {@broadcast, 0x4}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010102, 0x6}]}, @rr={0x7, 0x1f, 0x7f, [@empty, @private=0xa010101, @multicast2, @multicast2, @broadcast, @private=0xa010102, @private=0xa010102]}, @rr={0x7, 0x23, 0xd4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @multicast1, @multicast1, @broadcast, @empty]}]}}}}}) bind$packet(r1, &(0x7f0000000340)={0x11, 0xf8, r2, 0x1, 0x3, 0x6, @local}, 0x14) 1.634345087s ago: executing program 1 (id=1528): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, 0xd4, 0x10000, @value}, 0x28) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000003c0)="00214717a70700000000030600710a06069d856829c2f5d7a3c3b954c224baf5a405000000143d6ab27e0b6d80aa934dc082", 0x32}], 0x1, 0x0, 0x0) 1.39905598s ago: executing program 0 (id=1529): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0xe20, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0xf6c}, &(0x7f0000000180)=0x8) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0xfc8, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gretap0\x00', 0x1}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.308473078s ago: executing program 4 (id=1530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) pread64(r0, &(0x7f0000000280)=""/105, 0x69, 0xffffffff) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, 0x0) 1.179654977s ago: executing program 0 (id=1531): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="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", 0x111}], 0x1, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x101}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000880)=""/156, 0x9c}], 0x4}, 0x0) 1.02551987s ago: executing program 0 (id=1532): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c00004400000000000690780a010100ac1e0001890fa4ac1e0101e0000001ac14140b440405008606000000000000004e210003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000040090780000"], 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x8001}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x0, 0x0, 0x8000, 0x2280, 0xffffffffffffffff, 0x20b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet_icmp(0x2, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000eb69b43f65daaeae04fadf24ffffffffffff01000000000000081dc2f94b6700"/49, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x6, 0x2a, 0x0, 0x10, r1, 0xb, '\x00', r3, r4, 0x4, 0x0, 0x4, 0x5, @void, @value, @void, @value}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, &(0x7f0000000200)="99e8dd4341d0", 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x29, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f00000001c0), &(0x7f0000000200)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 809.464744ms ago: executing program 0 (id=1533): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f034000000000000"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110000000000000000002500000008000300", @ANYRES32=r5, @ANYBLOB="0a003400020202020202000018005080050002001100000004000500080007000000000008003500000000000a000600ffffffffffff000008002600"], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100003eeffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0001000020010000300012800b0001006d61637365630000200002800c0004000200000100c28000050003000e"], 0x50}}, 0x0) 799.354631ms ago: executing program 1 (id=1534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff006000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000100)=0x4) bind$bt_sco(r4, &(0x7f0000000280)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r4, 0x112, 0x13, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x2004c000) 388.696327ms ago: executing program 2 (id=1535): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) (async) close(0x3) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}, 0xfdef) 337.46056ms ago: executing program 1 (id=1536): syz_emit_ethernet(0x74, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x3e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad9657926974"}, {}, {}]}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@initdev, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sendmmsg$unix(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r5}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x40, 0x20008880}}], 0x2, 0x4c054) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@empty, 0x4e20, 0x0, 0x4e23, 0x8000, 0x2, 0x0, 0xa0, 0x73, 0x0, r5}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x2, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, 0x0, 0x33}, 0x0, @in=@remote, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000380)=0x48bf, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r10}, 0x10) r12 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r12, r11, 0x0, 0x65, 0xfffffffffffffffe}, 0x30) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000053c0)={0xffffffd9, 0x41, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1030, 0x6, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @pid=r0}, @generic="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", @typed={0x4, 0x4d}, @typed={0x8, 0x8, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xee, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x9e, 0x0, 0x0, @pid=r12}]}, @nested={0x1133, 0xc4, 0x0, 0x1, [@generic="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", @generic="3b2c5c2a3662e67b6f18d40909bad7cc1d1ba9ed3d790c6d61b5a2fc7d103115e8b88b44a158d545e84998d0ad51336b5ff314a7e89c71d16a43104a93e5a47fd330277730592ecfc362127b19786ba2743ad9aef6bee13b19010beb04711091161debca2396b2b638a67927c4e8e58ec2c7152e01b543f0a4ee2660ce720430a68be2201693a75ab400bcbcb4d650d46488a6609051c032a0f0d860e4e3dfdbc96930b11e89a85a1d1608512e1bdf02b8eff797b1e3015c1be332f67fcfeb1805108a12b853dc4b1bdbb76402dd56515e2c766faba2b66c57c4a90926ca68c580420ca57c3b9bc12883b0f1ebfecbce2fe1", @typed={0xa, 0xca, 0x0, 0x0, @str='wlan1\x00'}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x3}, @generic="8cb6979678f97036472d55fcef722447fae6b35b6cf6bd66ed7b59409f3b2f61cc", @typed={0x8, 0x7e, 0x0, 0x0, @fd}]}, @typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @nested={0x1010, 0xe4, 0x0, 0x1, [@typed={0xa, 0x132, 0x0, 0x0, @str='.(!!)\x00'}, @generic="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"]}, @generic="cd3563df87541a9942eb84a93e8311d46cb448e35f728c791113de49d0db6e902d74aa4e4ec0de98b05a80d1dd321e010400008eea9429388756405d376fbb751f99ce1256672bb0fddc82a726cbfc9bfaed", @nested={0x1278, 0xad, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@private0}, @typed={0xd6, 0xda, 0x0, 0x0, @binary="90d8b83091a21d7d18bf36ac8928f10fe476794c7f6f673ac68b3bbf1de2a3f612d51a15a238f37823270a694e98548e09a63fa62df27b7a493cd4e3b9e82e8dbb43a0ac38e70c76d025610a857df915f8132c07c0353db0d5c23e5fefeb5f19c874e6878e8e607c23d95b9c27149ec15c2c8a1aa6524936256658e0bd99f5bc5a75c0631b63af2de13314abadb4970ede009aa3c39a209a30749393a24d24ce90b125877505202c2f15634fdc3deb240ee90d09763a1b0480ac1cbf26c516b8ee9fd5d2cb80b2835468ea95d6ddb6efc3c7"}, @generic="9b121e40cfb0e9d6557f6f016d7761d59e746a2a31f817af8f7f94c7657f545f2f27b6c0ec9f84f85d681ae29d5019ed9f43be12339ab52e4237b4187549b65f39189e35a27bad6eaa3e8ab8a17cf200ad315efc0026ee75413b758994274192b886fe50a3139fad783d880e4d6f89850453d7c88901128b3e3badd9c8778fbded89c0bed3f83ae1812f523f968d76a981992a46e4bcc9cc330f86323a307a400fc2304dbb6c08b30f34b6f926c8", @generic="9e", @generic="9b9dc5b23f8746a117cb7409df7b53326258d610d4d1c7b6642ee2f0b73b37c2c8411821945d1971ae392c43f127003a20d8ac0139706c7ef518", @typed={0xc, 0x11a, 0x0, 0x0, @u64=0x8}, @generic="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", @generic="4eea77f3d0a2628a107de7d75ba80c1b128279f0964ab2ee99ff8ded892b04ac89c31d0e98da97ce0be320bf4912a0ae024123994733f729bea9a7cea1f2b45a65330e044bb0d69bce114e1174f0955945343062b178d20d47cd4ad77bc1823cf2", @typed={0x7, 0x40, 0x0, 0x0, @str=',$\x8b6Q\x83\x8c \xf4\xffY{=\xda\xa0\x11\v\xc8\x10\xff\xdd\xddK\xe3\x1b\x00\x0f\xe8\xc8N\xddU\x8d\xd9\xe7;\x9b}m\t{\x02\x1dIt^\xe7@V\xba1\xce\xb3+\xb4\x9f\x17\xdcG3\xb4D(V\xba\xbf\xbf\xe5f\xb5\x83i/r\xb6'}, @generic="4845ec1f47e5bfbc8ed514d6d51de07e2c82ee64457aca5848108bfe7969d6082116d486b17fd1aa24ec"]}, @nested={0x103, 0xe3, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @pid=r13}, @generic="8c13e8090e7cd7c6f0839f379a133bc9956edcfbea34b1151d9291a24e646886f37c78fdfe50fcfafcbb22cfe2eeecb9a46195bb1f3ee84a5c97e29e93ed60318f4686cbf7febd5762f112437b0f444c865233001cb0e642e4baa5cb9674a8ddb9a043331fc602f3b1c240c8dc0a63b517230add8465b6e010d29cbe3bef117e3477375a4ab41ab432d1808d45decca9b3e7dcd00b92fccac5b9c3addea3cb25c058782b586483e8f3959de96853e7d0c64cb46fa926a5b527232cefc8d8b8604dccbe4173d3331639aaa8d1e10f9d0d2e1da023d637517ee77f271a88f02f845759cbba84811bab2c3b84b9a6f74db051ef581282d4aa"]}]}, 0x4568}], 0x1}, 0x20000080) r14 = socket$packet(0x11, 0x3, 0x300) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r16, &(0x7f0000000040)=ANY=[@ANYBLOB="0007000042009103"], 0xd046) recvmsg(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000003000)=""/4109, 0x1020}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r17, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r18, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) socket$netlink(0x10, 0x3, 0x5) 269.438222ms ago: executing program 4 (id=1537): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000000009500"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 147.296381ms ago: executing program 2 (id=1538): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000000100050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) socket(0x200000100000011, 0x803, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) (async) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000000100050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) 142.555291ms ago: executing program 4 (id=1539): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="eab2", 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)="1d29b4d4f4a09b630b04389302be090174660398d518db3dbad041477ac7532b13aa", 0x22}, {&(0x7f0000000480)="bce8b8dbb8950dbdcb5e61ad2a40560450a1fd831ad5aedeb0e79bb469c77a05f3b14dcbc755b9ec45fe1ef1b4b131220225a69919ce35adc9f47429c55c898732b41383783860812d63233d17e2107cc7f7284a4f84fb2085866ed1eceb2e9306a877f22e5f5308427d05623ccdb1f07338e9d938d5", 0x76}, {&(0x7f0000000500)="a04911d0dcaccc1cf1dd5b1b96606952bc0011c9230feae5da3c1a2fc3e9a8bf0608130c20740c694c12026c061deec68a8d10b87ceebc15805d75b6052c5d61f1267e3a0f632f377cc6917dda08c1264451c257aad58e9ca1709c89737a7f7c3ed4dda1869e7546c571db14d774652d444cc4e5cc7c9b5d3d6fed039349c710660fc4e88671fb6cc76540e985972814c44ef6d962b4a8b47e0db21c3db3c93e3b58d4c4e62a773059b2a75e9c04a4d0e5a7393c6e57dae8855153475069567cfe22016edc207cd220a444e4a48b5ec278f73cccc03214ca", 0xd8}, {&(0x7f0000000600)="0e5f30e678d728b3ea3d21c31b69525a561008ef7250543747478689237e845227ba24610e882f194a9ebf7f19321f8d3a724e99a2abe7f3b932a24624d119d2f22f1b8264a424a090ee8dca67fc2fa8ecfb8b92867ba4fe7019e0b7812a1705cd7cce07c0879bdcc3c9", 0x6a}, {&(0x7f0000000680)="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", 0x2f1}], 0x5, &(0x7f0000001940), 0x0, 0x10}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x19}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x7}]}}}]}, 0x44}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b4020000000000006111650000000000850000001c000000950000000000000004aafd225cfb70aebf6cbf6ff842335a6c8bec032f0fdc583e2c3ef63d1eefa0c0312534474d2531469417cb901a46b6b1a687"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000700000000000000bc2000000000000095000000d3051a00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000401000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000020100180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 94.24824ms ago: executing program 1 (id=1540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) (async) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x9, 0x2, 0x1, 0x6}, 0xfffffe99) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000540)={{0x2, @bcast, 0x40}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x44) (async, rerun: 32) sendfile(r2, r3, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x20000400) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001200), &(0x7f0000001240)=0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) sendmmsg$inet6(r7, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000240)="b4f2fc56054ec00e32368a5f1cf5ff44ba7467b0c17d585018d5c47767b9cd137acb8d29798dcfe8a5776f051f33cf5f6e4605cfefc9e3e514e32577cc1bf6e3cd659935", 0x44}, {&(0x7f00000002c0)="473a85da2d187a8422f41597991ca1429d29fdb0bc2558d59b9fa2b9e6054956303cec69d3022f3bcee27893016f3ae953e24e2e1005c3b69ea707dd0ebb1e4354fddbc65ff5b20a4e1da3ad5e54d0b675d73245376be041d06134499b8b3e07ea084d898561c8fb19477fcff3b5891c110666312997a95cdffa2264a7cd435f48f535116d9fb1d86744a43ae8f30a42c8a091f10a9bc5d7183367ca42b075f3fa3b620e9606d73947d6703b9cfe814a2f68", 0xb2}, {&(0x7f0000000380)="d093826112ee26c56cbbc66cd95bf882c3ccc4a79355a5d8319f5129893a8af8c1098820bd7a1d98676794a5f7eefdececd9adc6189533366dc8d0704aa11b43025d0e517f1e15991f497617e7ed4aaae53a225102e6348c334510f1f3bd0d49405553f7c92bef45c8c920c1fed434ba0db699c5a6ced9bbe5ffac454edeb0d4ff0e07e04e94f709d0051de37eb1b00aa96175a17081f20ea21670de8a03786b62c16a38620ac759eb73d43553fe205f9a7831702c933390aa753c36fe36648ad2385310df1f35e6a01ec7066863c00a8a7a0f4ec0a62057", 0xd8}, {&(0x7f0000000480)}], 0x5, &(0x7f0000003dc0)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x33, 0xe, 0x0, 0xe, 0x0, [@empty, @remote, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @mcast2, @mcast1]}}}, @dstopts={{0x40, 0x29, 0x37, {0x8, 0x4, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x1ff}, @jumbo={0xc2, 0x4, 0x4}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x6c, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="71d50fd89dc607ff763cc7c33d4e0095f19a2d1fa80834f49b657b9a510fb30d8efacabaa88aa94795e19ee438668d01cd878226ee1f5ca9a38b761c4b6e1180346e540cb03d5ddaeee5e8425b4bcca7ed77c60ed656c94eed555dab63643191e5e7e45e4ef9a4e4fb2e11fd3204ba45b87014d113e57a39d900a67822680a66ba0e0636897320a4218972a9559673c6ce4018b7559db5dc75304ab63e05119a488fc90f6566b452bcaba5b6c9a101c03a683ebd7dcb", 0xb6}, {0x0}, {&(0x7f0000000780)}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400426e08346ed076cf495332047f0013000000002900000008000000090000000000000018000000000000002900009c56bebb251ab26f41ebdaf09fe79e2bd4047a14205aa77083228e755f1c6a5f1e23eeb4a064a5b1f126cc5899b35987e3ee6204b49bd67bdbe879d1"], 0x30}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="7aa4ee191204adefa1a4f58b9647eeaa15341494ffcc", 0x16}, {&(0x7f0000000a00)="c7695405b9794443301b844e56a88c561759587d0f3eefa7399464746325fb28e3b26ab942b709fc6368b431caab39606202d7831a2d6a327995e18ce9e9314b5469733154f07ada049bd8613fb00a3a2a1c22e9ed1b5d9a32c54dbaec293a1e303ce74c0f3070d12aff7f62", 0x6c}, {&(0x7f0000000a80)="87383485d44e4bff29765f688b507f7723dafb9645eaaea2916368537078c8cd9e92285b6bd69281c93b27ac8e94ee52b8df029699ad4f917238eb49565b40111625bf10bbced78e13fd6f2fb90c4d3deb50cbea34245eef085bd0bf6f6445039ee936781b1190ae221838c8ce1466e6077e1c6aeb4a8084db8e615d4208a72f997c2ef6aac4b7ba7791a36530f3d4046c758d764e43f45b4e40f7cce2599caf18582a31584968b7ea829feb79bb9ed1ac0dd379a89cbe01445f1c47e0dc17675d0c20458ecac4a1fcd4c68cee7dab52ab841e6eda93015f0cea96dd73cc31a4d6e3b54a97a528768bed8c6766161f", 0xef}, {&(0x7f0000000b80)="8a628d4770eff49e9c8ed0a5bdb191946cf1146d74699095538739274d5b4534fdd5e1d15fcad943069e1a344530c507b8e66f60f8147c31b4389df8646aa580d0d362b16f31da8e9f5cb748c3c3002a97f4a0fae4e65c308f3aee9c54642cbed6bee7607abc372c0a4207ddd8f22b22", 0x70}, {&(0x7f0000000c00)="0927b956ef12f6ef1f4f2a745cd159543e93ffd6baf4d0d34ac53dcdbd3ba5b16f61923f9e9dcc3f551dd1b12ec529e721a7f54d0baf6f11c5ec52b14f5d16ea7cec837339a86d7e383a82ecaf753946510759952601102de102fa3a589378b442a0ca5222356c5567e099b26ea7ec17d3d353ebe32d4576e706fe3998ed4eb4cd", 0x81}, {&(0x7f0000000cc0)="e576550fb61cb5891be3b05db52a235aaee05498cc082665c25e172b75d0764014b081f16ba0e33dd21de7062c26c83d0b97f719f438e109264669f0a98b1537651fcf95372b29b8606df90d81e2ac19279dcfcc8873c343623a2f8c00166323c8e182c226d0d9387a09d6e85dbfe34887ab8266e1d96e3715d05dfcb6ae300852fcfff12df67bd0feb4da48bd30d447eade65afcf22e6c322ac63cc8c29dc5631fa06e7f809d6f89c94c9b8afde914b4cebdbb790210705d58cb43242f16665b150b20dfbfc656dc3e00b3802b4b45187a08f74fc55a56d362ffa14d5b3659c9ecd31a9a9", 0xe5}], 0x6, &(0x7f0000000e40)=[@dstopts={{0x18, 0x29, 0x37, {0x2b}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x30}}, {{&(0x7f0000000f00)={0xa, 0x4e24, 0x800000, @loopback, 0x3}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000f40)="d64ab5b56e748a390457af544f9d0069a7f977501ba90f82160d364feba7472798264f25c6b7ab129e76f0fc3fbef4cb2b61bc8a99f856989c", 0x39}, {&(0x7f0000001000)}, {&(0x7f0000001100)="1fd1238050fc689bde986d64083201b6141d2236d6854b8aa24e7314974eee682e0f731596b09ea543d9e916b49d69d9f4d491feb962fb1e3c96a93ee21e9796f51877a73123", 0x46}], 0x3, &(0x7f0000001280)}}], 0x4, 0x0) 0s ago: executing program 2 (id=1541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001", @ANYRES32, @ANYBLOB="027dccf19fcd99c30b3be419a4302c858ca15b72d1049305618e27d47cdd77d5601700026f8295eebd2c79045cb1f4c78f5776bf34507626955873a7228a7c9ccd314bdf3e45bff7075242fc635e564737b61e631e2c4e8ef223321504c01516f3744e6f314b2cef80b786aec253ba58ad4f034fc9f69fb673ce60ebe148"], 0xfdef) kernel console output (not intermixed with test programs): 80498][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.606731][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.619530][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.626630][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.652785][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.699608][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 118.722048][ T8551] netlink: 'syz.1.751': attribute type 5 has an invalid length. [ 118.747425][ T8408] hsr_slave_0: entered promiscuous mode [ 118.781321][ T8408] hsr_slave_1: entered promiscuous mode [ 118.814164][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.751'. [ 118.986169][ T8565] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 119.015897][ T6163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.016021][ T8565] netlink: 'syz.2.756': attribute type 3 has an invalid length. [ 119.042557][ T8566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.051200][ T8565] netlink: 224 bytes leftover after parsing attributes in process `syz.2.756'. [ 119.154754][ T8563] tap0: tun_chr_ioctl cmd 2147767506 [ 119.437677][ T5843] Bluetooth: hci4: command tx timeout [ 119.626506][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 119.637287][ T8588] netlink: 'syz.2.763': attribute type 30 has an invalid length. [ 119.663156][ T8584] 8021q: VLANs not supported on lo [ 119.695899][ T8408] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.758638][ T8408] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.776610][ T8408] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.789190][ T8408] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.971915][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.012228][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.049480][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.056770][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.082888][ T2921] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.090103][ T2921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.149897][ T6163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 120.322826][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.334402][ T8610] tipc: Enabling of bearer rejected, failed to enable media [ 120.389703][ T8408] veth0_vlan: entered promiscuous mode [ 120.408182][ T8408] veth1_vlan: entered promiscuous mode [ 120.470482][ T8408] veth0_macvtap: entered promiscuous mode [ 120.493594][ T8408] veth1_macvtap: entered promiscuous mode [ 120.529471][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.562874][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.598980][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.624052][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.648541][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.696499][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.741565][ T8408] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.768669][ T8408] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.789566][ T8408] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.827566][ T8408] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.142961][ T8341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.157937][ T8341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.220903][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'. [ 121.230748][ T8637] netlink: 'syz.0.777': attribute type 2 has an invalid length. [ 121.265375][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.286409][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.305894][ T8341] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.440559][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 121.489149][ T5843] Bluetooth: hci4: command 0x0419 tx timeout [ 121.548819][ T8640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.574698][ T8652] netlink: 'syz.2.781': attribute type 10 has an invalid length. [ 121.608453][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.781'. [ 121.705257][ T8652] bridge0: port 3(macvlan1) entered blocking state [ 121.717703][ T8652] bridge0: port 3(macvlan1) entered disabled state [ 121.724442][ T8652] macvlan1: entered allmulticast mode [ 121.731382][ T8652] veth1_vlan: entered allmulticast mode [ 121.740586][ T8652] macvlan1: entered promiscuous mode [ 121.747591][ T8652] bridge0: port 3(macvlan1) entered blocking state [ 121.754346][ T8652] bridge0: port 3(macvlan1) entered forwarding state [ 121.905203][ T8666] x_tables: duplicate underflow at hook 3 [ 121.913663][ T8668] x_tables: duplicate underflow at hook 3 [ 122.166422][ T8679] hsr0: entered promiscuous mode [ 122.177069][ T8679] netlink: 176 bytes leftover after parsing attributes in process `syz.2.789'. [ 122.194230][ T8679] netlink: 176 bytes leftover after parsing attributes in process `syz.2.789'. [ 122.429067][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 122.583387][ T8692] x_tables: duplicate underflow at hook 3 [ 122.881168][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'. [ 122.910491][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'. [ 123.538155][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.638435][ T8724] netlink: 'syz.4.802': attribute type 10 has an invalid length. [ 123.704369][ T8724] team0: Device hsr_slave_0 failed to register rx_handler [ 123.785285][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 124.083826][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.807'. [ 124.127127][ T8740] netlink: 21 bytes leftover after parsing attributes in process `syz.0.807'. [ 124.670316][ T8752] netlink: 'syz.0.812': attribute type 10 has an invalid length. [ 124.714021][ T8752] netlink: 55 bytes leftover after parsing attributes in process `syz.0.812'. [ 124.723919][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.085526][ T8775] IPVS: length: 60 != 8 [ 125.305055][ T8791] sctp: [Deprecated]: syz.1.821 (pid 8791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.305055][ T8791] Use struct sctp_sack_info instead [ 125.879780][ T8341] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.995765][ T8341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.344185][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.354276][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.363203][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.371977][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.398403][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 126.405819][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.723250][ T8839] chnl_net:caif_netlink_parms(): no params data found [ 126.939503][ T8839] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.946717][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.954344][ T8839] bridge_slave_0: entered allmulticast mode [ 126.968760][ T8839] bridge_slave_0: entered promiscuous mode [ 127.040340][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.344034][ T8866] bond0 (unregistering): Released all slaves [ 127.406330][ T8839] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.429448][ T8839] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.453472][ T8839] bridge_slave_1: entered allmulticast mode [ 127.468938][ T8839] bridge_slave_1: entered promiscuous mode [ 127.516898][ T8883] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.555945][ T8839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.579089][ T8888] netlink: 'syz.0.843': attribute type 3 has an invalid length. [ 127.598938][ T8839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.662572][ T8839] team0: Port device team_slave_0 added [ 127.677007][ T8839] team0: Port device team_slave_1 added [ 127.762609][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.777996][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.821118][ T8839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.851141][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.864207][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.891068][ T8839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.989405][ T8341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.993109][ T8910] __nla_validate_parse: 4 callbacks suppressed [ 127.993127][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 128.019614][ T8905] ªªªªªª: renamed from vlan0 (while UP) [ 128.050278][ T8839] hsr_slave_0: entered promiscuous mode [ 128.057085][ T8839] hsr_slave_1: entered promiscuous mode [ 128.065390][ T8839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.090342][ T8839] Cannot create hsr debugfs directory [ 128.141800][ T8341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.158169][ T8857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.264203][ T8341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.448620][ T5843] Bluetooth: hci4: command tx timeout [ 128.563349][ T8937] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 128.604654][ T8937] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 128.619705][ T8341] bridge_slave_1: left allmulticast mode [ 128.648381][ T8341] bridge_slave_1: left promiscuous mode [ 128.654243][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.667047][ T8341] bridge_slave_0: left allmulticast mode [ 128.674019][ T8341] bridge_slave_0: left promiscuous mode [ 128.681358][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.110312][ T8341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.122264][ T8341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.133761][ T8341] bond0 (unregistering): Released all slaves [ 129.263308][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 129.352696][ T8959] netlink: 'syz.1.861': attribute type 1 has an invalid length. [ 129.448746][ T8963] bond4: entered promiscuous mode [ 129.450370][ T8965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.863'. [ 129.524829][ T8341] hsr_slave_0: left promiscuous mode [ 129.545719][ T8341] hsr_slave_1: left promiscuous mode [ 129.564651][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.575324][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.584383][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.592379][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.618907][ T8341] veth1_macvtap: left promiscuous mode [ 129.624534][ T8341] veth0_macvtap: left promiscuous mode [ 129.633586][ T8341] veth1_vlan: left promiscuous mode [ 129.643440][ T8341] veth0_vlan: left promiscuous mode [ 130.102208][ T8341] team0 (unregistering): Port device team_slave_1 removed [ 130.153260][ T8341] team0 (unregistering): Port device team_slave_0 removed [ 130.393326][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.533156][ T5843] Bluetooth: hci4: command tx timeout [ 130.565026][ T8959] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 130.576077][ T8959] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 130.589352][ T8959] bond4: (slave vcan1): making interface the new active one [ 130.596702][ T8959] vcan1: entered promiscuous mode [ 130.604286][ T8959] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 130.643076][ T8975] tipc: Enabling of bearer rejected, failed to enable media [ 130.652895][ T8974] tipc: Enabling of bearer rejected, failed to enable media [ 130.662179][ T8958] bond4: left promiscuous mode [ 130.666985][ T8958] vcan1: left promiscuous mode [ 130.910365][ T8839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.997699][ T8839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.050023][ T8839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.101419][ T8839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.268406][ T9008] netlink: 180 bytes leftover after parsing attributes in process `syz.2.873'. [ 131.376827][ T8839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.404136][ T8839] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.415825][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.423007][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.485608][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.492823][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.528706][ T6163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 131.576338][ T8839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.618534][ T8839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.902255][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 131.969524][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 132.147917][ T8839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.176467][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 132.203137][ T8839] veth0_vlan: entered promiscuous mode [ 132.245053][ T8839] veth1_vlan: entered promiscuous mode [ 132.290251][ T9044] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.315911][ T9046] xt_connbytes: Forcing CT accounting to be enabled [ 132.326660][ T9046] Cannot find del_set index 1 as target [ 132.338544][ T9051] Cannot find del_set index 1 as target [ 132.343262][ T8839] veth0_macvtap: entered promiscuous mode [ 132.361260][ T8839] veth1_macvtap: entered promiscuous mode [ 132.399729][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.410964][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.424369][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.435018][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.446056][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.458801][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.470716][ T8839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.479841][ T8839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.488670][ T8839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.497384][ T8839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.608503][ T5843] Bluetooth: hci4: command tx timeout [ 132.645884][ T8345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.654151][ T8345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.663777][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.673660][ T8346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.716562][ T8346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.985196][ T9073] netlink: 'syz.0.892': attribute type 1 has an invalid length. [ 132.993093][ T9073] netlink: 244 bytes leftover after parsing attributes in process `syz.0.892'. [ 133.083999][ T9076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.893'. [ 133.098094][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.327742][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 133.778305][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 133.861525][ T9115] sctp: [Deprecated]: syz.4.902 (pid 9115) Use of int in max_burst socket option. [ 133.861525][ T9115] Use struct sctp_assoc_value instead [ 134.044514][ T9124] netlink: 'syz.4.904': attribute type 4 has an invalid length. [ 134.226492][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.378967][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.846659][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.865879][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.879297][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.888163][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.896851][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 134.904980][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.952564][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.221690][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.249814][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 135.403903][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.412067][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.421110][ T9153] bridge_slave_0: entered allmulticast mode [ 135.429090][ T9153] bridge_slave_0: entered promiscuous mode [ 135.452911][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.487434][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.497637][ T9188] netlink: 256 bytes leftover after parsing attributes in process `syz.1.914'. [ 135.519872][ T9153] bridge_slave_1: entered allmulticast mode [ 135.536608][ T9153] bridge_slave_1: entered promiscuous mode [ 135.595609][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.669460][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.701468][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.773916][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.896522][ T9153] team0: Port device team_slave_0 added [ 135.899021][ T9203] netlink: 4684 bytes leftover after parsing attributes in process `syz.0.918'. [ 136.020677][ T9153] team0: Port device team_slave_1 added [ 136.061304][ T9205] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 136.062152][ T5853] IPVS: starting estimator thread 0... [ 136.087168][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.098442][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 136.106281][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.126888][ T9211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.921'. [ 136.162414][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.198363][ T9210] IPVS: using max 19 ests per chain, 45600 per kthread [ 136.219374][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.226356][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.285554][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.640863][ T52] bridge_slave_1: left allmulticast mode [ 136.678437][ T52] bridge_slave_1: left promiscuous mode [ 136.684246][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.720044][ T52] bridge_slave_0: left allmulticast mode [ 136.726181][ T52] bridge_slave_0: left promiscuous mode [ 136.748970][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.851803][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'. [ 136.864425][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'. [ 136.928358][ T5843] Bluetooth: hci4: command tx timeout [ 136.992161][ T9256] netlink: 'syz.2.930': attribute type 1 has an invalid length. [ 137.001281][ T9256] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.930'. [ 137.033036][ T9257] xt_l2tp: v2 doesn't support IP mode [ 137.198288][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 137.348076][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.373035][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.387071][ T52] bond0 (unregistering): Released all slaves [ 137.403653][ T9153] hsr_slave_0: entered promiscuous mode [ 137.411496][ T9153] hsr_slave_1: entered promiscuous mode [ 137.523444][ T9263] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 138.034182][ T9303] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 138.063473][ T9303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.939'. [ 138.129773][ T5843] Bluetooth: hci0: command tx timeout [ 138.152349][ T9303] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 138.289597][ T52] hsr_slave_0: left promiscuous mode [ 138.310351][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 138.362618][ T52] hsr_slave_1: left promiscuous mode [ 138.377615][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.404292][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.434632][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.460293][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.578097][ T52] veth1_macvtap: left promiscuous mode [ 138.604222][ T52] veth0_macvtap: left promiscuous mode [ 138.624556][ T52] veth1_vlan: left promiscuous mode [ 138.646333][ T52] veth0_vlan: left promiscuous mode [ 139.007779][ T5843] Bluetooth: hci4: command tx timeout [ 139.438587][ T8857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 139.610271][ T52] team0 (unregistering): Port device team_slave_1 removed [ 139.654851][ T52] team0 (unregistering): Port device team_slave_0 removed [ 140.561493][ T6163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 140.590849][ T9385] IPVS: Scheduler module ip_vs_sip not found [ 140.604956][ T9387] netlink: 108 bytes leftover after parsing attributes in process `syz.4.952'. [ 140.624023][ T9387] netlink: 108 bytes leftover after parsing attributes in process `syz.4.952'. [ 140.633233][ T9387] netlink: 108 bytes leftover after parsing attributes in process `syz.4.952'. [ 140.689155][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 140.716358][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 140.726448][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 140.738190][ T9385] syzkaller0: entered allmulticast mode [ 140.794508][ T9394] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 140.832088][ T9394] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 140.841761][ T9399] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 140.931970][ T9153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.957360][ T9153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.993155][ T9153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.013401][ T9153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.117537][ T5843] Bluetooth: hci4: command tx timeout [ 141.273030][ T9418] netlink: 52 bytes leftover after parsing attributes in process `syz.0.961'. [ 141.339244][ T9418] netlink: 104 bytes leftover after parsing attributes in process `syz.0.961'. [ 141.431453][ T9426] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.962'. [ 141.465338][ T9424] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.962'. [ 141.519301][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.604656][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.628773][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.635905][ T8345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.657117][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.664299][ T8345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.712710][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.776003][ T9433] netlink: 'syz.0.965': attribute type 4 has an invalid length. [ 141.829196][ T9440] netlink: 'syz.0.965': attribute type 4 has an invalid length. [ 142.069969][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.215993][ T9153] veth0_vlan: entered promiscuous mode [ 142.245718][ T9153] veth1_vlan: entered promiscuous mode [ 142.334424][ T9153] veth0_macvtap: entered promiscuous mode [ 142.364264][ T9153] veth1_macvtap: entered promiscuous mode [ 142.389462][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.401817][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.416097][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.472306][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.504646][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.532298][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.544326][ T9467] netlink: 'syz.2.973': attribute type 1 has an invalid length. [ 142.579136][ T9153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.595081][ T9153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.615170][ T9153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.643527][ T9153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.865381][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 142.889317][ T8346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.915943][ T8346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.007321][ T8341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.030503][ T8341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.192708][ T5843] Bluetooth: hci4: command tx timeout [ 143.828810][ T9490] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 143.845756][ T9490] netlink: 'syz.0.980': attribute type 2 has an invalid length. [ 144.009386][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 144.467146][ T9509] netlink: 'syz.0.985': attribute type 5 has an invalid length. [ 144.840920][ T8341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.168285][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 145.271812][ T9522] netlink: 'syz.0.987': attribute type 1 has an invalid length. [ 145.524311][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.551893][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.552684][ T9537] netlink: 'syz.1.993': attribute type 3 has an invalid length. [ 145.570896][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.580470][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.588826][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.596376][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.605958][ T9537] Cannot find del_set index 4 as target [ 145.760652][ T8341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.936187][ T8341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.071132][ T8341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.089177][ T9563] x_tables: duplicate underflow at hook 3 [ 146.134916][ T9563] sctp: [Deprecated]: syz.1.1001 (pid 9563) Use of int in max_burst socket option. [ 146.134916][ T9563] Use struct sctp_assoc_value instead [ 146.269043][ T9572] __nla_validate_parse: 2 callbacks suppressed [ 146.269060][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 146.292631][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 146.331986][ T9577] xt_l2tp: v2 doesn't support IP mode [ 146.338948][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 146.369518][ T9532] chnl_net:caif_netlink_parms(): no params data found [ 146.382395][ T8341] bridge_slave_1: left allmulticast mode [ 146.401434][ T8341] bridge_slave_1: left promiscuous mode [ 146.424710][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.440439][ T8341] bridge_slave_0: left allmulticast mode [ 146.446267][ T8341] bridge_slave_0: left promiscuous mode [ 146.455837][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.913217][ T8341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.925819][ T8341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.949914][ T8341] bond0 (unregistering): Released all slaves [ 147.261380][ T9603] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1010'. [ 147.270747][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1010'. [ 147.280091][ T9603] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1010'. [ 147.356549][ T9608] sch_tbf: peakrate 8 is lower than or equals to rate 9 ! [ 147.443891][ T9620] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1014'. [ 147.454685][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.464441][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.477418][ T6163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.483930][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'. [ 147.503814][ T9532] bridge_slave_0: entered allmulticast mode [ 147.521323][ T9532] bridge_slave_0: entered promiscuous mode [ 147.546022][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.563535][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.577940][ T9532] bridge_slave_1: entered allmulticast mode [ 147.594457][ T9532] bridge_slave_1: entered promiscuous mode [ 147.649015][ T54] Bluetooth: hci4: command tx timeout [ 147.882901][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.916575][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.016799][ T9532] team0: Port device team_slave_0 added [ 148.041186][ T9532] team0: Port device team_slave_1 added [ 148.052751][ T8341] hsr_slave_0: left promiscuous mode [ 148.059284][ T8341] hsr_slave_1: left promiscuous mode [ 148.065282][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.073118][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.081353][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.089377][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.112576][ T8341] veth1_macvtap: left promiscuous mode [ 148.118670][ T8341] veth0_macvtap: left promiscuous mode [ 148.124237][ T8341] veth1_vlan: left promiscuous mode [ 148.130665][ T8341] veth0_vlan: left promiscuous mode [ 148.588102][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.601118][ T8341] team0 (unregistering): Port device team_slave_1 removed [ 148.645367][ T8341] team0 (unregistering): Port device team_slave_0 removed [ 149.205616][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.213733][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.239888][ T9532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.255767][ T9650] hsr0: entered promiscuous mode [ 149.261361][ T9650] vlan0: entered promiscuous mode [ 149.300710][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.316091][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 149.325229][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.351707][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 149.367371][ T9532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.379420][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1021'. [ 149.467120][ T9532] hsr_slave_0: entered promiscuous mode [ 149.476383][ T9532] hsr_slave_1: entered promiscuous mode [ 149.722759][ T8343] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.737619][ T54] Bluetooth: hci4: command tx timeout [ 149.855287][ T9662] sctp: [Deprecated]: syz.0.1023 (pid 9662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.855287][ T9662] Use struct sctp_sack_info instead [ 150.209641][ T9683] macvlan5: entered promiscuous mode [ 150.215147][ T9683] bond0: entered promiscuous mode [ 150.221780][ T9683] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 150.278859][ T9532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.323679][ T9532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.363090][ T9532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.401884][ T9693] bridge0: entered allmulticast mode [ 150.428180][ T9532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.647060][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.691550][ T9714] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 150.708138][ T9714] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 150.804103][ T9722] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 150.891071][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.046057][ T9532] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.140231][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.147429][ T8341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.250591][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.257780][ T8343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.361114][ T9742] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 151.397727][ T9742] netlink: 'syz.4.1043': attribute type 4 has an invalid length. [ 151.406219][ T9532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.425861][ T9742] __nla_validate_parse: 1 callbacks suppressed [ 151.425882][ T9742] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1043'. [ 151.464945][ T9532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.819578][ T54] Bluetooth: hci4: command tx timeout [ 151.923575][ T9772] ip6gretap0: left allmulticast mode [ 151.938051][ T9772] ip6gretap0: left promiscuous mode [ 151.944731][ T9772] bridge0: port 2(ip6gretap0) entered disabled state [ 151.980221][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 152.015803][ T9772] bond0: (slave bridge0): Releasing backup interface [ 152.026693][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1053'. [ 152.036629][ T8341] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.039122][ T9780] netlink: 'syz.1.1053': attribute type 10 has an invalid length. [ 152.055707][ T9772] bridge0: port 3(macvlan1) entered disabled state [ 152.062801][ T9772] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.081981][ T9772] bond0: (slave team0): Releasing backup interface [ 152.093927][ T9772] bridge_slave_0: left allmulticast mode [ 152.102179][ T9772] bridge_slave_0: left promiscuous mode [ 152.109575][ T9772] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.123896][ T9772] bond0: (slave bond_slave_0): Releasing backup interface [ 152.136849][ T9772] bond0: (slave bond_slave_1): Releasing backup interface [ 152.218489][ T9772] team0: Port device team_slave_0 removed [ 152.262174][ T9772] team0: Port device team_slave_1 removed [ 152.286308][ T9772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.296052][ T9772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.297659][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.324544][ T9772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.341845][ T9772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.372393][ T9772] macvlan1: left allmulticast mode [ 152.379350][ T9772] veth1_vlan: left allmulticast mode [ 152.390844][ T9772] macvlan1: left promiscuous mode [ 152.396597][ T9772] bridge0: port 3(macvlan1) entered disabled state [ 152.413026][ T9772] bond0: (slave netdevsim0): Releasing backup interface [ 152.425644][ T9772] bond1: (slave bond2): Releasing backup interface [ 152.436325][ T9772] bond3: (slave batadv1): Releasing active interface [ 152.451976][ T9772] bond4: (slave gre1): Releasing backup interface [ 152.475318][ T9780] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.594327][ T9532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.607046][ T9799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1056'. [ 152.992521][ T9532] veth0_vlan: entered promiscuous mode [ 153.031248][ T9532] veth1_vlan: entered promiscuous mode [ 153.043091][ T9819] xt_CT: No such helper "netbios-ns" [ 153.053829][ T8] IPVS: starting estimator thread 0... [ 153.091352][ T9819] xt_bpf: check failed: parse error [ 153.139036][ T9532] veth0_macvtap: entered promiscuous mode [ 153.149338][ T9532] veth1_macvtap: entered promiscuous mode [ 153.168246][ T9821] IPVS: using max 20 ests per chain, 48000 per kthread [ 153.171574][ T6163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.175901][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.196657][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.208548][ T9532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.219152][ T9532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.232800][ T9532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.242367][ T9532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.252316][ T9824] netlink: 'syz.0.1061': attribute type 39 has an invalid length. [ 153.296508][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 153.305901][ T9824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1061'. [ 153.465047][ T8855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.479759][ T8855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.514185][ T6163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.524347][ T6163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.625060][ T9831] veth0_to_team: entered promiscuous mode [ 153.648457][ T9831] veth0_to_team: entered allmulticast mode [ 153.680005][ T9831] sctp: [Deprecated]: syz.4.1064 (pid 9831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.680005][ T9831] Use struct sctp_sack_info instead [ 154.043522][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 154.220628][ T9859] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1075'. [ 154.244123][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'. [ 154.339528][ T8341] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.445463][ T9867] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 154.831503][ T8341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.912074][ T8341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.034791][ T8341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.193876][ T8341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.346594][ T8341] bridge_slave_1: left allmulticast mode [ 155.377746][ T8341] bridge_slave_1: left promiscuous mode [ 155.381839][ T9881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.388890][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'. [ 155.407900][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.445413][ T8341] bridge_slave_0: left allmulticast mode [ 155.455174][ T9883] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 155.468498][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.491564][ T8341] bridge_slave_0: left promiscuous mode [ 155.497367][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.505049][ T9883] block (null): Could not allocate knbd recv work queue. [ 155.525449][ T9883] nbd: failed to add new device [ 155.762537][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.772843][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.795120][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.805840][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.824961][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.833057][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.158598][ T8341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.171463][ T8341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.184551][ T8341] bond0 (unregistering): Released all slaves [ 156.335846][ T9919] x_tables: duplicate underflow at hook 3 [ 156.668483][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.743135][ T9898] chnl_net:caif_netlink_parms(): no params data found [ 156.856025][ T8341] hsr_slave_0: left promiscuous mode [ 156.919800][ T8341] hsr_slave_1: left promiscuous mode [ 156.927035][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.946106][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.967253][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.975441][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.015837][ T8341] veth1_macvtap: left promiscuous mode [ 157.022200][ T8341] veth0_macvtap: left promiscuous mode [ 157.028789][ T8341] veth1_vlan: left promiscuous mode [ 157.034355][ T8341] veth0_vlan: left promiscuous mode [ 157.549136][ T8341] team0 (unregistering): Port device team_slave_1 removed [ 157.595710][ T8341] team0 (unregistering): Port device team_slave_0 removed [ 157.798991][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 157.889756][ T5843] Bluetooth: hci4: command tx timeout [ 158.031871][ T9944] netlink: 'syz.4.1093': attribute type 15 has an invalid length. [ 158.040182][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1093'. [ 158.338212][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.345385][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.353263][ T9898] bridge_slave_0: entered allmulticast mode [ 158.360762][ T9898] bridge_slave_0: entered promiscuous mode [ 158.370054][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.377176][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.413310][ T9898] bridge_slave_1: entered allmulticast mode [ 158.421216][ T9898] bridge_slave_1: entered promiscuous mode [ 158.565375][ T9898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.589797][ T9898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.729234][ T9898] team0: Port device team_slave_0 added [ 158.758436][ T9898] team0: Port device team_slave_1 added [ 158.869215][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.879216][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.908072][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 158.929321][ T9898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.942018][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.949229][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.975488][ T9898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.066969][ T9898] hsr_slave_0: entered promiscuous mode [ 159.089494][ T9898] hsr_slave_1: entered promiscuous mode [ 159.118905][T10002] x_tables: duplicate underflow at hook 3 [ 159.131535][T10002] sctp: [Deprecated]: syz.4.1108 (pid 10002) Use of int in max_burst socket option. [ 159.131535][T10002] Use struct sctp_assoc_value instead [ 159.551313][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 159.797256][ T9898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.815126][ T9898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.828352][ T9898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.850125][ T9898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.968084][ T5843] Bluetooth: hci4: command tx timeout [ 160.043062][ T6163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.080683][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 160.116293][T10039] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1119'. [ 160.140598][T10039] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1119'. [ 160.167175][T10046] hsr0: left promiscuous mode [ 160.182050][T10046] vlan0: entered allmulticast mode [ 160.187274][T10046] hsr0: entered allmulticast mode [ 160.208130][T10046] hsr_slave_0: entered allmulticast mode [ 160.231863][T10046] hsr_slave_1: entered allmulticast mode [ 160.262537][T10046] hsr0: left allmulticast mode [ 160.270319][T10050] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1122'. [ 160.271938][T10046] hsr_slave_0: left allmulticast mode [ 160.287234][T10046] hsr_slave_1: left allmulticast mode [ 160.317305][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 160.339243][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'. [ 160.347132][ T9898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.357711][T10044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1121'. [ 160.402276][T10050] macvlan1: left allmulticast mode [ 160.407763][T10050] veth1_vlan: left allmulticast mode [ 160.423197][T10050] macvlan1: left promiscuous mode [ 160.442109][T10050] bridge0: port 3(macvlan1) entered disabled state [ 160.468995][T10050] bridge_slave_1: left allmulticast mode [ 160.486359][T10050] bridge_slave_1: left promiscuous mode [ 160.493804][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.531072][T10050] bridge_slave_0: left allmulticast mode [ 160.558776][T10050] bridge_slave_0: left promiscuous mode [ 160.564536][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.690777][ T9898] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.741279][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.748472][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.793647][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.800806][ T8343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.211216][ T8857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.225119][T10098] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 161.258701][T10098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1133'. [ 161.266309][ T9898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.326530][T10101] netlink: 'syz.0.1133': attribute type 4 has an invalid length. [ 161.372149][T10101] netlink: 'syz.0.1133': attribute type 4 has an invalid length. [ 161.377717][T10107] netlink: 'syz.0.1133': attribute type 4 has an invalid length. [ 161.465212][ T9898] veth0_vlan: entered promiscuous mode [ 161.515388][ T9898] veth1_vlan: entered promiscuous mode [ 161.580899][ T9898] veth0_macvtap: entered promiscuous mode [ 161.591070][ T9898] veth1_macvtap: entered promiscuous mode [ 161.613721][ T9898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.624228][ T9898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.634079][ T9898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.643145][ T9898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.652283][ T9898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.661305][ T9898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.694109][T10114] netlink: 'syz.1.1137': attribute type 8 has an invalid length. [ 162.043684][ T8857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.057614][ T5843] Bluetooth: hci4: command tx timeout [ 162.086262][ T8857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.162650][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.189013][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.340801][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.380913][T10142] FAULT_INJECTION: forcing a failure. [ 162.380913][T10142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.429194][T10142] CPU: 0 UID: 0 PID: 10142 Comm: syz.4.1143 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 162.440018][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 162.450107][T10142] Call Trace: [ 162.453414][T10142] [ 162.456565][T10142] dump_stack_lvl+0x241/0x360 [ 162.461293][T10142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.466523][T10142] ? __pfx__printk+0x10/0x10 [ 162.471149][T10142] ? __pfx_lock_release+0x10/0x10 [ 162.476489][T10142] should_fail_ex+0x3b0/0x4e0 [ 162.481211][T10142] _copy_from_iter+0x21f/0x1e70 [ 162.486092][T10142] ? __virt_addr_valid+0x183/0x530 [ 162.491238][T10142] ? __pfx_lock_release+0x10/0x10 [ 162.496309][T10142] ? __alloc_skb+0x28f/0x440 [ 162.500929][T10142] ? __pfx__copy_from_iter+0x10/0x10 [ 162.506258][T10142] ? __virt_addr_valid+0x183/0x530 [ 162.511404][T10142] ? __virt_addr_valid+0x183/0x530 [ 162.516539][T10142] ? __virt_addr_valid+0x45f/0x530 [ 162.521677][T10142] ? __check_object_size+0x48e/0x900 [ 162.527000][T10142] netlink_sendmsg+0x73d/0xcb0 [ 162.531809][T10142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.537133][T10142] ? aa_sock_msg_perm+0x91/0x160 [ 162.542101][T10142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.547399][T10142] __sock_sendmsg+0x221/0x270 [ 162.552082][T10142] ____sys_sendmsg+0x52a/0x7e0 [ 162.556856][T10142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.562156][T10142] __sys_sendmsg+0x292/0x380 [ 162.566750][T10142] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.571872][T10142] ? __pfx_vfs_write+0x10/0x10 [ 162.576646][T10142] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.583000][T10142] ? do_syscall_64+0x100/0x230 [ 162.587855][T10142] ? do_syscall_64+0xb6/0x230 [ 162.592536][T10142] do_syscall_64+0xf3/0x230 [ 162.597034][T10142] ? clear_bhb_loop+0x35/0x90 [ 162.601796][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.607692][T10142] RIP: 0033:0x7f4d6057e719 [ 162.612104][T10142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.631823][T10142] RSP: 002b:00007f4d612d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.640264][T10142] RAX: ffffffffffffffda RBX: 00007f4d60736058 RCX: 00007f4d6057e719 [ 162.648237][T10142] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 162.656207][T10142] RBP: 00007f4d612d5090 R08: 0000000000000000 R09: 0000000000000000 [ 162.664176][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.672141][T10142] R13: 0000000000000000 R14: 00007f4d60736058 R15: 00007ffd5217d3c8 [ 162.680130][T10142] [ 162.746321][T10152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.929770][T10164] batadv0: entered promiscuous mode [ 162.945354][T10164] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 162.955820][T10164] batadv0: left promiscuous mode [ 163.177647][T10182] __nla_validate_parse: 3 callbacks suppressed [ 163.177668][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 163.201947][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 163.241874][ T6165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.258368][ T5843] Bluetooth: hci0: command tx timeout [ 163.268038][T10182] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1158'. [ 163.588559][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.000216][T10193] FAULT_INJECTION: forcing a failure. [ 164.000216][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 164.009054][T10196] netlink: 'syz.0.1159': attribute type 2 has an invalid length. [ 164.042450][T10197] netlink: 'syz.0.1159': attribute type 2 has an invalid length. [ 164.063091][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.1.1160 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 164.073921][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 164.084005][T10193] Call Trace: [ 164.087307][T10193] [ 164.090256][T10193] dump_stack_lvl+0x241/0x360 [ 164.094967][T10193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.100200][T10193] ? __pfx__printk+0x10/0x10 [ 164.104824][T10193] ? __kmalloc_noprof+0xb0/0x400 [ 164.109797][T10193] ? __pfx___might_resched+0x10/0x10 [ 164.115117][T10193] should_fail_ex+0x3b0/0x4e0 [ 164.119831][T10193] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 164.126100][T10193] should_failslab+0xac/0x100 [ 164.130808][T10193] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 164.137080][T10193] __kmalloc_noprof+0xd8/0x400 [ 164.141873][T10193] ? apparmor_capable+0x13b/0x1b0 [ 164.146936][T10193] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 164.153042][T10193] genl_rcv_msg+0x802/0xec0 [ 164.157593][T10193] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.162672][T10193] ? __pfx_lock_acquire+0x10/0x10 [ 164.167839][T10193] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 164.173240][T10193] ? __pfx_nl80211_start_ap+0x10/0x10 [ 164.178629][T10193] ? __pfx_nl80211_post_doit+0x10/0x10 [ 164.184108][T10193] ? __pfx___might_resched+0x10/0x10 [ 164.189406][T10193] netlink_rcv_skb+0x1e3/0x430 [ 164.194175][T10193] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.199196][T10193] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.204506][T10193] genl_rcv+0x28/0x40 [ 164.208491][T10193] netlink_unicast+0x7f6/0x990 [ 164.213268][T10193] ? __pfx_netlink_unicast+0x10/0x10 [ 164.218556][T10193] ? __virt_addr_valid+0x183/0x530 [ 164.223848][T10193] ? __check_object_size+0x48e/0x900 [ 164.229133][T10193] netlink_sendmsg+0x8e4/0xcb0 [ 164.233907][T10193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.239202][T10193] ? aa_sock_msg_perm+0x91/0x160 [ 164.244140][T10193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.249419][T10193] __sock_sendmsg+0x221/0x270 [ 164.254095][T10193] ____sys_sendmsg+0x52a/0x7e0 [ 164.258873][T10193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.264170][T10193] __sys_sendmsg+0x292/0x380 [ 164.268762][T10193] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.273889][T10193] ? __pfx_vfs_write+0x10/0x10 [ 164.278673][T10193] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.285004][T10193] ? do_syscall_64+0x100/0x230 [ 164.289778][T10193] ? do_syscall_64+0xb6/0x230 [ 164.294467][T10193] do_syscall_64+0xf3/0x230 [ 164.298985][T10193] ? clear_bhb_loop+0x35/0x90 [ 164.303660][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.309554][T10193] RIP: 0033:0x7f578fd7e719 [ 164.313977][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.333665][T10193] RSP: 002b:00007f5790b08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.342078][T10193] RAX: ffffffffffffffda RBX: 00007f578ff35f80 RCX: 00007f578fd7e719 [ 164.350050][T10193] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 164.358018][T10193] RBP: 00007f5790b08090 R08: 0000000000000000 R09: 0000000000000000 [ 164.365985][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.373961][T10193] R13: 0000000000000000 R14: 00007f578ff35f80 R15: 00007fffb3bf3b38 [ 164.382122][T10193] [ 164.475604][T10208] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 164.497019][ T6165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.563279][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.578766][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.593374][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.601940][T10215] Cannot find set identified by id 0 to match [ 164.610432][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.628346][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.636456][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.726346][ T6165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.754667][T10228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1170'. [ 164.900728][ T6165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.959239][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.204884][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'. [ 165.239563][ T6165] bridge_slave_1: left allmulticast mode [ 165.245255][ T6165] bridge_slave_1: left promiscuous mode [ 165.258608][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.324905][ T6165] bridge_slave_0: left allmulticast mode [ 165.330930][ T6165] bridge_slave_0: left promiscuous mode [ 165.343486][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.347284][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 165.911790][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1183'. [ 166.071262][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.082073][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.094286][ T6165] bond0 (unregistering): Released all slaves [ 166.104798][T10261] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 166.106302][T10260] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 166.118089][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.135181][T10210] chnl_net:caif_netlink_parms(): no params data found [ 166.141691][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'. [ 166.184303][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1183'. [ 166.197774][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1183'. [ 166.545555][T10309] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 166.602037][T10315] geneve1: entered allmulticast mode [ 166.610679][T10210] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.631721][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.648500][T10210] bridge_slave_0: entered allmulticast mode [ 166.666810][T10210] bridge_slave_0: entered promiscuous mode [ 166.742715][T10210] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.754780][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.769742][ T54] Bluetooth: hci4: command tx timeout [ 166.774685][T10210] bridge_slave_1: entered allmulticast mode [ 166.776367][T10328] IPVS: length: 60 != 134377560 [ 166.797950][T10210] bridge_slave_1: entered promiscuous mode [ 166.820659][T10326] hsr0: entered promiscuous mode [ 166.825928][T10326] macsec2: entered allmulticast mode [ 166.839408][T10326] hsr0: entered allmulticast mode [ 166.844629][T10326] hsr_slave_0: entered allmulticast mode [ 166.863129][T10326] hsr_slave_1: entered allmulticast mode [ 166.891308][T10326] hsr0: left allmulticast mode [ 166.896219][T10326] hsr_slave_0: left allmulticast mode [ 166.915497][T10326] hsr_slave_1: left allmulticast mode [ 166.983278][ T6165] hsr_slave_0: left promiscuous mode [ 166.989956][ T6165] hsr_slave_1: left promiscuous mode [ 166.996138][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.005142][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.012082][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.026696][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.035058][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.061998][ T6165] veth1_macvtap: left promiscuous mode [ 167.068181][ T6165] veth0_macvtap: left promiscuous mode [ 167.073839][ T6165] veth1_vlan: left promiscuous mode [ 167.079734][ T6165] veth0_vlan: left promiscuous mode [ 167.147911][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.258778][ T8857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.534076][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 167.591167][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 168.048236][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.070560][T10210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.120688][T10210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.189758][T10351] __nla_validate_parse: 2 callbacks suppressed [ 168.189778][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1201'. [ 168.236490][T10210] team0: Port device team_slave_0 added [ 168.259284][T10210] team0: Port device team_slave_1 added [ 168.355625][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 168.377353][T10210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.384749][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.411660][T10210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.425616][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.475025][T10358] netlink: 'syz.2.1204': attribute type 21 has an invalid length. [ 168.477324][T10364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1206'. [ 168.492561][T10358] netlink: 'syz.2.1204': attribute type 1 has an invalid length. [ 168.501285][T10366] FAULT_INJECTION: forcing a failure. [ 168.501285][T10366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.516291][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.1.1203 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 168.527113][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 168.537295][T10366] Call Trace: [ 168.540645][T10366] [ 168.543603][T10366] dump_stack_lvl+0x241/0x360 [ 168.546375][T10365] team0: Port device wg2 added [ 168.548302][T10366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.548344][T10366] ? __pfx__printk+0x10/0x10 [ 168.548370][T10366] ? snprintf+0xda/0x120 [ 168.554657][T10210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.558394][T10366] should_fail_ex+0x3b0/0x4e0 [ 168.558428][T10366] _copy_to_user+0x31/0xb0 [ 168.558448][T10366] simple_read_from_buffer+0xca/0x150 [ 168.558478][T10366] proc_fail_nth_read+0x1e9/0x250 [ 168.563224][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.567295][T10366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.567350][T10366] ? rw_verify_area+0x55e/0x6f0 [ 168.567375][T10366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.567402][T10366] vfs_read+0x1fc/0xb70 [ 168.583849][T10210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.588773][T10366] ? fdget_pos+0x24e/0x320 [ 168.588806][T10366] ? __pfx_vfs_read+0x10/0x10 [ 168.588837][T10366] ? __fget_files+0x3f3/0x470 [ 168.588864][T10366] ? fdget_pos+0x24e/0x320 [ 168.668804][T10366] ksys_read+0x183/0x2b0 [ 168.673076][T10366] ? __pfx_ksys_read+0x10/0x10 [ 168.677849][T10366] ? do_syscall_64+0x100/0x230 [ 168.682611][T10366] ? do_syscall_64+0xb6/0x230 [ 168.687286][T10366] do_syscall_64+0xf3/0x230 [ 168.691812][T10366] ? clear_bhb_loop+0x35/0x90 [ 168.696487][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.702382][T10366] RIP: 0033:0x7f578fd7d15c [ 168.706801][T10366] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 168.726433][T10366] RSP: 002b:00007f5790b08030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.734872][T10366] RAX: ffffffffffffffda RBX: 00007f578ff35f80 RCX: 00007f578fd7d15c [ 168.742852][T10366] RDX: 000000000000000f RSI: 00007f5790b080a0 RDI: 0000000000000004 [ 168.750820][T10366] RBP: 00007f5790b08090 R08: 0000000000000000 R09: 0000000000000000 [ 168.758786][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.766768][T10366] R13: 0000000000000000 R14: 00007f578ff35f80 R15: 00007fffb3bf3b38 [ 168.774799][T10366] [ 168.783100][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.849335][ T54] Bluetooth: hci4: command tx timeout [ 168.955310][T10379] netlink: 'syz.4.1209': attribute type 39 has an invalid length. [ 169.123675][T10210] hsr_slave_0: entered promiscuous mode [ 169.140953][T10210] hsr_slave_1: entered promiscuous mode [ 169.208302][T10382] netlink: 64102 bytes leftover after parsing attributes in process `syz.2.1210'. [ 169.437899][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1213'. [ 169.792946][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.902606][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'. [ 169.999979][T10419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1220'. [ 170.076563][T10210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.100588][T10210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.119156][T10210] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.130405][ T12] wlan1: Trigger new scan to find an IBSS to join [ 170.140613][T10210] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.439621][T10210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.495532][T10210] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.524592][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.531782][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.602357][ T8346] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.609597][ T8346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.731764][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1224'. [ 170.740906][T10210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.927815][ T54] Bluetooth: hci4: command tx timeout [ 170.969595][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.185039][T10210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.206152][T10452] netlink: 'syz.0.1229': attribute type 10 has an invalid length. [ 171.322437][T10210] veth0_vlan: entered promiscuous mode [ 171.380113][T10210] veth1_vlan: entered promiscuous mode [ 171.453754][T10210] veth0_macvtap: entered promiscuous mode [ 171.492647][T10210] veth1_macvtap: entered promiscuous mode [ 171.502600][T10447] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 171.532363][T10210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.544031][T10210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.554424][T10210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.563330][T10210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.572343][T10210] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.581166][T10210] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.675403][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 171.923389][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.932049][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.941811][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.976227][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.133537][T10500] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1240'. [ 172.143871][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.399777][T10509] macsec1: entered promiscuous mode [ 172.425651][T10509] macvlan1: entered promiscuous mode [ 173.126050][ T6163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.288083][ T8857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.785516][ T6163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.978698][T10569] __nla_validate_parse: 5 callbacks suppressed [ 173.978716][T10569] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1254'. [ 174.010887][T10572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1256'. [ 174.180095][ T6163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.263228][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 174.283609][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'. [ 174.312014][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.322144][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.333920][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.342550][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.351507][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.360403][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.391299][ T6163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.439622][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.466101][T10587] netlink: 'syz.1.1259': attribute type 10 has an invalid length. [ 174.467631][T10586] Unsupported ieee802154 address type: 0 [ 174.484769][T10586] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 174.605941][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 174.758713][ T6163] bridge_slave_1: left allmulticast mode [ 174.772506][ T6163] bridge_slave_1: left promiscuous mode [ 174.781216][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.829281][ T6163] bridge_slave_0: left allmulticast mode [ 174.839553][ T6163] bridge_slave_0: left promiscuous mode [ 174.847310][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.985375][T10607] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1264'. [ 175.172648][ T8855] wlan1: Trigger new scan to find an IBSS to join [ 175.264597][ T6163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.276113][ T6163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.287197][ T6163] bond0 (unregistering): Released all slaves [ 175.305131][T10599] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 175.382597][T10604] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 175.556822][T10581] chnl_net:caif_netlink_parms(): no params data found [ 175.581164][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 175.621513][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 175.652105][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 175.839410][ T6163] hsr_slave_0: left promiscuous mode [ 175.845653][ T6163] hsr_slave_1: left promiscuous mode [ 175.889282][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.907181][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.929128][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.938857][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.990048][ T6163] veth1_macvtap: left promiscuous mode [ 175.995891][ T6163] veth0_macvtap: left promiscuous mode [ 176.008284][ T6163] veth1_vlan: left promiscuous mode [ 176.013801][ T6163] veth0_vlan: left promiscuous mode [ 176.098653][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.458654][ T54] Bluetooth: hci4: command tx timeout [ 176.665102][ T6163] team0 (unregistering): Port device team_slave_1 removed [ 176.716835][ T6163] team0 (unregistering): Port device team_slave_0 removed [ 176.724387][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.257165][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.264470][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.278486][T10581] bridge_slave_0: entered allmulticast mode [ 177.306620][T10581] bridge_slave_0: entered promiscuous mode [ 177.328800][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.351136][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.362704][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'. [ 177.377718][T10581] bridge_slave_1: entered allmulticast mode [ 177.384785][T10581] bridge_slave_1: entered promiscuous mode [ 177.406201][T10661] sctp: [Deprecated]: syz.0.1277 (pid 10661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.406201][T10661] Use struct sctp_sack_info instead [ 177.427167][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 177.441378][T10664] netem: change failed [ 177.545005][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.592187][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.668926][T10673] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 177.676504][T10673] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 177.710410][T10581] team0: Port device team_slave_0 added [ 177.756170][T10581] team0: Port device team_slave_1 added [ 177.839465][ T8343] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.869591][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.879313][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.917578][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.930588][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.937616][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.964024][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.151932][T10581] hsr_slave_0: entered promiscuous mode [ 178.192031][T10581] hsr_slave_1: entered promiscuous mode [ 178.538521][ T54] Bluetooth: hci4: command tx timeout [ 178.978511][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.010702][T10735] __nla_validate_parse: 5 callbacks suppressed [ 179.010716][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 179.026565][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'. [ 179.065612][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 180.109602][ T8857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.589663][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1297'. [ 180.607969][ T54] Bluetooth: hci4: command tx timeout [ 180.663402][T10742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1299'. [ 180.825156][T10751] netlink: 'syz.4.1302': attribute type 8 has an invalid length. [ 181.078360][T10766] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 181.099506][T10766] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 181.117686][T10766] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 181.126040][T10766] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 181.134190][T10766] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 181.142319][T10766] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 181.150440][T10766] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 181.162506][T10766] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 181.193977][T10766] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 181.256857][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 181.406063][T10581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.442791][T10581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.468495][T10581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.514693][T10581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.734266][T10796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1316'. [ 181.751114][T10796] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1316'. [ 181.767674][T10796] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1316'. [ 181.844518][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.920923][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.931747][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.938959][ T8857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.009958][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.017154][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.112577][T10805] x_tables: duplicate underflow at hook 2 [ 182.403196][ T6163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.424926][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'. [ 182.541338][T10581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.590953][T10836] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 182.697620][ T54] Bluetooth: hci4: command tx timeout [ 182.901094][T10581] veth0_vlan: entered promiscuous mode [ 182.958433][T10581] veth1_vlan: entered promiscuous mode [ 183.082364][T10581] veth0_macvtap: entered promiscuous mode [ 183.102835][T10581] veth1_macvtap: entered promiscuous mode [ 183.120317][T10581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.159358][T10581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.186465][T10581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.195691][T10581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.205462][T10581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.216546][T10581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.229914][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1333'. [ 183.261486][T10880] team0: Port device wg2 added [ 183.346408][ T8855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.374539][ T8855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.441534][T10890] syz_tun: refused to change device tx_queue_len [ 183.449217][T10890] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 183.486439][ T8855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.513288][ T8855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.580554][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 183.894024][T10878] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 184.401538][T10916] __nla_validate_parse: 4 callbacks suppressed [ 184.401559][T10916] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1344'. [ 184.409585][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 184.632843][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.671780][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 184.699663][T10908] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1342'. [ 184.719340][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.921503][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.143719][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.168718][ T5845] Bluetooth: hci1: command 0x0401 tx timeout [ 185.353908][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.487169][ T12] bridge_slave_1: left allmulticast mode [ 185.493626][ T12] bridge_slave_1: left promiscuous mode [ 185.500047][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.511072][ T12] bridge_slave_0: left allmulticast mode [ 185.516766][ T12] bridge_slave_0: left promiscuous mode [ 185.522956][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.756166][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 185.777948][T10953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'. [ 185.848813][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.971590][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.993833][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.003212][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.018983][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.026827][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 186.037143][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.039301][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1355'. [ 186.054003][T10965] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1355'. [ 186.065727][T10965] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1355'. [ 186.205800][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.218707][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.233377][ T12] bond0 (unregistering): Released all slaves [ 186.371840][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 186.539254][T10977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 186.668669][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1363'. [ 186.828222][ T12] hsr_slave_0: left promiscuous mode [ 186.840662][ T12] hsr_slave_1: left promiscuous mode [ 186.859195][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.876878][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.895158][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.912674][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.961951][ T12] veth1_macvtap: left promiscuous mode [ 186.972987][ T12] veth0_macvtap: left promiscuous mode [ 186.980346][ T12] veth1_vlan: left promiscuous mode [ 186.985816][ T12] veth0_vlan: left promiscuous mode [ 186.998124][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.251919][ T5843] Bluetooth: hci1: command 0x0401 tx timeout [ 187.495197][ T12] team0 (unregistering): Port device team_slave_1 removed [ 187.547374][ T12] team0 (unregistering): Port device team_slave_0 removed [ 188.119859][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.128290][ T5843] Bluetooth: hci4: command tx timeout [ 188.195745][T10962] chnl_net:caif_netlink_parms(): no params data found [ 188.393332][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.408415][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.421120][T10962] bridge_slave_0: entered allmulticast mode [ 188.436758][T10962] bridge_slave_0: entered promiscuous mode [ 188.481091][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.497035][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.506908][T10962] bridge_slave_1: entered allmulticast mode [ 188.521416][T10962] bridge_slave_1: entered promiscuous mode [ 188.632871][T10962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.668222][T10962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.810746][T10962] team0: Port device team_slave_0 added [ 188.853752][T10962] team0: Port device team_slave_1 added [ 188.873305][T11043] macsec1: entered promiscuous mode [ 188.884402][T11043] macvlan1: entered promiscuous mode [ 188.968610][T10962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.975606][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.001676][T10962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.014512][T10962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.021771][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.048145][T10962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.118983][T10962] hsr_slave_0: entered promiscuous mode [ 189.131688][T10962] hsr_slave_1: entered promiscuous mode [ 189.149293][T11055] batman_adv: batadv0: Adding interface: dummy0 [ 189.167949][T11055] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.205876][T11055] batman_adv: batadv0: Interface activated: dummy0 [ 189.273251][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.296938][T11055] batadv0: mtu less than device minimum [ 189.314814][T11055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.327863][T11055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.340540][T11055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.353223][T11055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.365776][T11055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.378497][T11055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.391175][T11055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.403677][T11055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.416042][T11055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.666830][T11071] __nla_validate_parse: 4 callbacks suppressed [ 189.666843][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 190.022120][T11089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 190.057862][T11089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.075660][T11089] vlan4: entered promiscuous mode [ 190.094171][T11089] dummy0: entered promiscuous mode [ 190.115680][T11089] vlan4: entered allmulticast mode [ 190.145338][T11089] dummy0: entered allmulticast mode [ 190.167132][T11089] team0: Device vlan4 is of different type [ 190.186775][T11089] dummy0: left allmulticast mode [ 190.203523][T11098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1391'. [ 190.207919][T11089] dummy0: left promiscuous mode [ 190.213105][ T5843] Bluetooth: hci4: command tx timeout [ 190.460090][ T8857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.788746][T11122] x_tables: duplicate underflow at hook 1 [ 190.814073][T10962] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.828804][T10962] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.853584][T10962] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.866460][T10962] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.893878][ T5853] hid-generic 0005:10CF:FFF9.0002: item fetching failed at offset 0/1 [ 190.913669][ T5853] hid-generic 0005:10CF:FFF9.0002: probe with driver hid-generic failed with error -22 [ 190.933075][T11129] ax25_connect(): syz.1.1402 uses autobind, please contact jreuter@yaina.de [ 190.981175][T11126] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 190.984730][T11134] netlink: 432 bytes leftover after parsing attributes in process `syz.0.1401'. [ 191.109227][T11134] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.155766][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.165266][T11142] validate_nla: 7 callbacks suppressed [ 191.165283][T11142] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 191.205917][T10962] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.244913][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.252071][ T8341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.324440][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.331628][ T8341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.489641][ T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 191.609335][ T8857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.833709][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.916118][T10962] veth0_vlan: entered promiscuous mode [ 191.944860][T10962] veth1_vlan: entered promiscuous mode [ 192.025955][T10962] veth0_macvtap: entered promiscuous mode [ 192.040135][T10962] veth1_macvtap: entered promiscuous mode [ 192.198714][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.270282][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.289614][ T54] Bluetooth: hci4: command tx timeout [ 192.301951][T10962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.354104][T10962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.379442][T10962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.389291][T10962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.420199][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 192.595898][ T8855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.603866][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 192.628974][ T8855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.679049][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.711346][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.728597][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.896179][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'. [ 192.982206][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 193.036805][T11204] x_tables: duplicate underflow at hook 3 [ 193.086418][T11206] sctp: [Deprecated]: syz.2.1420 (pid 11206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.086418][T11206] Use struct sctp_sack_info instead [ 193.105780][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1420'. [ 193.323520][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 193.459148][T11227] FAULT_INJECTION: forcing a failure. [ 193.459148][T11227] name failslab, interval 1, probability 0, space 0, times 0 [ 193.469166][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 193.481763][T11227] CPU: 1 UID: 0 PID: 11227 Comm: syz.2.1426 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 193.492564][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 193.502629][T11227] Call Trace: [ 193.505909][T11227] [ 193.508846][T11227] dump_stack_lvl+0x241/0x360 [ 193.513529][T11227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.518750][T11227] ? __pfx__printk+0x10/0x10 [ 193.523345][T11227] ? ref_tracker_alloc+0x332/0x490 [ 193.528469][T11227] should_fail_ex+0x3b0/0x4e0 [ 193.533150][T11227] ? skb_clone+0x20c/0x390 [ 193.537741][T11227] should_failslab+0xac/0x100 [ 193.542442][T11227] ? skb_clone+0x20c/0x390 [ 193.546855][T11227] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 193.552263][T11227] skb_clone+0x20c/0x390 [ 193.556537][T11227] __netlink_deliver_tap+0x3cc/0x7f0 [ 193.561949][T11227] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.567155][T11227] netlink_deliver_tap+0x19d/0x1b0 [ 193.572370][T11227] netlink_unicast+0x7c4/0x990 [ 193.577234][T11227] ? __pfx_netlink_unicast+0x10/0x10 [ 193.582520][T11227] ? __virt_addr_valid+0x183/0x530 [ 193.587640][T11227] ? __check_object_size+0x48e/0x900 [ 193.592961][T11227] netlink_sendmsg+0x8e4/0xcb0 [ 193.597769][T11227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.603102][T11227] ? aa_sock_msg_perm+0x91/0x160 [ 193.608069][T11227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.613446][T11227] __sock_sendmsg+0x221/0x270 [ 193.618136][T11227] ____sys_sendmsg+0x52a/0x7e0 [ 193.623091][T11227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.628400][T11227] __sys_sendmsg+0x292/0x380 [ 193.632996][T11227] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.638128][T11227] ? bpf_trace_run2+0x1fc/0x540 [ 193.642979][T11227] ? bpf_trace_run2+0x36e/0x540 [ 193.647837][T11227] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.654175][T11227] ? rcu_is_watching+0x15/0xb0 [ 193.658952][T11227] ? trace_sys_enter+0x1f/0xd0 [ 193.663744][T11227] do_syscall_64+0xf3/0x230 [ 193.668258][T11227] ? clear_bhb_loop+0x35/0x90 [ 193.672937][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.678831][T11227] RIP: 0033:0x7f85f5d7e719 [ 193.683247][T11227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.702859][T11227] RSP: 002b:00007f85f6ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.711275][T11227] RAX: ffffffffffffffda RBX: 00007f85f5f36130 RCX: 00007f85f5d7e719 [ 193.719245][T11227] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 193.727214][T11227] RBP: 00007f85f6ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 193.735193][T11227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.743168][T11227] R13: 0000000000000000 R14: 00007f85f5f36130 R15: 00007fff20521c28 [ 193.751159][T11227] [ 193.808426][T11233] netlink: 'syz.1.1428': attribute type 13 has an invalid length. [ 193.909371][T11237] x_tables: ip_tables: osf match: only valid for protocol 6 [ 193.974026][T11239] mac80211_hwsim hwsim4 wlan1: Device is already in use. [ 194.078473][ T8345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.269614][ T8345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.530698][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.995927][ T8345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.054683][ T8345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.114009][ T8345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.189083][ T8345] bridge_slave_1: left allmulticast mode [ 195.195051][ T8345] bridge_slave_1: left promiscuous mode [ 195.202059][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.209798][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.219539][ T8345] bridge_slave_0: left allmulticast mode [ 195.225184][ T8345] bridge_slave_0: left promiscuous mode [ 195.232703][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.396816][T11273] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 195.408217][T11273] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 195.418301][T11273] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 195.442315][T11273] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 195.699188][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.700886][T11291] __nla_validate_parse: 2 callbacks suppressed [ 195.700906][T11291] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1441'. [ 195.711558][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.741001][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.764978][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.774568][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 195.783798][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.938941][ T8345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.957005][ T8345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.967430][ T8345] bond0 (unregistering): Released all slaves [ 195.979835][T11275] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 196.002197][T11287] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 196.016682][T11287] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 196.318074][ T8857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.366486][T11313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1443'. [ 196.497197][ T8345] hsr_slave_0: left promiscuous mode [ 196.516544][ T8345] hsr_slave_1: left promiscuous mode [ 196.527691][ T8345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.536227][ T8345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.551298][ T8345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.562203][ T8345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.613002][ T8345] veth1_macvtap: left promiscuous mode [ 196.623244][ T8345] veth0_macvtap: left promiscuous mode [ 196.632260][ T8345] veth1_vlan: left promiscuous mode [ 196.643466][ T8345] veth0_vlan: left promiscuous mode [ 196.644139][T11326] FAULT_INJECTION: forcing a failure. [ 196.644139][T11326] name failslab, interval 1, probability 0, space 0, times 0 [ 196.666272][T11326] CPU: 0 UID: 0 PID: 11326 Comm: syz.2.1449 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 196.677097][T11326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.687185][T11326] Call Trace: [ 196.690501][T11326] [ 196.693462][T11326] dump_stack_lvl+0x241/0x360 [ 196.698178][T11326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.703425][T11326] ? __pfx__printk+0x10/0x10 [ 196.708054][T11326] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 196.713577][T11326] ? __pfx___might_resched+0x10/0x10 [ 196.718899][T11326] should_fail_ex+0x3b0/0x4e0 [ 196.723606][T11326] should_failslab+0xac/0x100 [ 196.728295][T11326] ? rtnl_newlink+0x12e/0x24f0 [ 196.733097][T11326] __kmalloc_cache_noprof+0x6c/0x2c0 [ 196.738386][T11326] rtnl_newlink+0x12e/0x24f0 [ 196.743064][T11326] ? kasan_save_track+0x51/0x80 [ 196.747927][T11326] ? kasan_save_free_info+0x40/0x50 [ 196.753123][T11326] ? kmem_cache_free+0x1a2/0x420 [ 196.758056][T11326] ? nlmon_xmit+0xaf/0x100 [ 196.762490][T11326] ? dev_hard_start_xmit+0x27a/0x7e0 [ 196.767785][T11326] ? __pfx_rtnl_newlink+0x10/0x10 [ 196.772816][T11326] ? netlink_unicast+0x7c4/0x990 [ 196.777758][T11326] ? __pfx_validate_chain+0x10/0x10 [ 196.783043][T11326] ? __sys_sendmsg+0x292/0x380 [ 196.787838][T11326] ? do_syscall_64+0xf3/0x230 [ 196.792511][T11326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.798590][T11326] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.804593][T11326] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.810949][T11326] ? mark_lock+0x9a/0x360 [ 196.815278][T11326] ? __lock_acquire+0x1384/0x2050 [ 196.820324][T11326] ? rcu_read_unlock+0x87/0xa0 [ 196.825111][T11326] ? __dev_queue_xmit+0x1775/0x3f50 [ 196.830342][T11326] ? __pfx_lock_release+0x10/0x10 [ 196.835376][T11326] ? __pfx_rtnl_newlink+0x10/0x10 [ 196.840401][T11326] rtnetlink_rcv_msg+0x791/0xcf0 [ 196.845331][T11326] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 196.850528][T11326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.855991][T11326] ? ref_tracker_free+0x643/0x7e0 [ 196.861020][T11326] netlink_rcv_skb+0x1e3/0x430 [ 196.865786][T11326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.871258][T11326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.876568][T11326] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.881767][T11326] netlink_unicast+0x7f6/0x990 [ 196.886544][T11326] ? __pfx_netlink_unicast+0x10/0x10 [ 196.891823][T11326] ? __virt_addr_valid+0x183/0x530 [ 196.896927][T11326] ? __check_object_size+0x48e/0x900 [ 196.902282][T11326] netlink_sendmsg+0x8e4/0xcb0 [ 196.907054][T11326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.912337][T11326] ? aa_sock_msg_perm+0x91/0x160 [ 196.917275][T11326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.922561][T11326] __sock_sendmsg+0x221/0x270 [ 196.927240][T11326] ____sys_sendmsg+0x52a/0x7e0 [ 196.932014][T11326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.937307][T11326] __sys_sendmsg+0x292/0x380 [ 196.941904][T11326] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.947026][T11326] ? __pfx_vfs_write+0x10/0x10 [ 196.951814][T11326] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.958142][T11326] ? do_syscall_64+0x100/0x230 [ 196.962902][T11326] ? do_syscall_64+0xb6/0x230 [ 196.967596][T11326] do_syscall_64+0xf3/0x230 [ 196.972107][T11326] ? clear_bhb_loop+0x35/0x90 [ 196.976796][T11326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.982740][T11326] RIP: 0033:0x7f85f5d7e719 [ 196.987151][T11326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.006752][T11326] RSP: 002b:00007f85f6af8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.015175][T11326] RAX: ffffffffffffffda RBX: 00007f85f5f36058 RCX: 00007f85f5d7e719 [ 197.023142][T11326] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 197.031107][T11326] RBP: 00007f85f6af8090 R08: 0000000000000000 R09: 0000000000000000 [ 197.039074][T11326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.047042][T11326] R13: 0000000000000000 R14: 00007f85f5f36058 R15: 00007fff20521c28 [ 197.055018][T11326] [ 197.205041][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1452'. [ 197.232907][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 197.262139][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1453'. [ 197.262272][T11336] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1452'. [ 197.279111][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 197.312302][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1453'. [ 197.346992][T11340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1454'. [ 197.752923][ T8341] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.833282][ T8345] team0 (unregistering): Port device team_slave_1 removed [ 197.884122][ T8345] team0 (unregistering): Port device team_slave_0 removed [ 197.888197][ T5843] Bluetooth: hci4: command tx timeout [ 198.310669][T11332] batadv0: entered promiscuous mode [ 198.411151][T11289] chnl_net:caif_netlink_parms(): no params data found [ 198.423353][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 198.691118][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.707052][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.715004][T11289] bridge_slave_0: entered allmulticast mode [ 198.724198][T11289] bridge_slave_0: entered promiscuous mode [ 198.736611][T11370] netlink: 'syz.0.1459': attribute type 11 has an invalid length. [ 198.753563][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.761601][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.769412][T11289] bridge_slave_1: entered allmulticast mode [ 198.776694][T11289] bridge_slave_1: entered promiscuous mode [ 198.806911][T11369] syzkaller0: entered promiscuous mode [ 198.825478][T11369] syzkaller0: entered allmulticast mode [ 198.869828][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.935602][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.978736][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.096099][T11382] veth0_vlan: entered allmulticast mode [ 199.109860][T11390] FAULT_INJECTION: forcing a failure. [ 199.109860][T11390] name failslab, interval 1, probability 0, space 0, times 0 [ 199.152277][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.1.1465 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 199.163111][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 199.173197][T11390] Call Trace: [ 199.176498][T11390] [ 199.179458][T11390] dump_stack_lvl+0x241/0x360 [ 199.184172][T11390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.189420][T11390] ? __pfx__printk+0x10/0x10 [ 199.194133][T11390] ? __kmalloc_node_noprof+0xb7/0x440 [ 199.199547][T11390] ? __pfx___might_resched+0x10/0x10 [ 199.204881][T11390] should_fail_ex+0x3b0/0x4e0 [ 199.209613][T11390] should_failslab+0xac/0x100 [ 199.214322][T11390] __kmalloc_node_noprof+0xdf/0x440 [ 199.219557][T11390] ? crypto_create_tfm_node+0x88/0x3d0 [ 199.225064][T11390] crypto_create_tfm_node+0x88/0x3d0 [ 199.230413][T11390] crypto_alloc_tfm_node+0x161/0x360 [ 199.235744][T11390] cryptd_alloc_aead+0xe2/0x200 [ 199.240631][T11390] ? __pfx_cryptd_alloc_aead+0x10/0x10 [ 199.246143][T11390] ? rcu_is_watching+0x15/0xb0 [ 199.250952][T11390] simd_aead_init+0x67/0x150 [ 199.255583][T11390] crypto_create_tfm_node+0x167/0x3d0 [ 199.261006][T11390] crypto_alloc_tfm_node+0x161/0x360 [ 199.266347][T11390] macsec_validate_attr+0x1a7/0x9d0 [ 199.271622][T11390] ? __pfx_macsec_validate_attr+0x10/0x10 [ 199.277391][T11390] ? nla_strscpy+0x100/0x180 [ 199.282120][T11390] ? __nla_parse+0x40/0x60 [ 199.286583][T11390] rtnl_newlink+0x815/0x24f0 [ 199.291217][T11390] ? __lock_acquire+0x1384/0x2050 [ 199.296279][T11390] ? __pfx_rtnl_newlink+0x10/0x10 [ 199.301344][T11390] ? __pfx_validate_chain+0x10/0x10 [ 199.306600][T11390] ? validate_chain+0x11e/0x5920 [ 199.311659][T11390] ? __pfx_lock_acquire+0x10/0x10 [ 199.316728][T11390] ? __pfx_lock_release+0x10/0x10 [ 199.321802][T11390] ? __pfx_validate_chain+0x10/0x10 [ 199.327036][T11390] ? mark_lock+0x9a/0x360 [ 199.331404][T11390] ? __lock_acquire+0x1384/0x2050 [ 199.336499][T11390] ? __pfx_lock_release+0x10/0x10 [ 199.341577][T11390] ? __pfx_rtnl_newlink+0x10/0x10 [ 199.346643][T11390] rtnetlink_rcv_msg+0x791/0xcf0 [ 199.351616][T11390] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 199.356775][T11390] ? __lock_acquire+0x1384/0x2050 [ 199.362016][T11390] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.367527][T11390] netlink_rcv_skb+0x1e3/0x430 [ 199.372333][T11390] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.377828][T11390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.383167][T11390] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.388410][T11390] netlink_unicast+0x7f6/0x990 [ 199.393222][T11390] ? __pfx_netlink_unicast+0x10/0x10 [ 199.398714][T11390] ? __virt_addr_valid+0x183/0x530 [ 199.403953][T11390] ? __check_object_size+0x48e/0x900 [ 199.409295][T11390] netlink_sendmsg+0x8e4/0xcb0 [ 199.414210][T11390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.419547][T11390] ? aa_sock_msg_perm+0x91/0x160 [ 199.424534][T11390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.429879][T11390] __sock_sendmsg+0x221/0x270 [ 199.434597][T11390] ____sys_sendmsg+0x52a/0x7e0 [ 199.439412][T11390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.444751][T11390] __sys_sendmsg+0x292/0x380 [ 199.449385][T11390] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.454541][T11390] ? __pfx_vfs_write+0x10/0x10 [ 199.459376][T11390] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.465754][T11390] ? do_syscall_64+0x100/0x230 [ 199.467100][T11400] netlink: 'syz.4.1467': attribute type 21 has an invalid length. [ 199.470527][T11390] ? do_syscall_64+0xb6/0x230 [ 199.470575][T11390] do_syscall_64+0xf3/0x230 [ 199.470595][T11390] ? clear_bhb_loop+0x35/0x90 [ 199.470620][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.489883][T11400] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.492244][T11390] RIP: 0033:0x7f578fd7e719 [ 199.492270][T11390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.505200][T11400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.505835][T11390] RSP: 002b:00007f5790ae7038 EFLAGS: 00000246 [ 199.510485][T11400] IPv6: NLM_F_CREATE should be set when creating new route [ 199.529945][T11390] ORIG_RAX: 000000000000002e [ 199.529962][T11390] RAX: ffffffffffffffda RBX: 00007f578ff36058 RCX: 00007f578fd7e719 [ 199.529977][T11390] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 199.529989][T11390] RBP: 00007f5790ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.530002][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.530012][T11390] R13: 0000000000000000 R14: 00007f578ff36058 R15: 00007fffb3bf3b38 [ 199.530042][T11390] [ 199.537269][T11400] IPv6: NLM_F_CREATE should be set when creating new route [ 199.606459][T11400] IPv6: NLM_F_CREATE should be set when creating new route [ 199.826004][T11289] team0: Port device team_slave_0 added [ 199.839138][T11289] team0: Port device team_slave_1 added [ 200.006755][ T5843] Bluetooth: hci4: command tx timeout [ 200.064041][T11417] hsr0: left promiscuous mode [ 200.204593][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.248996][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.255454][T11433] ax25_connect(): syz.2.1471 uses autobind, please contact jreuter@yaina.de [ 200.295426][T11434] ax25_connect(): syz.2.1471 uses autobind, please contact jreuter@yaina.de [ 200.339156][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.363787][T11423] net_ratelimit: 10 callbacks suppressed [ 200.363810][T11423] batadv0: mtu less than device minimum [ 200.378700][T11423] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 200.391690][T11423] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 200.404314][T11423] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 200.416773][T11423] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 200.429114][T11423] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 200.440634][T11423] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 200.453225][T11423] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 200.464839][T11423] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 200.477313][T11423] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 200.515903][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.523690][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.550131][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.561636][ T8346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.733410][T11289] hsr_slave_0: entered promiscuous mode [ 200.760959][T11289] hsr_slave_1: entered promiscuous mode [ 200.790553][T11457] __nla_validate_parse: 1 callbacks suppressed [ 200.790573][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 200.856533][T11457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1475'. [ 200.902834][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 200.938773][T11466] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1475'. [ 201.446444][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 201.697705][ T8855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.834717][T11289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.869260][T11289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.887444][T11289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.914773][T11289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.055935][ T5843] Bluetooth: hci4: command tx timeout [ 202.085433][T11289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.127372][T11289] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.145296][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.152527][ T8855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.204697][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.211917][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.531195][T11522] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 202.587079][T11289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.724001][T11289] veth0_vlan: entered promiscuous mode [ 202.766991][T11289] veth1_vlan: entered promiscuous mode [ 202.829453][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.861380][T11289] veth0_macvtap: entered promiscuous mode [ 202.891679][T11289] veth1_macvtap: entered promiscuous mode [ 202.950381][T11289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.974158][T11289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.001927][T11289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.028833][T11289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.065227][T11289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.087936][T11289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.266347][ T8346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.307559][ T8346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.349022][ T8855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.357074][ T8855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.545666][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'. [ 203.557407][T11593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1506'. [ 203.730257][T11599] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1508'. [ 203.978334][ T8341] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.032027][T11607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1510'. [ 204.045816][T11607] netlink: 'syz.1.1510': attribute type 3 has an invalid length. [ 204.056374][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 204.171171][T11616] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 204.186861][T11616] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.203436][T11616] bond0: (slave team0): Enslaving as an active interface with an up link [ 204.239832][T11620] trusted_key: syz.4.1515 sent an empty control message without MSG_MORE. [ 204.654464][ T2921] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.119852][ T8341] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.397025][ T2921] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.809004][ T2921] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.825622][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 205.889586][T11652] RDS: rds_bind could not find a transport for 1400::, load rds_tcp or rds_rdma? [ 206.046067][ T2921] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.091726][T11660] vlan0: entered promiscuous mode [ 206.108194][T11660] net_ratelimit: 10 callbacks suppressed [ 206.108213][T11660] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 206.179136][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 206.208167][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.218964][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.227314][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.268242][ T8341] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.274435][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.283974][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.297701][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.386168][T11676] netlink: 'syz.0.1529': attribute type 10 has an invalid length. [ 206.553919][ T2921] bridge_slave_1: left allmulticast mode [ 206.578802][ T2921] bridge_slave_1: left promiscuous mode [ 206.604432][ T2921] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.630499][ T2921] bridge_slave_0: left allmulticast mode [ 206.636210][ T2921] bridge_slave_0: left promiscuous mode [ 206.644605][ T2921] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.027095][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'. [ 207.124984][T11694] netlink: 'syz.1.1534': attribute type 5 has an invalid length. [ 207.162749][ T2921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.174776][ T2921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.186188][ T2921] bond0 (unregistering): Released all slaves [ 207.257172][T11694] ip6erspan0: entered promiscuous mode [ 207.405768][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 207.439937][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.602748][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 207.612464][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 207.625297][T11671] chnl_net:caif_netlink_parms(): no params data found Connection to 10.128.0.98 closed by remote host. [ 208.121467][ T2921] hsr_slave_0: left promiscuous mode [ 208.230709][ T2921] hsr_slave_1: left promiscuous mode [ 208.256885][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.265161][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.284004][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.292108][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.323825][ T2921] veth1_macvtap: left promiscuous mode [ 208.329984][ T2921] veth0_macvtap: left promiscuous mode [ 208.335784][ T2921] veth1_vlan: left promiscuous mode [ 208.341363][ T2921] veth0_vlan: left promiscuous mode [ 208.578520][ T6165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.632048][ T8346] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 208.796027][ T2921] team0 (unregistering): Port device team_slave_1 removed [ 208.842899][ T2921] team0 (unregistering): Port device team_slave_0 removed [ 209.362801][ T6795] ================================================================== [ 209.370888][ T6795] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 209.379046][ T6795] Read of size 8 at addr ffff8880336c1308 by task kbnepd bnep0/6795 [ 209.387015][ T6795] [ 209.389392][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 209.400231][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 209.410280][ T6795] Call Trace: [ 209.413552][ T6795] [ 209.416481][ T6795] dump_stack_lvl+0x241/0x360 [ 209.421159][ T6795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.426522][ T6795] ? __pfx__printk+0x10/0x10 [ 209.431104][ T6795] ? _printk+0xd5/0x120 [ 209.435250][ T6795] ? __virt_addr_valid+0x183/0x530 [ 209.440361][ T6795] ? __virt_addr_valid+0x183/0x530 [ 209.445469][ T6795] print_report+0x169/0x550 [ 209.449969][ T6795] ? __virt_addr_valid+0x183/0x530 [ 209.455084][ T6795] ? __virt_addr_valid+0x183/0x530 [ 209.460200][ T6795] ? __virt_addr_valid+0x45f/0x530 [ 209.465331][ T6795] ? __phys_addr+0xba/0x170 [ 209.469847][ T6795] ? device_for_each_child+0xbb/0x1b0 [ 209.475219][ T6795] kasan_report+0x143/0x180 [ 209.479751][ T6795] ? device_for_each_child+0xbb/0x1b0 [ 209.485154][ T6795] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 209.490612][ T6795] device_for_each_child+0xbb/0x1b0 [ 209.495810][ T6795] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.502135][ T6795] ? __pfx_device_for_each_child+0x10/0x10 [ 209.507945][ T6795] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.513166][ T6795] ? lockdep_hardirqs_on+0x99/0x150 [ 209.518392][ T6795] pm_runtime_set_memalloc_noio+0x114/0x260 [ 209.524399][ T6795] netdev_unregister_kobject+0x178/0x250 [ 209.530033][ T6795] unregister_netdevice_many_notify+0x1859/0x1da0 [ 209.536450][ T6795] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 209.543215][ T6795] ? do_raw_spin_unlock+0x13c/0x8b0 [ 209.548429][ T6795] ? __mutex_lock+0x52a/0xd70 [ 209.553105][ T6795] unregister_netdevice_queue+0x303/0x370 [ 209.558826][ T6795] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 209.565065][ T6795] ? down_write+0x18c/0x220 [ 209.569566][ T6795] ? __pfx_down_write+0x10/0x10 [ 209.574414][ T6795] unregister_netdev+0x1c/0x30 [ 209.579170][ T6795] bnep_session+0x2e3c/0x3030 [ 209.583879][ T6795] ? __pfx_bnep_session+0x10/0x10 [ 209.588901][ T6795] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 209.594788][ T6795] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 209.601108][ T6795] ? __pfx_woken_wake_function+0x10/0x10 [ 209.606749][ T6795] ? __kthread_parkme+0x169/0x1d0 [ 209.611775][ T6795] ? __pfx_bnep_session+0x10/0x10 [ 209.616832][ T6795] kthread+0x2f0/0x390 [ 209.620902][ T6795] ? __pfx_bnep_session+0x10/0x10 [ 209.625921][ T6795] ? __pfx_kthread+0x10/0x10 [ 209.630510][ T6795] ret_from_fork+0x4b/0x80 [ 209.634929][ T6795] ? __pfx_kthread+0x10/0x10 [ 209.639516][ T6795] ret_from_fork_asm+0x1a/0x30 [ 209.644293][ T6795] [ 209.647303][ T6795] [ 209.649718][ T6795] Allocated by task 5850: [ 209.654147][ T6795] kasan_save_track+0x3f/0x80 [ 209.658832][ T6795] __kasan_kmalloc+0x98/0xb0 [ 209.663427][ T6795] __kmalloc_noprof+0x1fc/0x400 [ 209.668286][ T6795] hci_alloc_dev_priv+0x27/0x2030 [ 209.673307][ T6795] vhci_create_device+0x116/0x6a0 [ 209.678404][ T6795] vhci_write+0x3cf/0x490 [ 209.682725][ T6795] vfs_write+0xaeb/0xd30 [ 209.686956][ T6795] ksys_write+0x183/0x2b0 [ 209.691275][ T6795] do_syscall_64+0xf3/0x230 [ 209.695770][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.701656][ T6795] [ 209.703966][ T6795] Freed by task 5850: [ 209.707931][ T6795] kasan_save_track+0x3f/0x80 [ 209.712596][ T6795] kasan_save_free_info+0x40/0x50 [ 209.717628][ T6795] __kasan_slab_free+0x59/0x70 [ 209.722396][ T6795] kfree+0x1a0/0x440 [ 209.726280][ T6795] hci_release_dev+0x1525/0x16b0 [ 209.731233][ T6795] bt_host_release+0x83/0x90 [ 209.735821][ T6795] device_release+0x99/0x1c0 [ 209.740420][ T6795] kobject_put+0x22f/0x480 [ 209.744831][ T6795] vhci_release+0x88/0xd0 [ 209.749154][ T6795] __fput+0x23f/0x880 [ 209.753130][ T6795] task_work_run+0x24f/0x310 [ 209.757713][ T6795] do_exit+0xa2f/0x28e0 [ 209.761865][ T6795] do_group_exit+0x207/0x2c0 [ 209.766465][ T6795] get_signal+0x16a3/0x1740 [ 209.770963][ T6795] arch_do_signal_or_restart+0x96/0x860 [ 209.776506][ T6795] syscall_exit_to_user_mode+0xc9/0x370 [ 209.782055][ T6795] do_syscall_64+0x100/0x230 [ 209.786645][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.792548][ T6795] [ 209.794860][ T6795] Last potentially related work creation: [ 209.800564][ T6795] kasan_save_stack+0x3f/0x60 [ 209.805233][ T6795] __kasan_record_aux_stack+0xac/0xc0 [ 209.810601][ T6795] insert_work+0x3e/0x330 [ 209.814924][ T6795] __queue_work+0xb66/0xf50 [ 209.819443][ T6795] queue_work_on+0x1c2/0x380 [ 209.824028][ T6795] process_scheduled_works+0xa63/0x1850 [ 209.829569][ T6795] worker_thread+0x870/0xd30 [ 209.834154][ T6795] kthread+0x2f0/0x390 [ 209.838216][ T6795] ret_from_fork+0x4b/0x80 [ 209.842650][ T6795] ret_from_fork_asm+0x1a/0x30 [ 209.847410][ T6795] [ 209.849730][ T6795] Second to last potentially related work creation: [ 209.856301][ T6795] kasan_save_stack+0x3f/0x60 [ 209.860972][ T6795] __kasan_record_aux_stack+0xac/0xc0 [ 209.866355][ T6795] insert_work+0x3e/0x330 [ 209.870683][ T6795] __queue_work+0xc8b/0xf50 [ 209.875185][ T6795] call_timer_fn+0x18e/0x650 [ 209.879775][ T6795] __run_timer_base+0x695/0x8e0 [ 209.884622][ T6795] run_timer_softirq+0xb7/0x170 [ 209.889467][ T6795] handle_softirqs+0x2c5/0x980 [ 209.894257][ T6795] __irq_exit_rcu+0xf4/0x1c0 [ 209.898843][ T6795] irq_exit_rcu+0x9/0x30 [ 209.903087][ T6795] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 209.908716][ T6795] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 209.914689][ T6795] [ 209.917001][ T6795] The buggy address belongs to the object at ffff8880336c0000 [ 209.917001][ T6795] which belongs to the cache kmalloc-8k of size 8192 [ 209.931048][ T6795] The buggy address is located 4872 bytes inside of [ 209.931048][ T6795] freed 8192-byte region [ffff8880336c0000, ffff8880336c2000) [ 209.945012][ T6795] [ 209.947326][ T6795] The buggy address belongs to the physical page: [ 209.953732][ T6795] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x336c0 [ 209.962485][ T6795] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 209.971003][ T6795] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 209.978572][ T6795] page_type: f5(slab) [ 209.982544][ T6795] raw: 00fff00000000040 ffff88801ac42280 dead000000000100 dead000000000122 [ 209.991117][ T6795] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 209.999802][ T6795] head: 00fff00000000040 ffff88801ac42280 dead000000000100 dead000000000122 [ 210.008550][ T6795] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 210.017209][ T6795] head: 00fff00000000003 ffffea0000cdb001 ffffffffffffffff 0000000000000000 [ 210.025870][ T6795] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 210.034556][ T6795] page dumped because: kasan: bad access detected [ 210.040969][ T6795] page_owner tracks the page as allocated [ 210.046676][ T6795] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5509, tgid 5509 (dhcpcd), ts 33894186554, free_ts 33877114856 [ 210.067346][ T6795] post_alloc_hook+0x1f3/0x230 [ 210.072116][ T6795] get_page_from_freelist+0x3649/0x3790 [ 210.077661][ T6795] __alloc_pages_noprof+0x292/0x710 [ 210.082861][ T6795] alloc_pages_mpol_noprof+0x3e8/0x680 [ 210.088315][ T6795] alloc_slab_page+0x6a/0x140 [ 210.092987][ T6795] allocate_slab+0x5a/0x2f0 [ 210.097502][ T6795] ___slab_alloc+0xcd1/0x14b0 [ 210.102185][ T6795] __slab_alloc+0x58/0xa0 [ 210.106506][ T6795] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 210.112917][ T6795] kmalloc_reserve+0x111/0x2a0 [ 210.117678][ T6795] __alloc_skb+0x1f3/0x440 [ 210.122099][ T6795] netlink_dump+0x1ee/0xe10 [ 210.126601][ T6795] netlink_recvmsg+0x6bb/0x11d0 [ 210.131448][ T6795] sock_recvmsg+0x22f/0x280 [ 210.135940][ T6795] ____sys_recvmsg+0x1c6/0x480 [ 210.140697][ T6795] __sys_recvmsg+0x2e6/0x3d0 [ 210.145292][ T6795] page last free pid 5509 tgid 5509 stack trace: [ 210.151638][ T6795] free_unref_page+0xdf9/0x1140 [ 210.156488][ T6795] __put_partials+0xeb/0x130 [ 210.161081][ T6795] put_cpu_partial+0x17c/0x250 [ 210.165837][ T6795] __slab_free+0x2ea/0x3d0 [ 210.170261][ T6795] qlist_free_all+0x9a/0x140 [ 210.174848][ T6795] kasan_quarantine_reduce+0x14f/0x170 [ 210.180327][ T6795] __kasan_slab_alloc+0x23/0x80 [ 210.185345][ T6795] kmem_cache_alloc_noprof+0x135/0x2a0 [ 210.190800][ T6795] getname_flags+0xb7/0x540 [ 210.195307][ T6795] vfs_fstatat+0x12c/0x190 [ 210.199711][ T6795] __x64_sys_newfstatat+0x11d/0x1a0 [ 210.204899][ T6795] do_syscall_64+0xf3/0x230 [ 210.209391][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.215291][ T6795] [ 210.217612][ T6795] Memory state around the buggy address: [ 210.223239][ T6795] ffff8880336c1200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.231389][ T6795] ffff8880336c1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.239460][ T6795] >ffff8880336c1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.247517][ T6795] ^ [ 210.251846][ T6795] ffff8880336c1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.259906][ T6795] ffff8880336c1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.267977][ T6795] ================================================================== [ 210.287726][ T6795] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 210.294954][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 210.305839][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 210.315980][ T6795] Call Trace: [ 210.319262][ T6795] [ 210.322188][ T6795] dump_stack_lvl+0x241/0x360 [ 210.326863][ T6795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.332055][ T6795] ? __pfx__printk+0x10/0x10 [ 210.336642][ T6795] ? preempt_schedule+0xe1/0xf0 [ 210.341489][ T6795] ? vscnprintf+0x5d/0x90 [ 210.345928][ T6795] panic+0x349/0x880 [ 210.349857][ T6795] ? check_panic_on_warn+0x21/0xb0 [ 210.354970][ T6795] ? __pfx_panic+0x10/0x10 [ 210.359396][ T6795] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 210.365368][ T6795] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.371685][ T6795] ? print_report+0x502/0x550 [ 210.376357][ T6795] check_panic_on_warn+0x86/0xb0 [ 210.381289][ T6795] ? device_for_each_child+0xbb/0x1b0 [ 210.386654][ T6795] end_report+0x77/0x160 [ 210.390896][ T6795] kasan_report+0x154/0x180 [ 210.395391][ T6795] ? device_for_each_child+0xbb/0x1b0 [ 210.400772][ T6795] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 210.406221][ T6795] device_for_each_child+0xbb/0x1b0 [ 210.411423][ T6795] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.417840][ T6795] ? __pfx_device_for_each_child+0x10/0x10 [ 210.423652][ T6795] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.428848][ T6795] ? lockdep_hardirqs_on+0x99/0x150 [ 210.434039][ T6795] pm_runtime_set_memalloc_noio+0x114/0x260 [ 210.439928][ T6795] netdev_unregister_kobject+0x178/0x250 [ 210.445556][ T6795] unregister_netdevice_many_notify+0x1859/0x1da0 [ 210.451968][ T6795] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 210.458727][ T6795] ? do_raw_spin_unlock+0x13c/0x8b0 [ 210.463927][ T6795] ? __mutex_lock+0x52a/0xd70 [ 210.468599][ T6795] unregister_netdevice_queue+0x303/0x370 [ 210.474404][ T6795] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 210.480641][ T6795] ? down_write+0x18c/0x220 [ 210.485161][ T6795] ? __pfx_down_write+0x10/0x10 [ 210.490026][ T6795] unregister_netdev+0x1c/0x30 [ 210.494792][ T6795] bnep_session+0x2e3c/0x3030 [ 210.499481][ T6795] ? __pfx_bnep_session+0x10/0x10 [ 210.504513][ T6795] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 210.510403][ T6795] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.516728][ T6795] ? __pfx_woken_wake_function+0x10/0x10 [ 210.522362][ T6795] ? __kthread_parkme+0x169/0x1d0 [ 210.527384][ T6795] ? __pfx_bnep_session+0x10/0x10 [ 210.532408][ T6795] kthread+0x2f0/0x390 [ 210.536469][ T6795] ? __pfx_bnep_session+0x10/0x10 [ 210.541518][ T6795] ? __pfx_kthread+0x10/0x10 [ 210.546102][ T6795] ret_from_fork+0x4b/0x80 [ 210.550525][ T6795] ? __pfx_kthread+0x10/0x10 [ 210.555114][ T6795] ret_from_fork_asm+0x1a/0x30 [ 210.559882][ T6795] [ 210.563150][ T6795] Kernel Offset: disabled [ 210.567473][ T6795] Rebooting in 86400 seconds..