last executing test programs: 2.324356317s ago: executing program 4 (id=2826): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) 2.227242155s ago: executing program 0 (id=2827): socket$inet6(0xa, 0x80002, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000b70600000800000085000000a5004bd12a467bae56546bca35fa01000095c600000000000036768c105182af80"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000002c0)=""/75, &(0x7f0000000240)=0x4b) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000380), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x3}, 0x48) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x4}, 0x8) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000700)={0x0, 0x0}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015000000000005"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000a", @ANYRES32=0x0], 0x3c}}, 0x0) 2.168979871s ago: executing program 4 (id=2829): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0210000031c2d300b4d8f788745268914480ee0efd06bb0b666aafe0b78ba9c6da5ee31a59667983c8a4fc35ec9423d7ec9e1ae3a46cd0c09cf11101ac470f230ed901131db830ec9c4dd273ee13392828ef124861ad0d5a750f90fa2ac3c683455d9857c864cef26bc65d36e905b5ecb50b90eb985dbc6a209ac5f5277f10b077976379cf2788579e666aa77fe2f72cb07ab025d91dccb5c28c80bfbd82e30d6bf8572832ecd7b000c4159467e3760a0400"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/132, 0x84}], 0x10000000000000d8}, 0x7}], 0x1, 0x2, 0x0) read(r0, &(0x7f0000000200)=""/7, 0x7) 1.984555289s ago: executing program 0 (id=2832): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB, @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.886455064s ago: executing program 0 (id=2833): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="1e003300a0f0ffff070211000001080211"], 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = accept(r2, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001300010000000c00000000000000000000801400e3de737d56b6486b00000000", @ANYRES32, @ANYBLOB="0800d20028292f00"], 0x30}], 0x1}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$inet6_udplite(0x11, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="f80900000200"/16], 0x10}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) 1.69067935s ago: executing program 1 (id=2835): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', 0x2}, 0x18) r1 = accept(r0, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xee02}], 0xc0, 0x4000}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="9a633daac1968110d87be3e9f1dc5cbcd9b934de4b40", 0x16}, {&(0x7f00000002c0)="f1e1f8cb1035b6eb4c6aff4b9773e4ccd6eb6f49f8cb97", 0x17}, {&(0x7f0000000300)="a503765818e68571ef25aa338f548d1b7c8609c0b33bb656cbc8cf857dcc2544a4d3b74967e9f661be49fb48e735d6bb767a19d58a5a23ea4db957ed62a9db54bc193696740f91cad9a642e078ac0c44e7f09ac00519d93ccbbf337c4e9fbd00ebd98b709f7f82ee52c2943be95975c30e96ee0ab8a7dbc92e6ddebaf6e044eb86b6c01b14a5fb4273cc9c1636faa1bb80861cbd7de6b65f996b3d4baa3021fd41560a7cb51714f70214e7404005e9af05bcf72983", 0xb5}, {&(0x7f00000003c0)="06590e190b0dfd733442389d9733a1af690b6bc8", 0x14}, {&(0x7f0000000400)="0ccff421b9851a238c9579dce58ddb703f72add13cd0341e04623c053ab6a3c31e57375f7e1b3b31c441b53fe716a88f904f9ccdaf7234b7d257f292a5da645f3148f64c0609f89534d53ab9ec38a5d0fa040be262955408d29f182cca6bbb0d70b6ebe3a19d1a86", 0x68}], 0x5, &(0x7f0000000500)}], 0x2, 0x5) r2 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x5b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x20000000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000006c0)) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000700)=0xc20, 0x4) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000740)=@hci, 0x80, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/226, 0xe2}, {&(0x7f00000008c0)=""/219, 0xdb}, {&(0x7f00000009c0)=""/5, 0x5}], 0x3, &(0x7f0000000a40)=""/107, 0x6b}, 0x40020000) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000b00)={'nat\x00', 0x0, 0x0, 0x0, [0x37, 0x0, 0x2, 0x1, 0x8, 0x7]}, &(0x7f0000000b80)=0x78) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000bc0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000c00)={'some', 0x20, 0x3, 0x20, 0xb4f4}, 0x2f) getuid() socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r3, 0x3, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000c80)) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10}, 0x18) getsockname$packet(r1, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e80)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f40)={0x4, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x8, 0x17, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x1c, &(0x7f0000001080)=""/28, 0x41000, 0x40, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0xf, 0x9, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001140)=[0x1, r1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001180)=[{0x5, 0x5, 0xa, 0x3}, {0x3, 0x3, 0x6, 0xa}, {0x1, 0x2, 0x0, 0x2}], 0x10, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x6, 0x11, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xda}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x2, 0x1, 0x0, 0xb, 0x2, 0x10, 0x14f0f1a4b55737ca}, @call={0x85, 0x0, 0x0, 0xd4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x40, '\x00', r7, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000f00)={0x0, 0x8, 0xfffffffe, 0x2}, 0x10, r8, r9, 0x2, 0x0, &(0x7f0000001280)=[{0x0, 0x2, 0x1, 0xa}, {0x1, 0x1, 0x2, 0x7}], 0x10, 0x7ff}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000001380)={0x0, @adiantum, 0x0, @desc4}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000013c0)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000001600)={&(0x7f0000001440)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000014c0)="0126603503bf1a3e16312c4043127cacff9804b345bcb1a3956a2d63ad964a3e5466e7de0912d9639e9162e1ebaa40ef9244af61c8eefd377aa1b289492172c2dee5676a8f1c847dadb9cd1bd78d23e8d61ea9b0a4fa1b2f0482e7021de278401e36fe29c56a347dfd3174afdb27e23aa484ad786a20d29ecd8f2414fac221f3fe2beaf1c0a71e433c7a540e96cc3e6c2e8421b7209d8a34c16939408e31b41d41d4fc5206b644f8e4238c12baed264492439dcce2265814ca78618e1f01a548d09b3c6a744a97bf11e2cd5a64f049411789b8aa81f14a39957d16dc5f30ac5afd1aa3f15b3814e6ab2a786938a0d6ddd3bca9f4e7", 0xf5}], 0x1}, 0x804) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001640)={r6, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0x2, 0x2}, {0x2, 0x5}, {0x6}]}, @var={0x7, 0x0, 0x0, 0xe, 0x3}, @union={0x1, 0x1, 0x0, 0x5, 0x0, 0x200, [{0xc, 0x5, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}]}, {0x0, [0x30, 0x30]}}, &(0x7f00000018c0)=""/163, 0x88, 0xa3, 0x0, 0x739}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x16, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff}, [@map_val={0x18, 0x30356005636636e4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xc7}, @map_fd={0x18, 0x2, 0x1, 0x0, r10}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6a}, @call={0x85, 0x0, 0x0, 0x70}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @jmp={0x5, 0x1, 0x0, 0x7, 0xe, 0xfffffffffffffff8, 0x8}]}, &(0x7f0000001740)='GPL\x00', 0xfffffff9, 0x73, &(0x7f0000001780)=""/115, 0x40f00, 0x7, '\x00', r7, 0x0, r11, 0x8, &(0x7f00000019c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0x9, 0x9, 0xbf6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001a40)=[r6, r6, r6, r6, r6, r6, r6, r6, r6], &(0x7f0000001a80)=[{0x4, 0x4, 0x1, 0x7}, {0x5, 0x2, 0xf, 0x6}, {0x2, 0x3, 0xa, 0xb}, {0x1, 0x3, 0x3, 0x1}, {0x3, 0x2, 0xe, 0x4}], 0x10, 0xff}, 0x90) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000001bc0)=0x5, 0x4) 1.65047748s ago: executing program 3 (id=2836): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (fail_nth: 1) 1.338955901s ago: executing program 3 (id=2839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) 1.296963348s ago: executing program 2 (id=2840): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110740000000000040000000000000495000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_free_blocks\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.290657193s ago: executing program 3 (id=2841): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c0007800800124000060000050001000600000005000400000000000900020073797a3100020000050005000a0000000d0003845969af683a6e6574000000001902fa43e5eb883c090582f188674807db8e654bcbc5c7caa01e7fcb4fced850034e3b26690e040cb28ed19deb79f989496f98a8cd3a9f8ed2a3601345493a794ce3c08a7e871b62a145ae1006207aedf44f7453aa8c7d062085ecd476b07c58822ac57fe8fd"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, 0x0, 0x0) socket$isdn(0x22, 0x2, 0x26) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) 1.187196104s ago: executing program 4 (id=2842): socket$inet6(0xa, 0x80002, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000b70600000800000085000000a5004bd12a467bae56546bca35fa01000095c600000000000036768c105182af80"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000002c0)=""/75, &(0x7f0000000240)=0x4b) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000380), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x3}, 0x48) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x4}, 0x8) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000700)={0x0, 0x0}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015000000000005"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000a", @ANYRES32=0x0], 0x3c}}, 0x0) 1.18695135s ago: executing program 2 (id=2843): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB, @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.064890674s ago: executing program 2 (id=2844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="1f6c00c2231bc4cb50017d870800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 1.035577576s ago: executing program 4 (id=2845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="dd", 0xffffff23}], 0x1}], 0x1, 0x2c004080) accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), 0x8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000200)}, 0x20) r4 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000280000000000029078000000000000000111009078e0000002000000000000da107dcf0000"], 0x0) socketpair(0x1, 0xe, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x7, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="ff03000000000000e6ffff6fff000000001811007656be94225acb80b04dad063dcbf9b8ba12b9dfe7793a73ce063dded472a5162854d21ec212a38327a525d26cda73dc70b33b2c8dbd275315bc67356fb27eeff53947abfe05cd4282f669a10195e4877eef39d1a10c489e71f0865de2ac3ea6f891dfea5da2f0124704e118b2b442de4fc877e0c9bb58b39cb894d008aa620904ceceb74f7eee0911c0c0fe051a0a77ef12a1fad67a1a6bffe203454df48de995246cc27e449ddb7a5adc17f35c4768d4cb090dbf46c098a654f7e9436483063ed2fc85", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x1560}}, 0x0) socket$kcm(0x10, 0x0, 0x10) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 735.139078ms ago: executing program 2 (id=2846): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @dev}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x37, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000140)={0x1a, 0x312, 0x0, 0xfe, 0x4, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) accept4$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) 734.802862ms ago: executing program 0 (id=2847): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611074000000000004000000000000049500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.events.local\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_free_blocks\x00', r6}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r11, &(0x7f0000000140), 0x12) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r14, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001e80)={0x64, r15, 0x229, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x66}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r13, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r16, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 734.114995ms ago: executing program 1 (id=2848): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x6, @loopback}}, {{0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000947e7be598b5f8877625af92d426fd80a1ff244ea0a2a87dd78744575a116e8bd1c463e5d20a7e613eb3cd6ee523de282f7326402d4bb52e44b05d28652df0ac9f133a0770350311cc2e085de70035b5b8e9739659d48cb68bdbba6b33feb1a525f6aebf6a2231f974b26605edb942400e8401bf", @ANYRES32, @ANYBLOB="000000000000000018500000000000000000000000000000184000000000000000000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x90) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="2400000002060000001e0000000000000000000005000400000000000500050000000000", @ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="b1a2950dddb42f154e75daa414a85c91ec3ef1331b2cfbdc3650edcf24d7f362eddfc5be94c4cf4372e2cfcd29ec1d65cf5581e97b4b6d1bf2b92c93cc917f50a1e7feaa6f01b5e8eaccb2240362f9cb9a8ad8163a1fded7c74c3bcb5e2ddff24a31d3531a7bf671fba841d6283dac89cb165fa97a3e55aa55326809c58ca732cd5efa4a1e4934c5abb37a8ddc20c17c1645cb75daa3bd21d9134927485841e8369121913620f65e6e173a783727133ea3381cca93838f230c8d0bd51f4909d59f3c11c38ee9141aa5edc8bdb71bd8dd91d925b7ca5f657ae9bc87740c82a1358860ec29d7f7aebb8bee84", @ANYRES64=r0, @ANYRESOCT], 0x24}}, 0x10048040) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES16=r7, @ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendfile(r6, r5, 0x0, 0x100000001) socket$can_bcm(0x1d, 0x2, 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e22, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0x1, 0x1, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$rds(r10, &(0x7f0000001b40)={&(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000001ac0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x100007}], 0x18, 0x24000005}, 0x8008044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1cba1bdb7b2f4723177420c6e7579c76960000c1", @ANYRES16=r9, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32=r11, @ANYBLOB="38bf223d760b3787472dab112f8df5b9908e662c91f8efd36ac2dd0762f5e17cf6483e0590a26ee604912604afc1503150c41c86cde5c1cecb947f4dd6e9ef"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 696.768796ms ago: executing program 3 (id=2849): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) 543.260075ms ago: executing program 1 (id=2850): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x2a}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x14, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}, 0x40) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(r3, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x3, r4}, 0x38) 458.710454ms ago: executing program 4 (id=2851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x44}}, 0x0) 426.450799ms ago: executing program 1 (id=2852): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r0, 0x10d, 0x2, &(0x7f0000000280)={@multicast1, @broadcast, 0x0, 0x1, [@broadcast]}, 0x14) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) 412.977537ms ago: executing program 2 (id=2853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 308.959881ms ago: executing program 4 (id=2854): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f00000001c0)="16", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="d7", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000002c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="24000000000000002900000032000000ff06005702000008000000000000002115"], 0x28}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000e00851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000480000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 306.090659ms ago: executing program 0 (id=2855): socket$inet6(0xa, 0x80002, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70600000800000085000000a5004bd12a467bae56546bca35fa01000095c600000000000036768c105182af80"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000002c0)=""/75, &(0x7f0000000240)=0x4b) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000380), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x3}, 0x48) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x4}, 0x8) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000700)={0x0, 0x0}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015000000000005"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000a", @ANYRES32=0x0], 0x3c}}, 0x0) 249.758607ms ago: executing program 1 (id=2856): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @noop]}}}], 0x38}, 0x0) 207.143572ms ago: executing program 3 (id=2857): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="1e003300a0f0ffff070211000001080211"], 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = accept(r2, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001300010000000c00000000000000000000801400e3de737d56b6486b00000000", @ANYRES32, @ANYBLOB="0800d20028292f00"], 0x30}], 0x1}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$inet6_udplite(0x11, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="f80900000200"/16], 0x10}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) 190.292823ms ago: executing program 1 (id=2858): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="67a9fde5"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 69.904288ms ago: executing program 3 (id=2859): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c0007800800124000060000050001000600000005000400000000000900020073797a3100020000050005000a0000000d0003845969af683a6e6574000000001902fa43e5eb883c090582f188674807db8e654bcbc5c7caa01e7fcb4fced850034e3b26690e040cb28ed19deb79f989496f98a8cd3a9f8ed2a3601345493a794ce3c08a7e871b62a145ae1006207aedf44f7453aa8c7d062085ecd476b07c58822ac57fe8fd"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$isdn(0x22, 0x2, 0x26) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) 15.518106ms ago: executing program 2 (id=2860): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x3, 0x6, @multicast}, 0x10) close(r0) (fail_nth: 1) 0s ago: executing program 0 (id=2861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="dd", 0xffffff23}], 0x1}], 0x1, 0x2c004080) accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080), 0x8) connect$pppoe(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000200)}, 0x20) r5 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000280000000000029078000000000000000111009078e0000002000000000000da107dcf0000"], 0x0) socketpair(0x1, 0xe, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x7, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="ff03000000000000e6ffff6fff000000001811007656be94225acb80b04dad063dcbf9b8ba12b9dfe7793a73ce063dded472a5162854d21ec212a38327a525d26cda73dc70b33b2c8dbd275315bc67356fb27eeff53947abfe05cd4282f669a10195e4877eef39d1a10c489e71f0865de2ac3ea6f891dfea5da2f0124704e118b2b442de4fc877e0c9bb58b39cb894d008aa620904ceceb74f7eee0911c0c0fe051a0a77ef12a1fad67a1a6bffe203454df48de995246cc27e449ddb7a5adc17f35c4768d4cb090dbf46c098a654f7e9436483063ed2fc85", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x1560}}, 0x0) socket$kcm(0x10, 0x0, 0x10) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): the MTU to 1560 would solve the problem. [ 128.426502][ T6245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.549185][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.556207][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.630371][ T6245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.918294][ T6245] hsr_slave_0: entered promiscuous mode [ 128.928635][ T5102] Bluetooth: hci0: command tx timeout [ 128.976788][ T6245] hsr_slave_1: entered promiscuous mode [ 129.024510][ T6245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.045551][ T6389] netlink: 48 bytes leftover after parsing attributes in process `syz.2.437'. [ 129.055804][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 129.075313][ T6245] Cannot create hsr debugfs directory [ 129.101632][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 129.363597][ T12] hsr_slave_0: left promiscuous mode [ 129.381315][ T12] hsr_slave_1: left promiscuous mode [ 129.403092][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.411242][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.430004][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.452140][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.523150][ T12] veth1_macvtap: left promiscuous mode [ 129.543520][ T12] veth0_macvtap: left promiscuous mode [ 129.550868][ T12] veth1_vlan: left promiscuous mode [ 129.556927][ T12] veth0_vlan: left promiscuous mode [ 130.216082][ T6424] netlink: 48 bytes leftover after parsing attributes in process `syz.4.449'. [ 130.233886][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 130.464626][ T12] team0 (unregistering): Port device team_slave_1 removed [ 130.509296][ T12] team0 (unregistering): Port device team_slave_0 removed [ 131.008626][ T5102] Bluetooth: hci0: command tx timeout [ 131.029564][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 131.479546][ T6446] delete_channel: no stack [ 132.163760][ T6474] __nla_validate_parse: 4 callbacks suppressed [ 132.163781][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 132.252099][ T6474] netlink: 48 bytes leftover after parsing attributes in process `syz.3.462'. [ 132.310342][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 132.732215][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.468'. [ 132.756368][ T6245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.793282][ T6245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.816332][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 132.884955][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'. [ 132.920001][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'. [ 132.955952][ T6245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.977808][ T6501] wg2: entered promiscuous mode [ 132.988996][ T6501] wg2: entered allmulticast mode [ 133.011300][ T6245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.045822][ T6497] delete_channel: no stack [ 133.088283][ T5102] Bluetooth: hci0: command tx timeout [ 133.365518][ T6245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.432041][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 133.487049][ T6519] netlink: 48 bytes leftover after parsing attributes in process `syz.4.476'. [ 133.520368][ T6245] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.524181][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 133.555850][ T6510] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 133.573079][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.588861][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.633782][ T6522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.646054][ T6522] bond0: (slave bond1): Enslaving as an active interface with an up link [ 133.749973][ T6510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.780654][ T6510] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 133.796935][ T6510] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 133.824860][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.832253][ T5174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.863626][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.871038][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.093883][ T6245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.806452][ T6245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.975845][ T6245] veth0_vlan: entered promiscuous mode [ 135.048810][ T6245] veth1_vlan: entered promiscuous mode [ 135.153394][ T6245] veth0_macvtap: entered promiscuous mode [ 135.168712][ T5102] Bluetooth: hci0: command tx timeout [ 135.220035][ T6245] veth1_macvtap: entered promiscuous mode [ 135.326856][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.342956][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.356863][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.368351][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.380036][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.393653][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.407256][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.419916][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.432149][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.468698][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.528262][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.549768][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.598266][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.643926][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.692301][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.738836][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.756543][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.787957][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.832415][ T6245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.885232][ T6245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.907558][ T6245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.924421][ T6245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.333169][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.375471][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.476060][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.506331][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.248690][ T5102] Bluetooth: hci0: command tx timeout [ 137.455342][ T6677] __nla_validate_parse: 8 callbacks suppressed [ 137.455365][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 137.603291][ T6677] netlink: 48 bytes leftover after parsing attributes in process `syz.3.517'. [ 137.653491][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 137.659376][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.522'. [ 137.715883][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 137.748245][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.522'. [ 137.990669][ T6709] delete_channel: no stack [ 138.306189][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.527'. [ 138.388231][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 138.666160][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.531'. [ 138.897118][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 139.331723][ T5102] Bluetooth: hci0: command tx timeout [ 140.077054][ T6786] delete_channel: no stack [ 140.763526][ T6833] wg2: entered promiscuous mode [ 140.788203][ T6833] wg2: entered allmulticast mode [ 141.056410][ T6835] delete_channel: no stack [ 141.409266][ T5102] Bluetooth: hci0: command tx timeout [ 141.667238][ T6871] delete_channel: no stack [ 141.780251][ T6881] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 141.852239][ T6885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.864695][ T6885] bond0: (slave bond1): Enslaving as an active interface with an up link [ 141.907145][ T6879] delete_channel: no stack [ 141.930553][ T6881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.937781][ T6881] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 141.997034][ T6881] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 142.599619][ T6912] __nla_validate_parse: 23 callbacks suppressed [ 142.599646][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 142.640831][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 142.716408][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 142.761030][ T6922] netlink: 48 bytes leftover after parsing attributes in process `syz.4.593'. [ 142.811734][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 142.838856][ T6914] delete_channel: no stack [ 142.906838][ T6912] delete_channel: no stack [ 143.198573][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'. [ 143.229220][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'. [ 143.488267][ T5102] Bluetooth: hci0: command tx timeout [ 143.761067][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 143.802045][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 144.059213][ T6958] delete_channel: no stack [ 144.379970][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 145.077453][ T7007] delete_channel: no stack [ 145.568462][ T5102] Bluetooth: hci0: command tx timeout [ 146.389136][ T7057] delete_channel: no stack [ 146.783625][ T7080] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 146.835957][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.867756][ T7080] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.952920][ T7080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.969695][ T7080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.987591][ T7080] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 147.426556][ T7097] delete_channel: no stack [ 147.655818][ T5102] Bluetooth: hci0: command tx timeout [ 147.803171][ T7117] __nla_validate_parse: 12 callbacks suppressed [ 147.803201][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 147.952305][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 148.084998][ T7117] delete_channel: no stack [ 148.135967][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'. [ 148.176694][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'. [ 148.255226][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 148.429089][ T7137] delete_channel: no stack [ 148.716326][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 148.818676][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.860320][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 148.879788][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 148.897598][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 149.012448][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 149.268580][ T7175] delete_channel: no stack [ 149.728329][ T5102] Bluetooth: hci0: command tx timeout [ 149.886411][ T7183] delete_channel: no stack [ 150.534723][ T7207] delete_channel: no stack [ 150.813654][ T7224] netlink: 'syz.4.708': attribute type 1 has an invalid length. [ 150.901642][ T7226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.911232][ T7226] bond0: (slave bond1): Enslaving as an active interface with an up link [ 151.065704][ T7224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.095963][ T7224] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 151.121864][ T7224] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 151.353529][ T7248] wg2: entered promiscuous mode [ 151.372070][ T7248] wg2: entered allmulticast mode [ 151.614101][ T7266] delete_channel: no stack [ 151.808421][ T5102] Bluetooth: hci0: command tx timeout [ 152.222877][ T7282] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 152.310099][ T7287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.359707][ T7287] bond0: (slave bond2): Enslaving as an active interface with an up link [ 152.454456][ T7282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.489325][ T7282] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 152.550102][ T7282] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 152.647315][ T7298] delete_channel: no stack [ 153.009670][ T7321] __nla_validate_parse: 10 callbacks suppressed [ 153.009697][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.746'. [ 153.640268][ T7353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.760'. [ 153.805658][ T7358] bond0: (slave bond1): Error -95 calling ndo_bpf [ 153.888388][ T5102] Bluetooth: hci0: command tx timeout [ 153.983261][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 153.984285][ T7372] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 154.045329][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.072770][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.767'. [ 154.111196][ T7372] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 154.145263][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 154.212169][ T7368] delete_channel: no stack [ 154.440606][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.775'. [ 154.454234][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 154.474533][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 154.702805][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 154.749255][ T7408] bond0: (slave bond1): Error -95 calling ndo_bpf [ 154.918693][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 155.109610][ T7411] delete_channel: no stack [ 156.140886][ T7466] xt_TCPMSS: Only works on TCP SYN packets [ 157.413665][ T7518] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 157.531037][ T7526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.584275][ T7526] bond0: (slave bond2): Enslaving as an active interface with an up link [ 157.698367][ T7518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.705522][ T7518] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 157.723551][ T7518] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 157.737581][ T7537] delete_channel: no stack [ 158.572965][ T7567] __nla_validate_parse: 29 callbacks suppressed [ 158.572991][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'. [ 158.616412][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'. [ 158.667952][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 158.935034][ T7582] delete_channel: no stack [ 158.965551][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 159.010827][ T7588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.852'. [ 159.440089][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 159.690246][ T7624] warning: `syz.0.865' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.849804][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 160.046973][ T7628] delete_channel: no stack [ 160.222861][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 160.429869][ T7641] delete_channel: no stack [ 160.864289][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 160.934126][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 161.204182][ T7671] delete_channel: no stack [ 161.259852][ T5102] Bluetooth: hci0: command tx timeout [ 161.771573][ T7697] delete_channel: no stack [ 162.652691][ T7733] delete_channel: no stack [ 163.328464][ T5102] Bluetooth: hci0: command tx timeout [ 164.191861][ T7821] netlink: 'syz.0.941': attribute type 24 has an invalid length. [ 164.200659][ T7818] netlink: 'syz.2.939': attribute type 10 has an invalid length. [ 164.877024][ T7845] __nla_validate_parse: 6 callbacks suppressed [ 164.877133][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 164.878669][ T7846] xt_TCPMSS: Only works on TCP SYN packets [ 164.934411][ T7850] netlink: 'syz.2.953': attribute type 24 has an invalid length. [ 165.049073][ T7844] delete_channel: no stack [ 165.408551][ T5102] Bluetooth: hci0: command tx timeout [ 165.990730][ T7900] pim6reg1: entered promiscuous mode [ 166.011212][ T7900] pim6reg1: entered allmulticast mode [ 166.630875][ T7929] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 166.713073][ T7929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.748960][ T7929] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 166.850604][ T7938] pim6reg1: entered promiscuous mode [ 166.855985][ T7938] pim6reg1: entered allmulticast mode [ 167.080176][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.996'. [ 167.110223][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.996'. [ 167.552482][ T7971] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 167.585951][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.613428][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.639338][ T7971] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 167.835965][ T7981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'. [ 167.847525][ T7981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'. [ 168.515240][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1023'. [ 168.532853][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1023'. [ 169.083713][ T8030] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 169.149076][ T8030] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.169425][ T8030] bond0: (slave bond3): Enslaving as an active interface with an up link [ 169.230376][ T8030] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.261126][ T8030] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 169.293786][ T8030] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 169.313324][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1036'. [ 169.323601][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1036'. [ 169.733786][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 169.924673][ T8074] __nla_validate_parse: 1 callbacks suppressed [ 169.924697][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 169.967542][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 169.985626][ T8075] delete_channel: no stack [ 170.225481][ T8079] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 170.346385][ T8082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.365938][ T8082] bond0: (slave bond4): Enslaving as an active interface with an up link [ 170.419107][ T8079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.435527][ T8079] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 170.456714][ T8079] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 170.796787][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'. [ 170.844938][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'. [ 171.097927][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 171.190326][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 171.354474][ T8140] delete_channel: no stack [ 171.509281][ T8134] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 171.656140][ T8141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.716318][ T8141] bond0: (slave bond1): Enslaving as an active interface with an up link [ 171.830182][ T8134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.847795][ T8134] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 171.862939][ T8134] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 171.924195][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 172.021843][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1078'. [ 172.045232][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1078'. [ 172.272894][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 172.533371][ T8187] delete_channel: no stack [ 172.912506][ T8194] netlink: 'syz.4.1091': attribute type 1 has an invalid length. [ 173.040487][ T8202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.094174][ T8202] bond0: (slave bond2): Enslaving as an active interface with an up link [ 173.219515][ T8209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.241538][ T8209] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 173.262551][ T8209] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 174.146486][ T8250] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 174.208332][ T5102] Bluetooth: hci0: command tx timeout [ 174.307983][ T8255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.371680][ T8255] bond0: (slave bond5): Enslaving as an active interface with an up link [ 174.453668][ T8263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.466604][ T8263] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 174.492141][ T8263] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 174.755988][ T8285] netlink: 'syz.1.1128': attribute type 24 has an invalid length. [ 174.931628][ T8291] pim6reg1: entered promiscuous mode [ 174.954344][ T8291] pim6reg1: entered allmulticast mode [ 175.306799][ T8312] pim6reg1: entered promiscuous mode [ 175.314309][ T8312] pim6reg1: entered allmulticast mode [ 176.298284][ T5102] Bluetooth: hci0: command tx timeout [ 176.345781][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.356439][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.365536][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.376094][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.391612][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 176.400612][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.641445][ T4139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.701217][ T8362] xt_TCPMSS: Only works on TCP SYN packets [ 176.790201][ T4139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.960877][ T4139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.017556][ T8371] __nla_validate_parse: 1 callbacks suppressed [ 177.017577][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'. [ 177.145609][ T4139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.318540][ T8380] delete_channel: no stack [ 177.593938][ T8397] xt_TCPMSS: Only works on TCP SYN packets [ 177.775348][ T4139] bridge_slave_1: left allmulticast mode [ 177.805452][ T4139] bridge_slave_1: left promiscuous mode [ 177.849515][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.904842][ T4139] bridge_slave_0: left allmulticast mode [ 177.921810][ T4139] bridge_slave_0: left promiscuous mode [ 177.927709][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.276156][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 178.378683][ T5102] Bluetooth: hci0: command tx timeout [ 178.449443][ T5102] Bluetooth: hci4: command tx timeout [ 178.676340][ T8427] delete_channel: no stack [ 178.845721][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.862997][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.874657][ T4139] bond0 (unregistering): (slave bond1): Releasing backup interface [ 178.884918][ T4139] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 178.901262][ T4139] bond0 (unregistering): (slave bond2): Releasing backup interface [ 178.913264][ T4139] bond0 (unregistering): (slave bond3): Releasing backup interface [ 178.923554][ T4139] bond0 (unregistering): (slave bond4): Releasing backup interface [ 178.935492][ T4139] bond0 (unregistering): (slave bond5): Releasing backup interface [ 178.945478][ T4139] bond0 (unregistering): Released all slaves [ 179.116589][ T4139] bond1 (unregistering): Released all slaves [ 179.262903][ T4139] bond2 (unregistering): Released all slaves [ 179.398649][ T4139] bond3 (unregistering): Released all slaves [ 179.496770][ T4139] bond4 (unregistering): Released all slaves [ 179.592257][ T4139] bond5 (unregistering): Released all slaves [ 179.659207][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 179.707002][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1186'. [ 179.725087][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1186'. [ 179.819447][ T8348] chnl_net:caif_netlink_parms(): no params data found [ 179.995241][ T8463] xt_TCPMSS: Only works on TCP SYN packets [ 180.420241][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 180.441029][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.459306][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.473221][ T8348] bridge_slave_0: entered allmulticast mode [ 180.500480][ T8348] bridge_slave_0: entered promiscuous mode [ 180.530165][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.538533][ T5102] Bluetooth: hci4: command tx timeout [ 180.561095][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.596354][ T8348] bridge_slave_1: entered allmulticast mode [ 180.615149][ T8348] bridge_slave_1: entered promiscuous mode [ 180.719870][ T8483] delete_channel: no stack [ 181.026495][ T4139] macvlan0: left promiscuous mode [ 181.049927][ T4139] batadv_slave_0: left promiscuous mode [ 181.070486][ T4139] hsr_slave_0: left promiscuous mode [ 181.088016][ T4139] hsr_slave_1: left promiscuous mode [ 181.102285][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.118217][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.167701][ T4139] veth1_macvtap: left promiscuous mode [ 181.189539][ T4139] veth0_macvtap: left promiscuous mode [ 181.195512][ T4139] veth1_vlan: left promiscuous mode [ 181.202071][ T4139] veth0_vlan: left promiscuous mode [ 181.753299][ T4139] team0 (unregistering): Port device team_slave_1 removed [ 181.796811][ T4139] team0 (unregistering): Port device team_slave_0 removed [ 182.202771][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.228443][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 182.247854][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1201'. [ 182.257906][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1201'. [ 182.350486][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.482613][ T8348] team0: Port device team_slave_0 added [ 182.536792][ T8348] team0: Port device team_slave_1 added [ 182.609096][ T5102] Bluetooth: hci4: command tx timeout [ 182.787885][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.803681][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.855127][ T8348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.892167][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.907563][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.947402][ T8348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.132218][ T8348] hsr_slave_0: entered promiscuous mode [ 183.150673][ T8348] hsr_slave_1: entered promiscuous mode [ 183.164884][ T8348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.192942][ T8348] Cannot create hsr debugfs directory [ 183.203137][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1215'. [ 183.219460][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1215'. [ 183.287690][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'. [ 184.121332][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 184.153967][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1227'. [ 184.173719][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1227'. [ 184.698214][ T5102] Bluetooth: hci4: command tx timeout [ 184.752771][ T8348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.775342][ T8348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.800781][ T8348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.818647][ T8348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.052965][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 185.172041][ T8348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.262246][ T8635] pim6reg1: entered promiscuous mode [ 185.281329][ T8635] pim6reg1: entered allmulticast mode [ 185.306104][ T8348] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.370841][ T8646] delete_channel: no stack [ 185.428004][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.435412][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.494042][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.501420][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.644997][ T8348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.425235][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.601075][ T8348] veth0_vlan: entered promiscuous mode [ 186.664141][ T8348] veth1_vlan: entered promiscuous mode [ 186.711449][ T8691] delete_channel: no stack [ 186.839653][ T8706] pim6reg1: entered promiscuous mode [ 186.864676][ T8706] pim6reg1: entered allmulticast mode [ 186.881755][ T8348] veth0_macvtap: entered promiscuous mode [ 187.011011][ T8348] veth1_macvtap: entered promiscuous mode [ 187.097397][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.147708][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.188191][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.221976][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.262901][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.294205][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.329839][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.353299][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.376374][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.461614][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.508238][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.550073][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.580541][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.611135][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.636478][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.664475][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.707439][ T8348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.736812][ T8348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.763748][ T8348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.774731][ T8348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.801438][ T8749] __nla_validate_parse: 8 callbacks suppressed [ 187.801461][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 188.078625][ T8749] delete_channel: no stack [ 188.178096][ T4139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.217584][ T4139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.264432][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1278'. [ 188.349972][ T4139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.371854][ T4139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.501015][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 188.604725][ T8784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1279'. [ 188.660155][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 188.707561][ T8789] xt_TCPMSS: Only works on TCP SYN packets [ 188.755043][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 188.984140][ T8792] delete_channel: no stack [ 189.315898][ T8819] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.393499][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 189.585583][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 189.642297][ T8835] xt_TCPMSS: Only works on TCP SYN packets [ 189.695473][ T8838] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1293'. [ 189.699926][ T8843] delete_channel: no stack [ 189.730414][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 190.222199][ T8855] delete_channel: no stack [ 190.767521][ T8884] netlink: 'syz.3.1306': attribute type 6 has an invalid length. [ 191.095463][ T8907] delete_channel: no stack [ 192.690930][ T8991] Illegal XDP return value 4294967274 on prog (id 305) dev N/A, expect packet loss! [ 193.111573][ T9013] __nla_validate_parse: 13 callbacks suppressed [ 193.111596][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 193.214979][ T9013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1343'. [ 193.264520][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 193.338736][ T9020] xt_TCPMSS: Only works on TCP SYN packets [ 193.616507][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 193.679024][ T9040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1350'. [ 193.695274][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1352'. [ 193.706565][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 193.926670][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'. [ 194.444043][ T9075] netlink: 'syz.3.1363': attribute type 24 has an invalid length. [ 194.582583][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 194.630686][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 194.856705][ T9094] pim6reg1: entered promiscuous mode [ 194.876944][ T9094] pim6reg1: entered allmulticast mode [ 195.021401][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.027915][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.399890][ T9112] delete_channel: no stack [ 196.291184][ T9156] delete_channel: no stack [ 197.011823][ T9196] pim6reg1: entered promiscuous mode [ 197.030107][ T9196] pim6reg1: entered allmulticast mode [ 197.160474][ T9205] netlink: 'syz.0.1414': attribute type 6 has an invalid length. [ 197.288291][ T9198] delete_channel: no stack [ 197.766194][ T9234] netlink: 'syz.4.1426': attribute type 6 has an invalid length. [ 197.821385][ T9225] delete_channel: no stack [ 198.151640][ T9239] delete_channel: no stack [ 198.236512][ T9255] __nla_validate_parse: 26 callbacks suppressed [ 198.236535][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 198.277265][ T9255] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1433'. [ 198.303991][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 198.880403][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 198.960233][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1443'. [ 198.982186][ T9276] delete_channel: no stack [ 198.988722][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1443'. [ 199.003411][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1442'. [ 199.152037][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'. [ 199.183638][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 199.205569][ T9293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1446'. [ 199.355177][ T9291] delete_channel: no stack [ 199.398959][ T9300] netlink: 'syz.4.1447': attribute type 10 has an invalid length. [ 199.433812][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.484386][ T9300] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 199.506090][ T9303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.513912][ T9303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.524897][ T9303] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 200.051023][ T9319] delete_channel: no stack [ 200.381542][ T9341] netlink: 'syz.0.1462': attribute type 10 has an invalid length. [ 200.412745][ T9341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.423530][ T9333] delete_channel: no stack [ 200.428401][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.439838][ T9341] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 200.926732][ T9360] delete_channel: no stack [ 201.974732][ T9407] delete_channel: no stack [ 202.262603][ T9416] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.417473][ T9416] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.602377][ T9416] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.735390][ T9416] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.890325][ T9416] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.941651][ T9416] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.000918][ T9442] delete_channel: no stack [ 203.013854][ T9416] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.063403][ T9416] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.471732][ T9466] __nla_validate_parse: 25 callbacks suppressed [ 203.471756][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1506'. [ 203.494225][ T9469] delete_channel: no stack [ 203.705749][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.790546][ T9473] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 203.945037][ T9487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1516'. [ 203.971142][ T9490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1514'. [ 204.088519][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'. [ 204.141386][ T9493] pim6reg1: entered promiscuous mode [ 204.153606][ T9493] pim6reg1: entered allmulticast mode [ 204.285225][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 204.339300][ T9502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1520'. [ 204.379840][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 204.693700][ T9515] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 204.828326][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1528'. [ 204.868487][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1527'. [ 204.924070][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1530'. [ 204.959559][ T9522] pim6reg1: entered promiscuous mode [ 204.972122][ T9522] pim6reg1: entered allmulticast mode [ 205.664074][ T9552] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 206.659692][ T9586] netlink: 'syz.4.1552': attribute type 10 has an invalid length. [ 206.709811][ T9586] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 207.070124][ T9596] pim6reg1: entered promiscuous mode [ 207.086377][ T9596] pim6reg1: entered allmulticast mode [ 207.328631][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 207.565060][ T9611] netlink: 'syz.3.1563': attribute type 10 has an invalid length. [ 207.596964][ T9611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.636705][ T9611] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 207.656924][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.668186][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.692096][ T9614] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 208.087166][ T9623] delete_channel: no stack [ 208.481445][ T9648] netlink: 'syz.3.1575': attribute type 10 has an invalid length. [ 208.537290][ T9648] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 208.832272][ T9665] __nla_validate_parse: 18 callbacks suppressed [ 208.832297][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 209.003965][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1584'. [ 209.076305][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'. [ 209.118322][ T9665] delete_channel: no stack [ 209.205950][ T9685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.230794][ T9685] netlink: 'syz.1.1589': attribute type 10 has an invalid length. [ 209.277229][ T9685] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 209.309593][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1590'. [ 209.340336][ T9691] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1590'. [ 209.374145][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1590'. [ 209.426100][ T9695] netlink: 'syz.4.1592': attribute type 24 has an invalid length. [ 209.526108][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 209.776387][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 209.836048][ T9710] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1598'. [ 209.879661][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 210.187837][ T9735] delete_channel: no stack [ 210.476461][ T9742] pim6reg1: entered promiscuous mode [ 210.482040][ T9742] pim6reg1: entered allmulticast mode [ 211.445565][ T9775] delete_channel: no stack [ 212.448286][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 212.448296][ T4488] Bluetooth: hci3: command 0x0406 tx timeout [ 212.452323][ T9816] delete_channel: no stack [ 212.461955][ T9827] pim6reg1: entered promiscuous mode [ 212.475165][ T9827] pim6reg1: entered allmulticast mode [ 213.493337][ T9865] delete_channel: no stack [ 213.842637][ T9887] __nla_validate_parse: 27 callbacks suppressed [ 213.842659][ T9887] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1659'. [ 213.869471][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'. [ 213.908407][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 214.088513][ T9898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1665'. [ 214.305646][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 214.533682][ T9909] delete_channel: no stack [ 214.639641][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 214.670050][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1675'. [ 214.708378][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1675'. [ 214.828722][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 214.882773][ T9936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1677'. [ 215.626496][ T9961] delete_channel: no stack [ 216.575162][T10003] delete_channel: no stack [ 216.752104][T10016] macvlan0: entered promiscuous mode [ 216.784461][T10016] batadv_slave_0: entered promiscuous mode [ 217.488254][ T53] Bluetooth: hci0: command tx timeout [ 219.074816][T10137] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 219.122780][T10137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.132259][T10137] bond0: (slave bond3): Enslaving as an active interface with an up link [ 219.166196][T10137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.177190][T10137] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 219.204584][T10137] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 219.578711][ T53] Bluetooth: hci0: command tx timeout [ 219.709359][T10164] __nla_validate_parse: 26 callbacks suppressed [ 219.709382][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 219.772550][T10167] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1755'. [ 219.829177][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 220.006654][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 220.472238][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 220.486538][T10208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1771'. [ 220.499153][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 220.682520][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 220.694648][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'. [ 220.704362][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'. [ 221.054036][T10224] netlink: 'syz.3.1776': attribute type 1 has an invalid length. [ 221.220578][T10233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.277377][T10233] bond0: (slave bond1): Enslaving as an active interface with an up link [ 221.392483][T10244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.401035][T10244] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 221.412321][T10244] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 221.715728][T10270] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.226659][T10289] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 222.283492][T10289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.293665][T10289] bond0: (slave bond1): Enslaving as an active interface with an up link [ 222.361226][T10289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.374280][T10289] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 222.385958][T10289] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 222.801775][T10306] delete_channel: no stack [ 223.142937][T10325] delete_channel: no stack [ 223.287036][T10346] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 223.343320][T10346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.357106][T10346] bond0: (slave bond2): Enslaving as an active interface with an up link [ 223.394541][T10346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.402166][T10346] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 223.412894][T10346] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 224.470181][T10402] delete_channel: no stack [ 224.745306][T10419] __nla_validate_parse: 22 callbacks suppressed [ 224.745328][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 224.762242][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1847'. [ 224.772389][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1847'. [ 224.954371][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 225.088493][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 225.124748][T10438] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1852'. [ 225.141773][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 225.454379][T10453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1859'. [ 225.487702][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'. [ 225.850214][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 226.418889][T10491] delete_channel: no stack [ 226.491046][T10496] delete_channel: no stack [ 227.175322][T10523] delete_channel: no stack [ 227.306435][T10527] delete_channel: no stack [ 227.491472][T10539] delete_channel: no stack [ 227.772286][T10557] netlink: 'syz.1.1894': attribute type 1 has an invalid length. [ 227.851311][T10557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.876068][T10557] bond0: (slave bond3): Enslaving as an active interface with an up link [ 227.968422][ T53] Bluetooth: hci0: command tx timeout [ 227.986347][T10563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.049144][T10563] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 228.076323][T10563] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 228.326251][T10579] delete_channel: no stack [ 228.870165][T10598] delete_channel: no stack [ 229.637522][T10651] netlink: 'syz.0.1926': attribute type 1 has an invalid length. [ 229.741099][T10651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.765223][T10651] bond0: (slave bond2): Enslaving as an active interface with an up link [ 229.775460][T10662] netlink: 'syz.3.1928': attribute type 1 has an invalid length. [ 229.876605][T10668] __nla_validate_parse: 31 callbacks suppressed [ 229.876627][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'. [ 229.889196][T10651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.933598][T10651] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 229.954170][T10651] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 229.988908][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'. [ 230.001615][T10662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.012595][T10662] bond0: (slave bond2): Enslaving as an active interface with an up link [ 230.101127][T10665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.118842][T10665] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 230.142297][T10665] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 230.239578][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'. [ 230.268115][T10686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1936'. [ 230.325578][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 230.365128][T10683] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1935'. [ 230.393980][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'. [ 230.468440][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'. [ 230.528780][T10698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1939'. [ 230.558698][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'. [ 231.689706][T10751] delete_channel: no stack [ 232.323095][T10798] delete_channel: no stack [ 233.129964][T10825] delete_channel: no stack [ 233.995286][T10859] delete_channel: no stack [ 234.528445][ T53] Bluetooth: hci0: command tx timeout [ 235.110533][T10923] __nla_validate_parse: 43 callbacks suppressed [ 235.110555][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 235.182185][T10923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2016'. [ 235.234295][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 235.323445][T10929] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2018'. [ 235.384942][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 235.394947][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 235.623160][T10947] delete_channel: no stack [ 235.799971][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'. [ 236.095886][T10954] delete_channel: no stack [ 236.128654][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 236.201946][T10974] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2033'. [ 236.235678][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 236.333984][T10973] netlink: 'syz.0.2035': attribute type 1 has an invalid length. [ 236.408228][T10973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.425764][T10973] bond0: (slave bond3): Enslaving as an active interface with an up link [ 236.463681][T10973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.488760][T10973] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 236.499888][T10973] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 236.537171][T10985] netlink: 'syz.4.2038': attribute type 24 has an invalid length. [ 236.608381][ T53] Bluetooth: hci0: command tx timeout [ 236.969314][T10993] delete_channel: no stack [ 237.010990][T10999] delete_channel: no stack [ 237.192863][T11004] delete_channel: no stack [ 237.460737][T11030] netlink: 'syz.2.2057': attribute type 10 has an invalid length. [ 237.502209][T11030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.526845][T11033] delete_channel: no stack [ 237.570829][T11030] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 237.591956][T11035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.620029][T11035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.635981][T11035] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 238.147197][T11063] delete_channel: no stack [ 238.431954][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.468218][T11076] netlink: 'syz.3.2074': attribute type 10 has an invalid length. [ 238.526969][T11076] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 240.122493][T11143] __nla_validate_parse: 26 callbacks suppressed [ 240.122516][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 240.344342][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'. [ 240.542982][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'. [ 240.571133][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2108'. [ 240.608760][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2108'. [ 240.715997][T11173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.753757][T11173] netlink: 'syz.1.2112': attribute type 10 has an invalid length. [ 240.804718][T11173] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 240.960905][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 241.002089][T11185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2116'. [ 241.030654][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 241.076869][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 241.094675][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2120'. [ 241.410309][T11188] delete_channel: no stack [ 241.446724][T11194] delete_channel: no stack [ 241.631106][T11212] netlink: 'syz.0.2130': attribute type 10 has an invalid length. [ 241.699579][T11212] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 242.197817][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.214067][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.224562][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.233788][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.255667][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 242.263338][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.301659][ T5095] syz-executor (5095) used greatest stack depth: 18704 bytes left [ 242.347104][ T4139] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.434991][ T4139] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.548804][ T4139] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.644562][ T4139] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.677306][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.702442][T11246] netlink: 'syz.0.2143': attribute type 10 has an invalid length. [ 242.736191][T11246] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 242.902457][T11251] delete_channel: no stack [ 242.961448][ T4139] bridge_slave_1: left allmulticast mode [ 242.967337][ T4139] bridge_slave_1: left promiscuous mode [ 242.977801][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.021542][ T4139] bridge_slave_0: left allmulticast mode [ 243.034432][ T4139] bridge_slave_0: left promiscuous mode [ 243.048961][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.708663][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.724334][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.736582][ T4139] bond0 (unregistering): (slave bond1): Releasing backup interface [ 243.746908][ T4139] bond0 (unregistering): (slave bond2): Releasing backup interface [ 243.757454][ T4139] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 243.768845][ T4139] bond0 (unregistering): (slave bond3): Releasing backup interface [ 243.778410][ T4139] bond0 (unregistering): Released all slaves [ 243.886470][ T4139] bond1 (unregistering): Released all slaves [ 243.992305][ T4139] bond2 (unregistering): Released all slaves [ 244.083293][ T4139] bond3 (unregistering): Released all slaves [ 244.100333][T11258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.107820][T11266] netlink: 'syz.3.2148': attribute type 10 has an invalid length. [ 244.134310][T11268] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 244.151227][T11274] netlink: 'syz.4.2153': attribute type 24 has an invalid length. [ 244.179160][T11281] netlink: 'syz.2.2155': attribute type 10 has an invalid length. [ 244.234170][T11282] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 244.290095][ T5102] Bluetooth: hci1: command tx timeout [ 244.402003][T11289] netlink: 'syz.4.2158': attribute type 24 has an invalid length. [ 244.887773][T11235] chnl_net:caif_netlink_parms(): no params data found [ 245.257281][T11329] __nla_validate_parse: 19 callbacks suppressed [ 245.257308][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2166'. [ 245.374667][ T4139] macvlan0: left promiscuous mode [ 245.383993][ T4139] batadv_slave_0: left promiscuous mode [ 245.447518][ T4139] hsr_slave_0: left promiscuous mode [ 245.474995][ T4139] hsr_slave_1: left promiscuous mode [ 245.489376][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.502460][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.562805][ T4139] veth1_macvtap: left promiscuous mode [ 245.578246][ T4139] veth0_macvtap: left promiscuous mode [ 245.590665][ T4139] veth1_vlan: left promiscuous mode [ 245.596466][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2171'. [ 245.601915][ T4139] veth0_vlan: left promiscuous mode [ 245.619585][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2171'. [ 246.310473][ T4139] team0 (unregistering): Port device team_slave_1 removed [ 246.353847][ T4139] team0 (unregistering): Port device team_slave_0 removed [ 246.368332][ T53] Bluetooth: hci1: command tx timeout [ 246.742874][T11331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.757355][T11337] netlink: 'syz.0.2168': attribute type 10 has an invalid length. [ 246.773031][T11338] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 246.790676][T11340] netlink: 'syz.3.2170': attribute type 24 has an invalid length. [ 246.860304][T11355] netlink: 'syz.2.2173': attribute type 24 has an invalid length. [ 247.080138][T11235] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.087401][T11235] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.128191][T11235] bridge_slave_0: entered allmulticast mode [ 247.144210][T11235] bridge_slave_0: entered promiscuous mode [ 247.177672][T11235] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.194590][T11235] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.218364][T11235] bridge_slave_1: entered allmulticast mode [ 247.233996][T11235] bridge_slave_1: entered promiscuous mode [ 247.264001][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 247.351070][T11235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.377914][T11235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.412042][T11381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2178'. [ 247.571919][T11235] team0: Port device team_slave_0 added [ 247.631052][T11235] team0: Port device team_slave_1 added [ 247.708622][T11378] delete_channel: no stack [ 247.737360][T11393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.775301][T11397] netlink: 'syz.4.2183': attribute type 10 has an invalid length. [ 247.896117][T11388] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 247.932983][T11401] netlink: 'syz.0.2185': attribute type 24 has an invalid length. [ 247.976091][T11235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.000084][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.026781][T11235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.046841][T11405] netlink: 'syz.2.2186': attribute type 24 has an invalid length. [ 248.114385][T11235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.130968][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.210404][T11235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.289252][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 248.416219][T11235] hsr_slave_0: entered promiscuous mode [ 248.443405][T11235] hsr_slave_1: entered promiscuous mode [ 248.448209][ T5102] Bluetooth: hci1: command tx timeout [ 248.476578][T11412] netlink: 'syz.4.2187': attribute type 1 has an invalid length. [ 248.576515][T11415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.599393][T11415] bond0: (slave bond4): Enslaving as an active interface with an up link [ 248.699223][T11420] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.706682][T11420] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 248.718678][T11420] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 248.751725][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'. [ 248.994737][T11451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.029894][T11455] netlink: 'syz.3.2197': attribute type 24 has an invalid length. [ 249.045888][T11454] netlink: 'syz.4.2198': attribute type 24 has an invalid length. [ 249.061945][T11451] netlink: 'syz.0.2196': attribute type 10 has an invalid length. [ 249.076783][T11447] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 249.755623][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'. [ 249.997869][T11502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.109042][T11502] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 250.283156][T11235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.347618][T11235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.416642][T11235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.457813][T11235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.502639][T11520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2214'. [ 250.528383][ T5102] Bluetooth: hci1: command tx timeout [ 250.868160][T11235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.869302][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2216'. [ 250.931009][T11235] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.962303][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.969567][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.983726][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.991055][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.014668][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 251.178680][T11536] delete_channel: no stack [ 251.554640][T11552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.640840][T11552] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 251.765648][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 251.835677][T11564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2222'. [ 251.860844][T11568] validate_nla: 4 callbacks suppressed [ 251.860864][T11568] netlink: 'syz.0.2223': attribute type 24 has an invalid length. [ 251.881052][T11235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.900783][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 251.906473][T11569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.918910][T11569] bond0: (slave bond3): Enslaving as an active interface with an up link [ 252.016539][T11558] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.037137][T11558] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 252.063206][T11558] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 252.311688][T11235] veth0_vlan: entered promiscuous mode [ 252.381895][T11235] veth1_vlan: entered promiscuous mode [ 252.426097][T11587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2228'. [ 252.467435][T11587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2228'. [ 252.523483][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2230'. [ 252.535680][T11235] veth0_macvtap: entered promiscuous mode [ 252.572378][T11235] veth1_macvtap: entered promiscuous mode [ 252.657210][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.719913][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.742499][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.758097][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.768770][T11605] delete_channel: no stack [ 252.778571][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.807133][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.818178][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.839075][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.852190][T11235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.871251][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2231'. [ 252.912376][T11601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.957201][T11604] netlink: 'syz.4.2233': attribute type 24 has an invalid length. [ 252.972256][T11609] netlink: 'syz.3.2232': attribute type 10 has an invalid length. [ 253.018349][T11235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.053691][T11614] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 253.140163][T11235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.165992][T11235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.194680][T11235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.216531][T11235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.726076][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.759803][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.875272][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.917813][T11653] netlink: 'syz.4.2244': attribute type 24 has an invalid length. [ 253.925957][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.976993][T11656] netlink: 'syz.0.2246': attribute type 6 has an invalid length. [ 254.192341][T11654] delete_channel: no stack [ 254.507832][T11680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.583208][T11680] netlink: 'syz.2.2251': attribute type 10 has an invalid length. [ 254.634276][T11683] macvlan0: entered promiscuous mode [ 254.651413][T11683] batadv_slave_0: entered promiscuous mode [ 254.667009][T11683] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 254.688379][T11683] Cannot create hsr debugfs directory [ 254.715046][T11680] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 254.868994][T11696] netlink: 'syz.2.2257': attribute type 6 has an invalid length. [ 254.880828][T11690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.900176][T11690] bond0: (slave bond4): Enslaving as an active interface with an up link [ 254.945508][T11686] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.969221][T11686] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 254.986283][T11686] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 255.036809][T11700] netlink: 'syz.4.2256': attribute type 1 has an invalid length. [ 255.171697][T11706] netlink: 'syz.2.2258': attribute type 24 has an invalid length. [ 255.185953][T11700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.195628][T11700] bond0: (slave bond5): Enslaving as an active interface with an up link [ 255.286516][T11702] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.296091][T11702] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 255.319975][T11702] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 255.517278][T11721] __nla_validate_parse: 16 callbacks suppressed [ 255.517299][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2261'. [ 255.551047][T11726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.599275][T11726] netlink: 'syz.3.2263': attribute type 10 has an invalid length. [ 255.665903][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2264'. [ 255.668830][T11726] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 255.734958][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 255.747976][T11720] delete_channel: no stack [ 255.754336][T11734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2265'. [ 255.827083][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2265'. [ 255.987936][T11729] delete_channel: no stack [ 256.330940][T11746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.360175][T11746] bond0: (slave bond3): Enslaving as an active interface with an up link [ 256.401087][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 256.460847][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.471076][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.541727][T11746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.558652][T11746] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 256.579434][T11746] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 256.591643][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 256.743460][T11771] delete_channel: no stack [ 256.795069][T11780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.804387][T11780] bond0: (slave bond4): Enslaving as an active interface with an up link [ 256.938490][T11780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.945645][T11780] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 256.983043][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'. [ 256.999953][T11780] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 257.159967][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 257.266886][T11787] delete_channel: no stack [ 257.342684][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'. [ 257.552551][T11818] delete_channel: no stack [ 257.754068][T11821] delete_channel: no stack [ 258.010818][T11832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.074001][T11832] validate_nla: 3 callbacks suppressed [ 258.074022][T11832] netlink: 'syz.4.2294': attribute type 10 has an invalid length. [ 258.097437][T11840] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 258.319077][T11837] delete_channel: no stack [ 258.543065][T11851] delete_channel: no stack [ 258.935104][T11874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.970626][T11874] netlink: 'syz.0.2309': attribute type 10 has an invalid length. [ 259.011508][T11874] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 259.347919][T11887] delete_channel: no stack [ 259.356414][T11888] delete_channel: no stack [ 259.569230][T11902] delete_channel: no stack [ 259.925819][T11915] netlink: 'syz.3.2324': attribute type 24 has an invalid length. [ 260.123170][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.171965][T11922] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 260.362876][T11933] netlink: 'syz.0.2332': attribute type 24 has an invalid length. [ 260.426512][T11935] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 260.523633][T11930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.533854][T11930] bond0: (slave bond6): Enslaving as an active interface with an up link [ 260.552194][T11939] delete_channel: no stack [ 260.594801][T11930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.613936][T11930] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 260.638788][T11930] bond6: (slave xfrm1): Error -95 calling set_mac_address [ 260.837529][T11947] __nla_validate_parse: 29 callbacks suppressed [ 260.837551][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 260.901665][T11947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2336'. [ 260.918426][T11947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2336'. [ 260.937596][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2334'. [ 260.974600][T11952] netlink: 'syz.1.2337': attribute type 24 has an invalid length. [ 261.200696][T11960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2340'. [ 261.237782][T11951] delete_channel: no stack [ 261.319533][T11969] netlink: 'syz.0.2343': attribute type 24 has an invalid length. [ 261.471026][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 261.517572][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 261.675119][T11979] bond0: (slave bond1): Error -95 calling ndo_bpf [ 261.761596][T11990] delete_channel: no stack [ 261.823902][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2349'. [ 261.893384][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2349'. [ 261.913362][T11997] netlink: 'syz.2.2351': attribute type 24 has an invalid length. [ 262.110527][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2354'. [ 262.243950][T12013] netlink: 'syz.0.2357': attribute type 24 has an invalid length. [ 262.388180][T12005] delete_channel: no stack [ 262.592487][T12027] netlink: 'syz.4.2363': attribute type 24 has an invalid length. [ 262.683254][T12022] delete_channel: no stack [ 262.872403][T12031] delete_channel: no stack [ 263.156829][T12056] netlink: 'syz.1.2371': attribute type 24 has an invalid length. [ 263.266926][T12040] delete_channel: no stack [ 263.360947][T12066] netlink: 'syz.4.2376': attribute type 24 has an invalid length. [ 263.507997][T12065] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 263.614225][T12072] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.624234][T12072] bond0: (slave bond5): Enslaving as an active interface with an up link [ 263.735327][T12065] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.740844][T12081] delete_channel: no stack [ 263.768919][T12065] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 263.797106][T12065] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 264.022042][T12092] netlink: 'syz.2.2384': attribute type 24 has an invalid length. [ 264.314225][T12108] netlink: 'syz.1.2388': attribute type 24 has an invalid length. [ 264.566366][T12110] delete_channel: no stack [ 264.586173][T12115] delete_channel: no stack [ 264.594501][T12106] delete_channel: no stack [ 265.058486][T12143] delete_channel: no stack [ 265.088957][T12147] netlink: 'syz.4.2400': attribute type 24 has an invalid length. [ 265.127611][T12149] netlink: 'syz.2.2402': attribute type 24 has an invalid length. [ 265.679323][T12160] delete_channel: no stack [ 265.823789][T12165] delete_channel: no stack [ 266.030723][T12193] netlink: 'syz.4.2415': attribute type 24 has an invalid length. [ 266.155879][T12199] __nla_validate_parse: 28 callbacks suppressed [ 266.155903][T12199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2417'. [ 266.217113][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 266.247493][T12203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2420'. [ 266.379543][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2419'. [ 266.442432][T12209] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2419'. [ 266.483072][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2419'. [ 266.768747][T12234] netlink: 'syz.0.2429': attribute type 24 has an invalid length. [ 267.037802][T12241] bond0: (slave bond1): Error -95 calling ndo_bpf [ 267.301420][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 267.360839][T12258] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2437'. [ 267.402472][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 267.423326][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'. [ 267.580852][T12272] netlink: 'syz.3.2442': attribute type 24 has an invalid length. [ 267.951761][T12281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.963557][T12281] bond0: (slave bond1): Enslaving as an active interface with an up link [ 268.018815][T12281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.026152][T12281] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 268.036715][T12281] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 268.477249][T12314] macvlan0: entered promiscuous mode [ 268.494652][T12314] batadv_slave_0: entered promiscuous mode [ 268.516296][T12314] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 268.524734][T12314] Cannot create hsr debugfs directory [ 269.124558][T12342] delete_channel: no stack [ 269.309161][T12343] delete_channel: no stack [ 270.264720][T12395] validate_nla: 1 callbacks suppressed [ 270.264742][T12395] netlink: 'syz.1.2488': attribute type 10 has an invalid length. [ 270.327219][T12395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.341428][T12395] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 270.391033][T12395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.418624][T12395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.443153][T12395] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 271.353707][T12447] __nla_validate_parse: 32 callbacks suppressed [ 271.353734][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2507'. [ 271.443702][T12456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2511'. [ 271.496174][T12451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2509'. [ 271.535128][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 271.836137][T12471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2517'. [ 271.958762][T12469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2515'. [ 272.645176][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2532'. [ 272.875721][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 272.879441][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2535'. [ 273.210110][T12522] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 273.299271][T12522] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 273.330473][T12508] delete_channel: no stack [ 273.647178][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2549'. [ 273.991904][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.023056][T12562] netlink: 'syz.4.2558': attribute type 1 has an invalid length. [ 274.067701][T12565] netlink: 'syz.1.2559': attribute type 10 has an invalid length. [ 274.109975][T12562] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.125738][T12562] bond0: (slave bond7): Enslaving as an active interface with an up link [ 274.151140][T12565] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 274.217987][T12562] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.234362][T12562] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 274.246134][T12562] bond7: (slave xfrm1): Error -95 calling set_mac_address [ 274.734098][T12604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.765367][T12604] netlink: 'syz.1.2575': attribute type 10 has an invalid length. [ 274.816662][T12604] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 274.990367][T12606] 8021q: adding VLAN 0 to HW filter on device bond8 [ 275.036499][T12606] bond0: (slave bond8): Enslaving as an active interface with an up link [ 275.136240][T12597] 8021q: adding VLAN 0 to HW filter on device bond8 [ 275.189979][T12597] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address [ 275.224151][T12597] bond8: (slave xfrm1): Error -95 calling set_mac_address [ 275.268468][T12616] netlink: 'syz.0.2579': attribute type 1 has an invalid length. [ 275.388688][T12629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.502612][T12629] bond0: (slave bond5): Enslaving as an active interface with an up link [ 275.589282][T12632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.610113][T12632] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 275.656154][T12632] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 275.841743][T12644] delete_channel: no stack [ 275.905165][T12646] delete_channel: no stack [ 276.167424][T12668] bond0: (slave bond1): Error -95 calling ndo_bpf [ 276.564440][T12679] netlink: 'syz.0.2604': attribute type 1 has an invalid length. [ 276.606669][T12688] __nla_validate_parse: 7 callbacks suppressed [ 276.606692][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 276.627383][T12679] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.637402][T12679] bond0: (slave bond6): Enslaving as an active interface with an up link [ 276.684669][T12679] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.699085][T12679] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 276.752837][T12679] bond6: (slave xfrm1): Error -95 calling set_mac_address [ 276.832992][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2610'. [ 276.852997][T12688] delete_channel: no stack [ 277.175576][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'. [ 277.248452][T12709] bond0: (slave bond1): Error -95 calling ndo_bpf [ 277.299598][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2620'. [ 277.352769][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2620'. [ 277.606865][T12732] netlink: 'syz.3.2626': attribute type 1 has an invalid length. [ 277.726164][T12737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.800596][T12737] bond0: (slave bond6): Enslaving as an active interface with an up link [ 277.831295][T12735] netlink: 'syz.1.2627': attribute type 1 has an invalid length. [ 277.861760][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2632'. [ 277.891528][T12732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.899105][T12732] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 277.911892][T12732] bond6: (slave xfrm1): Error -95 calling set_mac_address [ 277.934769][T12744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.943426][T12744] bond0: (slave bond2): Enslaving as an active interface with an up link [ 277.952858][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2632'. [ 277.963839][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2632'. [ 278.015130][T12735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.027724][T12735] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 278.046135][T12735] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 278.239549][T12763] netlink: 'syz.4.2635': attribute type 24 has an invalid length. [ 278.466774][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2639'. [ 278.489968][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2639'. [ 278.876326][T12792] netlink: 'syz.0.2644': attribute type 1 has an invalid length. [ 278.960746][T12785] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.980253][T12785] bond0: (slave bond7): Enslaving as an active interface with an up link [ 278.996010][T12799] netlink: 'syz.4.2650': attribute type 24 has an invalid length. [ 279.103812][T12785] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.144205][T12785] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 279.158475][T12785] bond7: (slave xfrm1): Error -95 calling set_mac_address [ 279.787846][T12839] netlink: 'syz.0.2662': attribute type 4 has an invalid length. [ 279.987438][T12844] bond0: (slave bond1): Error -95 calling ndo_bpf [ 280.794863][T12893] netlink: 'syz.2.2683': attribute type 178 has an invalid length. [ 281.696941][T12946] FAULT_INJECTION: forcing a failure. [ 281.696941][T12946] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 281.732417][T12946] CPU: 0 PID: 12946 Comm: syz.2.2703 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 281.742654][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 281.752763][T12946] Call Trace: [ 281.756082][T12946] [ 281.759046][T12946] dump_stack_lvl+0x241/0x360 [ 281.763798][T12946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.769054][T12946] ? __pfx__printk+0x10/0x10 [ 281.773701][T12946] ? __pfx_lock_release+0x10/0x10 [ 281.778765][T12946] ? __lock_acquire+0x1346/0x1fd0 [ 281.783839][T12946] should_fail_ex+0x3b0/0x4e0 [ 281.788580][T12946] _copy_from_user+0x2f/0xe0 [ 281.793220][T12946] do_ipv6_setsockopt+0x2f1/0x3630 [ 281.798375][T12946] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 281.803954][T12946] ? __pfx___might_resched+0x10/0x10 [ 281.809298][T12946] ? __lock_acquire+0x1346/0x1fd0 [ 281.814351][T12946] ? aa_sk_perm+0x967/0xab0 [ 281.818883][T12946] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.823751][T12946] ? __pfx_lock_acquire+0x10/0x10 [ 281.828790][T12946] ipv6_setsockopt+0x5c/0x1a0 [ 281.833484][T12946] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 281.839400][T12946] do_sock_setsockopt+0x3af/0x720 [ 281.844447][T12946] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 281.850003][T12946] ? __fget_files+0x29/0x470 [ 281.854621][T12946] ? __fget_files+0x3f6/0x470 [ 281.859323][T12946] __sys_setsockopt+0x1ae/0x250 [ 281.864196][T12946] __x64_sys_setsockopt+0xb5/0xd0 [ 281.869234][T12946] do_syscall_64+0xf3/0x230 [ 281.873759][T12946] ? clear_bhb_loop+0x35/0x90 [ 281.878473][T12946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.884483][T12946] RIP: 0033:0x7f10a9d75bd9 [ 281.888915][T12946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.908528][T12946] RSP: 002b:00007f10aabf6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.916965][T12946] RAX: ffffffffffffffda RBX: 00007f10a9f03f60 RCX: 00007f10a9d75bd9 [ 281.924961][T12946] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 281.932938][T12946] RBP: 00007f10aabf60a0 R08: 0000000000000510 R09: 0000000000000000 [ 281.940918][T12946] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.948904][T12946] R13: 000000000000000b R14: 00007f10a9f03f60 R15: 00007ffdde8220c8 [ 281.956919][T12946] [ 281.979437][T12948] __nla_validate_parse: 9 callbacks suppressed [ 281.979458][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 282.027623][T12948] tipc: Started in network mode [ 282.081787][T12948] tipc: Node identity cgroup.pn, cluster identity 8 [ 282.167387][T12954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2706'. [ 282.766421][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 282.881386][T12995] FAULT_INJECTION: forcing a failure. [ 282.881386][T12995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.914055][T12995] CPU: 1 PID: 12995 Comm: syz.2.2723 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 282.924300][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 282.934401][T12995] Call Trace: [ 282.937723][T12995] [ 282.940701][T12995] dump_stack_lvl+0x241/0x360 [ 282.945443][T12995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.950719][T12995] ? __pfx__printk+0x10/0x10 [ 282.955382][T12995] ? __pfx_lock_release+0x10/0x10 [ 282.960521][T12995] should_fail_ex+0x3b0/0x4e0 [ 282.965260][T12995] _copy_from_user+0x2f/0xe0 [ 282.969897][T12995] copy_msghdr_from_user+0xae/0x680 [ 282.975251][T12995] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 282.981151][T12995] __sys_sendmsg+0x23d/0x3a0 [ 282.985801][T12995] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.990962][T12995] ? vfs_write+0x7c4/0xc90 [ 282.995474][T12995] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.001853][T12995] ? do_syscall_64+0x100/0x230 [ 283.006790][T12995] ? do_syscall_64+0xb6/0x230 [ 283.011527][T12995] do_syscall_64+0xf3/0x230 [ 283.016090][T12995] ? clear_bhb_loop+0x35/0x90 [ 283.020821][T12995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.026740][T12995] RIP: 0033:0x7f10a9d75bd9 [ 283.031173][T12995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.050795][T12995] RSP: 002b:00007f10aabf6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.059223][T12995] RAX: ffffffffffffffda RBX: 00007f10a9f03f60 RCX: 00007f10a9d75bd9 [ 283.067205][T12995] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 283.075185][T12995] RBP: 00007f10aabf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 283.083164][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.091147][T12995] R13: 000000000000000b R14: 00007f10a9f03f60 R15: 00007ffdde8220c8 [ 283.099172][T12995] [ 283.119697][T12999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2725'. [ 283.899580][T13027] bond0: (slave bond1): Error -95 calling ndo_bpf [ 283.989907][T13041] netlink: 'syz.3.2741': attribute type 1 has an invalid length. [ 284.018356][T13041] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2741'. [ 284.179267][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2744'. [ 284.195538][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2744'. [ 284.205489][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2744'. [ 284.386734][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 284.523815][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2749'. [ 284.633536][T13068] FAULT_INJECTION: forcing a failure. [ 284.633536][T13068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.678549][T13068] CPU: 0 PID: 13068 Comm: syz.2.2752 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 284.688785][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 284.698884][T13068] Call Trace: [ 284.702211][T13068] [ 284.705182][T13068] dump_stack_lvl+0x241/0x360 [ 284.709924][T13068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.715188][T13068] ? __pfx__printk+0x10/0x10 [ 284.719865][T13068] ? __pfx_lock_release+0x10/0x10 [ 284.724946][T13068] should_fail_ex+0x3b0/0x4e0 [ 284.729684][T13068] _copy_from_user+0x2f/0xe0 [ 284.734323][T13068] copy_msghdr_from_user+0xae/0x680 [ 284.739596][T13068] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 284.745497][T13068] __sys_sendmsg+0x23d/0x3a0 [ 284.750153][T13068] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.755323][T13068] ? vfs_write+0x7c4/0xc90 [ 284.759845][T13068] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 284.766314][T13068] ? do_syscall_64+0x100/0x230 [ 284.771150][T13068] ? do_syscall_64+0xb6/0x230 [ 284.775904][T13068] do_syscall_64+0xf3/0x230 [ 284.780460][T13068] ? clear_bhb_loop+0x35/0x90 [ 284.785194][T13068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.791143][T13068] RIP: 0033:0x7f10a9d75bd9 [ 284.795619][T13068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.815364][T13068] RSP: 002b:00007f10aabf6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.823833][T13068] RAX: ffffffffffffffda RBX: 00007f10a9f03f60 RCX: 00007f10a9d75bd9 [ 284.831863][T13068] RDX: 0000000000000000 RSI: 0000000020002080 RDI: 0000000000000003 [ 284.839882][T13068] RBP: 00007f10aabf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 284.847895][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.855913][T13068] R13: 000000000000000b R14: 00007f10a9f03f60 R15: 00007ffdde8220c8 [ 284.863956][T13068] [ 284.918427][T13076] FAULT_INJECTION: forcing a failure. [ 284.918427][T13076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.949238][T13065] delete_channel: no stack [ 284.988764][T13076] CPU: 0 PID: 13076 Comm: syz.1.2756 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 284.999024][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.009122][T13076] Call Trace: [ 285.012423][T13076] [ 285.015569][T13076] dump_stack_lvl+0x241/0x360 [ 285.020275][T13076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.025493][T13076] ? __pfx__printk+0x10/0x10 [ 285.030127][T13076] ? __pfx_lock_release+0x10/0x10 [ 285.035166][T13076] should_fail_ex+0x3b0/0x4e0 [ 285.039866][T13076] _copy_from_user+0x2f/0xe0 [ 285.044472][T13076] copy_msghdr_from_user+0xae/0x680 [ 285.049707][T13076] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 285.055563][T13076] __sys_sendmsg+0x23d/0x3a0 [ 285.060434][T13076] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.065562][T13076] ? vfs_write+0x7c4/0xc90 [ 285.070027][T13076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.076483][T13076] ? do_syscall_64+0x100/0x230 [ 285.081270][T13076] ? do_syscall_64+0xb6/0x230 [ 285.085967][T13076] do_syscall_64+0xf3/0x230 [ 285.090489][T13076] ? clear_bhb_loop+0x35/0x90 [ 285.095203][T13076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.101152][T13076] RIP: 0033:0x7effc2b75bd9 [ 285.105602][T13076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.125218][T13076] RSP: 002b:00007effc38b9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.133677][T13076] RAX: ffffffffffffffda RBX: 00007effc2d03f60 RCX: 00007effc2b75bd9 [ 285.141657][T13076] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 285.149737][T13076] RBP: 00007effc38b90a0 R08: 0000000000000000 R09: 0000000000000000 [ 285.157804][T13076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.165786][T13076] R13: 000000000000000b R14: 00007effc2d03f60 R15: 00007ffc74476ad8 [ 285.173804][T13076] [ 285.226034][T13083] FAULT_INJECTION: forcing a failure. [ 285.226034][T13083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.275629][T13083] CPU: 0 PID: 13083 Comm: syz.0.2759 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 285.285868][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.295969][T13083] Call Trace: [ 285.299291][T13083] [ 285.302276][T13083] dump_stack_lvl+0x241/0x360 [ 285.307058][T13083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.312303][T13083] ? __pfx__printk+0x10/0x10 [ 285.316951][T13083] ? __pfx_lock_release+0x10/0x10 [ 285.322010][T13083] should_fail_ex+0x3b0/0x4e0 [ 285.326714][T13083] _copy_from_user+0x2f/0xe0 [ 285.331325][T13083] copy_msghdr_from_user+0xae/0x680 [ 285.336576][T13083] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 285.342540][T13083] __sys_sendmsg+0x23d/0x3a0 [ 285.347170][T13083] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.352301][T13083] ? vfs_write+0x7c4/0xc90 [ 285.356766][T13083] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.363130][T13083] ? do_syscall_64+0x100/0x230 [ 285.367939][T13083] ? do_syscall_64+0xb6/0x230 [ 285.372666][T13083] do_syscall_64+0xf3/0x230 [ 285.377201][T13083] ? clear_bhb_loop+0x35/0x90 [ 285.381908][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.387905][T13083] RIP: 0033:0x7f206c975bd9 [ 285.392331][T13083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.412058][T13083] RSP: 002b:00007f206c3ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.420500][T13083] RAX: ffffffffffffffda RBX: 00007f206cb03f60 RCX: 00007f206c975bd9 [ 285.428482][T13083] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 285.436463][T13083] RBP: 00007f206c3ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 285.444533][T13083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.452508][T13083] R13: 000000000000000b R14: 00007f206cb03f60 R15: 00007ffd24fbbce8 [ 285.460504][T13083] [ 285.904505][T13106] FAULT_INJECTION: forcing a failure. [ 285.904505][T13106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.949140][T13106] CPU: 0 PID: 13106 Comm: syz.3.2769 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 285.959372][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.969465][T13106] Call Trace: [ 285.972873][T13106] [ 285.975845][T13106] dump_stack_lvl+0x241/0x360 [ 285.980584][T13106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.985832][T13106] ? __pfx__printk+0x10/0x10 [ 285.990454][T13106] ? __pfx_lock_release+0x10/0x10 [ 285.995503][T13106] ? vfs_write+0x7c4/0xc90 [ 285.999948][T13106] should_fail_ex+0x3b0/0x4e0 [ 286.004658][T13106] _copy_from_user+0x2f/0xe0 [ 286.009274][T13106] __sys_bpf+0x1a4/0x810 [ 286.013635][T13106] ? __pfx___sys_bpf+0x10/0x10 [ 286.018430][T13106] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.024424][T13106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.030765][T13106] ? do_syscall_64+0x100/0x230 [ 286.035551][T13106] __x64_sys_bpf+0x7c/0x90 [ 286.039985][T13106] do_syscall_64+0xf3/0x230 [ 286.044503][T13106] ? clear_bhb_loop+0x35/0x90 [ 286.049202][T13106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.055116][T13106] RIP: 0033:0x7ff6f0175bd9 [ 286.059542][T13106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.079156][T13106] RSP: 002b:00007ff6f0f43048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.087585][T13106] RAX: ffffffffffffffda RBX: 00007ff6f0303f60 RCX: 00007ff6f0175bd9 [ 286.095565][T13106] RDX: 0000000000000090 RSI: 0000000020000940 RDI: 0000000000000005 [ 286.103541][T13106] RBP: 00007ff6f0f430a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.111521][T13106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.119497][T13106] R13: 000000000000000b R14: 00007ff6f0303f60 R15: 00007ffc7bdd94a8 [ 286.127754][T13106] [ 286.194571][T13113] FAULT_INJECTION: forcing a failure. [ 286.194571][T13113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.209202][T13113] CPU: 1 PID: 13113 Comm: syz.2.2772 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 286.219595][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 286.229726][T13113] Call Trace: [ 286.233124][T13113] [ 286.236081][T13113] dump_stack_lvl+0x241/0x360 [ 286.240902][T13113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.246154][T13113] ? __pfx__printk+0x10/0x10 [ 286.250802][T13113] ? __pfx_lock_release+0x10/0x10 [ 286.255875][T13113] should_fail_ex+0x3b0/0x4e0 [ 286.260607][T13113] _copy_from_user+0x2f/0xe0 [ 286.265240][T13113] copy_msghdr_from_user+0xae/0x680 [ 286.270503][T13113] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 286.276439][T13113] __sys_sendmsg+0x23d/0x3a0 [ 286.281048][T13113] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.286170][T13113] ? vfs_write+0x7c4/0xc90 [ 286.290639][T13113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.297016][T13113] ? do_syscall_64+0x100/0x230 [ 286.301830][T13113] ? do_syscall_64+0xb6/0x230 [ 286.306539][T13113] do_syscall_64+0xf3/0x230 [ 286.311070][T13113] ? clear_bhb_loop+0x35/0x90 [ 286.315766][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.321689][T13113] RIP: 0033:0x7f10a9d75bd9 [ 286.326113][T13113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.345726][T13113] RSP: 002b:00007f10aabf6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.354159][T13113] RAX: ffffffffffffffda RBX: 00007f10a9f03f60 RCX: 00007f10a9d75bd9 [ 286.362201][T13113] RDX: 0000000000000040 RSI: 0000000020000480 RDI: 0000000000000003 [ 286.370213][T13113] RBP: 00007f10aabf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.378204][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.386182][T13113] R13: 000000000000000b R14: 00007f10a9f03f60 R15: 00007ffdde8220c8 [ 286.394188][T13113] [ 286.501280][T13107] delete_channel: no stack [ 286.662877][T13123] netlink: 'syz.4.2777': attribute type 1 has an invalid length. [ 286.866753][T13132] FAULT_INJECTION: forcing a failure. [ 286.866753][T13132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.913898][T13132] CPU: 0 PID: 13132 Comm: syz.3.2781 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 286.924112][T13132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 286.934204][T13132] Call Trace: [ 286.937490][T13132] [ 286.940428][T13132] dump_stack_lvl+0x241/0x360 [ 286.945141][T13132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.950355][T13132] ? __pfx__printk+0x10/0x10 [ 286.954960][T13132] ? __pfx_lock_release+0x10/0x10 [ 286.960003][T13132] should_fail_ex+0x3b0/0x4e0 [ 286.964702][T13132] _copy_from_user+0x2f/0xe0 [ 286.969309][T13132] copy_msghdr_from_user+0xae/0x680 [ 286.974531][T13132] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 286.980371][T13132] __sys_sendmsg+0x23d/0x3a0 [ 286.984980][T13132] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.990109][T13132] ? vfs_write+0x7c4/0xc90 [ 286.994577][T13132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.000914][T13132] ? do_syscall_64+0x100/0x230 [ 287.005722][T13132] ? do_syscall_64+0xb6/0x230 [ 287.010428][T13132] do_syscall_64+0xf3/0x230 [ 287.014950][T13132] ? clear_bhb_loop+0x35/0x90 [ 287.019646][T13132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.025551][T13132] RIP: 0033:0x7ff6f0175bd9 [ 287.029980][T13132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.049680][T13132] RSP: 002b:00007ff6f0f43048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.058110][T13132] RAX: ffffffffffffffda RBX: 00007ff6f0303f60 RCX: 00007ff6f0175bd9 [ 287.066097][T13132] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004 [ 287.074079][T13132] RBP: 00007ff6f0f430a0 R08: 0000000000000000 R09: 0000000000000000 [ 287.082060][T13132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.090036][T13132] R13: 000000000000000b R14: 00007ff6f0303f60 R15: 00007ffc7bdd94a8 [ 287.098048][T13132] [ 287.225344][T13135] dvmrp0: entered allmulticast mode [ 287.237422][T13138] __nla_validate_parse: 4 callbacks suppressed [ 287.237444][T13138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2783'. [ 287.291513][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2784'. [ 287.348233][T13143] tipc: Failed to remove unknown binding: 66,1,1/0:3387727342/3387727344 [ 287.377518][T13141] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 287.393085][T13141] netlink: 'syz.4.2785': attribute type 2 has an invalid length. [ 287.403281][T13139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2784'. [ 287.416006][T13139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2784'. [ 287.447665][T13134] dvmrp0: left allmulticast mode [ 287.462367][T13147] netlink: 'syz.1.2786': attribute type 3 has an invalid length. [ 287.643020][T13148] delete_channel: no stack [ 287.713640][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2790'. [ 288.205493][T13167] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 288.267893][T13179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2797'. [ 288.359925][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2799'. [ 288.434536][T13189] netlink: 'syz.4.2800': attribute type 10 has an invalid length. [ 288.479276][T13189] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 288.667155][T13192] delete_channel: no stack [ 288.776928][T13203] FAULT_INJECTION: forcing a failure. [ 288.776928][T13203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.832333][T13203] CPU: 0 PID: 13203 Comm: syz.4.2807 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 288.842579][T13203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 288.852688][T13203] Call Trace: [ 288.856012][T13203] [ 288.858978][T13203] dump_stack_lvl+0x241/0x360 [ 288.863805][T13203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.869062][T13203] ? __pfx__printk+0x10/0x10 [ 288.873715][T13203] ? vfs_write+0x7c4/0xc90 [ 288.878208][T13203] should_fail_ex+0x3b0/0x4e0 [ 288.882981][T13203] _copy_from_user+0x2f/0xe0 [ 288.887625][T13203] move_addr_to_kernel+0x82/0x150 [ 288.892718][T13203] __sys_connect+0xc1/0x310 [ 288.897278][T13203] ? __pfx___sys_connect+0x10/0x10 [ 288.902462][T13203] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.908847][T13203] ? do_syscall_64+0x100/0x230 [ 288.913683][T13203] __x64_sys_connect+0x7a/0x90 [ 288.913741][T13210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2808'. [ 288.918479][T13203] do_syscall_64+0xf3/0x230 [ 288.918518][T13203] ? clear_bhb_loop+0x35/0x90 [ 288.918554][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.918588][T13203] RIP: 0033:0x7f704ab75bd9 [ 288.947102][T13203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.966841][T13203] RSP: 002b:00007f704ba2b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 288.975313][T13203] RAX: ffffffffffffffda RBX: 00007f704ad03f60 RCX: 00007f704ab75bd9 [ 288.983335][T13203] RDX: 0000000000000010 RSI: 00000000200000c0 RDI: 0000000000000003 [ 288.991351][T13203] RBP: 00007f704ba2b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.999368][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.007379][T13203] R13: 000000000000000b R14: 00007f704ad03f60 R15: 00007ffd27bef7a8 [ 289.015682][T13203] [ 289.303021][T13226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.319904][T13226] netlink: 'syz.2.2814': attribute type 10 has an invalid length. [ 289.392283][T13226] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 289.418808][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2813'. [ 289.534461][T13233] netlink: 'syz.2.2817': attribute type 1 has an invalid length. [ 289.557803][T13233] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2817'. [ 290.044753][T13253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.075402][T13244] delete_channel: no stack [ 290.086265][T13253] netlink: 'syz.0.2827': attribute type 10 has an invalid length. [ 290.120000][T13253] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 290.216794][T13261] FAULT_INJECTION: forcing a failure. [ 290.216794][T13261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.240323][T13261] CPU: 0 PID: 13261 Comm: syz.2.2830 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 290.250557][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 290.260670][T13261] Call Trace: [ 290.264053][T13261] [ 290.267022][T13261] dump_stack_lvl+0x241/0x360 [ 290.271766][T13261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.277041][T13261] ? __pfx__printk+0x10/0x10 [ 290.281702][T13261] ? __pfx_lock_release+0x10/0x10 [ 290.286777][T13261] ? vfs_write+0x7c4/0xc90 [ 290.291264][T13261] should_fail_ex+0x3b0/0x4e0 [ 290.296002][T13261] _copy_from_user+0x2f/0xe0 [ 290.300640][T13261] get_timespec64+0x97/0x280 [ 290.305374][T13261] ? __pfx_get_timespec64+0x10/0x10 [ 290.310639][T13261] __x64_sys_recvmmsg+0x140/0x250 [ 290.315731][T13261] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 290.321344][T13261] ? do_syscall_64+0x100/0x230 [ 290.326176][T13261] ? do_syscall_64+0xb6/0x230 [ 290.330920][T13261] do_syscall_64+0xf3/0x230 [ 290.335497][T13261] ? clear_bhb_loop+0x35/0x90 [ 290.340241][T13261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.346275][T13261] RIP: 0033:0x7f10a9d75bd9 [ 290.350703][T13261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.370326][T13261] RSP: 002b:00007f10aabf6048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 290.378759][T13261] RAX: ffffffffffffffda RBX: 00007f10a9f03f60 RCX: 00007f10a9d75bd9 [ 290.386747][T13261] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 290.394758][T13261] RBP: 00007f10aabf60a0 R08: 0000000020003700 R09: 0000000000000000 [ 290.402815][T13261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.410849][T13261] R13: 000000000000000b R14: 00007f10a9f03f60 R15: 00007ffdde8220c8 [ 290.418862][T13261] [ 290.570448][T13275] FAULT_INJECTION: forcing a failure. [ 290.570448][T13275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.623631][T13275] CPU: 0 PID: 13275 Comm: syz.3.2836 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 290.633875][T13275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 290.643981][T13275] Call Trace: [ 290.647299][T13275] [ 290.650256][T13275] dump_stack_lvl+0x241/0x360 [ 290.655003][T13275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.660251][T13275] ? __pfx__printk+0x10/0x10 [ 290.664896][T13275] ? __pfx_lock_release+0x10/0x10 [ 290.669945][T13275] ? vfs_write+0x7c4/0xc90 [ 290.674381][T13275] should_fail_ex+0x3b0/0x4e0 [ 290.679106][T13275] _copy_from_user+0x2f/0xe0 [ 290.683734][T13275] __sys_bpf+0x1a4/0x810 [ 290.688013][T13275] ? __pfx___sys_bpf+0x10/0x10 [ 290.692883][T13275] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 290.698890][T13275] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.705258][T13275] ? do_syscall_64+0x100/0x230 [ 290.710056][T13275] __x64_sys_bpf+0x7c/0x90 [ 290.714502][T13275] do_syscall_64+0xf3/0x230 [ 290.719141][T13275] ? clear_bhb_loop+0x35/0x90 [ 290.723844][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.729792][T13275] RIP: 0033:0x7ff6f0175bd9 [ 290.734268][T13275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.753996][T13275] RSP: 002b:00007ff6f0f43048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.762445][T13275] RAX: ffffffffffffffda RBX: 00007ff6f0303f60 RCX: 00007ff6f0175bd9 [ 290.770465][T13275] RDX: 0000000000000048 RSI: 0000000020000200 RDI: 0000000000000005 [ 290.778466][T13275] RBP: 00007ff6f0f430a0 R08: 0000000000000000 R09: 0000000000000000 [ 290.786494][T13275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.794485][T13275] R13: 000000000000000b R14: 00007ff6f0303f60 R15: 00007ffc7bdd94a8 [ 290.802496][T13275] [ 291.049939][T13289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.065379][T13289] netlink: 'syz.4.2842': attribute type 10 has an invalid length. [ 291.105597][T13289] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 291.142782][T13285] delete_channel: no stack [ 291.195258][T13294] FAULT_INJECTION: forcing a failure. [ 291.195258][T13294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.209317][T13294] CPU: 1 PID: 13294 Comm: syz.2.2844 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 291.219610][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 291.229861][T13294] Call Trace: [ 291.233186][T13294] [ 291.236124][T13294] dump_stack_lvl+0x241/0x360 [ 291.240833][T13294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.246061][T13294] ? __pfx__printk+0x10/0x10 [ 291.250678][T13294] ? __pfx_lock_release+0x10/0x10 [ 291.255804][T13294] ? vfs_write+0x7c4/0xc90 [ 291.260240][T13294] should_fail_ex+0x3b0/0x4e0 [ 291.265018][T13294] _copy_from_user+0x2f/0xe0 [ 291.269622][T13294] __sys_bpf+0x1a4/0x810 [ 291.273889][T13294] ? __pfx___sys_bpf+0x10/0x10 [ 291.278688][T13294] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.284684][T13294] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.291032][T13294] ? do_syscall_64+0x100/0x230 [ 291.295821][T13294] __x64_sys_bpf+0x7c/0x90 [ 291.300261][T13294] do_syscall_64+0xf3/0x230 [ 291.304784][T13294] ? clear_bhb_loop+0x35/0x90 [ 291.309488][T13294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.315397][T13294] RIP: 0033:0x7f10a9d75bd9 [ 291.319822][T13294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.339442][T13294] RSP: 002b:00007f10aabf6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.347872][T13294] RAX: ffffffffffffffda RBX: 00007f10a9f03f60 RCX: 00007f10a9d75bd9 [ 291.355881][T13294] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 291.364064][T13294] RBP: 00007f10aabf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 291.372153][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.380159][T13294] R13: 000000000000000b R14: 00007f10a9f03f60 R15: 00007ffdde8220c8 [ 291.388157][T13294] [ 291.631918][T13297] tipc: Failed to remove unknown binding: 66,1,1/0:4051233406/4051233408 [ 291.921116][T13314] pim6reg1: entered promiscuous mode [ 291.926510][T13314] pim6reg1: entered allmulticast mode [ 292.066595][T13321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.077775][T13321] netlink: 'syz.0.2855': attribute type 10 has an invalid length. [ 292.102544][T13321] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 292.243818][T13333] bridge0: entered promiscuous mode [ 292.250787][T13333] bridge0: left promiscuous mode [ 292.256067][T13333] FAULT_INJECTION: forcing a failure. [ 292.256067][T13333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.257149][T13333] [ 292.257156][T13333] ====================================================== [ 292.257161][T13333] WARNING: possible circular locking dependency detected [ 292.257168][T13333] 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 Not tainted [ 292.257178][T13333] ------------------------------------------------------ [ 292.257184][T13333] syz.2.2860/13333 is trying to acquire lock: [ 292.257192][T13333] ffffffff8e328140 (console_owner){..-.}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 292.257243][T13333] [ 292.257243][T13333] but task is already holding lock: [ 292.257248][T13333] ffff8880b953e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 292.257292][T13333] [ 292.257292][T13333] which lock already depends on the new lock. [ 292.257292][T13333] [ 292.257297][T13333] [ 292.257297][T13333] the existing dependency chain (in reverse order) is: [ 292.257303][T13333] [ 292.257303][T13333] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 292.257323][T13333] lock_acquire+0x1ed/0x550 [ 292.257340][T13333] _raw_spin_lock_nested+0x31/0x40 [ 292.257356][T13333] raw_spin_rq_lock_nested+0x2a/0x140 [ 292.257380][T13333] task_fork_fair+0x61/0x1e0 [ 292.257402][T13333] sched_cgroup_fork+0x37c/0x410 [ 292.257421][T13333] copy_process+0x2217/0x3dc0 [ 292.257438][T13333] kernel_clone+0x226/0x8f0 [ 292.257455][T13333] user_mode_thread+0x132/0x1a0 [ 292.257472][T13333] rest_init+0x23/0x300 [ 292.257486][T13333] start_kernel+0x47a/0x500 [ 292.257508][T13333] x86_64_start_reservations+0x2a/0x30 [ 292.257524][T13333] x86_64_start_kernel+0x99/0xa0 [ 292.257538][T13333] common_startup_64+0x13e/0x147 [ 292.257554][T13333] [ 292.257554][T13333] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 292.257574][T13333] lock_acquire+0x1ed/0x550 [ 292.257588][T13333] _raw_spin_lock_irqsave+0xd5/0x120 [ 292.257613][T13333] try_to_wake_up+0xb0/0x1470 [ 292.257631][T13333] __wake_up_common_lock+0x130/0x1e0 [ 292.257647][T13333] tty_port_default_wakeup+0xa6/0xf0 [ 292.257669][T13333] serial8250_tx_chars+0x6e2/0x930 [ 292.257687][T13333] serial8250_handle_irq+0x558/0x710 [ 292.257713][T13333] serial8250_default_handle_irq+0xd1/0x1f0 [ 292.257735][T13333] serial8250_interrupt+0xa9/0x1f0 [ 292.257750][T13333] __handle_irq_event_percpu+0x29a/0xa80 [ 292.257771][T13333] handle_irq_event+0x89/0x1f0 [ 292.257791][T13333] handle_edge_irq+0x25f/0xc20 [ 292.257809][T13333] __common_interrupt+0x136/0x230 [ 292.257828][T13333] common_interrupt+0x4f/0xd0 [ 292.257842][T13333] asm_common_interrupt+0x26/0x40 [ 292.257866][T13333] handle_softirqs+0x1df/0x970 [ 292.257880][T13333] __irq_exit_rcu+0xf4/0x1c0 [ 292.257895][T13333] irq_exit_rcu+0x9/0x30 [ 292.257908][T13333] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 292.257928][T13333] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.257953][T13333] flush_tlb_mm_range+0x3e7/0x5c0 [ 292.257976][T13333] ptep_clear_flush+0x11a/0x170 [ 292.258005][T13333] do_wp_page+0x1bf0/0x52f0 [ 292.258026][T13333] handle_pte_fault+0x117e/0x7090 [ 292.258042][T13333] handle_mm_fault+0x10df/0x1ba0 [ 292.258064][T13333] exc_page_fault+0x459/0x8c0 [ 292.258083][T13333] asm_exc_page_fault+0x26/0x30 [ 292.258105][T13333] [ 292.258105][T13333] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 292.258126][T13333] lock_acquire+0x1ed/0x550 [ 292.258140][T13333] _raw_spin_lock_irqsave+0xd5/0x120 [ 292.258165][T13333] __wake_up_common_lock+0x25/0x1e0 [ 292.258180][T13333] tty_port_default_wakeup+0xa6/0xf0 [ 292.258201][T13333] serial8250_tx_chars+0x6e2/0x930 [ 292.258219][T13333] serial8250_handle_irq+0x558/0x710 [ 292.258242][T13333] serial8250_default_handle_irq+0xd1/0x1f0 [ 292.258264][T13333] serial8250_interrupt+0xa9/0x1f0 [ 292.258278][T13333] __handle_irq_event_percpu+0x29a/0xa80 [ 292.258296][T13333] handle_irq_event+0x89/0x1f0 [ 292.258314][T13333] handle_edge_irq+0x25f/0xc20 [ 292.258330][T13333] __common_interrupt+0x136/0x230 [ 292.258346][T13333] common_interrupt+0xa5/0xd0 [ 292.258359][T13333] asm_common_interrupt+0x26/0x40 [ 292.258379][T13333] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 292.258393][T13333] uart_write+0x15d/0x380 [ 292.258408][T13333] n_tty_write+0xd6a/0x1230 [ 292.258429][T13333] file_tty_write+0x54f/0x9b0 [ 292.258444][T13333] vfs_write+0xa72/0xc90 [ 292.258459][T13333] ksys_write+0x1a0/0x2c0 [ 292.258474][T13333] do_syscall_64+0xf3/0x230 [ 292.258494][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.258515][T13333] [ 292.258515][T13333] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 292.258533][T13333] lock_acquire+0x1ed/0x550 [ 292.258547][T13333] _raw_spin_lock_irqsave+0xd5/0x120 [ 292.258569][T13333] serial8250_console_write+0x1a8/0x1770 [ 292.258587][T13333] console_flush_all+0x867/0xfd0 [ 292.258607][T13333] console_unlock+0x13b/0x4d0 [ 292.258625][T13333] vprintk_emit+0x5a6/0x770 [ 292.258642][T13333] _printk+0xd5/0x120 [ 292.258660][T13333] register_console+0x727/0xcf0 [ 292.258680][T13333] univ8250_console_init+0x49/0x50 [ 292.258703][T13333] console_init+0x1b8/0x6f0 [ 292.258723][T13333] start_kernel+0x2d3/0x500 [ 292.258741][T13333] x86_64_start_reservations+0x2a/0x30 [ 292.258755][T13333] x86_64_start_kernel+0x99/0xa0 [ 292.258768][T13333] common_startup_64+0x13e/0x147 [ 292.258782][T13333] [ 292.258782][T13333] -> #0 (console_owner){..-.}-{0:0}: [ 292.258800][T13333] validate_chain+0x18e0/0x5900 [ 292.258817][T13333] __lock_acquire+0x1346/0x1fd0 [ 292.258831][T13333] lock_acquire+0x1ed/0x550 [ 292.258844][T13333] console_flush_all+0x810/0xfd0 [ 292.258863][T13333] console_unlock+0x13b/0x4d0 [ 292.258881][T13333] vprintk_emit+0x5a6/0x770 [ 292.258898][T13333] _printk+0xd5/0x120 [ 292.258915][T13333] should_fail_ex+0x391/0x4e0 [ 292.258934][T13333] strncpy_from_user+0x36/0x2f0 [ 292.258952][T13333] strncpy_from_user_nofault+0x71/0x140 [ 292.258969][T13333] bpf_probe_read_compat_str+0xe9/0x180 [ 292.258986][T13333] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 292.258997][T13333] bpf_trace_run4+0x334/0x590 [ 292.259017][T13333] __traceiter_sched_switch+0x98/0xd0 [ 292.259036][T13333] __schedule+0x2587/0x4a20 [ 292.259049][T13333] preempt_schedule_common+0x84/0xd0 [ 292.259063][T13333] preempt_schedule+0xe1/0xf0 [ 292.259075][T13333] preempt_schedule_thunk+0x1a/0x30 [ 292.259089][T13333] __local_bh_enable_ip+0x179/0x200 [ 292.259102][T13333] dev_uc_del+0xca/0x110 [ 292.259116][T13333] packet_release+0x5ea/0xcc0 [ 292.259135][T13333] sock_close+0xbc/0x240 [ 292.259155][T13333] __fput+0x24a/0x8a0 [ 292.259166][T13333] __x64_sys_close+0x7f/0x110 [ 292.259179][T13333] do_syscall_64+0xf3/0x230 [ 292.259198][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.259218][T13333] [ 292.259218][T13333] other info that might help us debug this: [ 292.259218][T13333] [ 292.259223][T13333] Chain exists of: [ 292.259223][T13333] console_owner --> &p->pi_lock --> &rq->__lock [ 292.259223][T13333] [ 292.259244][T13333] Possible unsafe locking scenario: [ 292.259244][T13333] [ 292.259248][T13333] CPU0 CPU1 [ 292.259252][T13333] ---- ---- [ 292.259256][T13333] lock(&rq->__lock); [ 292.259265][T13333] lock(&p->pi_lock); [ 292.259275][T13333] lock(&rq->__lock); [ 292.259285][T13333] lock(console_owner); [ 292.259294][T13333] [ 292.259294][T13333] *** DEADLOCK *** [ 292.259294][T13333] [ 292.259297][T13333] 6 locks held by syz.2.2860/13333: [ 292.259306][T13333] #0: ffff88807aab1a10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 292.259349][T13333] #1: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: packet_release+0x47e/0xcc0 [ 292.259388][T13333] #2: ffff8880b953e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 292.259429][T13333] #3: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 292.259469][T13333] #4: ffffffff8e20fa60 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 292.259505][T13333] #5: ffffffff8e20f690 (console_srcu){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 292.259544][T13333] [ 292.259544][T13333] stack backtrace: [ 292.259549][T13333] CPU: 1 PID: 13333 Comm: syz.2.2860 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 292.259564][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 292.259574][T13333] Call Trace: [ 292.259580][T13333] [ 292.259586][T13333] dump_stack_lvl+0x241/0x360 [ 292.259609][T13333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.259636][T13333] ? print_circular_bug+0x130/0x1a0 [ 292.259657][T13333] check_noncircular+0x36a/0x4a0 [ 292.259679][T13333] ? __pfx_check_noncircular+0x10/0x10 [ 292.259705][T13333] ? lockdep_lock+0x123/0x2b0 [ 292.259720][T13333] ? add_lock_to_list+0x1de/0x2e0 [ 292.259744][T13333] validate_chain+0x18e0/0x5900 [ 292.259775][T13333] ? __pfx_validate_chain+0x10/0x10 [ 292.259795][T13333] ? sprintf+0xda/0x120 [ 292.259811][T13333] ? vsnprintf+0x1cc3/0x1da0 [ 292.259833][T13333] ? info_print_prefix+0x204/0x310 [ 292.259851][T13333] ? mark_lock+0x9a/0x350 [ 292.259870][T13333] __lock_acquire+0x1346/0x1fd0 [ 292.259894][T13333] lock_acquire+0x1ed/0x550 [ 292.259909][T13333] ? console_flush_all+0x152/0xfd0 [ 292.259933][T13333] ? __pfx_lock_acquire+0x10/0x10 [ 292.259949][T13333] ? __pfx_lock_release+0x10/0x10 [ 292.259965][T13333] ? do_raw_spin_lock+0x14f/0x370 [ 292.259991][T13333] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.260013][T13333] ? console_flush_all+0x3a8/0xfd0 [ 292.260035][T13333] console_flush_all+0x810/0xfd0 [ 292.260056][T13333] ? console_flush_all+0x152/0xfd0 [ 292.260079][T13333] ? console_flush_all+0x152/0xfd0 [ 292.260105][T13333] ? __pfx_console_flush_all+0x10/0x10 [ 292.260128][T13333] ? __pfx_lock_acquire+0x10/0x10 [ 292.260145][T13333] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.260164][T13333] console_unlock+0x13b/0x4d0 [ 292.260186][T13333] ? __pfx_console_unlock+0x10/0x10 [ 292.260205][T13333] ? _printk+0xd5/0x120 [ 292.260223][T13333] ? _printk+0xd5/0x120 [ 292.260242][T13333] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 292.260270][T13333] vprintk_emit+0x5a6/0x770 [ 292.260291][T13333] ? __pfx_vprintk_emit+0x10/0x10 [ 292.260318][T13333] _printk+0xd5/0x120 [ 292.260340][T13333] ? __pfx__printk+0x10/0x10 [ 292.260366][T13333] should_fail_ex+0x391/0x4e0 [ 292.260388][T13333] strncpy_from_user+0x36/0x2f0 [ 292.260410][T13333] strncpy_from_user_nofault+0x71/0x140 [ 292.260429][T13333] bpf_probe_read_compat_str+0xe9/0x180 [ 292.260448][T13333] ? bpf_trace_run4+0x244/0x590 [ 292.260469][T13333] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 292.260481][T13333] bpf_trace_run4+0x334/0x590 [ 292.260505][T13333] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 292.260523][T13333] ? __pfx_bpf_trace_run4+0x10/0x10 [ 292.260548][T13333] ? __pfx_probe_sched_switch+0x10/0x10 [ 292.260571][T13333] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 292.260594][T13333] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 292.260615][T13333] __traceiter_sched_switch+0x98/0xd0 [ 292.260637][T13333] __schedule+0x2587/0x4a20 [ 292.260653][T13333] ? __pfx_vprintk_emit+0x10/0x10 [ 292.260680][T13333] ? __pfx___schedule+0x10/0x10 [ 292.260694][T13333] ? _printk+0xd5/0x120 [ 292.260718][T13333] ? __netdev_printk+0x19e/0x4d0 [ 292.260740][T13333] ? __netdev_printk+0x30d/0x4d0 [ 292.260761][T13333] ? preempt_schedule+0xe1/0xf0 [ 292.260775][T13333] preempt_schedule_common+0x84/0xd0 [ 292.260791][T13333] preempt_schedule+0xe1/0xf0 [ 292.260806][T13333] ? __pfx_preempt_schedule+0x10/0x10 [ 292.260822][T13333] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.260839][T13333] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.260857][T13333] preempt_schedule_thunk+0x1a/0x30 [ 292.260873][T13333] ? mark_lock+0x9a/0x350 [ 292.260890][T13333] __local_bh_enable_ip+0x179/0x200 [ 292.260905][T13333] ? __dev_set_promiscuity+0x159/0x5a0 [ 292.260919][T13333] ? dev_uc_del+0xca/0x110 [ 292.260933][T13333] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 292.260949][T13333] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.260976][T13333] dev_uc_del+0xca/0x110 [ 292.260992][T13333] packet_release+0x5ea/0xcc0 [ 292.261016][T13333] ? __pfx_packet_release+0x10/0x10 [ 292.261037][T13333] ? __pfx___down_write_common+0x10/0x10 [ 292.261063][T13333] sock_close+0xbc/0x240 [ 292.261084][T13333] ? __pfx_sock_close+0x10/0x10 [ 292.261105][T13333] __fput+0x24a/0x8a0 [ 292.261125][T13333] __x64_sys_close+0x7f/0x110 [ 292.261140][T13333] do_syscall_64+0xf3/0x230 [ 292.261161][T13333] ? clear_bhb_loop+0x35/0x90 [ 292.261184][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.261206][T13333] RIP: 0033:0x7f10a9d75bd9 [ 292.261219][T13333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.261232][T13333] RSP: 002b:00007f10aabf6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 292.261247][T13333] RAX: ffffffffffffffda RBX: 00007f10a9f03f60 RCX: 00007f10a9d75bd9 [ 292.261258][T13333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 292.261267][T13333] RBP: 00007f10aabf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 292.261276][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.261285][T13333] R13: 000000000000000b R14: 00007f10a9f03f60 R15: 00007ffdde8220c8 [ 292.261303][T13333] [ 293.585056][T13333] CPU: 1 PID: 13333 Comm: syz.2.2860 Not tainted 6.10.0-rc6-syzkaller-00159-g0c754d9d86ff #0 [ 293.595225][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 293.605280][T13333] Call Trace: [ 293.608562][T13333] [ 293.611495][T13333] dump_stack_lvl+0x241/0x360 [ 293.616236][T13333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.621439][T13333] ? __pfx__printk+0x10/0x10 [ 293.626071][T13333] should_fail_ex+0x3b0/0x4e0 [ 293.630756][T13333] strncpy_from_user+0x36/0x2f0 [ 293.635616][T13333] strncpy_from_user_nofault+0x71/0x140 [ 293.641166][T13333] bpf_probe_read_compat_str+0xe9/0x180 [ 293.646716][T13333] ? bpf_trace_run4+0x244/0x590 [ 293.651572][T13333] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 293.657027][T13333] bpf_trace_run4+0x334/0x590 [ 293.661710][T13333] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 293.667778][T13333] ? __pfx_bpf_trace_run4+0x10/0x10 [ 293.672985][T13333] ? __pfx_probe_sched_switch+0x10/0x10 [ 293.678539][T13333] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 293.685273][T13333] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 293.691368][T13333] __traceiter_sched_switch+0x98/0xd0 [ 293.696744][T13333] __schedule+0x2587/0x4a20 [ 293.701248][T13333] ? __pfx_vprintk_emit+0x10/0x10 [ 293.706284][T13333] ? __pfx___schedule+0x10/0x10 [ 293.711148][T13333] ? _printk+0xd5/0x120 [ 293.715306][T13333] ? __netdev_printk+0x19e/0x4d0 [ 293.720247][T13333] ? __netdev_printk+0x30d/0x4d0 [ 293.725187][T13333] ? preempt_schedule+0xe1/0xf0 [ 293.730103][T13333] preempt_schedule_common+0x84/0xd0 [ 293.735426][T13333] preempt_schedule+0xe1/0xf0 [ 293.740128][T13333] ? __pfx_preempt_schedule+0x10/0x10 [ 293.745521][T13333] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.751523][T13333] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.757891][T13333] preempt_schedule_thunk+0x1a/0x30 [ 293.763309][T13333] ? mark_lock+0x9a/0x350 [ 293.767645][T13333] __local_bh_enable_ip+0x179/0x200 [ 293.772846][T13333] ? __dev_set_promiscuity+0x159/0x5a0 [ 293.778303][T13333] ? dev_uc_del+0xca/0x110 [ 293.782889][T13333] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 293.788605][T13333] ? do_raw_spin_unlock+0x13c/0x8b0 [ 293.793811][T13333] dev_uc_del+0xca/0x110 [ 293.798075][T13333] packet_release+0x5ea/0xcc0 [ 293.802782][T13333] ? __pfx_packet_release+0x10/0x10 [ 293.808022][T13333] ? __pfx___down_write_common+0x10/0x10 [ 293.813683][T13333] sock_close+0xbc/0x240 [ 293.818039][T13333] ? __pfx_sock_close+0x10/0x10 [ 293.822925][T13333] __fput+0x24a/0x8a0 [ 293.826930][T13333] __x64_sys_close+0x7f/0x110 [ 293.831702][T13333] do_syscall_64+0xf3/0x230 [ 293.836247][T13333] ? clear_bhb_loop+0x35/0x90 [ 293.840942][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.846874][T13333] RIP: 0033:0x7f10a9d75bd9 [ 293.851307][T13333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.870938][T13333] RSP: 002b:00007f10aabf6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 293.879373][T13333] RAX: ffffffffffffffda RBX: 00007f10a9f03f60 RCX: 00007f10a9d75bd9 [ 293.887378][T13333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 293.895360][T13333] RBP: 00007f10aabf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 293.903491][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.911474][T13333] R13: 000000000000000b R14: 00007f10a9f03f60 R15: 00007ffdde8220c8 [ 293.919457][T13333] [ 293.958475][T13330] delete_channel: no stack [ 299.488267][ T5102] Bluetooth: hci4: command 0x0406 tx timeout